last executing test programs: 14.345433398s ago: executing program 3 (id=12448): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket$kcm(0x28, 0x5, 0x0) (async) r1 = socket$kcm(0x28, 0x5, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500)=r4, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007f81c7b9cdc4fbb9e49bc4066e0b63af", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007f81c7b9cdc4fbb9e49bc4066e0b63af", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000200)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="e00000000000000000000000000000f3ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="e00000000000000000000000000000f3ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00f59d2089867b6308fab8fde1889f0000a2514d335d5921000800005c9b0baf28653c81000820"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r12 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r12, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000000000000000000000180000000000000029000000"], 0x28}, 0x0) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r14 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}}]}, 0x0, 0x1846d60d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x17, 0x0, 0xc3ac, 0x2d3, 0x128, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x70, &(0x7f0000000140)=""/112, 0x41100, 0x2, '\x00', r7, 0x17, r8, 0x8, &(0x7f0000000300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0xffffffff, 0x3, 0x1, 0xfe}, 0x10, 0x12576, r9, 0x6, &(0x7f0000000740)=[r10, r11, r13, r0, r14, r15], &(0x7f0000000780)=[{0x0, 0x1, 0x9, 0xe}, {0x4, 0x3, 0x3, 0x8}, {0x5, 0x2, 0xd, 0x6}, {0x8, 0x2, 0xe, 0x9}, {0x4, 0x3, 0x5, 0xc}, {0x5, 0x1, 0x2, 0xa}], 0x10, 0x11f}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000940)=r16, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) (async) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r17, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r18, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r18}, &(0x7f0000000200), &(0x7f00000003c0)=r19}, 0x20) 10.507725611s ago: executing program 3 (id=12471): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa737724c9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x40) 7.881371023s ago: executing program 3 (id=12487): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4008804) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000008000000030000000300000020000000", @ANYRES32=0x1, @ANYBLOB="06000700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000000020000000700"/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000700)="f92dbbe5abeba7b851f0300e6726452a1717b22440e0a48d91e5319e8c395863ce0bd57c754130bacdf7953f895b4626523deeb294bfb0ef6d6e02c9f67b55c8762a13ab08717d49d4b376009d1e4f303aef6dade9798ca835caf61ba030c6151deaa6dd4e3112c14630894b8aa1edae37807f"}, 0x20) r1 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYBLOB="846319a365ee3f3f1d619f17ca2df6f64cd041c1c478ed7c9d225f04ecdc0f48f117bdd6509b5bf115aefd999b2a71a9fd25d1ecaf699c43685e80aef32144d42f7eb1d966d9207b17d20fdf9afb2a09fb7a83969c05b25ea8949b3f9ac104ee5616f663226a935a603d983e71f548db0ebf33bb", @ANYRES64=r1, @ANYRES8=r2, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRESOCT=r0], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000038424a08000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 7.179844394s ago: executing program 3 (id=12495): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x10}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800a411bbaa1282150100000000000071122c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) 6.017459521s ago: executing program 4 (id=12499): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/226, 0xe2}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000200)=""/134, 0x86}], 0x3, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40002001) recvmsg$unix(r5, &(0x7f0000000600)={&(0x7f0000000440), 0x6e, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x2100) socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x32) openat$cgroup_ro(r11, &(0x7f0000000680)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r12, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0xb2, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$kcm(r17, &(0x7f0000000bc0)={&(0x7f00000009c0)=@ll={0x11, 0x5, r20, 0x1, 0xf5, 0x6, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)="9103355ba858ffe7299cb383645088ba22df6d6eb7464905247ca413d0", 0x1d}, {&(0x7f0000000a80)="f849cb9e8309b56b187657cf00daeaf09e56c6bb01feda902d4365f7e47a8f74a08a534857a136537aac1affd2defea07f3d98da1246f27e0ba3504f437d6071bfc62eda04a7c394e3a65de090c4f369b7f0d675615f8b189b0504ab2ee523644b6694c70f61eb47259f1b38c3abaeb077fc9a864f55dd45ce43b0800ec551756c8c7e0ce079131e016056755f1e2cd369174374502769e742ce28f90b591214f4a483fef95ec6ed56c0704a79549c298b43483ef868e2ccb995ce35e920e89f0a5c48b560ce7eaa4d98820ebf7c4ec5988078c52e3f3e79744a28f1673e2c81", 0xe0}], 0x2}, 0x4010) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001dc0)={&(0x7f0000000c00)="3ae0edc530bb7f66745d9d4898083967f4db8b08b94686404eb9c350dbf4b41cf2cf499d7bf12219069704a8faffae5e91c8db5b7efca3", &(0x7f0000000c40)=""/4096, &(0x7f0000001c40)="bf0b033ddb66e25056eac7aa8f72f2e60f43e160c1bddb780d76fb11e29e0f347516f3c7163a3a072cf4a5085c044f2dd9d8387ef9a390d94e16ff8a6bd5674da9e8486d71464f429335dc78c1b2809465b726c02248696dfbf98ec3cae1f8d3d86620", &(0x7f0000001cc0)="e5f6426245a237f4d4afd6f3a920f65592e612eaffd90007256b8682c67ee718708bc17a52298073e920185b0526344ac29a9a83fb4fab42b2651cf29dd59ff0bfd305e44dc19317dcf2562ce2993a30d7d7937f0488ab03b79a8139d74f4ed18a297fbe87942c0cca3cb24700db9c059e3d475e1e73dc797c9f2596aabeb9e3d1b6a7fdc4ca84b26e34203d47f33e1298d011216d845f6bdfbf1d64124044428034e6b60f0f37e9c5ac80510e389984bee23880867a2df3c37aa131224fce7804257e32f2a025b306c2146d5fbf659a", 0xe258, r18}, 0x38) close(r18) ioctl$TUNSETVNETHDRSZ(r18, 0x400454d8, &(0x7f0000001e00)) socket$kcm(0x29, 0x7, 0x0) unlink(&(0x7f0000001e40)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e80)) sendmsg$kcm(r3, &(0x7f0000002400)={&(0x7f0000001ec0)=@qipcrtr={0x2a, 0x0, 0xffffbfff}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001f40)="3608c6bf43250d8b5740bed64e2d82b65dc9ae76dd5b4d47305016d67ff8dfa66067663e8b4919946e800901f3eda8c599643f30f2f37419b15060f59546d9432fbdf9b9bdc0b96c51d749866b9575c7a90b40252bd7f80923102cd4f93c4837d780c0b78bee265eb47a629ff4e417768bcbb30825fddbd7324bacbf80ab63768efb7731602f09031535128b4a02018058dee87c09f7da967a9d0e5108461e1db20e02c5884f0299193e705db8716a6a7aa1c21745b67b76ad9cd1e7177e7d2142d46e385f438945c4a49c2f2f65a8d3f592a0500cdd2226310335fd385ad9ec7c9531173f5aa1963a0c92af5fdb21e1d8844f", 0xf3}, {&(0x7f0000002040)="e817f19b996f2c918dc78ce16afab937ecc775ab3537aa7d990aa20cfb6fe03a7a9f716a2abeaf4f34a721e44b75f5c573bed2f1cb68ffff6bc8c779c36c65bf93dc2f090305519f305a2bb657dd0592e333edb734aeb6285eb53685e9db52f8f09043e5574e0f17992c622b45187579a88232a3cfb46825481274", 0x7b}, {&(0x7f00000020c0)="9227f4c49bfcd98012d05d9415b1615ec7dfe1ad8dda487089055ed1aaaf38be249e41a1d327577f10aa6de0407543fabc4d3a5aca60531e604030e3ca335f11fd21d3c17b52bef7d7e5652de41cd3e466132f809b2ccec4873d3184e45742cdf7c4decd3537e8072c07c2870d130bcf5047d8c4919a808f62baaa28e23ee0a4b4f523891dd01a74a7d76fb2600d6944b5eab07773dca1354e3ea0ec20d1789749c4f4646f00d23edb2d4552d2ba9adfee76922fbe6f1719c2347e20f0f0b634", 0xc0}, {&(0x7f0000002180)="ed1ba5d8e5d76143896097081c0c1343347c1072cbb12158385e053ed6f9e7114d06dfbf7a52ed1b94befd452d015f8348d002bba57c91cdf6f511a12273c3c1d8d348794eac47cca97adac85309abbc6344a5fecd6eba96f6f855e154513cf992fdeed0ddb763498d8fa468f57fdd0b93791dadc314857217ec809b6fd2b4575d6af7344c5ba87707648aeaea002480883cddf1b3dbef5bf0f89824f8e241ea62cb47eb4f70ebb3c07f5c88a2fc01c8f40347c3330a2d881a66f690", 0xbc}, {&(0x7f0000002240)="dd5362a0ec88d680d85d36e40368f3b68e3cc78e2dd2e61141e9542224aefa31615e1445c3b9b4cb60e2", 0x2a}], 0x5, &(0x7f0000002300)=[{0xb8, 0x84, 0x4, "83003be5720ba6bc119dc333f36d50749c20fbb62108f58e70d2f6f9ad5437c1f8431b0eaf8f5898f52a34cf157f9e5c3fe9e519c8fff70de6af87f83c1769f7ecf8bea0b96c25677bfff4b2fbc16bf4b039efda418696e7e78294c99eb1784d171093233e472e139d87eb6c48aa4f6c9e15c1ac4f32e7e6356fe64a319c8706151980137880baed6f6e4f78d06cbcdaadb1d442319910e87a378a003aab9d72a4bbeb"}, {0x18, 0x112, 0x10001, "843983"}], 0xd0}, 0x24000004) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000026c0)={&(0x7f0000002440)="1bac413ea39c1b5ac7d3de770ec88fa9f14d620184a8b3b5be4cc90664a29096f60189c7780a8f868604b84b3e260627078bc12ab1fc8ae2094bf7e64f4539035c019cb9a13ff0f1145c08660a0e4ef1425bed95d52f5eb383cf0a1fc4033a96c6bcebb1f9efc61422fc0e30aba32877f44443486c9d10714bcdddfc2c09b6926049bc024b1f87cb7bf2973c3eca793b995b9cf9abbd63ca1584a073d129e0917555d2a3d49d39a28489da90a1702b2c5a534156d103fc", &(0x7f0000002500)=""/92, &(0x7f0000002580)="73c6eb252bcef88276c609abef7422aad77d58a6811a71b73f523476e84ea7a4a7e5e3530cd3aa530ad2798858e53e4d36c65b805528ce582cc183e2ccbe1a307cc684af4728d156eb660df170d89e5c4c02d8ad9a8a4dd21cbac91ddb58508ffa492b18c301ba5fefa0e8021af5400ec82d7a81f6250a4fb4e8803a61f4143c37be2a20e9cdac8c7d4475327937aaa7cfa1c1a5590265aea487b3251e8a90807004de060986cbe838d04a3c5a4fe27cfae83dffb9737aeec17df3e6080d501affc64d26ef76a4a780e2d42b00993edfed98bf6a3b1dc7", &(0x7f0000002680)="b7cc1e759777243c84e1566d3abddfb1d01a8a20c16e874ae98603c6a499cd4b8ed945811dacaf20ba84f2", 0x6, r9}, 0x38) r21 = perf_event_open$cgroup(&(0x7f0000002780)={0x1, 0x80, 0xa, 0x80, 0xb0, 0xc, 0x0, 0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x37b, 0x0, @perf_config_ext={0x9, 0x8}, 0x5000, 0x7, 0x0, 0x3, 0x10, 0x1, 0x8, 0x0, 0x401, 0x0, 0xb9}, r18, 0x5, r13, 0x1) r22 = perf_event_open(&(0x7f0000002700)={0x1, 0x80, 0x6, 0x4, 0x2, 0x8, 0x0, 0xfffffffffffff3c9, 0x20, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x8}, 0x0, 0x9, 0x1400000, 0x5, 0x39, 0x2, 0x10, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r21, 0x9) r23 = perf_event_open(&(0x7f0000002840)={0x4, 0x80, 0x1, 0x7, 0xf4, 0x9, 0x0, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000002800), 0x4}, 0x4008, 0x5, 0x9, 0x2, 0x81, 0x7, 0x7, 0x0, 0x3, 0x0, 0x8}, r2, 0xc, r22, 0x2) ioctl$PERF_EVENT_IOC_ID(r23, 0x80082407, &(0x7f00000028c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r19, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r24, &(0x7f0000002b80)={&(0x7f0000002980)=@alg, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002a00)=""/67, 0x43}, {&(0x7f0000002a80)=""/64, 0x40}], 0x2, &(0x7f0000002b00)=""/79, 0x4f}, 0x40002103) recvmsg(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002bc0)=""/43, 0x2b}, {&(0x7f0000002c00)=""/231, 0xe7}, {&(0x7f0000002d00)=""/53, 0x35}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x4, &(0x7f0000003d80)=""/128, 0x80}, 0x40002000) recvmsg$kcm(r14, &(0x7f0000003fc0)={&(0x7f0000003e40)=@tipc=@name, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003ec0)=""/16, 0x10}], 0x1, &(0x7f0000003f40)=""/111, 0x6f}, 0x100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004240)={0x6, 0x4, &(0x7f0000004000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@exit]}, &(0x7f0000004040)='GPL\x00', 0x8, 0xf4, &(0x7f0000004080)=""/244, 0x41000, 0x20, '\x00', r20, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000041c0)={0x2, 0x7, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004200)=[0x1, r7, r15, r6], 0x0, 0x10, 0x8}, 0x94) sendmsg$sock(r16, &(0x7f0000004a00)={&(0x7f0000004300)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004380)="96f51097e2b1dac144c13dcf09dcedff03d5232666d892ae7aa7f10f662a398a066abbca65f62f071118e52c34198cee1e98c49321ee3f28abbb0f3610c37d12f1a27275772a4de50f2123f028f21617175d6f09f6edb848ff8776f430e9cfeaf326e96bc7756687834a99ad0ce9aa033c683337178cb5998a91493693e1a15d3188713d978bac5f5bb38fad599d4c2d355b", 0x92}, {&(0x7f0000004440)="31a6b3c40a4e3fa0250ba7c7e1df42f7f8b69611951f063b27e4cb35a993db618d58604e23c56787644608014e24bc5f433bee01094c9d4dc0c1c75d5154da128f6d698a76db", 0x46}, {&(0x7f00000044c0)="7c7866d92f21ab95be245764a648f9d89ed1b501e0d911c3773128a48d44c3e5193b5fcd71793bfcde33e2af937b736f41ffec969e100506a73433ccdd9def49966f5f8e0f3fcc43f6de29b4c14d764927d197aa347e0d5ab35e47fa46c1b2775acc2ec4fb34e31feea2911d09e7ec0288ee8e1775b3e6707139333a9dcd6c9bcf45ee395328d28e1bf86d2b3eefdb64f40488207ecb01f4f51e20e3614c9109274efae41b817f366389d6fb5aee5fb2130b63b040b96fbf615afeae158bb363ada186f7cba945df9dad41fd8e5026ef614893d368442f4bfe84c991a0ebfa1ee901a3d76b08cf0aebc25c9b0b530760c96bf693", 0xf4}, {&(0x7f00000045c0)="fc048ecf9c553a2c82", 0x9}, {&(0x7f0000004600)="b63d2111abaadec8a34e7c3e645a0e65224b542c098ae6349c4174bc14a23ffe167c6ce4e29128636cae12ad58553581fa03f580160bf8ca9d61cf8ffb580b723dfdaeda978ba6f50c916c0e81b5cf987e8c0301dad4966aa6541419f21787a909b0b5b0873102a9362f4a43779de48a56d3cc1196f9d774f0c717d5ad951ee49fae5764c131b5fa7109a6aa5a9ad31b1260b901653c969f5f3aa51a15eefb6f43ebe4c130fb0636060f95661ef746e7bf783d70bf5e0e45e5326ab2ddc505aed5", 0xc1}, {&(0x7f0000004700)="bda5717c219e3d7dc97ac5fff501c197fe279d34b7f1be3af5d9546f7c3f30ba95d281cf623eacd5a5212569d60f829485a37554a6d29e34a8bdfbf367d0df00b65b60425f49afd779b0f2f956ba8352b85f6ee917e3eea2490b22f04564424ce2a09b7b53a27c9ba1dfd8e992f2ddf93d43df4b28d33676f4615683a6b66238bb040c02173bae8f50c3b55cc7170f3d4800151dd05978618bf91ca9c7a03798c0fe2bfb10ef4eecb8c4cc898ae3c27828b85aa6377af32f5cb2fdb2fbcf0ec9efcadb87076b3a8717ad82b482b0b45d0bf56482d70ff9ef41cafa612b522cfdf743664a", 0xe4}, {&(0x7f0000004800)="ee42e786a5a4c1f93e758e43017cc7c10dc0ea260ae2f35b5c5f62f02c4fcc1f6d3acc541c23880c2855f6d8ab19ee0bd84d0f69ff521dd34fb2f795c873a6cd232efa6175ed484125afb3f36430afd0b5fcf31c0a85588eb8f80f7971ae94325148b421ab3421409f6210590e57eafd12851a37eac5ff0063f065a06c776809dd03919ef6598a938e4b66692c1b3f9d9b85a282af549ac2e7e500a07b567bda96405f58eacb1cc05e3d4ad4a858526831", 0xb1}, {&(0x7f00000048c0)="6c9ae829bbe726c9b86b4d97ddbc995f3ef41ccc4123a633c73d85ab628ff7c3e305f6c8a409501cc65549284c849234f8b5f14f24d4e89479e8d6fa36df2320bfb1308a4be8b2ea7114441d7ba5116278ed2e5306d18eae0c9f75c6a406c9908f555972807077387a31c60b39aba5757cddae04f25636d6e0f366a2cd0358b1f3cb7aed", 0x84}], 0x8}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004c40)={&(0x7f0000004a40)="2a7b5f0c1e398c4997f40318c1e311296aa560d10a7121b6eaf974c615efad42", &(0x7f0000004a80)=""/130, &(0x7f0000004b40)="1706545fa318460f164d62f7d1ec05fd44d38c7bad9467c78d4b192ceb8697ff8a8d99575e36a2feb758001b3589442960cc35cc6bc81442bcaa0c59bed72f478a5b54464ef5b083543b53c0bb", &(0x7f0000004bc0)="ba9e8c33f2072ae2e13fe8db271d3ae11a5510e19b5aefe0e9de8aa5a33768aee2bf21876ab9214d4267e055d5e2f005e8e99c44998bc01caeda15dbae172a0b29e1ebacb597664bf99580e7d7c16ed24bfed0bbca8ca6a875c1ba2a1925c71405fd8abefbed617e68d3521a7317d19a39ca1e6ff524", 0x3, r8, 0x4}, 0x38) perf_event_open(&(0x7f0000004c80)={0x5, 0x80, 0xfc, 0x4, 0x6, 0xff, 0x0, 0xc, 0x100, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x7, 0x5}, 0x100000, 0x1, 0x8, 0x8, 0x7, 0xa0, 0x0, 0x0, 0xb, 0x0, 0x4}, r2, 0x8, r17, 0x2) ioctl$TUNSETLINK(r10, 0x400454cd, 0x30f) 5.906507377s ago: executing program 1 (id=12501): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x5760, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair(0x5265ff3ec08b0c7d, 0x1, 0x7ff, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000300)={&(0x7f0000000040)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/191, 0xbf}], 0x1, &(0x7f0000000200)=""/253, 0xfd}, 0x0) 5.811916203s ago: executing program 4 (id=12503): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fd000000000000ff0700"/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf}, 0x10c00a, 0xac5d, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x1}, 0x20, 0xdef5, 0xffffffff, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x348, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000020000db}, 0x0, 0x1, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) close(r4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000400)="8d", 0x1}], 0x300, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="1fbc9fa53ce14e138ddf8ebac1b693dfc8ede8b472bf53e5081c32e79ffa5520"], 0x5000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="185b00000f000000000000ccf474229dd115630000000000186700000c0000000000000004000000cb840001000000006c53e3383b85200097477c8d5a11ad530114696271d5b0455c854d1f49425b5d49763d96e61cf6821d55ac416327a9450d84556a283226d39ad6913da835073c0e025764c8d177e769a623712292feac2cc4c0b559e2a45bc129e926c176197c9778d4f4e35e39de70709a91d74178c4ef52"], &(0x7f0000000540)='GPL\x00', 0x9, 0x78, &(0x7f0000000580)=""/120, 0x33e093207390177c, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xa, 0x7fffffff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r3, r4, 0xffffffffffffffff, r3, r3, r4, r3]}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x3a25e1589d7d4476, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8904, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x45, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.726235768s ago: executing program 3 (id=12504): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6, 0x3, 0x8, 0x0, 0xffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 5.134794622s ago: executing program 0 (id=12505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9fff177792cb63b5bcb94576d59", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100e25b0000000000000c0000000c0000000700000004a390b853c3bc04a9adf1d30c518f000000000000070000000000005f302e5f00"], 0x0, 0x2b}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x15, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc8003200810066a288a8c6617f", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r0}) 5.133884162s ago: executing program 4 (id=12506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) (async) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) write$cgroup_devices(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d84"], 0xffdd) (async) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c"], 0x68}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 5.073283186s ago: executing program 4 (id=12508): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000140)}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2160) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 4.957070712s ago: executing program 1 (id=12509): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000080)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x4b}, 0x48) 4.82674417s ago: executing program 0 (id=12510): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffe4d, &(0x7f0000000040)=[{&(0x7f00000000c0)="c00e020032000b35d25a806f8c6394f90524fc6004200100002091000535a51771910f0041b080c13715e63e370248018000f01700d1bd3436", 0x33fe0}, {&(0x7f0000000100)="46cb41169116b97cec137035b856e8f8c63f512185201d7fc8e8573804ea7f310c1decda35d40c8b359c48ad0a034a41dacd1ab143ebef1fe56bd41c355f2282302b947115a8417e1d5286efbc29137c96b8ec"}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r2, &(0x7f0000000380), 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x391, 0x9, 0x1, 0x8}, 0x50) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @generic={0x9, 0x6, 0x3, 0x5, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000100000000000053c8d1d90d4b5752f8b5e997d4efa53cb48b7a1503bb15be2fd58d09f817612353eb7c14ceb6fd0ecd", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) (async) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x19) (async) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x8d4bf221dcc44706]}}, 0x0, 0x35}, 0x28) (async) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x94, &(0x7f0000000580)=""/148}, 0x90) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.745127145s ago: executing program 2 (id=12511): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0xffffffff}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="9cd5a22289eacd9bf5ba6e6d0652e7eeb40ec0de3d2c4844f120f37d88514d8d53d13db12f2adffbe23c7515d2c946052155ce3aa76c566f9039c31950b8d1f3ed9d28ecf769af7cd50a75aab5c358536ec2782425ed3755f246b0063525b4f0239dde514745e4e42ba86afa8597dddf29f5", 0x72}, {&(0x7f0000000200)="dcd98505bc049e2eed8b573265643ecdf4464ed7e25d4acda60ffd762bd607ce0058788bc041e30c55d28a1ec341b72f8199", 0x32}, {&(0x7f0000000240)="326b911d4ced3ffec824c37c8c14bc41849a4442db7501451e9e8061b538d559876d89da207283fe353ab086806dc9bc9916430ffe8d4bad0bda", 0x3a}], 0x3, &(0x7f00000002c0)=[{0x78, 0x113, 0x0, "c915a49eb4fc981ab25205f0a16f0671777b1ffbc2dd090737f12fa2614206528cec2101fd9755149c61c43e6c9fec48ab80012172e0011d5856d8777216f4e3f07dfb253bf6517da33859ccecf94be57e01e896c587b16a88598bb13bfaa742a16c4f7752297a"}], 0x78}, 0x4) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x1, {0xa, 0x4e20, 0x101, @remote, 0xffffffff}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="9cd5a22289eacd9bf5ba6e6d0652e7eeb40ec0de3d2c4844f120f37d88514d8d53d13db12f2adffbe23c7515d2c946052155ce3aa76c566f9039c31950b8d1f3ed9d28ecf769af7cd50a75aab5c358536ec2782425ed3755f246b0063525b4f0239dde514745e4e42ba86afa8597dddf29f5", 0x72}, {&(0x7f0000000200)="dcd98505bc049e2eed8b573265643ecdf4464ed7e25d4acda60ffd762bd607ce0058788bc041e30c55d28a1ec341b72f8199", 0x32}, {&(0x7f0000000240)="326b911d4ced3ffec824c37c8c14bc41849a4442db7501451e9e8061b538d559876d89da207283fe353ab086806dc9bc9916430ffe8d4bad0bda", 0x3a}], 0x3, &(0x7f00000002c0)=[{0x78, 0x113, 0x0, "c915a49eb4fc981ab25205f0a16f0671777b1ffbc2dd090737f12fa2614206528cec2101fd9755149c61c43e6c9fec48ab80012172e0011d5856d8777216f4e3f07dfb253bf6517da33859ccecf94be57e01e896c587b16a88598bb13bfaa742a16c4f7752297a"}], 0x78}, 0x4) r2 = syz_clone(0x10400, &(0x7f0000000580)="8555451985e93ae51af05b6faec3bc8aa826dc25ea7622f4b639d1aec6e11b4509d48399a1eccb34f145a531180e02dae7b3b76502d3429b5311c8aeda564a0304188c520b9116aba382e63fad54ba2a4357bc3c54decb76be04b191009485f9eb3ccc97333eca2879d8ac8ce1272cf6879c6ef81da9ec7709e9aa0a3a95daedd999a92404dc9d92d3a0befa8f4e93a829a3d37d7d5ef06d945e84aac44c3bcd2b4b85afa8fdbed3d060f2ac21406b19df1e8ecc", 0xb4, 0x0, &(0x7f00000006c0), &(0x7f0000000700)="04d978da36bb2c23a54ea29983340e62175bf3fbb155019f2d08f30d06fd1e1c6cbece4588724071") syz_open_procfs$namespace(r2, &(0x7f0000000840)='ns/mnt\x00') perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x8, 0xc0, 0x0, 0x0, 0x9, 0x6df33d5653c619bc, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x47016faa, 0x4, @perf_bp={&(0x7f0000000380)}, 0x804, 0xfffffffffffffffb, 0x4, 0x2, 0x9, 0x5, 0x480, 0x0, 0x7, 0x0, 0xb28}, r2, 0x9, r0, 0x0) sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 4.685457479s ago: executing program 1 (id=12512): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x7, 0x3}, 0x80, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_clone(0x38051180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4.618410782s ago: executing program 0 (id=12513): socket$kcm(0x10, 0x2, 0x0) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc8400"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x1ff, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYRESOCT=r2, @ANYRES32=r3, @ANYBLOB="0200007c0000000000000000000000000000000000000000000000000010ab1b3e57900f9a15a17990d0b442ae8808580c0a2c57140b43202a22f5f53aae39a9dffdade9bed601a21bc7fdc14f510767863a4c92646f78e8d0f56458b4081692965e2c25e4cafa77e10cb6e4fff170a41f9f620303eafdfb1fc2a47b4cdfd595774178aa588535b521e13ff562d74b0010dc68c896042fa7ad00ad5774983ff5eb83e9b25fad985476a1432279ab090451846cf440929a8177f32a912485fb5e3c8541441c9200ab0dd516cbf0"], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x94) (async) socket$kcm(0x10, 0x400000002, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socket$kcm(0x2, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='1-N'], 0x31) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x9, 0x3e19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x1, r4, 0x3) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400100142603600e120800060000000201a80016000900014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r8 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socket$kcm(0x29, 0x5, 0x0) 4.421928364s ago: executing program 0 (id=12514): ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x541b, &(0x7f00000013c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x36}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001900"], 0x0, 0x32}, 0x20) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x301) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1, 0x5, 0x0, 0x7, 0x0, 0xf8000000, 0x4}, 0x0, 0x200000, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000100)={'bridge0\x00'}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2bc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000180)={'dvmrp1\x00'}) 4.362754717s ago: executing program 3 (id=12515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xdf, 0x9, 0x8, 0x0, 0x0, 0x50042, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xe}, 0x8400, 0xfffffffffffffffb, 0x6, 0x0, 0x3, 0xffffffff, 0x10, 0x0, 0x10005, 0x0, 0xdc}, 0x0, 0x4, r3, 0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000090245ca00"/20, @ANYRES32], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f'], 0xfe33) 4.197231506s ago: executing program 1 (id=12516): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40504, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x114, 0x1d, 0x0, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x2, 0xf2}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f, 0x6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r8, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.196351267s ago: executing program 2 (id=12517): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r2, r3, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x9, 0x5, 0x0, 0x9, 0x0, 0xd59, 0x2000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x80}, 0x480, 0x1, 0x3, 0x1, 0xa4d, 0xa7, 0xa89a, 0x0, 0x4, 0x0, 0x4}, r2, 0x8, r0, 0x8) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x1100480, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x8}, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r4, r5, 0x0, 0x1, &(0x7f0000000740)='\x00'}, 0x30) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000eaffffff0000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) 3.354587746s ago: executing program 4 (id=12518): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000200000000000088"], &(0x7f0000000000)=""/205, 0x28, 0xcd, 0x1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd", 0x1a}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x9409, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 3.2766396s ago: executing program 0 (id=12519): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="28000000000000002900000032000000977b3d2f56cfdf8bb5f2ac6dd52d09ebcb00000000000000c8dc2ad17e040dedd485a826e5c0f2ce04de73ed8b3cbeece8e869b2112571acd7498e5bf7c2592080864358a9424f469302929d92df75a0a632417296d3e8630f32d3a9bcedf7a6c1defe057107e921b66b41bfe8a5f69d0c161482476872"], 0x28}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x24, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000003000000000000004a00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000d50000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000aa0000008500000015000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x5, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0xca, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xf, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b000000000000d7965bf0", 0x14}], 0x13}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.093613551s ago: executing program 1 (id=12520): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32ef2ec8c7a6ec00120c00014006040400020404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040), 0x10}, 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000500000095000000000000009500a505000000006a9fe00f91018e6ac2227e13f1d3d83b09218247687cbb314b46251a0c46"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x10c002, 0xac5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) write$cgroup_devices(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="80fd"], 0x5) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x100000, 0x0, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x2, 0x73) recvmsg(r4, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x42) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x3, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0xc, [@ptr={0x7, 0x0, 0x0, 0x2, 0x5}, @datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x4, 0xf}], 'Ft'}]}, {0x0, [0x30, 0x61, 0x61, 0x61, 0x0, 0x5f, 0x2e, 0x0, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/27, 0x4c, 0x1b, 0x0, 0x4}, 0x28) r6 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) 3.086007021s ago: executing program 2 (id=12521): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x3ffff, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x98, 0x10803, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0x6, 0x40f}, 0x1, 0xffff, 0x505, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0xfff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000002000000a20000000000000000001d00000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000007ac9dcb00c1ea02ebc64b10a2dfa0000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="000000000000b703c20000000000850000000c000000b70000fed3240500000000ffffc982ffff00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000000000ff840000002f000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007fbfffff7ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3ff) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000002c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) write$cgroup_pid(r6, &(0x7f0000000400), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) 2.966421818s ago: executing program 0 (id=12522): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) 2.299792927s ago: executing program 4 (id=12523): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x2, 0x3, 0x1, 0x7, 0x3, 0xfffffffffffffffe, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x3, 0xb, 0x9, 0x6, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0xef, 0x0, 0x0, 0x41100, 0xc, '\x00', r1, @lsm=0x1b, r4, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x4, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580), 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum64={0x2}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1, 0xfffffffe}, 0x0, 0x3, r7, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) perf_event_open(0x0, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r5, 0x20, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000740)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000100000002000013040000000200000088060000ff0f00000000000101000000ff010000002e28"], &(0x7f00000005c0)=""/217, 0x40, 0xd9, 0x1}, 0x28) 2.283216578s ago: executing program 2 (id=12524): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x3, 0x0}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000380)='io.pressure\x00', 0x2, 0x0) 2.177074484s ago: executing program 1 (id=12525): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000040)="8f1792f50fd8f8", &(0x7f0000000240)=""/22}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x2d}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = getpid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe1}, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8040, 0x100000001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x0, 0x29, 0x0, 0x5012) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) 671.97µs ago: executing program 2 (id=12526): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x3}, 0x2}}, 0x80, 0x0}, 0x4000040) 0s ago: executing program 2 (id=12527): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000240), 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="6904b9992472fdce9a682ce57119a18e9b51d77015185845625b759c6386dccb627dc9b29a29575ce655362b87a3f37276f0bb6c54fb0ee3855c09ff356cb00e71c503893b90e35db1a0ed207cddaf2ed60c34fc863e5b3c8d643f21b12b37356479143e70058ad7473aa30a76", @ANYRES16=0x0], &(0x7f0000000680)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000600)=""/12, 0x40e00, 0x4c, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r3], 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYRES8=r4, @ANYBLOB="53e602405fcbe4a02cf5ab4793ccfba8000d7ee925f263b4779659e369966e54800c54b8a69821082ea7f93aa91e083e65ce6b3d2baa85d9f9bc4984d7a4ee314620c06f67a47cf1bb17d8d58c38f1241efa43fb8ff9b1fd00fb033f2dffe921c3c5886675900e7bb8b026d1791fe68d7e3559e41db4727fa012545767a8275713c77c56555be09c87d02e0fa17b29c731f7c0edafbac89debf85101e9f0ba481ed045c2ded91194bd88c41c0e7d5317c13ea2058b9bb47bed008d67427163aefaeee78727326091a74a51fce2b297d578423d81727eb0176157df1ac1352e96c36e3f33fd5b5a4728102bf4090d1c"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$kcm(0x10, 0x2, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320086dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_int(r6, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000009500000700359f00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x617, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xf0, 0xfd, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x9, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r7], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): BSSID 8a:2a:db:7e:57:20 [ 2233.872591][T13885] netlink: 'syz.1.11187': attribute type 27 has an invalid length. [ 2233.930803][T13882] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2234.141958][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 2234.862990][ T4354] wlan1: Trigger new scan to find an IBSS to join [ 2234.983758][T13907] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.11192'. [ 2235.310696][T13903] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2235.969991][T13930] netlink: 'syz.4.11198': attribute type 27 has an invalid length. [ 2236.620301][T13964] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11206'. [ 2237.030013][T13987] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2237.074051][T13979] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11209'. [ 2237.419454][T14005] sctp: [Deprecated]: syz.4.11214 (pid 14005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2237.419454][T14005] Use struct sctp_sack_info instead [ 2237.456392][T14008] validate_nla: 1 callbacks suppressed [ 2237.456415][T14008] netlink: 'syz.2.11216': attribute type 4 has an invalid length. [ 2237.676277][T14026] device bridge_slave_1 left promiscuous mode [ 2237.692382][T14026] bridge0: port 2(bridge_slave_1) entered disabled state [ 2237.777771][T14026] device bridge_slave_0 left promiscuous mode [ 2237.797301][T14026] bridge0: port 1(bridge_slave_0) entered disabled state [ 2237.902043][ T9268] wlan1: Trigger new scan to find an IBSS to join [ 2237.908858][ T4354] wlan1: Trigger new scan to find an IBSS to join [ 2238.166266][T14032] netlink: 'syz.4.11223': attribute type 10 has an invalid length. [ 2238.190926][T14035] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.11221'. [ 2238.597708][T14055] netlink: 'syz.0.11227': attribute type 27 has an invalid length. [ 2238.830339][T14053] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2239.003875][T14072] sctp: [Deprecated]: syz.1.11230 (pid 14072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2239.003875][T14072] Use struct sctp_sack_info instead [ 2239.073909][T14078] netlink: 'syz.1.11230': attribute type 4 has an invalid length. [ 2239.160851][T14078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11230'. [ 2239.472055][T14070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11229'. [ 2239.991506][T14106] device syzkaller0 entered promiscuous mode [ 2240.017459][T14112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2240.101525][T14119] netlink: 'syz.2.11243': attribute type 27 has an invalid length. [ 2240.546879][T14134] netlink: 'syz.2.11248': attribute type 3 has an invalid length. [ 2240.564264][T14134] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.11248'. [ 2240.942357][ T9251] wlan1: Trigger new scan to find an IBSS to join [ 2242.951984][ T9265] wlan1: Trigger new scan to find an IBSS to join [ 2243.283268][T14128] device sit0 left promiscuous mode [ 2243.288861][T14132] device sit0 entered promiscuous mode [ 2243.318739][T14141] device syzkaller0 entered promiscuous mode [ 2243.339535][ T9251] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2243.537695][T14167] netlink: 'syz.4.11256': attribute type 27 has an invalid length. [ 2243.567833][T14167] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2243.594394][T14172] netlink: 'syz.1.11258': attribute type 29 has an invalid length. [ 2243.612525][T14172] netlink: 'syz.1.11258': attribute type 29 has an invalid length. [ 2243.651045][T14170] netlink: 'syz.1.11258': attribute type 29 has an invalid length. [ 2243.773022][T14179] netlink: 'syz.2.11259': attribute type 46 has an invalid length. [ 2243.781093][T14179] netlink: 'syz.2.11259': attribute type 46 has an invalid length. [ 2243.836422][ T9268] wlan1: Creating new IBSS network, BSSID 5a:3f:bc:73:45:6e [ 2243.844650][T14178] netlink: 'syz.4.11260': attribute type 39 has an invalid length. [ 2243.902564][ T9251] wlan1: Trigger new scan to find an IBSS to join [ 2245.093186][T14203] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2245.117288][T14212] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.11267'. [ 2245.529087][T14216] netlink: 'syz.1.11270': attribute type 3 has an invalid length. [ 2245.539794][T14217] netlink: 'syz.1.11270': attribute type 3 has an invalid length. [ 2245.574486][T14217] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11270'. [ 2245.592200][T14216] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11270'. [ 2245.648229][T14222] netlink: 'syz.4.11271': attribute type 22 has an invalid length. [ 2245.726219][T14227] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.11272'. [ 2246.538733][T14234] team0 (unregistering): Port device team_slave_0 removed [ 2246.596864][T14234] team0 (unregistering): Port device team_slave_1 removed [ 2246.741316][T14243] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11275'. [ 2247.385176][T14249] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.11275'. [ 2247.403326][T14253] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11279'. [ 2247.442782][T14257] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11278'. [ 2247.912134][ T9265] wlan1: Trigger new scan to find an IBSS to join [ 2248.160350][T14277] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.11283'. [ 2248.170158][T14279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11284'. [ 2248.356293][T14284] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2248.942036][ T9263] wlan1: Trigger new scan to find an IBSS to join [ 2249.104350][T14319] validate_nla: 7 callbacks suppressed [ 2249.104370][T14319] netlink: 'syz.4.11295': attribute type 12 has an invalid length. [ 2249.191875][T14319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11295'. [ 2249.470557][T14329] netlink: 'syz.0.11299': attribute type 39 has an invalid length. [ 2249.717559][T14331] delete_channel: no stack [ 2249.920104][T14339] Â: renamed from pim6reg1 [ 2250.497548][T14366] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2250.504134][T14366] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2250.545090][T14368] netlink: 'syz.1.11312': attribute type 12 has an invalid length. [ 2250.588538][T14368] __nla_validate_parse: 1 callbacks suppressed [ 2250.588563][T14368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11312'. [ 2251.899637][T14401] netlink: 'syz.4.11324': attribute type 27 has an invalid length. [ 2251.912543][ T9251] wlan1: Trigger new scan to find an IBSS to join [ 2251.981947][T14402] netlink: 'syz.3.11302': attribute type 21 has an invalid length. [ 2252.199982][T14402] netlink: 'syz.3.11302': attribute type 1 has an invalid length. [ 2252.296055][T14412] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2252.455787][T14425] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.11330'. [ 2252.597502][T14427] netlink: 'syz.2.11329': attribute type 12 has an invalid length. [ 2252.607063][T14427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11329'. [ 2252.661908][T14425] netlink: 'syz.4.11330': attribute type 17 has an invalid length. [ 2252.692474][T14425] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11330'. [ 2252.741301][T14425] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2252.823386][T14425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2252.910055][ T9263] wlan1: Creating new IBSS network, BSSID 52:ce:ed:c3:9c:d3 [ 2253.469274][T14448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11336'. [ 2254.579900][T14462] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11352'. [ 2255.007031][T14473] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2255.366711][T14480] netlink: 'syz.1.11348': attribute type 4 has an invalid length. [ 2255.394096][T14480] netlink: 124468 bytes leftover after parsing attributes in process `syz.1.11348'. [ 2256.076205][T14494] -1: renamed from syzkaller0 [ 2256.198435][T14492] netlink: 'syz.0.11351': attribute type 33 has an invalid length. [ 2256.236373][T14492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11351'. [ 2256.335273][T14481] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.11347'. [ 2256.871055][T14510] netlink: 'syz.0.11358': attribute type 4 has an invalid length. [ 2256.891999][T14510] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.11358'. [ 2257.280351][T14527] device lo entered promiscuous mode [ 2257.736252][T14543] netlink: 'syz.2.11367': attribute type 3 has an invalid length. [ 2257.750068][T14543] netlink: 'syz.2.11367': attribute type 1 has an invalid length. [ 2257.759381][T14543] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.11367'. [ 2258.632954][T14558] delete_channel: no stack [ 2258.637644][T14558] delete_channel: no stack [ 2259.444935][T14581] netlink: 'syz.1.11377': attribute type 4 has an invalid length. [ 2259.461817][T14581] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.11377'. [ 2259.828907][ T4280] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 2259.829050][ T4280] Bluetooth: hci2: Malformed LE Event: 0x0d [ 2261.272281][T14641] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11394'. [ 2261.328268][T14643] netlink: 'syz.4.11397': attribute type 39 has an invalid length. [ 2261.645600][T14648] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2262.234093][T14682] tap0: tun_chr_ioctl cmd 2148553947 [ 2263.902307][ T9259] wlan1: Trigger new scan to find an IBSS to join [ 2264.523092][T14698] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.11413'. [ 2265.724397][T14708] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2266.779884][T14755] netlink: 'syz.1.11429': attribute type 11 has an invalid length. [ 2266.788918][T14755] netlink: 'syz.1.11429': attribute type 11 has an invalid length. [ 2266.798347][T14755] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.11429'. [ 2267.281318][T14767] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.11434'. [ 2267.903996][ T9251] wlan1: Trigger new scan to find an IBSS to join [ 2268.153507][T14781] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.11438'. [ 2270.168055][ T9268] wlan1: Creating new IBSS network, BSSID ce:11:51:19:9f:62 [ 2273.001836][T14765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11432'. [ 2273.353864][T14805] netlink: 'syz.2.11446': attribute type 10 has an invalid length. [ 2273.365384][T14805] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11446'. [ 2273.394919][T14805] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2273.781620][T14820] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.11450'. [ 2274.291342][T14841] netlink: 'syz.4.11455': attribute type 10 has an invalid length. [ 2274.463735][T14841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11455'. [ 2274.482722][T14841] device ipvlan1 entered promiscuous mode [ 2274.501884][T14841] bridge0: port 3(ipvlan1) entered blocking state [ 2274.508656][T14841] bridge0: port 3(ipvlan1) entered disabled state [ 2274.537985][T14841] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2274.589815][T14842] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11455'. [ 2274.868101][T14853] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11457'. [ 2275.449724][T14872] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.11465'. [ 2275.478972][T14872] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 2275.997001][T14889] can: request_module (can-proto-0) failed. [ 2276.092269][T14895] netlink: 'syz.0.11470': attribute type 10 has an invalid length. [ 2276.761821][T14909] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11474'. [ 2277.272534][T14923] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11478'. [ 2277.816366][T14932] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2277.950433][T14939] sctp: [Deprecated]: syz.4.11482 (pid 14939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2277.950433][T14939] Use struct sctp_sack_info instead [ 2277.971119][T14933] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2278.396811][T14952] netlink: 'syz.4.11485': attribute type 3 has an invalid length. [ 2278.422243][T14952] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11485'. [ 2278.708879][T14963] device syzkaller0 entered promiscuous mode [ 2280.787568][T15007] netlink: 'syz.3.11499': attribute type 3 has an invalid length. [ 2280.801243][T15007] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11499'. [ 2283.188953][T14989] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2283.199290][T14995] netlink: 'syz.1.11496': attribute type 2 has an invalid length. [ 2283.208262][T14995] netlink: 'syz.1.11496': attribute type 8 has an invalid length. [ 2283.220846][T14995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11496'. [ 2283.239476][T14996] netlink: 'syz.1.11496': attribute type 10 has an invalid length. [ 2283.264252][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.270659][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.081151][T15039] netlink: 180 bytes leftover after parsing attributes in process `syz.4.11510'. [ 2284.207466][T15042] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2285.174262][T15081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11516'. [ 2285.392734][ T4280] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 2286.045783][T15086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11521'. [ 2286.102541][T15105] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2286.320763][T15120] netlink: 'syz.4.11528': attribute type 12 has an invalid length. [ 2286.329021][T15120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11528'. [ 2286.590158][T15127] IPv6: NLM_F_CREATE should be specified when creating new route [ 2286.633820][T15127] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11529'. [ 2286.667712][T15132] device bridge_slave_1 left promiscuous mode [ 2286.677938][T15132] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.691578][T15132] device bridge_slave_0 left promiscuous mode [ 2286.705166][T15132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.850992][T15135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11532'. [ 2286.898362][T15135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11532'. [ 2286.913260][T15134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11532'. [ 2286.935174][T15139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11533'. [ 2286.962127][T15139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11533'. [ 2287.069252][T15142] netlink: 'syz.1.11534': attribute type 10 has an invalid length. [ 2287.449666][T15151] netlink: 'syz.0.11537': attribute type 29 has an invalid length. [ 2287.458181][T15151] netlink: 'syz.0.11537': attribute type 29 has an invalid length. [ 2287.514501][T15152] netlink: 'syz.3.11536': attribute type 46 has an invalid length. [ 2287.653688][T15156] netlink: 'syz.2.11539': attribute type 16 has an invalid length. [ 2287.815474][T15166] netlink: 'syz.3.11543': attribute type 21 has an invalid length. [ 2287.939987][T15176] netlink: 'syz.0.11545': attribute type 9 has an invalid length. [ 2288.021219][T15166] IPv6: NLM_F_CREATE should be specified when creating new route [ 2288.033359][T15162] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2288.433992][T15195] device syzkaller0 entered promiscuous mode [ 2292.851170][T15198] __nla_validate_parse: 3 callbacks suppressed [ 2292.851190][T15198] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11553'. [ 2292.896706][T15224] netlink: 'syz.3.11557': attribute type 1 has an invalid length. [ 2293.109025][T15244] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2293.407509][T15268] netlink: 'syz.0.11568': attribute type 5 has an invalid length. [ 2293.431069][T15268] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11568'. [ 2294.062013][T15284] device syzkaller0 entered promiscuous mode [ 2294.220765][T15295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11575'. [ 2295.587478][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 2297.042506][T15295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11575'. [ 2297.274294][T15316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2297.290279][T15316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2297.302700][T15316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2297.310539][T15316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2297.476918][T15311] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2297.899100][T15339] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11587'. [ 2297.940491][T15339] netlink: 'syz.0.11587': attribute type 8 has an invalid length. [ 2297.978710][T15338] netlink: 'syz.2.11588': attribute type 10 has an invalid length. [ 2298.034538][T15338] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2298.169149][T15351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11590'. [ 2298.214726][T15351] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11590'. [ 2298.349692][T15359] netlink: 'syz.2.11592': attribute type 27 has an invalid length. [ 2298.369438][T15359] C: renamed from team_slave_0 [ 2298.639278][T15365] netlink: 'syz.1.11594': attribute type 39 has an invalid length. [ 2298.662805][T15365] device veth0_macvtap left promiscuous mode [ 2298.890409][T15381] netlink: 'syz.4.11597': attribute type 11 has an invalid length. [ 2298.935343][T15381] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11597'. [ 2298.983129][T15378] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2300.314339][T15399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11602'. [ 2300.596584][T15408] netlink: 'syz.2.11604': attribute type 10 has an invalid length. [ 2300.690005][T15411] netlink: 'syz.2.11604': attribute type 2 has an invalid length. [ 2300.698474][T15411] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11604'. [ 2300.724615][T15410] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11605'. [ 2300.738143][T15413] netlink: 'syz.0.11606': attribute type 9 has an invalid length. [ 2300.749098][T15410] device hsr_slave_0 left promiscuous mode [ 2300.757662][T15413] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11606'. [ 2300.769926][T15410] device hsr_slave_1 left promiscuous mode [ 2300.991247][T15422] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2301.011438][T15432] netlink: 'syz.2.11609': attribute type 21 has an invalid length. [ 2301.031948][T15432] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11609'. [ 2301.653569][T15458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11616'. [ 2302.112079][T15473] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2302.171364][T15481] netlink: 'syz.0.11623': attribute type 10 has an invalid length. [ 2302.808078][T15502] netlink: 'syz.2.11629': attribute type 11 has an invalid length. [ 2302.835214][T15502] netlink: 'syz.2.11629': attribute type 11 has an invalid length. [ 2302.873919][T15501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2308.289508][ T4280] Bluetooth: hci5: ISO packet for unknown connection handle 1854 [ 2308.678114][T15568] netlink: 'syz.1.11642': attribute type 29 has an invalid length. [ 2308.707072][T15568] netlink: 'syz.1.11642': attribute type 3 has an invalid length. [ 2308.726385][T15568] __nla_validate_parse: 5 callbacks suppressed [ 2308.726413][T15568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11642'. [ 2313.136562][T15579] netlink: 'syz.0.11643': attribute type 10 has an invalid length. [ 2313.145267][T15579] device netdevsim0 left promiscuous mode [ 2313.162420][T15579] device netdevsim0 entered promiscuous mode [ 2313.168764][T15579] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2313.211038][T15600] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2313.245605][T15603] netlink: 'syz.3.11650': attribute type 10 has an invalid length. [ 2313.262103][T15603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11650'. [ 2313.407322][T15603] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2314.287331][T15630] netlink: 'syz.4.11653': attribute type 11 has an invalid length. [ 2314.311981][T15630] netlink: 176 bytes leftover after parsing attributes in process `syz.4.11653'. [ 2314.698613][T15642] netlink: 'syz.2.11660': attribute type 1 has an invalid length. [ 2314.718411][T15642] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11660'. [ 2314.825899][T15642] netlink: 'syz.2.11660': attribute type 7 has an invalid length. [ 2314.842177][T15642] netlink: 'syz.2.11660': attribute type 1 has an invalid length. [ 2314.850946][T15642] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11660'. [ 2314.997140][T15646] netlink: 'syz.4.11662': attribute type 10 has an invalid length. [ 2315.129193][T15646] device netdevsim0 entered promiscuous mode [ 2315.155052][T15646] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2315.255608][T15653] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2315.473916][ T4280] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 2317.045045][T15693] netlink: 'syz.4.11674': attribute type 7 has an invalid length. [ 2317.053254][T15693] netlink: 'syz.4.11674': attribute type 1 has an invalid length. [ 2317.061220][T15693] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11674'. [ 2319.300464][T15689] netlink: 'syz.4.11674': attribute type 1 has an invalid length. [ 2319.311405][T15689] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11674'. [ 2319.329352][T15684] netlink: 'syz.1.11673': attribute type 21 has an invalid length. [ 2319.341798][T15684] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11673'. [ 2319.886247][T15717] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11680'. [ 2319.899697][T15719] FAULT_INJECTION: forcing a failure. [ 2319.899697][T15719] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.916913][T15719] CPU: 0 PID: 15719 Comm: syz.4.11681 Not tainted syzkaller #0 [ 2319.924554][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2319.934667][T15719] Call Trace: [ 2319.937989][T15719] [ 2319.940966][T15719] dump_stack_lvl+0x188/0x24e [ 2319.945817][T15719] ? show_regs_print_info+0x12/0x12 [ 2319.951076][T15719] ? load_image+0x400/0x400 [ 2319.955640][T15719] ? verify_lock_unused+0x140/0x140 [ 2319.960914][T15719] should_fail_ex+0x399/0x4d0 [ 2319.965663][T15719] should_failslab+0x5/0x20 [ 2319.970222][T15719] slab_pre_alloc_hook+0x59/0x310 [ 2319.975304][T15719] kmem_cache_alloc+0x56/0x2f0 [ 2319.980148][T15719] ? skb_clone+0x1e7/0x370 [ 2319.984627][T15719] skb_clone+0x1e7/0x370 [ 2319.988936][T15719] __netlink_deliver_tap+0x3ed/0x800 [ 2319.994293][T15719] ? netlink_deliver_tap+0x2e/0x1b0 [ 2319.999558][T15719] netlink_deliver_tap+0x19c/0x1b0 [ 2320.004742][T15719] netlink_unicast+0x728/0x8d0 [ 2320.009591][T15719] netlink_sendmsg+0x8ad/0xbd0 [ 2320.014481][T15719] ? netlink_getsockopt+0x550/0x550 [ 2320.019756][T15719] ? aa_sock_msg_perm+0x94/0x150 [ 2320.024837][T15719] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2320.030173][T15719] ? security_socket_sendmsg+0x7c/0xa0 [ 2320.035702][T15719] ? netlink_getsockopt+0x550/0x550 [ 2320.040967][T15719] ____sys_sendmsg+0x5be/0x970 [ 2320.045804][T15719] ? __sys_sendmsg_sock+0x30/0x30 [ 2320.050897][T15719] ? __import_iovec+0x315/0x500 [ 2320.055807][T15719] ? import_iovec+0x6f/0xa0 [ 2320.060375][T15719] ___sys_sendmsg+0x2a2/0x360 [ 2320.065122][T15719] ? __sys_sendmsg+0x290/0x290 [ 2320.070066][T15719] ? __lock_acquire+0x7d10/0x7d10 [ 2320.075179][T15719] __se_sys_sendmsg+0x1bb/0x2a0 [ 2320.080103][T15719] ? __x64_sys_sendmsg+0x80/0x80 [ 2320.085124][T15719] ? lockdep_hardirqs_on+0x94/0x140 [ 2320.090381][T15719] do_syscall_64+0x4c/0xa0 [ 2320.094859][T15719] ? clear_bhb_loop+0x60/0xb0 [ 2320.099598][T15719] ? clear_bhb_loop+0x60/0xb0 [ 2320.104348][T15719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2320.110303][T15719] RIP: 0033:0x7f4cc579bf79 [ 2320.114785][T15719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2320.134454][T15719] RSP: 002b:00007f4cc65fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2320.142934][T15719] RAX: ffffffffffffffda RBX: 00007f4cc5a15fa0 RCX: 00007f4cc579bf79 [ 2320.150961][T15719] RDX: 0000000000004044 RSI: 00002000000001c0 RDI: 000000000000000a [ 2320.158985][T15719] RBP: 00007f4cc65fc090 R08: 0000000000000000 R09: 0000000000000000 [ 2320.167005][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2320.175028][T15719] R13: 00007f4cc5a16038 R14: 00007f4cc5a15fa0 R15: 00007ffcf5e35eb8 [ 2320.183158][T15719] [ 2320.200070][T15719] netlink: 'syz.4.11681': attribute type 27 has an invalid length. [ 2320.298495][T15724] netlink: 'syz.1.11684': attribute type 25 has an invalid length. [ 2320.310792][T15724] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.11684'. [ 2320.554296][T15736] device syzkaller0 left promiscuous mode [ 2320.602249][T15738] device veth0_to_team entered promiscuous mode [ 2320.660001][ T4280] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 2326.479964][T15774] netlink: 'syz.2.11695': attribute type 27 has an invalid length. [ 2326.505254][T15774] FAULT_INJECTION: forcing a failure. [ 2326.505254][T15774] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.556571][T15774] CPU: 0 PID: 15774 Comm: syz.2.11695 Not tainted syzkaller #0 [ 2326.564217][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2326.574334][T15774] Call Trace: [ 2326.577657][T15774] [ 2326.580643][T15774] dump_stack_lvl+0x188/0x24e [ 2326.585389][T15774] ? show_regs_print_info+0x12/0x12 [ 2326.590829][T15774] ? load_image+0x400/0x400 [ 2326.595383][T15774] ? __might_sleep+0xd0/0xd0 [ 2326.600029][T15774] ? __lock_acquire+0x7d10/0x7d10 [ 2326.605120][T15774] should_fail_ex+0x399/0x4d0 [ 2326.609851][T15774] should_failslab+0x5/0x20 [ 2326.614403][T15774] slab_pre_alloc_hook+0x59/0x310 [ 2326.619469][T15774] kmem_cache_alloc_node+0x5a/0x320 [ 2326.624702][T15774] ? __dev_queue_xmit+0x26b/0x37f0 [ 2326.629847][T15774] ? __alloc_skb+0xfc/0x7e0 [ 2326.634393][T15774] __alloc_skb+0xfc/0x7e0 [ 2326.638777][T15774] netlink_ack+0x372/0x1170 [ 2326.643352][T15774] ? ref_tracker_free+0x68c/0x840 [ 2326.648422][T15774] ? __copy_skb_header+0x3ba/0x4f0 [ 2326.653570][T15774] ? refcount_inc+0x70/0x70 [ 2326.658111][T15774] ? memcpy+0x3c/0x60 [ 2326.662131][T15774] ? netlink_dump+0xd00/0xd00 [ 2326.666851][T15774] ? __copy_skb_header+0x3ba/0x4f0 [ 2326.672025][T15774] ? __skb_clone+0x480/0x790 [ 2326.676669][T15774] netlink_rcv_skb+0x280/0x450 [ 2326.681488][T15774] ? rtnetlink_bind+0x80/0x80 [ 2326.686209][T15774] ? netlink_ack+0x1170/0x1170 [ 2326.691027][T15774] ? netlink_deliver_tap+0x2e/0x1b0 [ 2326.696279][T15774] netlink_unicast+0x74d/0x8d0 [ 2326.701097][T15774] netlink_sendmsg+0x8ad/0xbd0 [ 2326.705914][T15774] ? netlink_getsockopt+0x550/0x550 [ 2326.711157][T15774] ? aa_sock_msg_perm+0x94/0x150 [ 2326.716142][T15774] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2326.721459][T15774] ? security_socket_sendmsg+0x7c/0xa0 [ 2326.727051][T15774] ? netlink_getsockopt+0x550/0x550 [ 2326.732299][T15774] ____sys_sendmsg+0x5be/0x970 [ 2326.737142][T15774] ? __sys_sendmsg_sock+0x30/0x30 [ 2326.742212][T15774] ? __import_iovec+0x315/0x500 [ 2326.747113][T15774] ? import_iovec+0x6f/0xa0 [ 2326.751652][T15774] ___sys_sendmsg+0x2a2/0x360 [ 2326.756389][T15774] ? __sys_sendmsg+0x290/0x290 [ 2326.761219][T15774] ? __lock_acquire+0x7d10/0x7d10 [ 2326.766315][T15774] __se_sys_sendmsg+0x1bb/0x2a0 [ 2326.771293][T15774] ? __x64_sys_sendmsg+0x80/0x80 [ 2326.776278][T15774] ? lockdep_hardirqs_on+0x94/0x140 [ 2326.781561][T15774] do_syscall_64+0x4c/0xa0 [ 2326.786033][T15774] ? clear_bhb_loop+0x60/0xb0 [ 2326.790746][T15774] ? clear_bhb_loop+0x60/0xb0 [ 2326.795556][T15774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2326.801491][T15774] RIP: 0033:0x7f6d71b9bf79 [ 2326.805955][T15774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2326.825629][T15774] RSP: 002b:00007f6d72ab8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2326.834090][T15774] RAX: ffffffffffffffda RBX: 00007f6d71e15fa0 RCX: 00007f6d71b9bf79 [ 2326.842109][T15774] RDX: 0000000000004044 RSI: 00002000000001c0 RDI: 000000000000000a [ 2326.850117][T15774] RBP: 00007f6d72ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 2326.858121][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.866132][T15774] R13: 00007f6d71e16038 R14: 00007f6d71e15fa0 R15: 00007ffce6ba3318 [ 2326.874196][T15774] [ 2327.877349][T15820] netlink: 'syz.0.11711': attribute type 27 has an invalid length. [ 2327.952729][T15820] FAULT_INJECTION: forcing a failure. [ 2327.952729][T15820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2328.034332][T15820] CPU: 1 PID: 15820 Comm: syz.0.11711 Not tainted syzkaller #0 [ 2328.042016][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2328.052155][T15820] Call Trace: [ 2328.055506][T15820] [ 2328.058505][T15820] dump_stack_lvl+0x188/0x24e [ 2328.063334][T15820] ? show_regs_print_info+0x12/0x12 [ 2328.068638][T15820] ? load_image+0x400/0x400 [ 2328.073240][T15820] ? __lock_acquire+0x7d10/0x7d10 [ 2328.078459][T15820] ? snprintf+0xe5/0x140 [ 2328.082804][T15820] should_fail_ex+0x399/0x4d0 [ 2328.087592][T15820] _copy_to_user+0x2c/0x130 [ 2328.092202][T15820] simple_read_from_buffer+0xe3/0x150 [ 2328.097683][T15820] proc_fail_nth_read+0x1a6/0x220 [ 2328.102802][T15820] ? proc_fault_inject_write+0x310/0x310 [ 2328.108536][T15820] ? fsnotify_perm+0x248/0x550 [ 2328.113390][T15820] ? proc_fault_inject_write+0x310/0x310 [ 2328.119132][T15820] vfs_read+0x2de/0xa00 [ 2328.123395][T15820] ? kernel_read+0x1e0/0x1e0 [ 2328.128068][T15820] ? __fget_files+0x28/0x4b0 [ 2328.132717][T15820] ? __fget_files+0x28/0x4b0 [ 2328.137896][T15820] ? __fget_files+0x43d/0x4b0 [ 2328.142658][T15820] ? __fdget_pos+0x2ae/0x360 [ 2328.147375][T15820] ? ksys_read+0x71/0x250 [ 2328.151782][T15820] ksys_read+0x14c/0x250 [ 2328.156105][T15820] ? vfs_write+0xa30/0xa30 [ 2328.160595][T15820] ? lockdep_hardirqs_on+0x94/0x140 [ 2328.165860][T15820] do_syscall_64+0x4c/0xa0 [ 2328.170334][T15820] ? clear_bhb_loop+0x60/0xb0 [ 2328.175150][T15820] ? clear_bhb_loop+0x60/0xb0 [ 2328.179887][T15820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2328.185843][T15820] RIP: 0033:0x7f180395c84e [ 2328.190317][T15820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2328.210066][T15820] RSP: 002b:00007f180490dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2328.218535][T15820] RAX: ffffffffffffffda RBX: 00007f180490e6c0 RCX: 00007f180395c84e [ 2328.226561][T15820] RDX: 000000000000000f RSI: 00007f180490e0a0 RDI: 000000000000000b [ 2328.234595][T15820] RBP: 00007f180490e090 R08: 0000000000000000 R09: 0000000000000000 [ 2328.242616][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2328.250639][T15820] R13: 00007f1803c16038 R14: 00007f1803c15fa0 R15: 00007fffc998ebb8 [ 2328.258708][T15820] [ 2331.633247][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2331.642883][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2331.652020][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2331.659921][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2331.667797][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2331.676194][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2331.957951][T15850] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.11719'. [ 2332.004558][T15847] netlink: 'syz.4.11718': attribute type 27 has an invalid length. [ 2332.068037][T15846] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.11717'. [ 2332.391414][T15858] netlink: 'syz.2.11721': attribute type 2 has an invalid length. [ 2332.401738][T15858] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11721'. [ 2332.469526][T15839] chnl_net:caif_netlink_parms(): no params data found [ 2332.484871][T15856] syz.1.11720[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2332.486273][T15856] syz.1.11720[15856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2332.647144][T15839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.666171][T15839] bridge0: port 1(bridge_slave_0) entered disabled state [ 2332.674881][T15839] device bridge_slave_0 entered promiscuous mode [ 2332.684518][T15839] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.691766][T15839] bridge0: port 2(bridge_slave_1) entered disabled state [ 2332.700586][T15839] device bridge_slave_1 entered promiscuous mode [ 2332.727161][T15839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2332.763807][T15866] netlink: 'syz.4.11722': attribute type 3 has an invalid length. [ 2332.792669][T15839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2332.801991][T15866] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11722'. [ 2332.850195][T15839] team0: Port device team_slave_0 added [ 2332.889080][T15839] team0: Port device team_slave_1 added [ 2333.221870][T15839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2333.228917][T15839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2333.310804][T15839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2333.349815][T15839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2333.367998][T15839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2333.420421][T15839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2333.557175][ T9258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.752401][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 2333.829039][ T9258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2333.847332][T15839] device hsr_slave_0 entered promiscuous mode [ 2333.854730][T15839] device hsr_slave_1 entered promiscuous mode [ 2333.881818][T15839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2333.889655][T15839] Cannot create hsr debugfs directory [ 2334.026444][ T9258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2334.234474][ T9258] bond0: (slave netdevsim0): Releasing backup interface [ 2334.243780][ T9258] device netdevsim0 left promiscuous mode [ 2334.280769][ T9258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.360260][T15909] device syzkaller0 entered promiscuous mode [ 2335.500060][ T9258] device 0 left promiscuous mode [ 2335.821901][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 2337.909872][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 2339.981976][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 2339.990276][T15954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11740'. [ 2340.102250][T15960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2340.125918][T15960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2340.172644][T15960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2340.197504][T15960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2340.526206][T15968] netlink: 'syz.1.11746': attribute type 1 has an invalid length. [ 2340.560902][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11746'. [ 2341.657084][T15979] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2341.748758][T15839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2341.772073][T15839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2341.793454][T15839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2341.876091][T15839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2342.810428][T15839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2343.487862][ T9258] bond0: (slave wlan1): Releasing backup interface [ 2343.525897][ T9258] device wlan1 left promiscuous mode [ 2343.689374][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2343.715542][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2343.766133][T15839] 8021q: adding VLAN 0 to HW filter on device team0 [ 2343.937808][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2343.990829][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2344.090525][T22333] bridge0: port 1(bridge_slave_0) entered blocking state [ 2344.097889][T22333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2344.493100][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2344.521449][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2344.562785][T22333] bridge0: port 2(bridge_slave_1) entered blocking state [ 2344.570030][T22333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2344.612553][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2344.833570][T22333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2344.930370][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.937049][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.516943][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2345.706137][ T9258] device hsr_slave_0 left promiscuous mode [ 2345.742859][ T9258] device hsr_slave_1 left promiscuous mode [ 2345.782690][ T9258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2345.808570][ T9258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2345.842438][ T9258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2345.860679][ T9258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2345.926956][ T9258] device veth1_macvtap left promiscuous mode [ 2345.942328][ T9258] device veth0_macvtap left promiscuous mode [ 2348.055697][ T9258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2348.064986][ T9258] device bond_slave_1 left promiscuous mode [ 2348.324659][ T9258] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2348.333445][ T9258] device batadv0 left promiscuous mode [ 2348.407973][ T9258] bond0 (unregistering): Released all slaves [ 2348.465960][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2348.475742][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2348.485495][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2348.495067][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2348.504752][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2348.514446][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2348.526547][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2348.590159][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2348.617772][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2348.657599][T15839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2349.242003][T16055] netlink: 'syz.4.11764': attribute type 2 has an invalid length. [ 2349.250115][T16055] netlink: 'syz.4.11764': attribute type 8 has an invalid length. [ 2349.305372][T16055] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11764'. [ 2349.358349][T16053] device hsr0 entered promiscuous mode [ 2349.755513][T22337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2349.767659][T22337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2349.789446][T15839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2349.866530][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2349.884415][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2349.965778][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2349.978914][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2349.993210][T15839] device veth0_vlan entered promiscuous mode [ 2350.013454][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2350.025451][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2350.040146][T15839] device veth1_vlan entered promiscuous mode [ 2350.061856][T16076] netlink: 'syz.1.11767': attribute type 13 has an invalid length. [ 2350.105059][T16076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11767'. [ 2350.136084][T16076] erspan0: refused to change device tx_queue_len [ 2350.166529][T16076] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2350.213622][T16080] netlink: 'syz.4.11768': attribute type 10 has an invalid length. [ 2350.351187][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2350.373816][T22304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2350.397288][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2350.435327][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2350.462722][T15839] device veth0_macvtap entered promiscuous mode [ 2350.481556][T15839] device veth1_macvtap entered promiscuous mode [ 2350.557306][T15839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2350.570917][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2350.583816][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2350.621447][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2350.668799][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2350.719041][T15839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2350.778843][T15839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2350.805027][T15839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2350.825927][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2350.843557][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2350.905512][T15839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.915621][T15839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.934583][T16104] netlink: 'syz.2.11774': attribute type 1 has an invalid length. [ 2350.938682][T15839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2350.955261][T15839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2351.218005][T16107] device syzkaller0 entered promiscuous mode [ 2351.308731][T22336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2351.351905][T22336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2351.518610][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2354.706129][T22327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2354.736765][T22327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2354.754672][T22336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2354.894361][T16141] netlink: 'syz.1.11785': attribute type 19 has an invalid length. [ 2354.905379][T16141] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.11785'. [ 2355.080331][T16144] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2355.452043][T16165] netlink: 'syz.0.11792': attribute type 39 has an invalid length. [ 2356.402709][T16194] netlink: 'syz.4.11799': attribute type 10 has an invalid length. [ 2356.455372][T16194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11799'. [ 2356.545995][T16194] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2356.583984][T16200] netlink: 'syz.2.11801': attribute type 2 has an invalid length. [ 2356.616171][T16200] netlink: 'syz.2.11801': attribute type 8 has an invalid length. [ 2356.631378][T16200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11801'. [ 2356.905593][T16217] netlink: 'syz.0.11817': attribute type 19 has an invalid length. [ 2356.917143][T16217] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11817'. [ 2357.101505][T16220] netlink: 'syz.1.11808': attribute type 39 has an invalid length. [ 2357.262938][T16225] netlink: 'syz.2.11809': attribute type 10 has an invalid length. [ 2357.311596][T16224] netlink: 'syz.0.11810': attribute type 2 has an invalid length. [ 2357.355437][T16230] netlink: 'syz.2.11809': attribute type 16 has an invalid length. [ 2357.436223][T16230] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11809'. [ 2357.505586][T16225] bond0: (slave netdevsim0): Releasing backup interface [ 2357.574167][T16224] device .d entered promiscuous mode [ 2357.889995][T16228] device syzkaller0 entered promiscuous mode [ 2357.898908][T16239] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11812'. [ 2357.937176][T16241] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.11812'. [ 2358.942220][T22327] wlan1: Trigger new scan to find an IBSS to join [ 2362.861987][T32489] wlan1: Creating new IBSS network, BSSID 6e:dc:f5:02:21:ba [ 2363.336731][T16266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11818'. [ 2363.347137][T16278] netlink: 'syz.1.11821': attribute type 2 has an invalid length. [ 2363.358129][T16278] netlink: 'syz.1.11821': attribute type 8 has an invalid length. [ 2363.367584][T16278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11821'. [ 2363.391313][T16287] Q±6ã×\b‹¡Y­4: renamed from lo [ 2363.740071][T16301] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.11828'. [ 2363.770469][T16301] openvswitch: netlink: Message has 48126 unknown bytes. [ 2363.969874][T16316] netlink: 'syz.4.11833': attribute type 6 has an invalid length. [ 2364.112492][T16315] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.11831'. [ 2364.190878][T16322] netlink: 'syz.2.11835': attribute type 3 has an invalid length. [ 2364.234598][T16315] openvswitch: netlink: Key type 386 is out of range max 32 [ 2364.266045][T16322] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11835'. [ 2364.379543][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11835'. [ 2364.413607][T16322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2365.072061][T16349] netlink: 'syz.2.11839': attribute type 4 has an invalid length. [ 2365.122102][T16349] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11839'. [ 2365.156615][T16347] netlink: 111 bytes leftover after parsing attributes in process `syz.0.11842'. [ 2365.922658][T16367] netlink: 'syz.4.11847': attribute type 10 has an invalid length. [ 2365.946114][T16367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11847'. [ 2366.354938][T16367] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2366.744334][T16399] netlink: 'syz.4.11854': attribute type 10 has an invalid length. [ 2366.789372][T16399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11854'. [ 2366.840690][T16399] device caif0 entered promiscuous mode [ 2366.865410][T16399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2367.232187][T16417] device syzkaller0 entered promiscuous mode [ 2367.269972][T16414] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2367.313092][T16423] device syzkaller0 entered promiscuous mode [ 2371.110035][T16364] netlink: 'syz.3.11830': attribute type 5 has an invalid length. [ 2371.295144][T16470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11872'. [ 2371.394309][T16471] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2371.431576][T16467] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2372.217234][T16482] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11876'. [ 2372.365014][T16488] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11878'. [ 2372.579921][T16480] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.11875'. [ 2373.297320][T16512] netlink: 30699 bytes leftover after parsing attributes in process `syz.0.11882'. [ 2373.640244][T16529] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2373.715040][T16531] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2373.761365][T16536] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11889'. [ 2374.499260][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11892'. [ 2374.923267][T16546] device syzkaller0 entered promiscuous mode [ 2375.028921][T16558] netlink: 'syz.4.11895': attribute type 1 has an invalid length. [ 2375.045233][T16558] netlink: 'syz.4.11895': attribute type 3 has an invalid length. [ 2375.062216][T16558] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11895'. [ 2375.742731][T16578] netlink: 'syz.2.11899': attribute type 29 has an invalid length. [ 2375.911994][T32489] wlan1: Trigger new scan to find an IBSS to join [ 2376.608886][T16595] netlink: 'syz.4.11903': attribute type 3 has an invalid length. [ 2376.628341][T16595] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11903'. [ 2378.401786][T16575] netlink: 'syz.2.11899': attribute type 6 has an invalid length. [ 2378.435020][T16578] netlink: 'syz.2.11899': attribute type 29 has an invalid length. [ 2378.525192][T16593] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2378.581941][T16600] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11904'. [ 2378.798840][T16609] netlink: 'syz.2.11907': attribute type 10 has an invalid length. [ 2378.945735][T22333] wlan1: Trigger new scan to find an IBSS to join [ 2379.951901][T16645] netlink: 'syz.1.11916': attribute type 3 has an invalid length. [ 2380.071835][T16645] netlink: 'syz.1.11916': attribute type 4 has an invalid length. [ 2380.222874][T16645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11916'. [ 2380.573762][T16624] device syzkaller0 entered promiscuous mode [ 2380.796677][T16664] netlink: 'syz.4.11921': attribute type 4 has an invalid length. [ 2380.814979][T16664] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11921'. [ 2381.908981][T32489] wlan1: Trigger new scan to find an IBSS to join [ 2382.834966][T22333] wlan1: Creating new IBSS network, BSSID ba:49:ba:39:06:84 [ 2384.335757][T16672] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.11922'. [ 2384.403405][T16675] netlink: 'syz.1.11923': attribute type 10 has an invalid length. [ 2384.638578][T16680] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2384.745575][T16678] netlink: 'syz.0.11924': attribute type 3 has an invalid length. [ 2384.756793][T16678] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11924'. [ 2384.989793][T16695] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11929'. [ 2385.007400][T16694] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11929'. [ 2385.888223][T16722] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.11938'. [ 2385.952204][T16727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11938'. [ 2385.972403][T16727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11938'. [ 2386.007423][T16722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11938'. [ 2386.719931][T16736] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2386.904468][T16748] netlink: 'syz.1.11942': attribute type 3 has an invalid length. [ 2386.934100][T16748] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.11942'. [ 2386.985088][ T4281] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 2387.643523][T16776] À: port 1(vlan0) entered blocking state [ 2387.678855][T16776] À: port 1(vlan0) entered disabled state [ 2387.716223][T16776] device vlan0 entered promiscuous mode [ 2390.156656][T16807] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11959'. [ 2391.891535][T16841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2391.899005][T16841] IPv6: NLM_F_CREATE should be set when creating new route [ 2391.906637][T16841] IPv6: NLM_F_CREATE should be set when creating new route [ 2391.914564][T16841] IPv6: NLM_F_CREATE should be set when creating new route [ 2392.032139][T16840] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2392.725976][T16855] netlink: 'syz.2.11973': attribute type 20 has an invalid length. [ 2395.118387][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2395.154024][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2395.162907][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2395.174851][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2395.183085][T21268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2395.190708][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2396.768318][T16872] chnl_net:caif_netlink_parms(): no params data found [ 2397.036584][T16894] netlink: 'syz.0.11982': attribute type 29 has an invalid length. [ 2397.198870][T16894] netlink: 'syz.0.11982': attribute type 29 has an invalid length. [ 2397.261820][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 2397.323726][T16892] netlink: 'syz.0.11982': attribute type 29 has an invalid length. [ 2397.747130][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.758372][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.780202][T16872] device bridge_slave_0 entered promiscuous mode [ 2397.875513][T16899] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2397.883018][T16899] IPv6: NLM_F_CREATE should be set when creating new route [ 2397.894663][T16899] IPv6: NLM_F_CREATE should be set when creating new route [ 2397.902070][T16899] IPv6: NLM_F_CREATE should be set when creating new route [ 2397.965693][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.993411][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 2398.013946][T16872] device bridge_slave_1 entered promiscuous mode [ 2398.168548][ T9258] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.477938][ T9258] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.651388][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2398.683742][T16912] netlink: 'syz.0.11988': attribute type 27 has an invalid length. [ 2399.115502][T16912] bond0: (slave bond_slave_0): Releasing backup interface [ 2399.333390][ T9258] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.342582][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 2399.370294][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2399.566575][ T9258] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2399.626063][T16872] team0: Port device team_slave_0 added [ 2399.646720][T16872] team0: Port device team_slave_1 added [ 2399.740767][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2399.774902][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2399.801448][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2399.863522][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2399.870551][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2399.945037][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2399.966696][T16920] netlink: 'syz.0.11990': attribute type 41 has an invalid length. [ 2400.781531][T16872] device hsr_slave_0 entered promiscuous mode [ 2400.888672][T16872] device hsr_slave_1 entered promiscuous mode [ 2400.899261][T16872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2400.920136][T16872] Cannot create hsr debugfs directory [ 2401.372794][ T9258] device 0 left promiscuous mode [ 2401.421848][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 2401.778895][ T9258] tipc: Left network mode [ 2402.391321][T16953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2402.399357][T16953] IPv6: NLM_F_CREATE should be set when creating new route [ 2402.410193][T16953] IPv6: NLM_F_CREATE should be set when creating new route [ 2402.418038][T16953] IPv6: NLM_F_CREATE should be set when creating new route [ 2402.448983][T16961] device bond_slave_1 entered promiscuous mode [ 2402.862173][ T9263] wlan1: Trigger new scan to find an IBSS to join [ 2403.313660][T16872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2403.354573][T16872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2403.395156][T16872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2403.501894][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 2404.292520][T16872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2404.372473][T17009] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.12009'. [ 2404.742712][T17019] bond0: mtu less than device minimum [ 2404.790733][T17025] À: port 1(vlan0) entered disabled state [ 2404.946844][T17031] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.12013'. [ 2404.958138][T17030] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.12013'. [ 2405.075714][ T9258] device gretap0 left promiscuous mode [ 2405.081336][ T9258] Ÿë: port 2(gretap0) entered disabled state [ 2405.520269][T16872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2405.556758][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2405.577587][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2405.621107][T16872] 8021q: adding VLAN 0 to HW filter on device team0 [ 2405.666920][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2405.681202][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2405.720624][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 2405.727869][ T9271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2405.765866][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2405.816274][T17058] mac80211_hwsim hwsim95 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2405.837007][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2405.882941][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2405.903860][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2405.911031][ T9271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2405.952503][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2406.008474][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2406.144298][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.150685][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.164610][T17072] netlink: 'syz.1.12022': attribute type 41 has an invalid length. [ 2406.181694][T17080] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.12024'. [ 2406.203057][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2406.223019][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2406.295861][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2406.327032][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2406.362813][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2406.392983][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2406.407156][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2406.429937][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2406.455061][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2406.489460][T17089] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.12025'. [ 2406.508976][T16872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2406.690366][ T9258] device veth0_to_team left promiscuous mode [ 2406.705162][ T9258] Ÿë: port 1(veth0_to_team) entered disabled state [ 2406.726761][ T9258] device hsr_slave_0 left promiscuous mode [ 2406.741571][ T9258] device hsr_slave_1 left promiscuous mode [ 2406.793184][ T9258] device veth1_macvtap left promiscuous mode [ 2407.630926][ T9258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2407.808786][T17100] delete_channel: no stack [ 2407.904868][ T9254] wlan1: Trigger new scan to find an IBSS to join [ 2407.955382][ T9258] bond0 (unregistering): Released all slaves [ 2408.244761][T17107] netlink: 'syz.1.12028': attribute type 21 has an invalid length. [ 2408.264270][T17107] IPv6: NLM_F_CREATE should be specified when creating new route [ 2408.307314][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2408.318350][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2408.342482][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2408.389339][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2408.399364][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2408.470927][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2408.489648][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2408.517581][T16872] device veth0_vlan entered promiscuous mode [ 2408.532431][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2408.541498][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2408.567589][T16872] device veth1_vlan entered promiscuous mode [ 2408.640734][T17117] tap0: tun_chr_ioctl cmd 1074025675 [ 2408.650356][T17117] tap0: persist enabled [ 2408.660521][T17117] tap0: tun_chr_ioctl cmd 1074025675 [ 2408.666459][T17117] tap0: persist disabled [ 2408.711455][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2408.725166][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2408.736119][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2408.748335][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2408.765912][T16872] device veth0_macvtap entered promiscuous mode [ 2408.790227][T16872] device veth1_macvtap entered promiscuous mode [ 2408.874259][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2408.886664][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2408.902218][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2408.927926][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2408.956371][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2408.967627][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2408.981329][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2409.001553][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.028024][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.055528][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2409.080591][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2409.139135][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2409.157156][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2409.185048][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2409.225590][T16872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.267768][T16872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.286321][T16872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.296793][T16872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2409.665934][T22337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2409.685923][T22337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2409.721847][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2409.784163][ T9277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2409.828575][ T9277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2409.872400][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2410.457088][T17151] netlink: 'syz.4.12039': attribute type 10 has an invalid length. [ 2410.518952][T17151] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12039'. [ 2410.960702][ T9277] wlan1: Trigger new scan to find an IBSS to join [ 2411.549887][T17172] IPv6: NLM_F_CREATE should be specified when creating new route [ 2412.016325][T17179] device wg2 entered promiscuous mode [ 2412.755228][T17193] Â: renamed from pim6reg1 [ 2413.273232][T17201] netlink: 'syz.2.12052': attribute type 39 has an invalid length. [ 2413.318771][T17207] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.12054'. [ 2413.814316][T17201] device hsr_slave_1 left promiscuous mode [ 2413.912554][ T9263] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2414.346155][T17224] netlink: 'syz.4.12058': attribute type 49 has an invalid length. [ 2414.627537][T17227] device syzkaller0 entered promiscuous mode [ 2414.838616][T17236] netlink: 'syz.1.12064': attribute type 19 has an invalid length. [ 2414.848317][T17236] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12064'. [ 2417.853082][T17249] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2417.861991][T17249] pimreg1: linktype set to 769 [ 2418.046946][T17266] netlink: 'syz.4.12071': attribute type 21 has an invalid length. [ 2418.059756][T17266] IPv6: NLM_F_CREATE should be specified when creating new route [ 2418.069909][T17266] IPv6: Can't replace route, no match found [ 2418.332934][T17277] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.12073'. [ 2418.628664][T17282] netlink: 'syz.1.12074': attribute type 10 has an invalid length. [ 2418.637607][T17282] device vlan0 left promiscuous mode [ 2418.644857][T17282] À: port 1(vlan0) entered disabled state [ 2418.796025][T17286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12076'. [ 2418.837754][T17286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12076'. [ 2418.937704][T17289] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12077'. [ 2419.349707][T17297] netlink: 'syz.1.12079': attribute type 39 has an invalid length. [ 2419.418744][T17296] cgroup: fork rejected by pids controller in /syz2 [ 2419.815916][T17297] device hsr_slave_1 left promiscuous mode [ 2421.016136][ T9263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.928816][ T9263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2422.998746][ T9263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2425.455604][ T9263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2426.240455][T17349] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.12093'. [ 2426.273388][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2426.283693][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2426.292419][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2426.302802][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2426.311518][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2426.319050][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2427.666661][T17350] chnl_net:caif_netlink_parms(): no params data found [ 2428.006589][T17350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2428.024328][T17350] bridge0: port 1(bridge_slave_0) entered disabled state [ 2428.047017][T17350] device bridge_slave_0 entered promiscuous mode [ 2428.376976][T17350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2428.384416][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 2428.411816][T17350] bridge0: port 2(bridge_slave_1) entered disabled state [ 2428.420277][T17350] device bridge_slave_1 entered promiscuous mode [ 2428.705565][T17398] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.12102'. [ 2428.784355][T17399] netlink: 'syz.4.12102': attribute type 19 has an invalid length. [ 2429.032747][T17396] cgroup: fork rejected by pids controller in /syz0 [ 2430.006279][T17350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2430.461970][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 2430.947229][ T9263] device hsr_slave_0 left promiscuous mode [ 2430.970860][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2430.989451][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2431.009451][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2431.050829][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2431.060955][ T9263] device bridge_slave_1 left promiscuous mode [ 2431.067705][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 2431.087876][ T9263] device bridge_slave_0 left promiscuous mode [ 2431.094727][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 2431.142673][ T9263] device veth1_macvtap left promiscuous mode [ 2431.148809][ T9263] device veth0_macvtap left promiscuous mode [ 2431.155597][ T9263] device veth1_vlan left promiscuous mode [ 2431.161535][ T9263] device veth0_vlan left promiscuous mode [ 2432.470276][ T9263] team0 (unregistering): Port device team_slave_1 removed [ 2432.519034][ T9263] team0 (unregistering): Port device team_slave_0 removed [ 2432.551853][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 2432.579440][ T9263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2432.628762][ T9263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2432.986846][ T9263] bond0 (unregistering): Released all slaves [ 2433.088761][T17350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2433.148476][T17443] device syzkaller0 left promiscuous mode [ 2433.227562][T17350] team0: Port device team_slave_0 added [ 2433.248604][T17350] team0: Port device team_slave_1 added [ 2433.374224][T17350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2433.399479][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2433.434596][T17350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2433.482139][T17350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2433.489249][T17350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2433.520712][T17350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2433.650359][T17350] device hsr_slave_0 entered promiscuous mode [ 2433.668214][T17350] device hsr_slave_1 entered promiscuous mode [ 2433.825939][T17455] device syzkaller0 entered promiscuous mode [ 2434.298333][ T9263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.363990][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2434.375010][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2434.389826][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2434.413241][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2434.421553][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2434.431298][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2434.621738][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 2434.791020][ T9263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.956921][ T9263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.371980][ T9263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2435.554785][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12116'. [ 2435.593430][T17468] netlink: 'syz.1.12114': attribute type 2 has an invalid length. [ 2435.622071][T17468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12114'. [ 2435.807363][T17350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2435.864856][T17350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2435.930271][T17350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2435.998186][T17350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2436.029602][ T9263] device .d left promiscuous mode [ 2436.146677][T17470] chnl_net:caif_netlink_parms(): no params data found [ 2436.469761][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 2436.581989][T17517] netlink: 'syz.3.12119': attribute type 21 has an invalid length. [ 2436.590075][T17517] IPv6: NLM_F_CREATE should be specified when creating new route [ 2436.602031][T17517] IPv6: Can't replace route, no match found [ 2436.608132][T17518] netlink: 'syz.3.12119': attribute type 21 has an invalid length. [ 2436.645265][T17518] IPv6: Can't replace route, no match found [ 2436.731462][T17536] netlink: 'syz.4.12122': attribute type 3 has an invalid length. [ 2436.769270][T17536] netlink: 'syz.4.12122': attribute type 1 has an invalid length. [ 2436.932955][T17470] bridge0: port 1(bridge_slave_0) entered blocking state [ 2436.940225][T17470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2436.980109][T17470] device bridge_slave_0 entered promiscuous mode [ 2437.113555][T17470] bridge0: port 2(bridge_slave_1) entered blocking state [ 2437.120748][T17470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2437.200151][T17470] device bridge_slave_1 entered promiscuous mode [ 2437.224605][T17543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12123'. [ 2437.237699][T17543] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2437.552408][T17470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2437.592397][T17470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2437.818333][T17470] team0: Port device team_slave_0 added [ 2437.889909][T17350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2437.986939][T17470] team0: Port device team_slave_1 added [ 2438.134867][T22337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2438.177674][T22337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2438.250305][T17350] 8021q: adding VLAN 0 to HW filter on device team0 [ 2438.263292][T17470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2438.274009][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.331924][T17470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2438.437697][T17557] device syzkaller0 entered promiscuous mode [ 2438.542009][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 2438.588953][T17470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2438.598345][T17470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2438.681760][T17470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2438.719065][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2438.731348][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2438.749712][T32481] bridge0: port 1(bridge_slave_0) entered blocking state [ 2438.757043][T32481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2438.780062][T32481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2440.622879][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 2441.702286][T17582] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2441.736705][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2441.752551][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2441.771554][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2441.778787][ T9271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2441.839962][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2441.932487][ T9263] device hsr_slave_0 left promiscuous mode [ 2442.002377][ T9263] device hsr_slave_1 left promiscuous mode [ 2442.069960][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2442.081974][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2442.121379][ T9263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2442.141213][ T9263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2442.177312][ T9263] device bridge_slave_1 left promiscuous mode [ 2442.192610][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.230597][ T9263] device bridge_slave_0 left promiscuous mode [ 2442.253301][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 2442.390247][ T9263] device veth1_macvtap left promiscuous mode [ 2442.407374][ T9263] device veth0_macvtap left promiscuous mode [ 2442.422876][ T9263] device veth1_vlan left promiscuous mode [ 2442.433861][ T9263] device veth0_vlan left promiscuous mode [ 2442.707904][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 2443.976026][T17607] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12133'. [ 2444.584348][ T9263] team0 (unregistering): Port device team_slave_1 removed [ 2444.650884][ T9263] team0 (unregistering): Port device team_slave_0 removed [ 2444.720022][ T9263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2445.148172][ T9263] bond0 (unregistering): Released all slaves [ 2445.248838][T17470] device hsr_slave_0 entered promiscuous mode [ 2445.259239][T17470] device hsr_slave_1 entered promiscuous mode [ 2445.267663][T17470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2445.275440][T17470] Cannot create hsr debugfs directory [ 2445.293941][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2445.303111][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2445.314514][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2445.323472][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2445.333805][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2445.342649][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2445.351157][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2445.361038][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2445.369838][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2445.383577][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2445.393934][T17607] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12133'. [ 2445.429393][T17350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2446.243680][T17650] netlink: 'syz.4.12139': attribute type 2 has an invalid length. [ 2446.274536][T17650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12139'. [ 2446.341401][T17656] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.12140'. [ 2446.440373][T17350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2446.603116][T17350] device veth0_vlan entered promiscuous mode [ 2446.617154][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2446.636438][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2446.644633][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2446.657981][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2446.668256][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2446.681943][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2446.774249][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2446.789397][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2446.896441][T17656] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2446.913570][T17656] CPU: 1 PID: 17656 Comm: syz.1.12140 Not tainted syzkaller #0 [ 2446.921215][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2446.931354][T17656] Call Trace: [ 2446.934697][T17656] [ 2446.937719][T17656] dump_stack_lvl+0x188/0x24e [ 2446.942485][T17656] ? show_regs_print_info+0x12/0x12 [ 2446.947770][T17656] ? load_image+0x400/0x400 [ 2446.952396][T17656] sysfs_warn_dup+0x8a/0xa0 [ 2446.956986][T17656] sysfs_do_create_link_sd+0xc0/0x110 [ 2446.962442][T17656] device_add+0x7ed/0xfb0 [ 2446.966875][T17656] wiphy_register+0x1d9f/0x2ac0 [ 2446.971807][T17656] ? wake_up_q+0x8c/0xc0 [ 2446.976154][T17656] ? cfg80211_event_work+0x40/0x40 [ 2446.981341][T17656] ? minstrel_ht_alloc+0x894/0xa20 [ 2446.986550][T17656] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2446.992704][T17656] ieee80211_register_hw+0x2d00/0x39f0 [ 2446.998246][T17656] ? lockdep_hardirqs_on+0x94/0x140 [ 2447.003554][T17656] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2447.009189][T17656] ? ieee80211_register_hw+0xeb1/0x39f0 [ 2447.014846][T17656] ? ieee80211_tasklet_handler+0x20/0x20 [ 2447.020590][T17656] ? memset+0x1e/0x40 [ 2447.024646][T17656] ? __hrtimer_init+0x186/0x270 [ 2447.029570][T17656] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2447.035407][T17656] hwsim_new_radio_nl+0xafa/0xce0 [ 2447.040537][T17656] genl_family_rcv_msg_doit+0x22a/0x330 [ 2447.046160][T17656] ? end_current_label_crit_section+0x170/0x170 [ 2447.052500][T17656] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2447.058504][T17656] ? bpf_lsm_capable+0x5/0x10 [ 2447.063248][T17656] ? security_capable+0x85/0xb0 [ 2447.068196][T17656] genl_rcv_msg+0x604/0x790 [ 2447.072827][T17656] ? genl_bind+0x360/0x360 [ 2447.077322][T17656] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2447.083776][T17656] netlink_rcv_skb+0x1fb/0x450 [ 2447.088622][T17656] ? genl_bind+0x360/0x360 [ 2447.093124][T17656] ? netlink_ack+0x1170/0x1170 [ 2447.098035][T17656] ? down_read+0x1a8/0x2d0 [ 2447.102541][T17656] genl_rcv+0x24/0x40 [ 2447.106596][T17656] netlink_unicast+0x74d/0x8d0 [ 2447.111462][T17656] netlink_sendmsg+0x8ad/0xbd0 [ 2447.116328][T17656] ? netlink_getsockopt+0x550/0x550 [ 2447.121609][T17656] ? aa_sock_msg_perm+0x94/0x150 [ 2447.126627][T17656] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2447.131984][T17656] ? security_socket_sendmsg+0x7c/0xa0 [ 2447.137539][T17656] ? netlink_getsockopt+0x550/0x550 [ 2447.142814][T17656] ____sys_sendmsg+0x5be/0x970 [ 2447.147678][T17656] ? __sys_sendmsg_sock+0x30/0x30 [ 2447.152773][T17656] ? __import_iovec+0x315/0x500 [ 2447.157705][T17656] ? import_iovec+0x6f/0xa0 [ 2447.162286][T17656] ___sys_sendmsg+0x2a2/0x360 [ 2447.167043][T17656] ? try_to_wake_up+0x6ae/0x1080 [ 2447.172069][T17656] ? __sys_sendmsg+0x290/0x290 [ 2447.177017][T17656] __se_sys_sendmsg+0x1bb/0x2a0 [ 2447.181947][T17656] ? __x64_sys_sendmsg+0x80/0x80 [ 2447.187010][T17656] ? lockdep_hardirqs_on+0x94/0x140 [ 2447.192285][T17656] do_syscall_64+0x4c/0xa0 [ 2447.196773][T17656] ? clear_bhb_loop+0x60/0xb0 [ 2447.201543][T17656] ? clear_bhb_loop+0x60/0xb0 [ 2447.206309][T17656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2447.212274][T17656] RIP: 0033:0x7fa1e1b9bf79 [ 2447.216934][T17656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2447.236612][T17656] RSP: 002b:00007fa1e2a69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2447.245101][T17656] RAX: ffffffffffffffda RBX: 00007fa1e1e15fa0 RCX: 00007fa1e1b9bf79 [ 2447.253137][T17656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2447.261178][T17656] RBP: 00007fa1e1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2447.269234][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2447.277295][T17656] R13: 00007fa1e1e16038 R14: 00007fa1e1e15fa0 R15: 00007fff3009f318 [ 2447.285380][T17656] [ 2447.339712][T17350] device veth1_vlan entered promiscuous mode [ 2447.372609][T17673] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2447.405515][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2447.487891][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2447.499200][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2447.511510][T17350] device veth0_macvtap entered promiscuous mode [ 2447.563067][T17350] device veth1_macvtap entered promiscuous mode [ 2447.611449][T17350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2447.624164][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2447.635353][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2447.647428][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2447.658401][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2447.684218][T17350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2447.703324][T17350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2447.719330][T17350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2447.720071][T17682] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.12144'. [ 2447.733014][T17470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2447.752800][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2447.769400][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2447.782958][T17350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.808120][T17350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.828008][T17350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.874381][T17350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2447.894613][T17470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2448.070819][T17470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2448.166645][T17470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2449.044898][ T9277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.078482][ T9277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.193293][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2449.261204][ T9254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.283315][ T9254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.325707][T17470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2449.348102][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2449.472863][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2449.500828][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2449.565859][T17470] 8021q: adding VLAN 0 to HW filter on device team0 [ 2449.635237][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2449.647372][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2449.662763][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.670043][ T9254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.729787][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2449.747774][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2449.773056][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2449.788837][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.796113][ T9254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.845195][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2449.886359][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2449.918614][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2449.951027][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2449.983411][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2450.005640][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2450.019037][T17713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12148'. [ 2450.041904][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2450.053260][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2450.062223][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2450.076630][T17470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2450.090851][T17470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2450.104495][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2450.119169][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2450.128197][T17713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12148'. [ 2450.504417][T17730] netlink: 'syz.1.12151': attribute type 2 has an invalid length. [ 2450.514778][T17730] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.12151'. [ 2450.908882][T17748] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2451.007724][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2451.027832][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2451.073672][T17470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2451.131153][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2451.156792][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2451.202849][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2451.219978][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2451.245526][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2451.257451][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2451.296951][T17470] device veth0_vlan entered promiscuous mode [ 2451.399333][T17470] device veth1_vlan entered promiscuous mode [ 2451.482294][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2451.491581][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2451.505115][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2451.519397][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2451.533436][T17470] device veth0_macvtap entered promiscuous mode [ 2451.550745][T17470] device veth1_macvtap entered promiscuous mode [ 2451.578434][T17778] netlink: 'syz.4.12161': attribute type 29 has an invalid length. [ 2451.587683][T17778] netlink: 'syz.4.12161': attribute type 3 has an invalid length. [ 2451.599210][T17778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12161'. [ 2451.600066][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2451.629837][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.642130][T17470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2451.650291][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2451.660597][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2451.673832][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2451.687206][ T9277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2451.700875][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.731738][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.747860][T17470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2451.767338][T17470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2451.779265][T17470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2451.789568][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2451.812364][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2451.848200][T17470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.859259][T17470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.892530][T17470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.902485][T17470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2451.976958][T17786] netlink: 'syz.1.12163': attribute type 21 has an invalid length. [ 2451.991954][T17786] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12163'. [ 2452.117640][ T9277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2452.146181][ T9277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.170264][ T9258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2452.242190][ T9254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2452.250088][ T9254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2452.276843][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2452.536177][T17800] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.12110'. [ 2452.605641][T17800] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.12110'. [ 2452.774064][T17800] device sit0 entered promiscuous mode [ 2453.581495][T17817] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2453.864954][T17816] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2453.877896][T17816] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2455.124990][T17855] device pim6reg1 entered promiscuous mode [ 2455.186741][T17855] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.12181'. [ 2455.338016][T17864] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.12184'. [ 2455.431586][T17864] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.12184'. [ 2455.915632][T17867] device sit0 left promiscuous mode [ 2456.423130][T17882] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.12187'. [ 2456.441950][T17882] netlink: zone id is out of range [ 2456.447580][T17882] netlink: zone id is out of range [ 2456.463446][T17882] netlink: zone id is out of range [ 2456.470349][T17882] netlink: zone id is out of range [ 2456.515619][T17882] netlink: zone id is out of range [ 2456.531474][T17882] netlink: zone id is out of range [ 2456.537353][T17882] netlink: zone id is out of range [ 2456.551992][T17882] netlink: zone id is out of range [ 2456.581823][T17882] netlink: zone id is out of range [ 2456.587061][T17882] netlink: zone id is out of range [ 2456.917966][T17864] device sit0 entered promiscuous mode [ 2458.184556][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12187'. [ 2458.318229][T17893] tipc: Started in network mode [ 2458.330082][T17893] tipc: Node identity 9215a268, cluster identity 4711 [ 2458.347922][T17893] tipc: Node number set to 2450891368 [ 2458.715214][T17906] bridge0: port 3(team0) entered blocking state [ 2458.730665][T17906] bridge0: port 3(team0) entered disabled state [ 2458.775841][T17906] device team0 entered promiscuous mode [ 2458.793344][T17906] device team_slave_0 entered promiscuous mode [ 2458.810598][T17906] device team_slave_1 entered promiscuous mode [ 2458.840625][T17906] bridge0: port 3(team0) entered blocking state [ 2458.848117][T17906] bridge0: port 3(team0) entered forwarding state [ 2460.480049][T17948] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12204'. [ 2461.431301][T17963] netlink: 'syz.4.12207': attribute type 33 has an invalid length. [ 2461.456824][T17963] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12207'. [ 2463.580034][T17940] netlink: 'syz.3.12201': attribute type 21 has an invalid length. [ 2464.199739][T17984] netlink: 'syz.2.12213': attribute type 10 has an invalid length. [ 2464.249090][T17984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12213'. [ 2464.281440][T17992] netlink: 987 bytes leftover after parsing attributes in process `syz.0.12226'. [ 2464.332938][T17984] device ipvlan1 entered promiscuous mode [ 2464.670478][T17984] bridge0: port 4(ipvlan1) entered blocking state [ 2464.680664][T17984] bridge0: port 4(ipvlan1) entered disabled state [ 2464.747282][T17984] net_ratelimit: 19 callbacks suppressed [ 2464.747328][T17984] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2464.776795][T17990] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12213'. [ 2464.806551][T17999] netlink: 'syz.2.12213': attribute type 10 has an invalid length. [ 2464.851592][T17999] device dummy0 entered promiscuous mode [ 2464.888864][T17999] team0: Port device dummy0 added [ 2465.012034][T18010] netlink: 'syz.1.12219': attribute type 49 has an invalid length. [ 2465.127160][T18016] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12220'. [ 2465.232684][T18021] netlink: 'syz.4.12221': attribute type 3 has an invalid length. [ 2465.252671][T18021] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12221'. [ 2465.316398][T18026] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12224'. [ 2466.279464][T18061] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12233'. [ 2467.341450][T18083] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2467.602254][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.608675][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.413340][T18105] netlink: 'syz.2.12247': attribute type 2 has an invalid length. [ 2468.428940][T18105] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.12247'. [ 2468.942094][T18117] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.12251'. [ 2469.396193][T18124] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2469.754852][T18134] device syzkaller0 entered promiscuous mode [ 2469.783109][T18138] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12256'. [ 2471.948661][T18173] netlink: 'syz.1.12263': attribute type 1 has an invalid length. [ 2472.037136][T18173] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.12263'. [ 2472.314404][T18180] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2472.329916][T18185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12269'. [ 2472.367744][T18185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12269'. [ 2472.441879][T18188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12269'. [ 2472.465268][T18188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12269'. [ 2472.643757][T18190] netlink: 'syz.0.12270': attribute type 10 has an invalid length. [ 2473.448116][T18198] netlink: 'syz.1.12272': attribute type 21 has an invalid length. [ 2473.525798][T18198] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12272'. [ 2473.900791][T18212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12277'. [ 2474.694689][T18194] netlink: 'syz.3.12271': attribute type 2 has an invalid length. [ 2474.706098][T18194] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.12271'. [ 2474.884586][ T9263] wlan1: Trigger new scan to find an IBSS to join [ 2477.902202][ T9258] wlan1: Trigger new scan to find an IBSS to join [ 2478.082283][T18276] netlink: 'syz.1.12294': attribute type 39 has an invalid length. [ 2478.185921][T18274] netlink: 'syz.2.12293': attribute type 10 has an invalid length. [ 2478.587728][T18274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2478.635497][T18274] device bond0 entered promiscuous mode [ 2478.644089][T18274] device bond_slave_0 entered promiscuous mode [ 2478.659950][T18274] device bond_slave_1 entered promiscuous mode [ 2478.726271][T18274] team0: Port device bond0 added [ 2478.959695][T18268] delete_channel: no stack [ 2479.061493][T18295] netlink: 'syz.1.12301': attribute type 7 has an invalid length. [ 2479.568508][T18303] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2480.492513][T18324] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12308'. [ 2481.054432][T18334] netlink: 'syz.1.12309': attribute type 2 has an invalid length. [ 2481.072227][T18334] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.12309'. [ 2481.912210][T22337] wlan1: Trigger new scan to find an IBSS to join [ 2482.047556][T18353] netlink: 188 bytes leftover after parsing attributes in process `syz.4.12316'. [ 2482.088148][T18353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12316'. [ 2482.123467][T18351] delete_channel: no stack [ 2482.348083][T18359] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2482.401291][T18361] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2482.667117][T18369] netlink: 160 bytes leftover after parsing attributes in process `syz.4.12320'. [ 2482.723118][T18369] netlink: 'syz.4.12320': attribute type 14 has an invalid length. [ 2482.751918][T18369] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12320'. [ 2483.164391][T18376] netlink: 'syz.1.12323': attribute type 25 has an invalid length. [ 2483.225570][T18376] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.12323'. [ 2483.510871][T18372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2483.519479][T18372] IPv6: NLM_F_CREATE should be set when creating new route [ 2483.535490][T18372] IPv6: NLM_F_CREATE should be set when creating new route [ 2483.551718][T18372] IPv6: NLM_F_CREATE should be set when creating new route [ 2483.642027][T18373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2484.895478][T18400] netlink: 'syz.4.12329': attribute type 2 has an invalid length. [ 2484.931145][T18400] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.12329'. [ 2485.398331][T18416] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2485.471185][T18421] FAULT_INJECTION: forcing a failure. [ 2485.471185][T18421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2485.492746][T18421] CPU: 0 PID: 18421 Comm: syz.3.12333 Not tainted syzkaller #0 [ 2485.500432][T18421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2485.510543][T18421] Call Trace: [ 2485.513880][T18421] [ 2485.516852][T18421] dump_stack_lvl+0x188/0x24e [ 2485.521588][T18421] ? show_regs_print_info+0x12/0x12 [ 2485.526837][T18421] ? load_image+0x400/0x400 [ 2485.531393][T18421] ? __lock_acquire+0x7d10/0x7d10 [ 2485.536510][T18421] ? __virt_addr_valid+0x188/0x540 [ 2485.541684][T18421] should_fail_ex+0x399/0x4d0 [ 2485.546434][T18421] _copy_from_user+0x2c/0x170 [ 2485.551180][T18421] btf_new_fd+0x324/0x780 [ 2485.555581][T18421] __sys_bpf+0x612/0x780 [ 2485.559889][T18421] ? bpf_link_show_fdinfo+0x380/0x380 [ 2485.565341][T18421] ? lock_chain_count+0x20/0x20 [ 2485.570265][T18421] __x64_sys_bpf+0x78/0x90 [ 2485.574735][T18421] do_syscall_64+0x4c/0xa0 [ 2485.579220][T18421] ? clear_bhb_loop+0x60/0xb0 [ 2485.583948][T18421] ? clear_bhb_loop+0x60/0xb0 [ 2485.588733][T18421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2485.594680][T18421] RIP: 0033:0x7f47b079bf79 [ 2485.599149][T18421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2485.618893][T18421] RSP: 002b:00007f47b15f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2485.627377][T18421] RAX: ffffffffffffffda RBX: 00007f47b0a15fa0 RCX: 00007f47b079bf79 [ 2485.635400][T18421] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 2485.643416][T18421] RBP: 00007f47b15f4090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.651528][T18421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.659555][T18421] R13: 00007f47b0a16038 R14: 00007f47b0a15fa0 R15: 00007ffd12817328 [ 2485.667596][T18421] [ 2485.776591][T18429] netlink: 'syz.1.12335': attribute type 10 has an invalid length. [ 2485.997534][T18425] delete_channel: no stack [ 2486.956953][ T9277] wlan1: Trigger new scan to find an IBSS to join [ 2487.171267][T18450] netlink: 'syz.1.12343': attribute type 13 has an invalid length. [ 2487.179717][T18450] netlink: 'syz.1.12343': attribute type 14 has an invalid length. [ 2487.190002][T18450] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12343'. [ 2487.321905][T18452] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12344'. [ 2487.354746][T18452] device hsr_slave_0 left promiscuous mode [ 2487.378112][T18452] device hsr_slave_1 left promiscuous mode [ 2487.559623][T18459] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.12344'. [ 2489.091992][T18476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12351'. [ 2489.129168][T18476] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.12351'. [ 2489.675007][T18493] netlink: 'syz.4.12356': attribute type 13 has an invalid length. [ 2489.758781][T18493] netlink: 'syz.4.12356': attribute type 58 has an invalid length. [ 2489.856665][T18493] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12356'. [ 2490.862931][ T9258] wlan1: Trigger new scan to find an IBSS to join [ 2490.969967][T18522] netlink: 'syz.4.12366': attribute type 10 has an invalid length. [ 2490.980668][T18522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12366'. [ 2491.026463][T18522] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2491.045064][T18524] pimreg1: tun_chr_ioctl cmd 1074025677 [ 2491.051257][T18524] pimreg1: linktype set to 769 [ 2491.073498][T18521] delete_channel: no stack [ 2491.472179][T18547] netlink: 'syz.2.12371': attribute type 27 has an invalid length. [ 2491.480188][T18547] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12371'. [ 2491.516431][T18548] delete_channel: no stack [ 2491.793044][ T9263] wlan1: Creating new IBSS network, BSSID 12:9f:46:ab:9d:68 [ 2491.827202][T18558] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2491.849721][T18558] syzkaller1: linktype set to 6 [ 2491.949139][T18569] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12378'. [ 2495.019493][T18593] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2495.614083][T18622] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2495.936496][T18630] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12393'. [ 2496.428294][T18643] netlink: 177 bytes leftover after parsing attributes in process `syz.2.12396'. [ 2497.537257][T18662] netlink: 192432 bytes leftover after parsing attributes in process `syz.2.12400'. [ 2497.597087][T18662] netlink: get zone limit has 4 unknown bytes [ 2499.400643][T18683] tun0: tun_chr_ioctl cmd 1074025675 [ 2499.419465][T18683] tun0: persist enabled [ 2499.435038][T18683] tun0: tun_chr_ioctl cmd 1074025675 [ 2499.493414][T18683] tun0: persist enabled [ 2499.500081][T18686] FAULT_INJECTION: forcing a failure. [ 2499.500081][T18686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2499.551936][T18686] CPU: 1 PID: 18686 Comm: syz.0.12407 Not tainted syzkaller #0 [ 2499.559594][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2499.569709][T18686] Call Trace: [ 2499.573028][T18686] [ 2499.575986][T18686] dump_stack_lvl+0x188/0x24e [ 2499.581148][T18686] ? show_regs_print_info+0x12/0x12 [ 2499.586384][T18686] ? load_image+0x400/0x400 [ 2499.590919][T18686] ? __lock_acquire+0x7d10/0x7d10 [ 2499.595989][T18686] should_fail_ex+0x399/0x4d0 [ 2499.600709][T18686] _copy_to_user+0x2c/0x130 [ 2499.605246][T18686] bpf_verifier_vlog+0x172/0x390 [ 2499.610228][T18686] __btf_verifier_log+0xdf/0x130 [ 2499.615211][T18686] ? btf_check_sec_info+0x350/0x350 [ 2499.620447][T18686] ? __virt_addr_valid+0x188/0x540 [ 2499.625591][T18686] ? btf_parse_hdr+0x1e0/0x7e0 [ 2499.630387][T18686] btf_parse_hdr+0x431/0x7e0 [ 2499.635016][T18686] btf_new_fd+0x3c6/0x780 [ 2499.639389][T18686] __sys_bpf+0x612/0x780 [ 2499.643665][T18686] ? bpf_link_show_fdinfo+0x380/0x380 [ 2499.649092][T18686] ? lock_chain_count+0x20/0x20 [ 2499.653987][T18686] __x64_sys_bpf+0x78/0x90 [ 2499.658532][T18686] do_syscall_64+0x4c/0xa0 [ 2499.662987][T18686] ? clear_bhb_loop+0x60/0xb0 [ 2499.667696][T18686] ? clear_bhb_loop+0x60/0xb0 [ 2499.672431][T18686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2499.678359][T18686] RIP: 0033:0x7fc10259bf79 [ 2499.682804][T18686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2499.702443][T18686] RSP: 002b:00007fc1034e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2499.710972][T18686] RAX: ffffffffffffffda RBX: 00007fc102815fa0 RCX: 00007fc10259bf79 [ 2499.718969][T18686] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 2499.726966][T18686] RBP: 00007fc1034e7090 R08: 0000000000000000 R09: 0000000000000000 [ 2499.734965][T18686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2499.742961][T18686] R13: 00007fc102816038 R14: 00007fc102815fa0 R15: 00007ffc9c30a0e8 [ 2499.750973][T18686] [ 2499.994966][T18695] device hsr0 entered promiscuous mode [ 2500.147713][T18692] delete_channel: no stack [ 2500.177177][T18695] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2501.027332][T18715] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.12413'. [ 2502.025021][T18740] netlink: 'syz.0.12424': attribute type 6 has an invalid length. [ 2502.043530][T18740] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12424'. [ 2502.091312][T18739] netlink: 'syz.0.12424': attribute type 6 has an invalid length. [ 2502.112042][T18739] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12424'. [ 2502.460986][T18751] netlink: 'syz.1.12426': attribute type 10 has an invalid length. [ 2503.600726][T18761] netlink: 'syz.2.12429': attribute type 21 has an invalid length. [ 2503.614500][T18761] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12429'. [ 2503.736176][T18771] FAULT_INJECTION: forcing a failure. [ 2503.736176][T18771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2503.759714][T18771] CPU: 1 PID: 18771 Comm: syz.1.12432 Not tainted syzkaller #0 [ 2503.767432][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2503.777539][T18771] Call Trace: [ 2503.780899][T18771] [ 2503.783883][T18771] dump_stack_lvl+0x188/0x24e [ 2503.788712][T18771] ? show_regs_print_info+0x12/0x12 [ 2503.793980][T18771] ? load_image+0x400/0x400 [ 2503.798537][T18771] ? __lock_acquire+0x7d10/0x7d10 [ 2503.803632][T18771] should_fail_ex+0x399/0x4d0 [ 2503.808379][T18771] _copy_to_user+0x2c/0x130 [ 2503.812943][T18771] bpf_verifier_vlog+0x172/0x390 [ 2503.817947][T18771] __btf_verifier_log+0xdf/0x130 [ 2503.822948][T18771] ? btf_check_sec_info+0x350/0x350 [ 2503.828201][T18771] ? __virt_addr_valid+0x188/0x540 [ 2503.833349][T18771] ? btf_parse_hdr+0x1e0/0x7e0 [ 2503.838149][T18771] btf_parse_hdr+0x487/0x7e0 [ 2503.842770][T18771] btf_new_fd+0x3c6/0x780 [ 2503.847137][T18771] __sys_bpf+0x612/0x780 [ 2503.851413][T18771] ? bpf_link_show_fdinfo+0x380/0x380 [ 2503.856829][T18771] ? lock_chain_count+0x20/0x20 [ 2503.861731][T18771] __x64_sys_bpf+0x78/0x90 [ 2503.866194][T18771] do_syscall_64+0x4c/0xa0 [ 2503.870644][T18771] ? clear_bhb_loop+0x60/0xb0 [ 2503.875353][T18771] ? clear_bhb_loop+0x60/0xb0 [ 2503.880077][T18771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2503.886169][T18771] RIP: 0033:0x7fa1e1b9bf79 [ 2503.890633][T18771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2503.910286][T18771] RSP: 002b:00007fa1e2a69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2503.918741][T18771] RAX: ffffffffffffffda RBX: 00007fa1e1e15fa0 RCX: 00007fa1e1b9bf79 [ 2503.926826][T18771] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 2503.934829][T18771] RBP: 00007fa1e2a69090 R08: 0000000000000000 R09: 0000000000000000 [ 2503.942909][T18771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.950954][T18771] R13: 00007fa1e1e16038 R14: 00007fa1e1e15fa0 R15: 00007fff3009f318 [ 2503.958995][T18771] [ 2505.129176][T18791] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.12437'. [ 2505.203916][T18795] tipc: Started in network mode [ 2505.208888][T18795] tipc: Node identity 9215a268, cluster identity 4711 [ 2505.257607][T18795] tipc: Node number set to 2450891368 [ 2506.514173][T18819] netlink: 'syz.1.12445': attribute type 2 has an invalid length. [ 2506.536354][T18819] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.12445'. [ 2509.110905][T18824] mac80211_hwsim hwsim83 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2509.132292][T18828] mac80211_hwsim hwsim100 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2510.899723][T18870] IPv6: pim6reg1: Disabled Multicast RS [ 2511.045721][T18874] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.12457'. [ 2511.089034][T18874] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.12457'. [ 2512.755733][T18885] mac80211_hwsim hwsim100 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2513.585578][T18919] IPv6: pim6reg1: Disabled Multicast RS [ 2513.872986][T18927] netlink: 'syz.3.12471': attribute type 10 has an invalid length. [ 2514.260346][T18948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12479'. [ 2515.229034][T18958] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2515.549681][T18964] mac80211_hwsim hwsim89 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2515.883759][T18982] FAULT_INJECTION: forcing a failure. [ 2515.883759][T18982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2515.926135][T18982] CPU: 1 PID: 18982 Comm: syz.0.12490 Not tainted syzkaller #0 [ 2515.933770][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2515.943881][T18982] Call Trace: [ 2515.947200][T18982] [ 2515.950170][T18982] dump_stack_lvl+0x188/0x24e [ 2515.954939][T18982] ? show_regs_print_info+0x12/0x12 [ 2515.960203][T18982] ? load_image+0x400/0x400 [ 2515.964764][T18982] ? __lock_acquire+0x7d10/0x7d10 [ 2515.969848][T18982] ? snprintf+0xe5/0x140 [ 2515.974136][T18982] should_fail_ex+0x399/0x4d0 [ 2515.978873][T18982] _copy_to_user+0x2c/0x130 [ 2515.983430][T18982] simple_read_from_buffer+0xe3/0x150 [ 2515.988869][T18982] proc_fail_nth_read+0x1a6/0x220 [ 2515.993948][T18982] ? proc_fault_inject_write+0x310/0x310 [ 2515.999640][T18982] ? fsnotify_perm+0x248/0x550 [ 2516.004459][T18982] ? proc_fault_inject_write+0x310/0x310 [ 2516.010138][T18982] vfs_read+0x2de/0xa00 [ 2516.014363][T18982] ? kernel_read+0x1e0/0x1e0 [ 2516.019013][T18982] ? __fget_files+0x28/0x4b0 [ 2516.023660][T18982] ? __fget_files+0x28/0x4b0 [ 2516.028306][T18982] ? __fget_files+0x43d/0x4b0 [ 2516.033049][T18982] ? __fdget_pos+0x2ae/0x360 [ 2516.037725][T18982] ? ksys_read+0x71/0x250 [ 2516.042118][T18982] ksys_read+0x14c/0x250 [ 2516.046416][T18982] ? vfs_write+0xa30/0xa30 [ 2516.050891][T18982] ? lockdep_hardirqs_on+0x94/0x140 [ 2516.056238][T18982] do_syscall_64+0x4c/0xa0 [ 2516.060724][T18982] ? clear_bhb_loop+0x60/0xb0 [ 2516.065457][T18982] ? clear_bhb_loop+0x60/0xb0 [ 2516.070192][T18982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2516.076143][T18982] RIP: 0033:0x7fc10255c84e [ 2516.080610][T18982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2516.100274][T18982] RSP: 002b:00007fc1034e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2516.108755][T18982] RAX: ffffffffffffffda RBX: 00007fc1034e76c0 RCX: 00007fc10255c84e [ 2516.116851][T18982] RDX: 000000000000000f RSI: 00007fc1034e70a0 RDI: 0000000000000003 [ 2516.124876][T18982] RBP: 00007fc1034e7090 R08: 0000000000000000 R09: 0000000000000000 [ 2516.132901][T18982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2516.140921][T18982] R13: 00007fc102816038 R14: 00007fc102815fa0 R15: 00007ffc9c30a0e8 [ 2516.148958][T18982] [ 2516.275959][T18987] device pim6reg1 left promiscuous mode [ 2516.456949][T18994] netlink: 'syz.2.12492': attribute type 29 has an invalid length. [ 2516.487262][T18994] netlink: 'syz.2.12492': attribute type 29 has an invalid length. [ 2516.544668][T18996] netlink: 'syz.2.12492': attribute type 29 has an invalid length. [ 2517.064142][T19005] netlink: 'syz.1.12497': attribute type 5 has an invalid length. [ 2517.906662][ T9254] wlan1: Trigger new scan to find an IBSS to join [ 2518.119109][T19030] netlink: 'syz.4.12503': attribute type 11 has an invalid length. [ 2518.135236][T19030] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12503'. [ 2518.603392][T19047] netlink: 'syz.4.12508': attribute type 10 has an invalid length. [ 2518.651881][T19047] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12508'. [ 2518.997523][T19061] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12511'. [ 2519.056359][T19061] openvswitch: netlink: Message has 6 unknown bytes. [ 2519.208165][T19047] device vlan0 left promiscuous mode [ 2519.232727][T19047] À: port 1(vlan0) entered disabled state [ 2519.955045][T19048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12508'. [ 2520.407795][T19098] netlink: 'syz.4.12518': attribute type 10 has an invalid length. [ 2520.950329][ T9263] wlan1: Trigger new scan to find an IBSS to join [ 2521.076372][T19103] device syzkaller0 entered promiscuous mode [ 2523.902115][ T9271] wlan1: Trigger new scan to find an IBSS to join [ 2534.685059][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2534.695165][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2534.705885][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2534.714279][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2534.722621][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2534.730078][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2536.802290][T21268] Bluetooth: hci3: command 0x0409 tx timeout [ 2536.840253][ T4280] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2536.850002][ T4280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2536.859000][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2536.868423][ T4280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2536.877861][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2536.885441][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2537.298451][ T4280] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2537.308385][ T4280] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2537.317763][ T4280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2537.326179][ T4280] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2537.334682][ T4280] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2537.342207][ T4280] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2537.700445][ T4280] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2537.711456][ T4280] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2537.720414][ T4280] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2537.728900][ T4280] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2537.738341][ T4280] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2537.745841][ T4280] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2538.763601][ T4280] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2538.773737][ T4280] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2538.783085][ T4280] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2538.791465][ T4280] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2538.799930][ T4280] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2538.809005][ T4280] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2538.902324][ T4280] Bluetooth: hci6: command 0x0409 tx timeout [ 2538.909063][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 2539.451810][ T4280] Bluetooth: hci7: command 0x0409 tx timeout [ 2539.851933][ T4280] Bluetooth: hci8: command 0x0409 tx timeout [ 2540.901905][ T4280] Bluetooth: hci9: command 0x0409 tx timeout [ 2540.951790][T21268] Bluetooth: hci6: command 0x041b tx timeout [ 2540.959344][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 2541.501866][ T4280] Bluetooth: hci7: command 0x041b tx timeout [ 2541.902046][ T4280] Bluetooth: hci8: command 0x041b tx timeout [ 2542.951899][ T4280] Bluetooth: hci9: command 0x041b tx timeout [ 2543.052308][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 2543.058444][ T4280] Bluetooth: hci6: command 0x040f tx timeout [ 2543.601879][ T4280] Bluetooth: hci7: command 0x040f tx timeout [ 2544.001837][ T4280] Bluetooth: hci8: command 0x040f tx timeout [ 2545.051855][ T4280] Bluetooth: hci9: command 0x040f tx timeout [ 2545.101743][ T4280] Bluetooth: hci6: command 0x0419 tx timeout [ 2545.701794][ T4280] Bluetooth: hci7: command 0x0419 tx timeout [ 2546.101806][ T4280] Bluetooth: hci8: command 0x0419 tx timeout [ 2547.101838][ T4280] Bluetooth: hci9: command 0x0419 tx timeout [ 2548.901925][ T578] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2676 jiffies s: 395405 root: 0x1/. [ 2548.914727][ T578] rcu: blocking rcu_node structures (internal RCU debug): [ 2548.922256][ T578] Sending NMI from CPU 1 to CPUs 0: [ 2548.927531][ C0] NMI backtrace for cpu 0 [ 2548.927543][ C0] CPU: 0 PID: 19091 Comm: syz.3.12515 Not tainted syzkaller #0 [ 2548.927561][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2548.927572][ C0] RIP: 0010:lock_release+0xef/0x920 [ 2548.927602][ C0] Code: 09 bb 0c 73 0d e8 c1 af 07 00 84 c0 0f 84 41 05 00 00 48 c7 c0 e4 00 20 8e 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 49 05 00 00 <83> 3d 6e 3e bb 0c 00 0f 84 a6 04 00 00 65 8b 05 3d b7 9d 7e 85 c0 [ 2548.927618][ C0] RSP: 0018:ffffc90000007480 EFLAGS: 00000046 [ 2548.927635][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7848cff92cf7dc00 [ 2548.927647][ C0] RDX: 0000000000000000 RSI: ffffffff8adf0d00 RDI: ffffffff8adf0cc0 [ 2548.927660][ C0] RBP: ffffc90000007590 R08: ffffffff8e1fcc2f R09: 1ffffffff1c3f985 [ 2548.927673][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f986 R12: 1ffff92000000e9c [ 2548.927687][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000e9c [ 2548.927700][ C0] FS: 00007f47b15d36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2548.927716][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2548.927728][ C0] CR2: 000000110c3639eb CR3: 000000005ca5b000 CR4: 00000000003506f0 [ 2548.927744][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000008d24 [ 2548.927756][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2548.927775][ C0] Call Trace: [ 2548.927781][ C0] [ 2548.927792][ C0] ? __virt_addr_valid+0x188/0x540 [ 2548.927820][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 2548.927845][ C0] ? verify_lock_unused+0x140/0x140 [ 2548.927868][ C0] ? llist_add_batch+0x12b/0x180 [ 2548.927890][ C0] ? __virt_addr_valid+0x188/0x540 [ 2548.927915][ C0] ? __virt_addr_valid+0x188/0x540 [ 2548.927939][ C0] __virt_addr_valid+0x435/0x540 [ 2548.927966][ C0] kasan_addr_to_slab+0x9/0xc0 [ 2548.927990][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 2548.928008][ C0] irq_work_queue_on+0x10f/0x260 [ 2548.928039][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 2548.928062][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2548.928082][ C0] ? __cant_sleep+0x220/0x220 [ 2548.928105][ C0] __rcu_read_unlock+0x78/0xd0 [ 2548.928121][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 2548.928146][ C0] trace_call_bpf+0x5bb/0x6b0 [ 2548.928170][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 2548.928199][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2548.928226][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 2548.928243][ C0] ? sched_clock_cpu+0x6e/0x260 [ 2548.928267][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 2548.928298][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 2548.928326][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 2548.928348][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2548.928375][ C0] ? __irq_exit_rcu+0x147/0x230 [ 2548.928392][ C0] ? irq_exit_rcu+0x20/0x20 [ 2548.928410][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 2548.928431][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 2548.928458][ C0] trace_hardirqs_on+0x24/0x40 [ 2548.928479][ C0] asm_sysvec_irq_work+0x16/0x20 [ 2548.928500][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2548.928519][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2548.928533][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 2548.928547][ C0] RAX: 7848cff92cf7dc00 RBX: 1ffff92000000f5c RCX: 7848cff92cf7dc00 [ 2548.928560][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 2548.928574][ C0] RBP: ffffc90000007b90 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 2548.928587][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 2548.928599][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 2548.928622][ C0] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 2548.928645][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2548.928671][ C0] __rcu_read_unlock+0x78/0xd0 [ 2548.928686][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 2548.928713][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2548.928731][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 2548.928758][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 2548.928795][ C0] __hrtimer_run_queues+0x560/0xd70 [ 2548.928822][ C0] ? hw_scan_work+0xf50/0xf50 [ 2548.928854][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2548.928873][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 2548.928903][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 2548.928925][ C0] handle_softirqs+0x2a1/0x930 [ 2548.928947][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 2548.928967][ C0] ? do_softirq+0x210/0x210 [ 2548.928990][ C0] __irq_exit_rcu+0x13b/0x230 [ 2548.929007][ C0] ? irq_exit_rcu+0x20/0x20 [ 2548.929032][ C0] irq_exit_rcu+0x5/0x20 [ 2548.929047][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 2548.929076][ C0] [ 2548.929081][ C0] [ 2548.929088][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2548.929109][ C0] RIP: 0010:cmpxchg_double_slab+0x128/0x310 [ 2548.929131][ C0] Code: 02 00 00 0f 84 8e 00 00 00 fb e9 88 00 00 00 41 8d 46 20 a8 0f 0f 85 1e 01 00 00 4c 89 c9 4c 89 e0 4c 89 fa f0 49 0f c7 4e 20 01 75 65 eb 67 49 8b 46 08 a8 01 0f 85 78 01 00 00 0f 1f 44 00 [ 2548.929146][ C0] RSP: 0018:ffffc90004777ab8 EFLAGS: 00000246 [ 2548.929160][ C0] RAX: 0000000000000000 RBX: ffff88805260ec80 RCX: 00000000800c000b [ 2548.929173][ C0] RDX: 00000000000c000c RSI: ffffea0001498380 RDI: ffff888140009a00 [ 2548.929185][ C0] RBP: 0000000000000000 R08: ffff88805260ec80 R09: 00000000800c000b [ 2548.929197][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000000 [ 2548.929209][ C0] R13: 00000000800c000b R14: ffffea0001498380 R15: 00000000000c000c [ 2548.929233][ C0] ? put_cpu_partial+0x14c/0x250 [ 2548.929255][ C0] __slab_free+0xa1/0x290 [ 2548.929279][ C0] qlist_free_all+0x76/0xe0 [ 2548.929300][ C0] kasan_quarantine_reduce+0x144/0x160 [ 2548.929320][ C0] __kasan_slab_alloc+0x1e/0x80 [ 2548.929346][ C0] slab_post_alloc_hook+0x4b/0x480 [ 2548.929365][ C0] ? slab_pre_alloc_hook+0x59/0x310 [ 2548.929384][ C0] ? apparmor_sk_alloc_security+0x74/0x100 [ 2548.929412][ C0] ? apparmor_sk_alloc_security+0x74/0x100 [ 2548.929440][ C0] __kmem_cache_alloc_node+0x140/0x260 [ 2548.929462][ C0] ? apparmor_sk_alloc_security+0x74/0x100 [ 2548.929489][ C0] kmalloc_trace+0x26/0xe0 [ 2548.929518][ C0] apparmor_sk_alloc_security+0x74/0x100 [ 2548.929547][ C0] security_sk_alloc+0x6a/0xa0 [ 2548.929576][ C0] sk_prot_alloc+0x101/0x210 [ 2548.929598][ C0] sk_alloc+0x36/0x340 [ 2548.929621][ C0] inet6_create+0x7ef/0x1240 [ 2548.929643][ C0] ? inet6_create+0x7f/0x1240 [ 2548.929670][ C0] __sock_create+0x4a2/0x940 [ 2548.929698][ C0] __sys_socket+0xc4/0x190 [ 2548.929724][ C0] __x64_sys_socket+0x76/0x80 [ 2548.929747][ C0] do_syscall_64+0x4c/0xa0 [ 2548.929775][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2548.929794][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2548.929817][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2548.929836][ C0] RIP: 0033:0x7f47b079bf79 [ 2548.929851][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2548.929866][ C0] RSP: 002b:00007f47b15d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2548.929883][ C0] RAX: ffffffffffffffda RBX: 00007f47b0a16090 RCX: 00007f47b079bf79 [ 2548.929896][ C0] RDX: 0000000000000011 RSI: 0000922000000003 RDI: 000000000000000a [ 2548.929907][ C0] RBP: 00007f47b08327e0 R08: 0000000000000000 R09: 0000000000000000 [ 2548.929918][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2548.929928][ C0] R13: 00007f47b0a16128 R14: 00007f47b0a16090 R15: 00007ffd12817328 [ 2548.929952][ C0] [ 2551.601771][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 2556.701819][T21268] Bluetooth: hci1: command 0x0406 tx timeout