last executing test programs: 13.879190522s ago: executing program 2 (id=2838): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x20000000000000e5, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r4, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000640)=""/4096, 0x401, 0x0, 0x1, 0x0, &(0x7f0000001640)='\x00', 0x0, 0x2, 0x0, 0x1}, 0x50) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000004700)=""/4058, 0xfda}, {&(0x7f0000001840)=""/4145, 0x1031}], 0x2}, 0x10100) 12.702906039s ago: executing program 2 (id=2850): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0xfa, 0x9, 0x8}]}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={0xffffffffffffffff, r3}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r5 = perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x1, 0xb7, 0x7, 0x40, 0x0, 0x81, 0x82088, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000340)}, 0x20, 0x5488, 0x800, 0x9, 0x1, 0x4, 0x3, 0x0, 0x3ff, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x9d, 0x4, 0x1, 0x0, 0xbffa, 0x40410, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xc600000000000}, 0x40, 0x6, 0x8c78, 0x4, 0xb, 0x7, 0x8, 0x0, 0x37d, 0x0, 0x8}, r4, 0x3, r5, 0x0) openat$cgroup(r4, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000440)}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000500)={'pim6reg1\x00'}) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r4, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/17, 0x11, 0x0, &(0x7f0000000580)=""/242, 0xf2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r6, 0x4) r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000740), 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000007c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x4001, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000840)=r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000880)={r4}) sendmsg$sock(r9, &(0x7f0000001080)={&(0x7f00000008c0)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000940)="16b4f85b2238077263d2b152a0375300602ce6dff37094dd24ba860571c4358cf0b8e5374532ba513e1ab27b1a1ba7e7c3d9b1b6e7a44ff05b8e2d7f98cd026c1659d2d1a6f322dea6b8a1cb617ab2f2d1f904122c9cfa8cf7caeff489aadb4d42faaa7801f6059b319e2164ff5d8bb5d54fbbb3aa191c2d7419450fcbbf0c83ec04", 0x82}, {&(0x7f0000000a00)="aa7957128520f0b9a33510692d7e99ef09035b79cfe5ce83e28ca30c9e7b5ce217da9778501dd8e0de22", 0x2a}, {&(0x7f0000000a40)="8e145865eedbd109e27bbb5cec659f153d21d0b319d92763da0bf5d0621f3eade63391b3c364", 0x26}, {&(0x7f0000000a80)="83d7157e7e5bf462fdf40ee6a7046ebbfea8619d04b450401136a2e329bd46842abb6dbc48", 0x25}, {&(0x7f0000000ac0)="8f1a9383530ef12041bdd15f18e18587b439654d1492e1b457f580150446e66a7a401f78045c09e5a1d6b5de3de624fafebe75746f078f6c6eba5a5041e16130a15ae8bc4be0710081ff6af4eabd01d0e4211698499152f2b77a1ef7098802ad7bb47705e6e24b8c75d5abb13efca00b9400e95f38b002b31b1fb46c032db265fbd0859a", 0x84}, {&(0x7f0000000b80)="f9920a01d47f632164f64e47909cb7012e7af594545b2bfe25af4b8a869f474cc7f9b054e0ee73f58522ae33ff2ded8a430f83f13a7f367a18d61998a3adcc88f5791b5c2803f6004ceeb83cf355b455819b06df7984a9889ed456d929462bf53c19fd0c4ea785d4f28b24df1a2103ce14253869a9ed26f40f3d66dfe4f769c11ebab35a184b3a40549d89fdf5a8badc550d8784acd8dfbced229336393af0920c232252e44fe91f86f418380520866df50146c941adcb85aceb7f3f07ee864e797bf087fd2f8caa3787bda6f438b9f1046f8a", 0xd3}, {&(0x7f0000000c80)="9fb55df21c2888fb1c43a5", 0xb}, {&(0x7f0000000cc0)="1e57366fe2a1eb495429a06951fd390b38a1f6e1d851c6ba3b9e52637ece36c79b2fdddf684ca01f76f6078753925f0d6dead935f30ae97125375458cc8ff5a78625542f11524c45177d69364150a38ca223e81d6e8619b4ce31cc0eee436d0ea70fcef22ec3f035c518c61198c03927e0140878447799329305dbd5463b3f3cf0e3b228228ddd5934a21511c4bffc8ab05b450030d5a3ff77927220a6f5035a166214b40967a255bbb6004c3cd916a0c0b76078612551a3d61d0b94e74bddeaa4eb86c6f07fd6579a898c1516", 0xcd}, {&(0x7f0000000dc0)="d140444b1d7a03fee00a8e416b9e62e4cef5fd0b96e28d6269c4340a7934e8accfa10d1139511b41f90229da32c241e99ace90266a96576a3d1adcd09a9b1303d2643ea1ea23c0644db133860a27b217481fc6f1e096c63a2a422dbfd1382987087d900d80c3355c6a5667070953fc54f72beca91a142081bbb789470f47adecb10f2802aac5ca522cfac9f5ac16fb55ca9fc3f4b16e7079ec7e337f290ef7d9", 0xa0}, {&(0x7f0000000e80)="33edfe498aae1febc0a4a2c20da743366c6e93bf2ace4a0609503bcf93971be1d8d86d1864f97ceedc0a7414dc792350cb23df08a32c641db53029e63ed94ddc2c8b22ff4602873ff5c558353ea3b6b8ad671a6144f98b728d30ee2b576f4e73249a4658009dc67fc92f13f08847561536d6425a1d20e4d8a267a4080cd1f4ea0c49fdc27259d38652c42c8f00f809e162aec34e11e9b4de7fe7b947eec27a8b7e48fdcc91a52dade8f4bcedf853bc84c596025cc684d31e298851f1f3c514a472dc", 0xc2}], 0xa, &(0x7f0000001040)=[@timestamping={{0x14, 0x1, 0x25, 0xe9}}], 0x18}, 0x4004000) sendmsg$kcm(r8, &(0x7f00000022c0)={&(0x7f00000010c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001140)="960f1e7ccd631af3e62234f6c1809b467729ab173fe2b14e60d59308efb42b808e1ebf80b5a73f5304af2ff880792a775805e46123a2d39946e256b9ec4af22a24b32fe263b32f2cae01b7ff6241be523d93d7d4f9720cf89d388e4ea83f0af07b57c45ec999d7b6fe7f1553ac2ffc25004cf44ad461b8c96f2a1b3a217796b278a08da2b2d744892b9ea0e38d57460c7a41d1b092047f976afe1f6ee5a9f373eb537d", 0xa3}, {&(0x7f0000001200)="c22cdacc4fb8598143870066252ef549c6cac4a4ebd948407cfd1f54671b32", 0x1f}], 0x2, &(0x7f0000001280)=[{0x1010, 0x115, 0x0, "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"}], 0x1010}, 0x4004) sendmsg$kcm(r2, &(0x7f0000003600)={&(0x7f0000002300)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40}, 0x2}}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002380)="576596ffff4faa1fef4d69b0d6f5073b080a47d3306b239f86bc6d4135d7a606c457d40d94ca4ec3c09a3c8d71e0c0affafdea5a6c3911276e9f392774307957fb786a365aa39e821b83189b1eaecc18829a5b19e6053ee015460356567689b4d15632d76afe99d3189d869a14c004369cb5cbd1c5a1714639207d565dabce55c2a5611349c68698a6817e60f37627c8f781152644365fb7c8295f652386702e2c693a7774832deac9ad03801a467389394ac10a33d7acf5458a76d50131982eaf51c9a5356392a0c100e2cae9a988b460320339b10d526591f176436875b1", 0xdf}, {&(0x7f0000002480)="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", 0x1000}], 0x2, &(0x7f00000034c0)=[{0x80, 0x10d, 0x4, "f21deb1204171eaa68d5d2cd6b959c841082ec119f9fc00067eed0c6faa6105b01d4eb6b7ee895f9fd6a0661a2e13acb2f4bb8b07cd014b79149b1c5ec29e91f2e505d6d6c9e01502ae1e120638e915c477395e7f37d0a37bb8be2b17919e2a4f0697f6fddb56d38c4d23644556791"}, {0x78, 0x3a, 0x0, "0b14e90a8ab2428ea3fa35a2444766418bf1ffe46baa404d4760045dd75cf42ea4295b4bca935e5b58621a8720d7ec811798f6aa40d67da312050c2e685c6c320372bf46a1245c8ae709f4497d74d833e4915b7519caec191f4b8da461396dc4d29cdf873aed"}, {0x20, 0x8, 0x5, "731b5a019cd9d579077d2329489137"}], 0x118}, 0x400c080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000003640)={'vlan0\x00', 0x4000}) sendmsg$sock(r2, &(0x7f0000003880)={&(0x7f0000003680)=@llc={0x1a, 0x118, 0xa8, 0x2, 0x4, 0x3, @multicast}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003700)="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", 0xfe}], 0x1, &(0x7f0000003840)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x20000000) 12.185556396s ago: executing program 2 (id=2852): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x1, 0x8}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) (async) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x0, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) (async) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x2, 0x0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r5, 0x8) 11.815239147s ago: executing program 2 (id=2860): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)}], 0x1}, 0xe900) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14b201, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (fail_nth: 6) 11.258451955s ago: executing program 2 (id=2864): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x4) close(0x3) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000580)='i', 0x37}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000c8550be6c255f4fe0005002b"], 0x20}, 0x54) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x400000002, 0x0) (async) r7 = openat$cgroup(r4, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r7, 0x6, r5, 0x8) (async) recvmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x40002000) (async) socket$kcm(0x2, 0x3, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700), 0x1000000}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 11.019206623s ago: executing program 2 (id=2868): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10004, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.546542268s ago: executing program 0 (id=2915): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r0], 0xfe33) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) (async) r3 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe7, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa285}, 0x0, 0x0, 0xc29a, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x103c78, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, &(0x7f0000000000)={r6}) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x86d}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x4c, 0x3, 0x4, 0x6, 0x400}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0xb, 0x2, 0xb, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000700)=[r1, r1, r1, r1, 0xffffffffffffffff, r1, r1], &(0x7f0000000740)=[{0x1, 0x3, 0xd, 0x5}, {0x2, 0x4, 0xc, 0x7}, {0x5, 0x4, 0x2, 0x3}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000e60300ff00009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'team_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) 3.515483919s ago: executing program 1 (id=2916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123a00000000000000000000000000ac14"], 0xffdd) 3.355124494s ago: executing program 0 (id=2917): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x4, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x4, 0x6, 0xa0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)}], 0x1}, 0xe900) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14b201, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="001500000000000036e0047900"/24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x3}, 0x0, 0x8000000000000000, 0x0, 0x0, 0x40000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000008f00000000000000d1f2d493484ba4517d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000020009500000000000000bd0a0400000000002500f4fffcffffffbf91000000000000b7020000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c00)}, {0x0}, {&(0x7f0000001d80)="78d0839498e9e2822fe26f37d806f5", 0xf}, {&(0x7f0000001dc0), 0xffffffffffffff2d}], 0x4}, 0x40000) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x0, 0x80, 0x8, 0x0, 0x4, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x6}, 0x10802, 0xe908, 0x6, 0x1, 0x9, 0xa, 0x6, 0x0, 0x0, 0x0, 0x79be}, r4, 0x9, r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050001000010"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000ff010000c10600000400000001620000", @ANYRES32=r1, @ANYBLOB="ff7f000200", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0300000001000000040000000600"/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r6, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x200, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) close(r0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 3.106990152s ago: executing program 4 (id=2920): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa}, 0x20a8, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001b5728255b2dc1f3fbcb0c6d0000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000000)='cpu<=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x401}, 0x1a00}, 0x0, 0x8598, 0xffffffffffffffff, 0x8) 3.039407664s ago: executing program 3 (id=2922): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x7ee0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001bb95b2b8500000082000000ba4045c036eb43789500"/80], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204", 0x4d}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r1, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r1, 0x58, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001d40), 0x8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYRESDEC=r5], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r12, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e40)={0x6, 0x19, &(0x7f0000001b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x35, &(0x7f0000001c40)=""/53, 0x41100, 0x4b, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000001d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001dc0)={0x1, 0xe, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[r1, r1, r1, r1, r0, r1], 0x0, 0x10, 0x3}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xc9e}, 0xc000) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="190000000400000004000000ff07000000000000", @ANYRES32, @ANYBLOB="7f00000000000000000000120000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r15, 0x27, 0x12, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc8003200810066a288a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.022564235s ago: executing program 4 (id=2923): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) recvmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 2.843220141s ago: executing program 3 (id=2924): socket$kcm(0x29, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000056b80000000000000000850000004800000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) 2.808508301s ago: executing program 3 (id=2925): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x80, 0x0}, 0x24040810) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0xe40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x4, 0x3, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t') r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 2.289310878s ago: executing program 3 (id=2926): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="95ab8caad55817c0450000000000000085100000feffffff95"], &(0x7f0000000600)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000000940)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x7}, 0x0, 0x800000002, 0x0, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000280)='U\xf5nT/\bL\xa8\xae)\xaa+\xfd\xf0\x04\xa8\xef\xfdv\xc20_\x10\xa7\xd8\xcc\xd3\x11\xa3F\x92\xc1(p\x80\x8aiHD\xbf\x9f\xee\xber\"\xaf\xe5{>r\xb4\xa1n\x91\xd9\xf5\xef\xa4]P\xc2\xed\xea\x8dK\x1d\xbe\xce\xed\x86|\x8b,J\xae\xa3\xb0\xf3c\xe0\xed+\xf4\xd2u\xd3\x1b\xb6\x7f\x8f\x95i\xa7}mefQn\xb3\xc8+-\xff{\x0e[\xd4\x16\xfeB\x0e\x1b>\xc9\x12\x01D\xc1f\x1e\x12\xafG\xac\xec\xd4\x95\xbay\x82\x89\a\r\xff=\xba\xb3\xe8\xe3P>\xff{\xfcRq1\x16\x14X3\x0e\xbd\xa6`\x1c') (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 1.2631204s ago: executing program 3 (id=2927): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040), 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/228, 0xe4}], 0x1, &(0x7f0000000300)=""/26, 0x1a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4840) 1.2586146s ago: executing program 4 (id=2928): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32) socketpair(0x23, 0x4, 0xe, &(0x7f0000000a40)) (rerun: 32) 1.252125031s ago: executing program 1 (id=2929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7ffffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(0x3) (async) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2b, '\x00', 0x0, r4, 0x2, 0x2}, 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2b, '\x00', 0x0, r4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000600000095000e85f1ca00008dbd8aa7d7e309437072934a358192d9644d297cce13b6017957c4860fa4c6278d66d8ffcfc3b94655727d106f0b40e3f78f11f39971ad7f"], &(0x7f0000000200)='GPL\x00', 0x401, 0x1c, &(0x7f0000000240)=""/28, 0x40f00, 0x51, '\x00', r5, 0x25, r4, 0x8, &(0x7f0000000580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x4, 0x7da54eb6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0, r6, r7, r0, r4, r4, r0, r4], 0x0, 0x10, 0x2}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x5, 0x1, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x90}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x5, 0x1, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x90}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 1.147081654s ago: executing program 0 (id=2930): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x8907, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x8, 0x2, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d30, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffd8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={&(0x7f0000000240), 0x2}}, 0x0, 0x8000000, 0xffffffffffffffff, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x10104) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x35, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0xaf) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[], 0x31) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01063d000000000058000028000000f5692800000002000000"], 0x0, 0x42}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="02000000452565ee000000"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={0xffffffffffffffff, r6}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) sendmsg$inet(r0, &(0x7f0000004740)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="3c000000000000000000000007000080af2e28063ecc84d4b571d4fe00440c68838a1414aa00000007861dffffffff010c99ab0d55d29ab8107d5002033e0608ee6c2736c65400000000000000"], 0x40}, 0x40000d0) 1.048917007s ago: executing program 1 (id=2931): r0 = socket$kcm(0x10, 0x1, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 931.530201ms ago: executing program 0 (id=2932): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="002ccc2c33504f95e9d10122754a006cfe0bca73", 0x14}], 0x1}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000500), &(0x7f0000000040)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7fbffff0700001d3e689031936cd46adf4882e200dcc8ba75096393f70095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x78) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x4, 0x6d, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3, 0x83}, 0x10134, 0x913d, 0xfffffffd, 0x0, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x20000002, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x20000002, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000005c0)={0x0, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x4c084) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x4c084) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000580), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x1, 0x0) (async) socket$kcm(0x10, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0xffffffeffffffffc, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 838.625854ms ago: executing program 1 (id=2933): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec2}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 595.043661ms ago: executing program 0 (id=2934): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0xff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8r7, @ANYRESDEC=r0], 0xfe33) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x9, 0x21, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0x5}, 0x110200, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e9b7ca}, 0x0, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="18800000000000000000000000000000791040", @ANYRES64=r10, @ANYBLOB="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", @ANYRESOCT=r4, @ANYRESOCT=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4030582a, &(0x7f0000000040)) openat$cgroup(r9, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 577.358362ms ago: executing program 1 (id=2935): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 345.017959ms ago: executing program 0 (id=2936): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, &(0x7f0000000000)=""/48}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, &(0x7f0000000000)=""/48}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x4000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_config_ext={0x7e, 0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x500, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) 313.6839ms ago: executing program 3 (id=2937): r0 = getpid() r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x76, 0x1, 0x2, 0x4, 0x0, 0x1, 0xc4100, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x512b1fc3, 0x2, @perf_config_ext={0x6, 0x2}, 0x1000, 0xf5f, 0x8, 0x7, 0x1, 0x16f, 0xffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x5, &(0x7f0000000080)='-.)+\x00'}, 0x30) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140)={'vcan0', 0x32, 0x32}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xffff, 0x3, 0x5, 0x2000, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000012c0)={r3, &(0x7f0000000200)="ddbfbc5c0e9bf116d1e936fe6c0cf1943a826d6d5622ae6cc8cb8e5e214038ecb7790a53afc3bab74c8369301923d7e30ea1a77c2000f82412c8252439dc436a4320b84e7fa9f64ffb2cf5eb9888d0f674b1810cd13715d4a35df889394e705fb92db0910668428f139f1cdf5a473860e0f870ba9033ddc4ccc9ea87bd647dcce69697", &(0x7f00000002c0)=""/4096}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@ifindex, 0x16, 0x1, 0x800, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001380)=[0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)={@fallback=r2, r4, 0x0, 0x4, 0x0, @void, @value=r4, @void, @void, r5}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)) openat$cgroup_ro(r4, &(0x7f0000001500)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(r4, &(0x7f0000001500)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) close(r6) (async) close(r6) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001540)={r4}, 0x8) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001580), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r8, 0x3, 0x4, 0x1}, 0x50) r9 = perf_event_open(&(0x7f0000001680)={0x4, 0x80, 0x4, 0x6, 0x8, 0x8, 0x0, 0x81, 0x10a0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000001640), 0x9}, 0x10040, 0x8, 0x4, 0x9, 0x7, 0x16, 0x3, 0x0, 0x10000, 0x0, 0x34000000000000}, r0, 0x10, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x3) (async) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', r3, 0x4000, r4}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001740)=@o_path={&(0x7f0000001700)='./file0\x00', r3, 0x4000, r4}, 0x18) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x7) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000017c0)={0x0, 0x80, 0x1, 0x8, 0x5, 0x8, 0x0, 0x5, 0x80400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x600, 0x1, @perf_bp={&(0x7f0000001780), 0x9}, 0x0, 0x2, 0x3, 0x5, 0x7fffffff, 0x10000, 0x401, 0x0, 0x0, 0x0, 0x9}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001840)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000001880)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r10, &(0x7f0000001880)='syz1\x00', 0x1ff) recvmsg$unix(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000018c0)=""/86, 0x56}, {&(0x7f0000001940)=""/104, 0x68}], 0x2, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x4101) (async) recvmsg$unix(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000018c0)=""/86, 0x56}, {&(0x7f0000001940)=""/104, 0x68}], 0x2, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x4101) openat$tun(0xffffffffffffff9c, &(0x7f0000001b00), 0x8041, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001b00), 0x8041, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001d00)={r11, &(0x7f0000001b40)="523998f0d51ac1d40637c4521685b39fb3a57866e84a773bb0abd6426275a7f00c768de99aec214ebb790bc41365cdc40074cff7c8f585bf094392a876f3f2296b7a5a080421c666789bad63ad0a7d19befbe8e4aac6182d8e4a535dde06526242d173982f1d6a82222b6a3a8cd88ed9066f45fe626eaea2f747d1aed65938776c0e440cca2a58faafaee62a119566b7e76655c879f0e730c053a5bef20fcc4bd828ca1c4bc1499b0e452424ec44821eea615fcb6e2f79cd4aeeb1f4a4e554981067bab51e5b541c6018bf9db02ed5b57a576829cc4bbbc02fad2c104042ee7a97", &(0x7f0000001c40)=""/132}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001d00)={r11, &(0x7f0000001b40)="523998f0d51ac1d40637c4521685b39fb3a57866e84a773bb0abd6426275a7f00c768de99aec214ebb790bc41365cdc40074cff7c8f585bf094392a876f3f2296b7a5a080421c666789bad63ad0a7d19befbe8e4aac6182d8e4a535dde06526242d173982f1d6a82222b6a3a8cd88ed9066f45fe626eaea2f747d1aed65938776c0e440cca2a58faafaee62a119566b7e76655c879f0e730c053a5bef20fcc4bd828ca1c4bc1499b0e452424ec44821eea615fcb6e2f79cd4aeeb1f4a4e554981067bab51e5b541c6018bf9db02ed5b57a576829cc4bbbc02fad2c104042ee7a97", &(0x7f0000001c40)=""/132}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d40)={@cgroup=r10, 0xffffffffffffffff, 0x1c, 0xc, 0x0, @void, @value=r4, @void, @void, r5}, 0x20) syz_clone(0x26a02c00, &(0x7f0000001d80)="1009575060f9273b366731264734f6ef13b3e6b00994f56a5789c41e87f82afb028b", 0x22, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="d9014944a50438cb3a7a22bc9cda0206aff72036bd8413b6c9c6185d1e0f9821b0c96b365ac074f10bed51a4a1686b724a271deac23e72f642f1b8bf60ebc2a899405782a785b40019b0dd9d5fee75a2a0f109ae669f9f7d3a40f77861b6c9cc7c8dc06729146ce4b1e6060300e7f9a9d2e99ff54de19b9fe9ce0f30270726eeae5ddcb0e3") 260.763842ms ago: executing program 4 (id=2938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r3}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2d, 'hugetlb'}]}, 0x24) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000040000110010e6133f2384e6909a63d87d21f8a5b74f1db92a1c0357e924f7df185be1111a70bfd0f0", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000e30e0000345bc000010000001f915000ffffffffbf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x90000000, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0xffffffff}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x0, 0x5dd, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r0, r0], &(0x7f0000000440)=[{0x5, 0x4, 0x10, 0x9}], 0x10, 0x1}, 0x94) 175.063565ms ago: executing program 1 (id=2939): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)}, 0xe900) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x9, 0x7, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x5}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14b201, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff0000eaffbca106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000008000000b70300000000000085000000050000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 96.631887ms ago: executing program 4 (id=2940): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790020000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000005000000090000000300000000010000", @ANYRES32=r0, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000040000000200000000000000000000800000000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000001000000009aaa000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x48, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 4 (id=2941): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x7, 0x6, 0xd, 0x0, 0x6, 0x20002, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0x7199421a}, 0x100, 0x1ff, 0x8000, 0x0, 0x78a, 0xffffff73, 0x0, 0x0, 0x1, 0x0, 0x80}, r3, 0xb, r2, 0x1) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff92, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xa}, 0x4046, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffeffffffffffffc, r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d) kernel console output (not intermixed with test programs): set to 1 [ 169.879912][ T6766] netlink: 'syz.0.691': attribute type 21 has an invalid length. [ 169.912398][ T6766] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 170.031920][ T6770] netlink: 'syz.4.693': attribute type 21 has an invalid length. [ 170.609742][ T6792] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.696'. [ 170.663248][ T6795] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 170.741892][ T6801] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 170.760311][ T6801] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.701'. [ 170.811977][ T6800] delete_channel: no stack [ 170.900233][ T6810] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.704'. [ 170.964816][ T6810] netlink: 31 bytes leftover after parsing attributes in process `syz.1.704'. [ 171.378778][ T6828] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.710'. [ 171.441746][ T6828] netlink: zone id is out of range [ 171.472464][ T6828] netlink: zone id is out of range [ 171.538421][ T6828] netlink: zone id is out of range [ 171.549409][ T6828] netlink: zone id is out of range [ 171.600752][ T6828] netlink: zone id is out of range [ 171.628109][ T6834] netlink: 'syz.3.711': attribute type 21 has an invalid length. [ 171.637649][ T6828] netlink: zone id is out of range [ 171.665844][ T6828] netlink: zone id is out of range [ 171.692579][ T6828] netlink: zone id is out of range [ 171.714899][ T6828] netlink: zone id is out of range [ 171.737249][ T6828] netlink: zone id is out of range [ 171.755389][ T51] wlan1: Trigger new scan to find an IBSS to join [ 174.151528][ T6907] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.732'. [ 174.705542][ T51] wlan1: Trigger new scan to find an IBSS to join [ 174.796327][ T4451] wlan1: Creating new IBSS network, BSSID 02:ec:9b:3c:4b:fc [ 175.021471][ T6943] netlink: 'syz.1.744': attribute type 21 has an invalid length. [ 175.711765][ T6972] netlink: 'syz.4.754': attribute type 2 has an invalid length. [ 175.733428][ T6972] netlink: 'syz.4.754': attribute type 10 has an invalid length. [ 175.744031][ T6972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.806172][ T6972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.293195][ T6980] tipc: Started in network mode [ 176.315133][ T6980] tipc: Node identity 9215a268, cluster identity 4711 [ 176.323792][ T6980] tipc: Node number set to 2450891368 [ 176.756078][ T6997] netlink: 'syz.0.760': attribute type 21 has an invalid length. [ 176.831054][ T7010] netlink: 'syz.2.767': attribute type 2 has an invalid length. [ 177.159539][ T7018] netlink: 'syz.0.771': attribute type 17 has an invalid length. [ 177.172733][ T7018] netlink: 'syz.0.771': attribute type 16 has an invalid length. [ 177.190112][ T7018] netlink: 152 bytes leftover after parsing attributes in process `syz.0.771'. [ 177.348643][ T7028] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.775'. [ 177.385595][ T7028] net_ratelimit: 202 callbacks suppressed [ 177.385613][ T7028] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 177.489497][ T7028] netlink: 188 bytes leftover after parsing attributes in process `syz.1.775'. [ 177.520956][ T7028] ksmbd: Unknown IPC event: 10, ignore. [ 177.605629][ T7038] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 177.615879][ T7038] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.626232][ T7038] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.636754][ T7038] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.655918][ T7038] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.722107][ T7038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.738133][ T7038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.752136][ T7038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.770340][ T7038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.813308][ T7038] team0: Port device geneve1 added [ 178.367660][ T7064] netlink: 'syz.3.782': attribute type 21 has an invalid length. [ 178.418450][ T7059] netlink: 'syz.2.784': attribute type 46 has an invalid length. [ 178.429512][ T7059] netlink: 36 bytes leftover after parsing attributes in process `syz.2.784'. [ 179.527833][ T7097] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 179.534869][ T7097] syzkaller1: tun_chr_ioctl cmd 35629 [ 179.747852][ T7101] team0: Port device geneve1 added [ 179.759496][ T7105] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.799'. [ 180.865742][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 180.871945][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 180.878381][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 180.878401][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 180.885312][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 181.102137][ T7150] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.811'. [ 181.505361][ T7166] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.817'. [ 181.915051][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 182.828877][ T7190] validate_nla: 1 callbacks suppressed [ 182.828893][ T7190] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 183.120048][ T7190] team0: Port device geneve1 added [ 183.339227][ T7205] netlink: 'syz.1.828': attribute type 3 has an invalid length. [ 183.348912][ T7205] netlink: 'syz.1.828': attribute type 16 has an invalid length. [ 183.358198][ T7205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.828'. [ 183.641110][ T7219] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 183.654613][ T7219] netlink: 'syz.0.834': attribute type 4 has an invalid length. [ 183.668516][ T7219] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.834'. [ 183.890742][ T7229] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.839'. [ 183.900978][ T7229] netlink: zone id is out of range [ 183.910904][ T7229] netlink: zone id is out of range [ 183.921256][ T7229] netlink: zone id is out of range [ 183.926904][ T7229] netlink: zone id is out of range [ 183.939378][ T7229] netlink: zone id is out of range [ 183.950229][ T7229] netlink: zone id is out of range [ 183.960592][ T7229] netlink: zone id is out of range [ 183.968927][ T7229] netlink: zone id is out of range [ 183.974873][ T7229] netlink: zone id is out of range [ 183.980198][ T7229] netlink: zone id is out of range [ 184.000768][ T7232] netlink: 'syz.3.840': attribute type 10 has an invalid length. [ 184.311053][ T7240] netlink: 'syz.3.843': attribute type 29 has an invalid length. [ 184.344851][ T7240] netlink: 'syz.3.843': attribute type 29 has an invalid length. [ 184.713419][ T7249] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 184.903346][ T7249] team0: Port device geneve1 added [ 185.260982][ T7277] netlink: 'syz.2.853': attribute type 19 has an invalid length. [ 185.280827][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.853'. [ 186.271399][ T7314] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.864'. [ 186.687596][ T51] wlan1: Created IBSS using preconfigured BSSID 00:8d:ff:ff:00:00 [ 186.731454][ T51] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 186.816312][ T7338] tc_dump_action: action bad kind [ 186.894017][ T7340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 186.958187][ T7340] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 187.004110][ T7348] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 187.025484][ T7350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.873'. [ 187.179251][ T7353] netlink: 128 bytes leftover after parsing attributes in process `syz.1.874'. [ 187.306023][ T7353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.343505][ T7378] validate_nla: 1 callbacks suppressed [ 188.343523][ T7378] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 188.434825][ T7378] team0: Device hsr_slave_0 failed to register rx_handler [ 188.574249][ T7382] netlink: 164 bytes leftover after parsing attributes in process `syz.1.886'. [ 188.608782][ T7383] netlink: 'syz.1.886': attribute type 21 has an invalid length. [ 189.656843][ T7409] netlink: 'syz.0.895': attribute type 10 has an invalid length. [ 189.695655][ T7409] device hsr0 entered promiscuous mode [ 189.741322][ T7409] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.788302][ T7409] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 189.826285][ T7409] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 189.899108][ T7409] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 190.229830][ T7422] netlink: 'syz.0.898': attribute type 11 has an invalid length. [ 190.264582][ T7422] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.898'. [ 190.291501][ T7430] netlink: 'syz.1.899': attribute type 2 has an invalid length. [ 190.366915][ T7430] device 0 entered promiscuous mode [ 190.657324][ T7444] netlink: 'syz.2.905': attribute type 10 has an invalid length. [ 191.170762][ T7467] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 191.427396][ T7476] netlink: 'syz.4.913': attribute type 13 has an invalid length. [ 191.477104][ T7476] netlink: 172 bytes leftover after parsing attributes in process `syz.4.913'. [ 192.176849][ T7476] erspan0: refused to change device tx_queue_len [ 192.588350][ T7508] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.925'. [ 192.638284][ T7509] netlink: 14 bytes leftover after parsing attributes in process `syz.0.922'. [ 193.000775][ T7508] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.925'. [ 193.648701][ T4284] Bluetooth: hci1: ISO packet for unknown connection handle 54 [ 194.155042][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161606][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.300327][ T7557] device sit0 entered promiscuous mode [ 194.512493][ T7561] netlink: 'syz.1.940': attribute type 21 has an invalid length. [ 195.123038][ T7570] netlink: 'syz.2.947': attribute type 3 has an invalid length. [ 195.149129][ T7570] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.947'. [ 195.703766][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.841177][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.885103][ T4451] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.892302][ T4451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.193152][ T7602] net_ratelimit: 27 callbacks suppressed [ 196.193170][ T7602] bridge_slave_0: mtu less than device minimum [ 196.287220][ T7606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.955'. [ 196.937653][ T7622] netlink: 'syz.4.962': attribute type 10 has an invalid length. [ 197.235812][ T7622] team0 (unregistering): Port device team_slave_0 removed [ 197.327042][ T7622] team0 (unregistering): Port device team_slave_1 removed [ 197.393458][ T7622] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.414575][ T7622] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.450038][ T7622] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.485448][ T7622] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.598888][ T7622] team0 (unregistering): Port device geneve1 removed [ 198.760704][ T7667] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 198.777551][ T7667] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.974'. [ 199.106003][ T7665] bridge_slave_0: mtu less than device minimum [ 199.390517][ T7675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.978'. [ 199.499858][ T7676] netlink: 152 bytes leftover after parsing attributes in process `syz.4.978'. [ 199.923885][ T7691] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 200.238360][ T7691] team0 (unregistering): Port device team_slave_0 removed [ 200.330308][ T7691] team0 (unregistering): Port device team_slave_1 removed [ 200.385043][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.393727][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.433698][ T7704] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.986'. [ 200.506101][ T7691] team0 (unregistering): Port device bridge0 removed [ 200.528489][ T7706] delete_channel: no stack [ 200.623480][ T7691] team0 (unregistering): Port device geneve1 removed [ 200.698643][ T7696] netlink: 188 bytes leftover after parsing attributes in process `syz.2.994'. [ 201.331162][ T7735] bridge_slave_0: mtu less than device minimum [ 201.357262][ T7736] netlink: 'syz.0.996': attribute type 2 has an invalid length. [ 201.385158][ T7736] netlink: 10 bytes leftover after parsing attributes in process `syz.0.996'. [ 201.769256][ T7748] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 201.999945][ T7748] team0 (unregistering): Port device team_slave_0 removed [ 202.157880][ T7748] team0 (unregistering): Port device team_slave_1 removed [ 202.207441][ T7748] team0 (unregistering): Port device geneve1 removed [ 202.691364][ T7770] netlink: 'syz.3.1006': attribute type 29 has an invalid length. [ 202.709817][ T7770] netlink: 'syz.3.1006': attribute type 29 has an invalid length. [ 203.204723][ T7786] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 203.746686][ T7796] bridge_slave_0: mtu less than device minimum [ 204.239092][ T7815] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.1020'. [ 204.289323][ T7815] openvswitch: netlink: Flow actions attr not present in new flow. [ 205.139305][ T7845] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 205.172913][ T7845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1028'. [ 205.202995][ T7845] device ipvlan1 entered promiscuous mode [ 205.218590][ T7845] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 205.342673][ T7851] netlink: 'syz.2.1030': attribute type 2 has an invalid length. [ 205.366072][ T7851] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1030'. [ 205.400020][ T7852] netlink: 'syz.2.1030': attribute type 2 has an invalid length. [ 205.428517][ T7852] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1030'. [ 205.934811][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 206.450739][ T7898] netlink: 'syz.2.1042': attribute type 21 has an invalid length. [ 206.490786][ T7898] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 206.717107][ T7893] device pim6reg1 entered promiscuous mode [ 206.865662][ T7909] netlink: 'syz.2.1045': attribute type 22 has an invalid length. [ 206.992297][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 207.567923][ T7922] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 207.964809][ T7946] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1056'. [ 208.015978][ T7946] device hsr_slave_0 left promiscuous mode [ 208.258327][ T7951] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1057'. [ 208.274737][ T7951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.322117][ T7958] sctp: [Deprecated]: syz.0.1058 (pid 7958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.322117][ T7958] Use struct sctp_sack_info instead [ 208.364257][ T7956] netlink: 'syz.1.1059': attribute type 3 has an invalid length. [ 208.383695][ T7956] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1059'. [ 208.417216][ T7951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.661013][ T7962] netlink: 'syz.3.1060': attribute type 3 has an invalid length. [ 208.677087][ T7962] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.1060'. [ 208.829285][ T7970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1062'. [ 208.918681][ T7977] netlink: 'syz.4.1065': attribute type 21 has an invalid length. [ 208.934476][ T7977] netlink: 'syz.4.1065': attribute type 3 has an invalid length. [ 208.962679][ T7977] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1065'. [ 209.140941][ T7980] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1065'. [ 209.860059][ T8000] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1072'. [ 211.834478][ T8009] validate_nla: 2 callbacks suppressed [ 211.834492][ T8009] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 211.891766][ T8009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1075'. [ 211.913381][ T8009] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 211.934970][ T8009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.998264][ T8010] netlink: 'syz.2.1076': attribute type 21 has an invalid length. [ 212.014387][ T8010] netlink: 'syz.2.1076': attribute type 10 has an invalid length. [ 212.044575][ T8010] netlink: 'syz.2.1076': attribute type 12 has an invalid length. [ 212.072973][ T8010] netlink: 'syz.2.1076': attribute type 13 has an invalid length. [ 212.098707][ T8010] netlink: 'syz.2.1076': attribute type 14 has an invalid length. [ 212.108525][ T8010] netlink: 'syz.2.1076': attribute type 15 has an invalid length. [ 212.119566][ T8010] netlink: 'syz.2.1076': attribute type 16 has an invalid length. [ 212.129550][ T8010] netlink: 'syz.2.1076': attribute type 19 has an invalid length. [ 212.141964][ T8010] netlink: 'syz.2.1076': attribute type 21 has an invalid length. [ 212.168320][ T8010] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.1076'. [ 214.217761][ T8053] Ÿë: port 1(gretap0) entered blocking state [ 214.224791][ T8053] Ÿë: port 1(gretap0) entered disabled state [ 214.239076][ T8053] device gretap0 entered promiscuous mode [ 214.298872][ T8053] Ÿë: port 2(veth0_to_team) entered blocking state [ 214.310130][ T8053] Ÿë: port 2(veth0_to_team) entered disabled state [ 214.323101][ T8053] device veth0_to_team entered promiscuous mode [ 214.687740][ T8071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 216.371617][ T8135] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1118'. [ 216.503709][ T8148] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1121'. [ 216.550596][ T8134] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.559119][ T8134] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.703498][ T8158] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1123'. [ 216.725328][ T8158] openvswitch: netlink: Flow key attr not present in new flow. [ 216.874067][ T8158] device syzkaller0 entered promiscuous mode [ 217.071396][ T8166] pimreg0: tun_chr_ioctl cmd 35111 [ 217.129304][ T8166] pimreg0: tun_chr_ioctl cmd 1074025677 [ 217.159369][ T8166] pimreg0: linktype set to 779 [ 217.236697][ T8166] validate_nla: 5 callbacks suppressed [ 217.236718][ T8166] netlink: 'syz.2.1125': attribute type 3 has an invalid length. [ 217.318453][ T8166] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1125'. [ 218.144174][ T8186] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 218.164481][ T8186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'. [ 218.209511][ T8186] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 218.281515][ T8193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.291692][ T8193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.488493][ T8199] netlink: 'syz.1.1138': attribute type 29 has an invalid length. [ 218.516802][ T8199] netlink: 'syz.1.1138': attribute type 29 has an invalid length. [ 218.559717][ T8203] netlink: 'syz.1.1138': attribute type 29 has an invalid length. [ 218.708081][ T8207] netlink: 'syz.2.1139': attribute type 3 has an invalid length. [ 218.740014][ T8207] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1139'. [ 219.007976][ T8215] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1140'. [ 219.170814][ T8222] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1143'. [ 219.243424][ T8222] openvswitch: netlink: Flow key attr not present in new flow. [ 220.264842][ T8237] device syzkaller0 entered promiscuous mode [ 221.293796][ T4284] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 223.014545][ T8248] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 223.049346][ T8248] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1148'. [ 223.587320][ T8291] IPv6: pim6reg1: Disabled Multicast RS [ 223.714198][ T8294] device syzkaller0 entered promiscuous mode [ 225.588912][ T8314] netlink: 'syz.3.1166': attribute type 28 has an invalid length. [ 225.606589][ T8317] netlink: 'syz.3.1166': attribute type 10 has an invalid length. [ 225.642062][ T8317] team0: Device veth1_vlan failed to register rx_handler [ 226.248061][ T8355] ÿ: renamed from bond_slave_0 [ 226.383054][ T8360] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1177'. [ 227.352945][ T8355] netlink: 'syz.4.1176': attribute type 2 has an invalid length. [ 227.367753][ T8355] netlink: 'syz.4.1176': attribute type 11 has an invalid length. [ 227.383999][ T8355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1176'. [ 227.424324][ T8364] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 227.898110][ T8384] netlink: 'syz.0.1185': attribute type 2 has an invalid length. [ 227.962036][ T8379] device syzkaller0 entered promiscuous mode [ 229.249115][ T8384] device 1 entered promiscuous mode [ 231.035399][ T8425] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1194'. [ 231.045189][ T8429] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 231.057391][ T8429] device hsr0 entered promiscuous mode [ 231.087913][ T8429] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.126491][ T8429] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 231.137187][ T8429] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 231.166617][ T8429] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 231.194439][ T8433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1196'. [ 231.448323][ T8444] netlink: 'syz.2.1199': attribute type 2 has an invalid length. [ 231.497571][ T8444] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1199'. [ 231.564739][ T8450] netlink: 'syz.0.1201': attribute type 13 has an invalid length. [ 231.907870][ T8464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1207'. [ 232.874556][ T8486] netlink: 'syz.3.1210': attribute type 12 has an invalid length. [ 232.914916][ T8486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'. [ 233.120948][ T8492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'. [ 233.628038][ T8516] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 233.646449][ T8516] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1216'. [ 233.740256][ T8514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1217'. [ 235.298227][ T8517] IPv6: Can't replace route, no match found [ 235.304598][ T8514] netlink: 'syz.0.1217': attribute type 10 has an invalid length. [ 235.364115][ T8514] team0: Device hsr_slave_0 failed to register rx_handler [ 235.465897][ T8509] device syzkaller0 entered promiscuous mode [ 237.444338][ T8525] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1219'. [ 237.454570][ T8541] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 237.755434][ T8552] netlink: 'syz.3.1226': attribute type 10 has an invalid length. [ 237.955924][ T8552] team0 (unregistering): Port device team_slave_1 removed [ 237.983147][ T8552] team0 (unregistering): Port device bridge0 removed [ 238.068378][ T8552] team0 (unregistering): Port device geneve1 removed [ 238.578328][ T8582] netlink: 'syz.3.1235': attribute type 6 has an invalid length. [ 238.590697][ T8582] netlink: 'syz.3.1235': attribute type 30 has an invalid length. [ 238.642617][ T8585] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1236'. [ 239.543182][ T8618] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 239.648588][ T8618] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1244'. [ 240.047215][ T8641] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 240.117227][ T8641] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1250'. [ 241.018403][ T8684] netlink: 'syz.3.1264': attribute type 10 has an invalid length. [ 241.077235][ T8684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1264'. [ 241.148187][ T8684] bridge0: port 3(veth0_vlan) entered blocking state [ 241.167186][ T8684] bridge0: port 3(veth0_vlan) entered disabled state [ 241.192154][ T8684] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 241.281118][ T8695] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1266'. [ 241.446757][ T8698] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 241.740366][ T8710] netlink: 'syz.3.1270': attribute type 2 has an invalid length. [ 241.781894][ T8710] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 241.824405][ T8710] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1270'. [ 241.899825][ T8712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1270'. [ 242.020460][ T8710] device lo entered promiscuous mode [ 242.058082][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.185716][ T8727] device syzkaller0 entered promiscuous mode [ 242.257441][ T8729] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1276'. [ 242.743046][ T8742] pimreg: tun_chr_ioctl cmd 2147767520 [ 242.769032][ T8742] validate_nla: 2 callbacks suppressed [ 242.769055][ T8742] netlink: 'syz.3.1279': attribute type 21 has an invalid length. [ 242.800885][ T8742] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1279'. [ 242.809235][ T8746] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1282'. [ 242.848409][ T8746] ksmbd: Unknown IPC event: 10, ignore. [ 243.095860][ T8754] netlink: 'syz.1.1284': attribute type 10 has an invalid length. [ 243.372491][ T8768] netlink: 'syz.2.1287': attribute type 10 has an invalid length. [ 243.462323][ T8775] netlink: 'syz.4.1289': attribute type 3 has an invalid length. [ 243.511456][ T8770] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1288'. [ 243.531685][ T8775] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1289'. [ 243.944826][ T8792] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1294'. [ 244.051081][ T8794] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 244.130948][ T8794] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1292'. [ 244.220076][ T8809] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1296'. [ 244.300054][ T8809] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 244.389442][ T8811] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 246.116358][ T8861] netlink: 'syz.3.1312': attribute type 2 has an invalid length. [ 246.136214][ T8863] netlink: 'syz.0.1313': attribute type 10 has an invalid length. [ 246.152221][ T8867] netlink: 'syz.1.1314': attribute type 11 has an invalid length. [ 246.189274][ T8867] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1314'. [ 246.268488][ T8870] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 246.289860][ T8863] bond0: (slave team0): Releasing backup interface [ 246.302359][ T8870] netlink: 174332 bytes leftover after parsing attributes in process `syz.2.1326'. [ 246.446058][ T8863] team0 (unregistering): Port device team_slave_0 removed [ 246.553721][ T8863] team0 (unregistering): Port device team_slave_1 removed [ 246.648922][ T8867] netlink: 'syz.1.1314': attribute type 21 has an invalid length. [ 246.662031][ T8867] netlink: 9618 bytes leftover after parsing attributes in process `syz.1.1314'. [ 246.676829][ T8866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.000513][ T8948] __nla_validate_parse: 3 callbacks suppressed [ 248.000533][ T8948] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.1340'. [ 248.247634][ T8968] C: renamed from team_slave_0 [ 248.952530][ T8968] validate_nla: 11 callbacks suppressed [ 248.952547][ T8968] netlink: 'syz.1.1345': attribute type 3 has an invalid length. [ 248.972356][ T8968] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1345'. [ 249.004457][ T8968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 249.227686][ T8986] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 249.254370][ T8986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1350'. [ 249.295967][ T8986] bridge0: port 3(ipvlan1) entered blocking state [ 249.304070][ T8986] bridge0: port 3(ipvlan1) entered disabled state [ 249.350970][ T8986] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 249.424539][ T8986] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 249.491703][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.525424][ T8986] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 249.910801][ T9008] netlink: 'syz.1.1357': attribute type 10 has an invalid length. [ 252.624328][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 252.882933][ T9023] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1364'. [ 252.909303][ T9024] netlink: 'syz.3.1361': attribute type 21 has an invalid length. [ 252.932581][ T9023] openvswitch: netlink: Flow actions attr not present in new flow. [ 252.974482][ T9024] netlink: 'syz.3.1361': attribute type 11 has an invalid length. [ 253.938878][ T9035] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.1362'. [ 254.402560][ T9039] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1367'. [ 255.593843][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.600500][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028547][ T9055] netlink: 'syz.1.1369': attribute type 3 has an invalid length. [ 256.044844][ T9055] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1369'. [ 256.057167][ T9054] netlink: 'syz.3.1371': attribute type 21 has an invalid length. [ 256.074681][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1371'. [ 256.237001][ T9050] netlink: 'syz.1.1369': attribute type 21 has an invalid length. [ 256.254732][ T9050] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1369'. [ 256.287566][ T9050] netlink: 'syz.1.1369': attribute type 5 has an invalid length. [ 256.314678][ T9050] netlink: 'syz.1.1369': attribute type 6 has an invalid length. [ 256.332509][ T9081] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1375'. [ 256.335070][ T9050] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1369'. [ 256.397721][ T9080] netlink: 'syz.0.1378': attribute type 8 has an invalid length. [ 256.407011][ T9081] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1375'. [ 256.422024][ T9078] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1375'. [ 256.432221][ T9080] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 256.442958][ T9082] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1375'. [ 256.616401][ T9091] netlink: 'syz.2.1381': attribute type 10 has an invalid length. [ 256.983523][ T9101] device sit0 entered promiscuous mode [ 257.596854][ T9128] netlink: 'syz.0.1391': attribute type 12 has an invalid length. [ 257.673742][ T9130] netlink: 'syz.0.1391': attribute type 46 has an invalid length. [ 260.928330][ T9177] __nla_validate_parse: 5 callbacks suppressed [ 260.928365][ T9177] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.1406'. [ 260.949248][ T9181] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.1406'. [ 261.046213][ T9182] validate_nla: 3 callbacks suppressed [ 261.046250][ T9182] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 261.789106][ T9210] netlink: 'syz.0.1414': attribute type 3 has an invalid length. [ 261.830507][ T9210] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1414'. [ 262.028104][ T9214] netlink: 'syz.0.1414': attribute type 21 has an invalid length. [ 262.050884][ T9214] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1414'. [ 262.080872][ T9214] netlink: 'syz.0.1414': attribute type 5 has an invalid length. [ 262.097621][ T9214] netlink: 'syz.0.1414': attribute type 6 has an invalid length. [ 262.124852][ T9214] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1414'. [ 262.319352][ T9224] netlink: 'syz.3.1419': attribute type 3 has an invalid length. [ 262.364586][ T9224] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1419'. [ 262.451854][ T9227] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 262.468112][ T9227] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1421'. [ 262.656055][ T9237] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 266.181985][ T9285] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1439'. [ 266.433971][ T9292] netlink: 'syz.2.1440': attribute type 3 has an invalid length. [ 266.489317][ T9292] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1440'. [ 266.520841][ T9294] netlink: 'syz.2.1440': attribute type 3 has an invalid length. [ 266.529220][ T9293] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 266.554516][ T9294] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1440'. [ 266.556214][ T9296] netlink: 'syz.4.1442': attribute type 1 has an invalid length. [ 266.584838][ T9296] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1442'. [ 269.715462][ T9316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1447'. [ 270.417053][ T9327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1451'. [ 270.427506][ T9331] netlink: 'syz.4.1451': attribute type 12 has an invalid length. [ 270.446723][ T9331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1451'. [ 270.457506][ T9342] netlink: 'syz.4.1451': attribute type 46 has an invalid length. [ 270.471039][ T9342] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1451'. [ 270.756832][ T9354] netlink: 'syz.1.1457': attribute type 4 has an invalid length. [ 270.778057][ T9350] netlink: 'syz.3.1455': attribute type 10 has an invalid length. [ 270.808003][ T9354] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1457'. [ 270.920497][ T9366] netlink: 'syz.0.1460': attribute type 4 has an invalid length. [ 270.948713][ T9366] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1460'. [ 271.205307][ T9371] netlink: 'syz.3.1462': attribute type 15 has an invalid length. [ 272.096926][ T9400] device wg2 entered promiscuous mode [ 272.346656][ T9401] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1469'. [ 272.772809][ T9414] validate_nla: 1 callbacks suppressed [ 272.772846][ T9414] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 273.573614][ T9434] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 273.595591][ T9434] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1479'. [ 273.639247][ T9435] netlink: 'syz.1.1479': attribute type 2 has an invalid length. [ 273.664209][ T9435] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1479'. [ 274.494679][ T9460] netlink: 'syz.3.1483': attribute type 3 has an invalid length. [ 274.563357][ T9456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1485'. [ 274.573362][ T9461] netlink: 'syz.3.1483': attribute type 3 has an invalid length. [ 274.581415][ T9460] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1483'. [ 274.679351][ T9461] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1483'. [ 276.050121][ T9465] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 276.133892][ T9476] netlink: 'syz.2.1499': attribute type 21 has an invalid length. [ 276.221883][ T9479] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.1490'. [ 276.327913][ T9481] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 276.395876][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1491'. [ 276.443884][ T9481] device dummy0 entered promiscuous mode [ 276.452899][ T9481] bridge0: port 3(dummy0) entered blocking state [ 276.463628][ T9481] bridge0: port 3(dummy0) entered disabled state [ 276.745677][ T9504] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 276.979287][ T9515] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1498'. [ 277.437100][ T9529] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 277.743752][ T9547] netlink: 'syz.1.1508': attribute type 3 has an invalid length. [ 277.764669][ T9547] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1508'. [ 278.082074][ T9545] device syzkaller0 entered promiscuous mode [ 278.144026][ T9558] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1509'. [ 278.190618][ T9558] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 283.590200][ T9562] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1511'. [ 283.599555][ T9562] tc_dump_action: action bad kind [ 283.614451][ T9594] validate_nla: 1 callbacks suppressed [ 283.614468][ T9594] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 283.653392][ T9595] netlink: 'syz.2.1519': attribute type 10 has an invalid length. [ 283.845745][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'. [ 283.873846][ T9607] netlink: 'syz.1.1523': attribute type 27 has an invalid length. [ 283.896776][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 283.906983][ T9607] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 283.920752][ T9599] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1522'. [ 283.953230][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 283.965032][ T9599] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1522'. [ 283.994783][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 284.025750][ T9599] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1522'. [ 284.173258][ T9606] device syzkaller0 entered promiscuous mode [ 284.255655][ T9616] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.1528'. [ 284.565636][ T9630] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1530'. [ 289.193194][ T9644] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 289.206878][ T9651] netlink: 'syz.1.1537': attribute type 39 has an invalid length. [ 289.395834][ T9679] netlink: 'syz.1.1543': attribute type 17 has an invalid length. [ 289.403898][ T9679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1543'. [ 289.416386][ T9679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 289.432561][ T9679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.987973][ T9712] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 290.167145][ T9726] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1556'. [ 290.434536][ T9744] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1561'. [ 290.603744][ T9756] -: renamed from syzkaller0 [ 290.753525][ T9760] netlink: 'syz.2.1567': attribute type 10 has an invalid length. [ 290.762975][ T9763] netlink: 'syz.4.1568': attribute type 46 has an invalid length. [ 290.771338][ T9763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1568'. [ 290.920214][ T9765] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1569'. [ 291.381733][ T9786] TCP: TCP_TX_DELAY enabled [ 291.888646][ T9808] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 291.912906][ T9808] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1580'. [ 291.935227][ T9810] netlink: 'syz.4.1580': attribute type 29 has an invalid length. [ 292.061474][ T9810] netlink: 'syz.4.1580': attribute type 29 has an invalid length. [ 292.073342][ T9811] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 292.087724][ T9808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1580'. [ 292.102014][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1580'. [ 292.428638][ T9821] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1584'. [ 292.525144][ T9825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1585'. [ 292.917350][ T9850] device hsr_slave_0 left promiscuous mode [ 292.933830][ T9850] device hsr_slave_1 left promiscuous mode [ 293.373032][ T9860] Ÿë: port 1(gretap0) entered blocking state [ 293.411892][ T9860] Ÿë: port 1(gretap0) entered disabled state [ 293.463400][ T9860] device gretap0 entered promiscuous mode [ 293.646609][ T9855] device syzkaller0 entered promiscuous mode [ 294.497770][ T9888] __nla_validate_parse: 3 callbacks suppressed [ 294.497788][ T9888] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1603'. [ 297.129238][ T9895] sctp: [Deprecated]: syz.2.1604 (pid 9895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.129238][ T9895] Use struct sctp_sack_info instead [ 298.927440][ T9888] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1603'. [ 298.937513][ T9891] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1603'. [ 298.947519][ T9908] validate_nla: 4 callbacks suppressed [ 298.947534][ T9908] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 299.169344][ T9917] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1611'. [ 300.752661][ T9952] netlink: 'syz.2.1620': attribute type 21 has an invalid length. [ 302.299581][ T9958] netlink: 'syz.1.1623': attribute type 10 has an invalid length. [ 302.332174][ T9965] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1621'. [ 306.104388][T10014] netlink: 'syz.0.1637': attribute type 21 has an invalid length. [ 306.128858][T10014] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1637'. [ 306.244765][T10024] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1642'. [ 306.267135][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1641'. [ 306.327180][T10023] netlink: 'syz.3.1641': attribute type 12 has an invalid length. [ 306.351198][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1641'. [ 306.391415][T10023] tun0: tun_chr_ioctl cmd 1074812117 [ 306.473458][T10033] tun0: tun_chr_ioctl cmd 1074025681 [ 306.561181][T10036] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1645'. [ 306.600114][T10036] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1645'. [ 306.659953][T10037] netlink: 'syz.1.1644': attribute type 21 has an invalid length. [ 306.872677][T10047] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1649'. [ 306.900658][T10053] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1647'. [ 307.047610][T10057] netlink: 'syz.1.1653': attribute type 11 has an invalid length. [ 307.066944][T10057] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1653'. [ 307.886708][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.999235][T10079] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1667'. [ 308.064165][T10081] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1658'. [ 308.098599][T10081] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1658'. [ 308.352650][T10096] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 308.375644][T10096] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 308.413323][T10099] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 308.424964][T10096] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 308.492428][T10099] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 308.512185][T10098] netlink: 'syz.1.1663': attribute type 7 has an invalid length. [ 308.658497][T10105] netlink: 'syz.4.1664': attribute type 16 has an invalid length. [ 308.704358][T10105] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1664'. [ 309.872599][T10137] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1673'. [ 309.917585][T10137] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1673'. [ 310.003750][T10150] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1674'. [ 310.064652][T10150] device hsr_slave_0 left promiscuous mode [ 310.096018][T10150] device hsr_slave_1 left promiscuous mode [ 310.161793][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 310.545985][T10164] device syzkaller0 entered promiscuous mode [ 313.290047][T10187] validate_nla: 12 callbacks suppressed [ 313.290060][T10187] netlink: 'syz.4.1689': attribute type 17 has an invalid length. [ 313.310122][T10187] netlink: 'syz.4.1689': attribute type 16 has an invalid length. [ 313.319334][T10187] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1689'. [ 313.336320][T10199] netlink: 'syz.0.1692': attribute type 10 has an invalid length. [ 313.346736][T10197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1691'. [ 314.421388][T10222] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 314.434457][T10222] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1700'. [ 316.842362][T10244] tap0: tun_chr_ioctl cmd 1074812118 [ 317.005672][T10247] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 317.027053][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.033405][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.081474][T10250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1708'. [ 317.722271][T10286] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1719'. [ 317.845143][T10295] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 318.036237][T10296] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.1719'. [ 318.300730][T10313] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 318.851217][T10333] netlink: 'syz.4.1736': attribute type 3 has an invalid length. [ 318.871186][T10333] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1736'. [ 318.871774][T10332] netlink: 'syz.0.1737': attribute type 10 has an invalid length. [ 319.628656][T10345] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1742'. [ 319.872741][T10356] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.362898][T10367] delete_channel: no stack [ 320.925705][T10376] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 320.955448][T10376] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 320.976269][T10379] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 321.439552][T10384] netlink: 'syz.1.1752': attribute type 21 has an invalid length. [ 321.482821][T10384] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1752'. [ 321.827067][T10395] netlink: 'syz.0.1756': attribute type 3 has an invalid length. [ 321.857022][T10391] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 321.874603][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1756'. [ 321.903975][T10397] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1756'. [ 322.532948][T10403] device wlan1 entered promiscuous mode [ 322.889823][T10410] netlink: 'syz.0.1761': attribute type 21 has an invalid length. [ 322.919897][T10410] netlink: 'syz.0.1761': attribute type 6 has an invalid length. [ 322.970162][T10412] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1761'. [ 323.004664][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1761'. [ 324.059431][T10433] validate_nla: 1 callbacks suppressed [ 324.059451][T10433] netlink: 'syz.1.1766': attribute type 10 has an invalid length. [ 325.174502][T10449] netlink: 'syz.0.1771': attribute type 10 has an invalid length. [ 325.320418][T10451] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1769'. [ 326.899168][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 3875 [ 329.825005][T10477] netlink: 'syz.4.1778': attribute type 2 has an invalid length. [ 329.832791][T10477] netlink: 'syz.4.1778': attribute type 8 has an invalid length. [ 329.845059][T10477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1778'. [ 329.863753][T10451] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 330.077267][T10498] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1786'. [ 330.131811][T10500] netlink: 'syz.4.1785': attribute type 10 has an invalid length. [ 330.161008][T10498] netlink: 'syz.1.1786': attribute type 13 has an invalid length. [ 330.175327][T10498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1786'. [ 330.228158][T10498] syz_tun: refused to change device tx_queue_len [ 330.256306][T10498] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 330.508122][T10517] netlink: 'syz.2.1792': attribute type 3 has an invalid length. [ 330.518240][T10517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1792'. [ 333.259633][T10561] netlink: 'syz.2.1805': attribute type 7 has an invalid length. [ 333.840830][T10571] netlink: 'syz.0.1812': attribute type 1 has an invalid length. [ 333.867080][T10571] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1812'. [ 333.930496][T10574] netlink: 'syz.3.1811': attribute type 10 has an invalid length. [ 333.942485][T10574] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1811'. [ 334.335834][T10583] netlink: 'syz.0.1814': attribute type 21 has an invalid length. [ 334.854526][T10596] €Â0: renamed from pim6reg1 [ 335.331382][T10603] netlink: 198388 bytes leftover after parsing attributes in process `syz.2.1819'. [ 336.085115][T10615] netlink: 'syz.1.1825': attribute type 10 has an invalid length. [ 336.166728][T10615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1825'. [ 336.193071][T10615] bridge0: port 4(ipvlan1) entered blocking state [ 336.240216][T10615] bridge0: port 4(ipvlan1) entered disabled state [ 336.257514][T10615] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 336.960735][T10627] netlink: 'syz.4.1829': attribute type 3 has an invalid length. [ 337.036996][T10628] netlink: 'syz.0.1828': attribute type 153 has an invalid length. [ 337.045769][T10627] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 337.053633][T10627] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1829'. [ 337.073201][T10628] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.1828'. [ 338.007767][T10651] netlink: 'syz.1.1837': attribute type 41 has an invalid length. [ 339.751745][T10686] device lo entered promiscuous mode [ 339.764992][T10686] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 339.958525][T10688] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1851'. [ 340.007219][T10692] netlink: 7994 bytes leftover after parsing attributes in process `syz.3.1851'. [ 340.052022][T10688] netlink: 7994 bytes leftover after parsing attributes in process `syz.3.1851'. [ 340.762291][T10711] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.1856'. [ 340.825510][T10711] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1856'. [ 341.706864][T10734] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1864'. [ 342.735775][T10763] delete_channel: no stack [ 343.241548][T10775] netlink: 'syz.2.1875': attribute type 29 has an invalid length. [ 343.371693][T10780] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1878'. [ 343.401012][T10775] netlink: 'syz.2.1875': attribute type 29 has an invalid length. [ 343.456841][T10780] netlink: 'syz.1.1878': attribute type 12 has an invalid length. [ 343.475595][T10780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1878'. [ 344.347813][T10798] netlink: 'syz.2.1881': attribute type 11 has an invalid length. [ 344.488261][T10798] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1881'. [ 344.945457][T10798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.356392][T10850] netlink: 'syz.1.1898': attribute type 21 has an invalid length. [ 346.398172][T10850] netlink: 'syz.1.1898': attribute type 3 has an invalid length. [ 346.411087][T10850] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1898'. [ 346.478295][T10850] netlink: 'syz.1.1898': attribute type 10 has an invalid length. [ 346.590742][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1901'. [ 346.611246][T10855] netlink: 'syz.0.1900': attribute type 3 has an invalid length. [ 346.625845][T10857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1901'. [ 346.650488][T10855] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1900'. [ 347.086545][T10867] tap0: tun_chr_ioctl cmd 1074812118 [ 347.212944][T10874] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1908'. [ 347.253300][T10874] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1908'. [ 347.855230][T10897] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1915'. [ 348.889074][T10904] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 348.979784][T10910] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1922'. [ 349.134105][T10916] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1923'. [ 349.309635][T10925] netlink: 'syz.3.1928': attribute type 2 has an invalid length. [ 349.749075][T10946] netlink: 'syz.2.1933': attribute type 5 has an invalid length. [ 349.751234][T10943] netlink: 'syz.1.1930': attribute type 1 has an invalid length. [ 349.780805][T10946] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1933'. [ 349.845419][T10943] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1930'. [ 350.535603][T10952] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 351.082626][T10974] netlink: 'syz.1.1941': attribute type 25 has an invalid length. [ 351.114327][T10974] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1941'. [ 351.182021][T10979] device syzkaller0 entered promiscuous mode [ 351.510688][T10995] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 351.999170][T11004] netlink: 'syz.2.1952': attribute type 12 has an invalid length. [ 352.065917][T11004] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1952'. [ 352.707191][T11032] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1958'. [ 352.825188][T11028] netlink: 'syz.2.1957': attribute type 29 has an invalid length. [ 352.835897][T11028] netlink: 'syz.2.1957': attribute type 29 has an invalid length. [ 353.405267][T11055] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1966'. [ 353.565091][T11063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1967'. [ 353.870780][T11067] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1969'. [ 353.903462][ T4284] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.208762][T11086] validate_nla: 6 callbacks suppressed [ 354.208858][T11086] netlink: 'syz.4.1974': attribute type 39 has an invalid length. [ 354.743986][T11091] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 355.198550][T11117] netlink: 'syz.3.1985': attribute type 29 has an invalid length. [ 355.258522][T11117] netlink: 'syz.3.1985': attribute type 29 has an invalid length. [ 355.472838][T11136] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 355.481234][T11136] netlink: 'syz.4.1991': attribute type 3 has an invalid length. [ 355.489930][T11136] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1991'. [ 356.899225][T11133] netlink: 'syz.2.1987': attribute type 21 has an invalid length. [ 356.907780][T11133] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1987'. [ 356.916908][T11133] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1987'. [ 356.929175][T11139] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 357.239888][T11160] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 357.273618][T11160] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1998'. [ 357.310794][T11160] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1998'. [ 357.357466][T11160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.389287][T11160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.411028][T11160] bond0 (unregistering): Released all slaves [ 357.444536][T11170] netlink: 'syz.4.1999': attribute type 2 has an invalid length. [ 358.625826][T11212] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2013'. [ 359.072340][T11232] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2020'. [ 359.743786][T11252] validate_nla: 3 callbacks suppressed [ 359.743805][T11252] netlink: 'syz.2.2026': attribute type 3 has an invalid length. [ 359.807096][T11256] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 359.834800][T11252] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2026'. [ 359.864821][T11256] netlink: 'syz.2.2026': attribute type 16 has an invalid length. [ 359.881306][T11242] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2023'. [ 359.907464][T11256] netlink: 'syz.2.2026': attribute type 3 has an invalid length. [ 359.939486][T11256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2026'. [ 365.177415][T11306] netlink: 'syz.0.2050': attribute type 2 has an invalid length. [ 365.226502][T11306] netlink: 'syz.0.2050': attribute type 8 has an invalid length. [ 365.267464][T11306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2050'. [ 365.322835][T11302] netlink: 'syz.3.2039': attribute type 25 has an invalid length. [ 365.339018][T11302] netlink: 'syz.3.2039': attribute type 29 has an invalid length. [ 365.360700][T11302] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2039'. [ 365.632110][T11320] netlink: 'syz.3.2044': attribute type 21 has an invalid length. [ 365.683030][T11317] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2041'. [ 366.245162][ T4284] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 369.278767][T11373] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2059'. [ 369.320809][T11373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2059'. [ 370.019285][T11379] netlink: 'syz.0.2061': attribute type 29 has an invalid length. [ 370.694349][T11379] netlink: 'syz.0.2061': attribute type 29 has an invalid length. [ 370.717367][T11380] netlink: 'syz.0.2061': attribute type 29 has an invalid length. [ 374.359689][T11404] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 374.381038][T11404] dvmrp1: ignored: set checksum disabled [ 374.409193][T11404] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 374.432346][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 374.451965][T11404] netlink: 'syz.0.2078': attribute type 29 has an invalid length. [ 374.482417][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 374.718098][T11427] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2068'. [ 374.740787][T11431] netlink: 'syz.3.2074': attribute type 1 has an invalid length. [ 374.748629][T11431] netlink: 'syz.3.2074': attribute type 3 has an invalid length. [ 374.757074][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2074'. [ 378.634792][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.641199][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.017868][T11471] netlink: 'syz.1.2086': attribute type 5 has an invalid length. [ 379.037083][T11472] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 379.066085][T11472] dvmrp1: ignored: set checksum disabled [ 379.079620][T11472] netlink: 'syz.4.2087': attribute type 29 has an invalid length. [ 379.090372][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 379.139419][T11472] netlink: 'syz.4.2087': attribute type 29 has an invalid length. [ 379.156612][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2087'. [ 379.390007][T11488] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2090'. [ 381.385658][T11512] device pim6reg1 entered promiscuous mode [ 382.018777][T11549] device wlan1 left promiscuous mode [ 382.561848][ T4284] Bluetooth: hci4: SCO packet for unknown connection handle 3346 [ 382.905735][T11581] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 382.966664][T11583] netlink: 'syz.4.2119': attribute type 29 has an invalid length. [ 382.979861][T11583] netlink: 'syz.4.2119': attribute type 29 has an invalid length. [ 382.991832][T11584] netlink: 'syz.2.2117': attribute type 29 has an invalid length. [ 383.005050][T11581] netlink: 'syz.2.2117': attribute type 3 has an invalid length. [ 383.006217][T11583] netlink: 'syz.4.2119': attribute type 29 has an invalid length. [ 383.012814][T11581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2117'. [ 383.040886][T11584] netlink: 'syz.2.2117': attribute type 29 has an invalid length. [ 383.850905][T11586] netlink: 'syz.3.2120': attribute type 11 has an invalid length. [ 383.869879][T11586] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2120'. [ 383.900883][T11591] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2123'. [ 383.996565][T11596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.407503][T11606] device pim6reg1 entered promiscuous mode [ 384.569301][T11613] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2127'. [ 384.625612][T11605] delete_channel: no stack [ 384.755456][T11620] delete_channel: no stack [ 385.062727][T11622] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2130'. [ 385.422218][T11633] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2134'. [ 385.551133][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 387.064141][T11684] validate_nla: 5 callbacks suppressed [ 387.064158][T11684] netlink: 'syz.2.2144': attribute type 2 has an invalid length. [ 387.149137][T11684] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2144'. [ 388.197313][T11726] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2160'. [ 389.116755][T11752] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 392.500039][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2182'. [ 393.764145][T11874] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 393.795180][T11874] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2202'. [ 394.846717][T11916] netlink: 'syz.3.2214': attribute type 2 has an invalid length. [ 394.879151][T11919] netlink: 'syz.2.2216': attribute type 10 has an invalid length. [ 394.890370][T11916] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2214'. [ 395.178116][T11936] netlink: 'syz.1.2220': attribute type 2 has an invalid length. [ 396.062196][T11946] netlink: 'syz.4.2224': attribute type 21 has an invalid length. [ 396.259349][T11952] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.2227'. [ 396.786513][T11978] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2232'. [ 396.807765][T11978] netlink: zone id is out of range [ 396.822293][T11978] netlink: del zone limit has 4 unknown bytes [ 397.136482][T11989] netlink: 'syz.0.2234': attribute type 21 has an invalid length. [ 397.155597][T11989] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2234'. [ 397.239999][T11992] device pim6reg1 entered promiscuous mode [ 397.577037][T12010] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2240'. [ 397.673106][T12017] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2242'. [ 397.808880][T12024] netlink: 'syz.2.2244': attribute type 2 has an invalid length. [ 397.954106][T12026] netlink: 'syz.2.2245': attribute type 9 has an invalid length. [ 397.964922][T12026] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2245'. [ 398.014572][T12026] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2245'. [ 398.438001][T12029] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2246'. [ 398.571137][T12047] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 398.614579][T12047] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 398.953199][T12073] device syzkaller0 entered promiscuous mode [ 399.146582][T12082] netlink: 'syz.3.2260': attribute type 3 has an invalid length. [ 399.224101][T12082] __nla_validate_parse: 1 callbacks suppressed [ 399.253302][T12088] netlink: 'syz.3.2260': attribute type 3 has an invalid length. [ 399.267191][T12082] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2260'. [ 399.268051][T12088] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2260'. [ 400.824353][T12100] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2264'. [ 401.257153][T12122] device syzkaller0 entered promiscuous mode [ 401.903286][T12144] netlink: 'syz.3.2276': attribute type 8 has an invalid length. [ 401.912087][T12144] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 401.921475][T12144] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.2276'. [ 403.469104][T12147] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 404.077976][T12178] netlink: 'syz.4.2285': attribute type 1 has an invalid length. [ 404.090511][T12182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2287'. [ 404.120278][T12186] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2287'. [ 404.189768][T12187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2288'. [ 404.382259][ T4284] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 404.393540][T12198] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2291'. [ 405.379291][T12251] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 406.420705][T12271] FAULT_INJECTION: forcing a failure. [ 406.420705][T12271] name failslab, interval 1, probability 0, space 0, times 1 [ 406.433996][T12271] CPU: 1 PID: 12271 Comm: syz.3.2311 Not tainted syzkaller #0 [ 406.441487][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.451593][T12271] Call Trace: [ 406.454944][T12271] [ 406.457922][T12271] dump_stack_lvl+0x188/0x24e [ 406.462678][T12271] ? show_regs_print_info+0x12/0x12 [ 406.467938][T12271] ? load_image+0x400/0x400 [ 406.472462][T12271] ? __might_sleep+0xd0/0xd0 [ 406.477111][T12271] ? __lock_acquire+0x7d10/0x7d10 [ 406.482195][T12271] ? aa_file_perm+0x3ea/0xf00 [ 406.486913][T12271] should_fail_ex+0x399/0x4d0 [ 406.491632][T12271] should_failslab+0x5/0x20 [ 406.496173][T12271] slab_pre_alloc_hook+0x59/0x310 [ 406.501233][T12271] ? kernfs_fop_write_iter+0x155/0x520 [ 406.506725][T12271] __kmem_cache_alloc_node+0x4f/0x260 [ 406.512103][T12271] ? kernfs_fop_write_iter+0x155/0x520 [ 406.517583][T12271] __kmalloc+0xa0/0x240 [ 406.521852][T12271] kernfs_fop_write_iter+0x155/0x520 [ 406.527208][T12271] vfs_write+0x4b1/0xa30 [ 406.531582][T12271] ? file_end_write+0x250/0x250 [ 406.536457][T12271] ? __fget_files+0x43d/0x4b0 [ 406.541197][T12271] ? __fdget_pos+0x2ae/0x360 [ 406.545794][T12271] ? ksys_write+0x71/0x250 [ 406.550250][T12271] ksys_write+0x14c/0x250 [ 406.554602][T12271] ? __ia32_sys_read+0x80/0x80 [ 406.559384][T12271] ? lockdep_hardirqs_on+0x94/0x140 [ 406.564610][T12271] do_syscall_64+0x4c/0xa0 [ 406.569030][T12271] ? clear_bhb_loop+0x60/0xb0 [ 406.573813][T12271] ? clear_bhb_loop+0x60/0xb0 [ 406.578502][T12271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.584407][T12271] RIP: 0033:0x7f05b579ce59 [ 406.588877][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.608526][T12271] RSP: 002b:00007f05b66f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.616991][T12271] RAX: ffffffffffffffda RBX: 00007f05b5a15fa0 RCX: 00007f05b579ce59 [ 406.625056][T12271] RDX: 000000000000002f RSI: 0000200000000180 RDI: 0000000000000004 [ 406.633027][T12271] RBP: 00007f05b66f5090 R08: 0000000000000000 R09: 0000000000000000 [ 406.641069][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.649080][T12271] R13: 00007f05b5a16038 R14: 00007f05b5a15fa0 R15: 00007fff946f3d78 [ 406.657088][T12271] [ 407.577660][T12308] FAULT_INJECTION: forcing a failure. [ 407.577660][T12308] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 407.602291][T12308] CPU: 1 PID: 12308 Comm: syz.0.2323 Not tainted syzkaller #0 [ 407.609810][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.619885][T12308] Call Trace: [ 407.623166][T12308] [ 407.626102][T12308] dump_stack_lvl+0x188/0x24e [ 407.630788][T12308] ? show_regs_print_info+0x12/0x12 [ 407.635996][T12308] ? load_image+0x400/0x400 [ 407.640513][T12308] ? __lock_acquire+0x7d10/0x7d10 [ 407.645554][T12308] should_fail_ex+0x399/0x4d0 [ 407.650327][T12308] _copy_from_iter+0x1c0/0x1130 [ 407.655206][T12308] ? __lock_acquire+0x7d10/0x7d10 [ 407.660247][T12308] ? copyout_mc+0x110/0x110 [ 407.664746][T12308] ? __virt_addr_valid+0x188/0x540 [ 407.669934][T12308] ? __virt_addr_valid+0x188/0x540 [ 407.675048][T12308] ? __virt_addr_valid+0x465/0x540 [ 407.680164][T12308] ? __check_object_size+0x500/0xa40 [ 407.685458][T12308] kernfs_fop_write_iter+0x1a0/0x520 [ 407.690757][T12308] vfs_write+0x4b1/0xa30 [ 407.695018][T12308] ? file_end_write+0x250/0x250 [ 407.699877][T12308] ? __fget_files+0x43d/0x4b0 [ 407.704568][T12308] ? __fdget_pos+0x2ae/0x360 [ 407.709160][T12308] ? ksys_write+0x71/0x250 [ 407.713585][T12308] ksys_write+0x14c/0x250 [ 407.717930][T12308] ? __ia32_sys_read+0x80/0x80 [ 407.722704][T12308] ? lockdep_hardirqs_on+0x94/0x140 [ 407.727910][T12308] do_syscall_64+0x4c/0xa0 [ 407.732354][T12308] ? clear_bhb_loop+0x60/0xb0 [ 407.737046][T12308] ? clear_bhb_loop+0x60/0xb0 [ 407.741752][T12308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.747682][T12308] RIP: 0033:0x7fac7f79ce59 [ 407.752113][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.771732][T12308] RSP: 002b:00007fac805df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.780152][T12308] RAX: ffffffffffffffda RBX: 00007fac7fa15fa0 RCX: 00007fac7f79ce59 [ 407.788123][T12308] RDX: 000000000000002f RSI: 0000200000000180 RDI: 0000000000000004 [ 407.796094][T12308] RBP: 00007fac805df090 R08: 0000000000000000 R09: 0000000000000000 [ 407.804066][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.812035][T12308] R13: 00007fac7fa16038 R14: 00007fac7fa15fa0 R15: 00007ffd27454058 [ 407.820032][T12308] [ 408.200382][T12327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2328'. [ 409.247385][T12324] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2328'. [ 409.258222][T12327] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2328'. [ 409.267466][T12330] netlink: 'syz.4.2328': attribute type 21 has an invalid length. [ 409.275719][T12330] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2328'. [ 409.285851][T12330] netlink: 'syz.4.2328': attribute type 4 has an invalid length. [ 409.294231][T12330] netlink: 'syz.4.2328': attribute type 5 has an invalid length. [ 409.302052][T12330] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2328'. [ 409.713254][T12354] FAULT_INJECTION: forcing a failure. [ 409.713254][T12354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.733279][T12354] CPU: 1 PID: 12354 Comm: syz.3.2337 Not tainted syzkaller #0 [ 409.740834][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.750887][T12354] Call Trace: [ 409.754170][T12354] [ 409.757123][T12354] dump_stack_lvl+0x188/0x24e [ 409.761849][T12354] ? show_regs_print_info+0x12/0x12 [ 409.767092][T12354] ? load_image+0x400/0x400 [ 409.771631][T12354] ? __lock_acquire+0x7d10/0x7d10 [ 409.776690][T12354] ? snprintf+0xe5/0x140 [ 409.781006][T12354] should_fail_ex+0x399/0x4d0 [ 409.785721][T12354] _copy_to_user+0x2c/0x130 [ 409.790327][T12354] simple_read_from_buffer+0xe3/0x150 [ 409.795784][T12354] proc_fail_nth_read+0x1a6/0x220 [ 409.800874][T12354] ? proc_fault_inject_write+0x310/0x310 [ 409.806562][T12354] ? fsnotify_perm+0x248/0x550 [ 409.811465][T12354] ? proc_fault_inject_write+0x310/0x310 [ 409.817131][T12354] vfs_read+0x2de/0xa00 [ 409.821411][T12354] ? kernel_read+0x1e0/0x1e0 [ 409.826031][T12354] ? __fget_files+0x28/0x4b0 [ 409.830657][T12354] ? __fget_files+0x28/0x4b0 [ 409.835284][T12354] ? __fget_files+0x43d/0x4b0 [ 409.840014][T12354] ? __fdget_pos+0x2ae/0x360 [ 409.844644][T12354] ? ksys_read+0x71/0x250 [ 409.849015][T12354] ksys_read+0x14c/0x250 [ 409.853304][T12354] ? vfs_write+0xa30/0xa30 [ 409.857773][T12354] ? lockdep_hardirqs_on+0x94/0x140 [ 409.863006][T12354] do_syscall_64+0x4c/0xa0 [ 409.867429][T12354] ? clear_bhb_loop+0x60/0xb0 [ 409.872118][T12354] ? clear_bhb_loop+0x60/0xb0 [ 409.876820][T12354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.882735][T12354] RIP: 0033:0x7f05b575d68e [ 409.887161][T12354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.906775][T12354] RSP: 002b:00007f05b66f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.915195][T12354] RAX: ffffffffffffffda RBX: 00007f05b66f56c0 RCX: 00007f05b575d68e [ 409.923165][T12354] RDX: 000000000000000f RSI: 00007f05b66f50a0 RDI: 0000000000000006 [ 409.931133][T12354] RBP: 00007f05b66f5090 R08: 0000000000000000 R09: 0000000000000000 [ 409.939105][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.947078][T12354] R13: 00007f05b5a16038 R14: 00007f05b5a15fa0 R15: 00007fff946f3d78 [ 409.955075][T12354] [ 410.937508][T12406] ref_ctr_offset mismatch. inode: 0x953 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 411.984245][T12431] netlink: 'syz.3.2360': attribute type 25 has an invalid length. [ 412.024324][T12431] netlink: 'syz.3.2360': attribute type 29 has an invalid length. [ 412.410465][T12452] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 412.430301][T12452] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2366'. [ 412.469667][T12456] netlink: 'syz.3.2369': attribute type 21 has an invalid length. [ 412.517814][T12458] netlink: 'syz.0.2368': attribute type 2 has an invalid length. [ 412.557674][T12460] netlink: 'syz.1.2370': attribute type 8 has an invalid length. [ 412.586700][T12460] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 412.613093][T12460] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.2370'. [ 412.703869][T12458] device 0 entered promiscuous mode [ 412.893791][T12471] device syzkaller0 entered promiscuous mode [ 414.786133][T12510] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2384'. [ 414.986641][T12517] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.2386'. [ 415.090512][T12522] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2388'. [ 415.817512][T12549] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2394'. [ 415.845422][T12549] netlink: 'syz.3.2394': attribute type 21 has an invalid length. [ 415.862523][T12549] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 415.880459][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2394'. [ 415.893026][T12549] netlink: 'syz.3.2394': attribute type 21 has an invalid length. [ 415.904659][T12549] netlink: 'syz.3.2394': attribute type 1 has an invalid length. [ 416.012898][T12559] netlink: 'syz.1.2396': attribute type 3 has an invalid length. [ 416.031474][T12562] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2398'. [ 416.046878][T12559] netlink: 145100 bytes leftover after parsing attributes in process `syz.1.2396'. [ 416.151201][T12554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2396'. [ 417.824428][T12597] __nla_validate_parse: 2 callbacks suppressed [ 417.824443][T12597] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2408'. [ 417.856969][T12607] netlink: 'syz.3.2411': attribute type 21 has an invalid length. [ 417.869438][T12607] netlink: 'syz.3.2411': attribute type 6 has an invalid length. [ 417.890862][T12607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2411'. [ 417.916701][T12608] netlink: 'syz.3.2411': attribute type 21 has an invalid length. [ 417.943059][T12608] netlink: 'syz.3.2411': attribute type 6 has an invalid length. [ 417.961533][T12608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2411'. [ 418.016797][T12620] netlink: 'syz.1.2414': attribute type 16 has an invalid length. [ 418.057616][T12620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2414'. [ 419.308859][T12674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2430'. [ 419.357696][T12677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2429'. [ 419.882087][T12704] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 419.888155][T12704] syzkaller1: group set to 778 [ 420.608825][T12729] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2446'. [ 420.822247][T12736] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2450'. [ 421.012791][T12741] validate_nla: 8 callbacks suppressed [ 421.012885][T12741] netlink: 'syz.0.2451': attribute type 2 has an invalid length. [ 421.284820][T12741] device 1 entered promiscuous mode [ 421.312957][T12746] netlink: 'syz.2.2452': attribute type 10 has an invalid length. [ 421.327966][T12746] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2452'. [ 421.563301][T12762] netlink: 'syz.4.2456': attribute type 3 has an invalid length. [ 421.575858][T12762] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2456'. [ 421.753499][T12762] device bridge_slave_1 left promiscuous mode [ 421.773163][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.830689][T12762] device bridge_slave_0 left promiscuous mode [ 421.844898][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.780434][T12800] netlink: 'syz.1.2465': attribute type 10 has an invalid length. [ 422.838451][T12800] batman_adv: batadv0: Adding interface: vlan1 [ 422.858737][T12800] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.915885][T12800] batman_adv: batadv0: Interface activated: vlan1 [ 423.157665][ T4284] Bluetooth: hci0: ACL packet too small [ 423.745088][T12827] __nla_validate_parse: 29 callbacks suppressed [ 423.745108][T12827] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2473'. [ 424.152050][T12841] netlink: 'syz.0.2478': attribute type 1 has an invalid length. [ 424.185168][T12841] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2478'. [ 424.728499][T12861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2484'. [ 424.900702][T12867] netlink: 'syz.3.2483': attribute type 39 has an invalid length. [ 425.228506][T12888] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2493'. [ 425.481958][T12900] netlink: 'syz.4.2489': attribute type 2 has an invalid length. [ 425.505390][T12882] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2489'. [ 426.004359][T12912] raw_sendmsg: syz.1.2496 forgot to set AF_INET. Fix it! [ 426.976644][T12933] Ÿë: port 1(gretap0) entered blocking state [ 426.993588][T12933] Ÿë: port 1(gretap0) entered disabled state [ 427.032889][T12933] device gretap0 entered promiscuous mode [ 427.079696][T12943] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2503'. [ 427.330015][T12956] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2507'. [ 427.344111][T12956] netlink: zone id is out of range [ 427.383783][T12956] netlink: zone id is out of range [ 427.405577][T12956] netlink: zone id is out of range [ 427.414474][T12956] netlink: zone id is out of range [ 427.447146][T12956] netlink: zone id is out of range [ 427.449923][T12957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2507'. [ 427.465754][T12956] netlink: zone id is out of range [ 427.478028][T12957] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2507'. [ 427.483387][T12956] netlink: zone id is out of range [ 427.507324][T12956] netlink: zone id is out of range [ 427.530750][T12956] netlink: zone id is out of range [ 427.560298][T12956] netlink: zone id is out of range [ 427.593315][T12957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2507'. [ 428.603970][T12994] netlink: 'syz.0.2517': attribute type 3 has an invalid length. [ 428.904288][T13006] __nla_validate_parse: 2 callbacks suppressed [ 428.904309][T13006] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2520'. [ 429.293983][T13015] netlink: 'syz.4.2519': attribute type 1 has an invalid length. [ 429.348080][T13015] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2519'. [ 431.563614][T13084] netlink: 'syz.1.2541': attribute type 21 has an invalid length. [ 431.710305][T13090] sctp: [Deprecated]: syz.4.2543 (pid 13090) Use of int in max_burst socket option deprecated. [ 431.710305][T13090] Use struct sctp_assoc_value instead [ 433.235446][T13164] device syzkaller0 entered promiscuous mode [ 433.535645][T13183] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2571'. [ 437.691849][T13189] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2574'. [ 437.886032][T13197] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 437.902004][T13197] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2576'. [ 437.916630][T13202] netlink: 'syz.2.2579': attribute type 17 has an invalid length. [ 437.933941][T13202] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2579'. [ 437.944010][T13199] netlink: 'syz.1.2578': attribute type 21 has an invalid length. [ 437.974584][T13199] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.998365][T13199] IPv6: Can't replace route, no match found [ 438.017620][T13200] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 438.052961][T13207] netlink: 'syz.1.2578': attribute type 1 has an invalid length. [ 438.068290][T13200] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.2578'. [ 438.076976][T13207] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.2578'. [ 438.814101][T13250] device pim6reg1 entered promiscuous mode [ 438.861996][T13256] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2593'. [ 438.919557][T13260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2594'. [ 438.989652][ T4284] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 439.161697][T13269] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2596'. [ 439.228840][T13264] delete_channel: no stack [ 439.592595][T13283] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2604'. [ 439.876861][T13298] netlink: 'syz.2.2606': attribute type 19 has an invalid length. [ 439.906988][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.913412][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.943686][T13298] netlink: 173852 bytes leftover after parsing attributes in process `syz.2.2606'. [ 440.005891][T13300] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 441.096180][T13332] ref_ctr_offset mismatch. inode: 0xa93 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 441.221217][T13337] device bridge_slave_0 entered promiscuous mode [ 441.959780][T13376] netlink: 'syz.1.2627': attribute type 9 has an invalid length. [ 442.156229][T13387] netlink: 'syz.4.2632': attribute type 3 has an invalid length. [ 442.897140][T13408] netlink: 'syz.0.2635': attribute type 40 has an invalid length. [ 443.071067][ T4284] Bluetooth: hci0: Malformed LE Event: 0x0d [ 444.113585][T13413] netlink: 'syz.1.2639': attribute type 10 has an invalid length. [ 444.753433][T13431] netlink: 'syz.4.2647': attribute type 21 has an invalid length. [ 444.770322][T13431] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 444.788831][T13431] __nla_validate_parse: 7 callbacks suppressed [ 444.788866][T13431] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2647'. [ 445.082421][T13437] netlink: 'syz.0.2643': attribute type 2 has an invalid length. [ 445.179043][T13437] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2643'. [ 445.614025][T13444] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2651'. [ 450.197603][T13514] delete_channel: no stack [ 456.270069][T13566] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2683'. [ 456.369284][ T4284] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 456.622354][T13576] syz.4.2686 (13576) used obsolete PPPIOCDETACH ioctl [ 457.023584][T13579] netlink: 'syz.3.2687': attribute type 10 has an invalid length. [ 460.386145][ T4284] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 460.394884][ T4284] Bluetooth: hci3: Injecting HCI hardware error event [ 460.403841][ T47] Bluetooth: hci3: hardware error 0x00 [ 460.642417][T13623] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2699'. [ 461.426353][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2706'. [ 462.464553][ T47] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 462.513873][T13676] netlink: 'syz.1.2715': attribute type 21 has an invalid length. [ 462.690398][T13676] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 462.757146][T13676] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2715'. [ 462.926818][T13684] netlink: 'syz.2.2718': attribute type 11 has an invalid length. [ 462.959680][T13684] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2718'. [ 463.031829][T13684] netlink: 'syz.2.2718': attribute type 11 has an invalid length. [ 463.056146][T13687] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 463.093032][T13684] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2718'. [ 463.105685][T13687] syzkaller1: linktype set to 773 [ 463.113230][T13683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.611462][T13731] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2731'. [ 464.678018][T13731] delete_channel: no stack [ 466.506958][T13776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2743'. [ 466.560017][T13776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2743'. [ 466.599737][T13778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2743'. [ 466.686821][T13783] netlink: 'syz.4.2745': attribute type 19 has an invalid length. [ 466.719130][T13783] netlink: 'syz.4.2745': attribute type 21 has an invalid length. [ 466.815585][T13787] netlink: 'syz.1.2747': attribute type 21 has an invalid length. [ 466.823460][T13787] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2747'. [ 466.877201][T13787] netlink: 'syz.1.2747': attribute type 4 has an invalid length. [ 466.904793][T13787] netlink: 'syz.1.2747': attribute type 3 has an invalid length. [ 466.912749][T13787] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2747'. [ 467.096235][T13807] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 467.125453][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 467.221759][T13815] netlink: 'syz.1.2752': attribute type 49 has an invalid length. [ 467.244854][T13815] netlink: 'syz.1.2752': attribute type 49 has an invalid length. [ 467.318342][T13817] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 468.527966][T13839] netlink: 'syz.1.2757': attribute type 29 has an invalid length. [ 468.556924][T13844] netlink: 'syz.4.2759': attribute type 2 has an invalid length. [ 468.568264][T13844] netlink: 'syz.4.2759': attribute type 8 has an invalid length. [ 468.598016][T13844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2759'. [ 468.629534][T13842] netlink: 'syz.0.2760': attribute type 13 has an invalid length. [ 468.650890][T13842] netlink: 'syz.0.2760': attribute type 58 has an invalid length. [ 468.676754][T13842] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2760'. [ 468.738267][T13839] netlink: 'syz.1.2757': attribute type 29 has an invalid length. [ 468.761455][T13842] syz.0.2760[13842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.761830][T13842] syz.0.2760[13842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.030069][T13871] netlink: 'syz.3.2766': attribute type 2 has an invalid length. [ 469.092027][T13867] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2767'. [ 469.117182][T13871] device .*! entered promiscuous mode [ 469.177574][T13867] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 469.380381][T13884] FAULT_INJECTION: forcing a failure. [ 469.380381][T13884] name failslab, interval 1, probability 0, space 0, times 0 [ 469.404330][T13884] CPU: 1 PID: 13884 Comm: syz.3.2770 Not tainted syzkaller #0 [ 469.411859][T13884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.421945][T13884] Call Trace: [ 469.425249][T13884] [ 469.428209][T13884] dump_stack_lvl+0x188/0x24e [ 469.432936][T13884] ? show_regs_print_info+0x12/0x12 [ 469.438166][T13884] ? load_image+0x400/0x400 [ 469.442717][T13884] ? __might_sleep+0xd0/0xd0 [ 469.447342][T13884] ? __lock_acquire+0x7d10/0x7d10 [ 469.452407][T13884] should_fail_ex+0x399/0x4d0 [ 469.457106][T13884] should_failslab+0x5/0x20 [ 469.461624][T13884] slab_pre_alloc_hook+0x59/0x310 [ 469.466684][T13884] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 469.472517][T13884] __kmem_cache_alloc_node+0x4f/0x260 [ 469.477929][T13884] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 469.483683][T13884] __kmalloc+0xa0/0x240 [ 469.487861][T13884] tomoyo_realpath_from_path+0xdf/0x5d0 [ 469.493427][T13884] ? tomoyo_path_number_perm+0x205/0x650 [ 469.499064][T13884] tomoyo_path_number_perm+0x22f/0x650 [ 469.504534][T13884] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 469.510000][T13884] ? ksys_write+0x1c0/0x250 [ 469.514510][T13884] ? common_file_perm+0x171/0x1c0 [ 469.519578][T13884] ? __fget_files+0x28/0x4b0 [ 469.524180][T13884] ? __fget_files+0x28/0x4b0 [ 469.528789][T13884] security_file_ioctl+0x6c/0xa0 [ 469.533739][T13884] __se_sys_ioctl+0x48/0x170 [ 469.538341][T13884] do_syscall_64+0x4c/0xa0 [ 469.542754][T13884] ? clear_bhb_loop+0x60/0xb0 [ 469.547434][T13884] ? clear_bhb_loop+0x60/0xb0 [ 469.552141][T13884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.558048][T13884] RIP: 0033:0x7f05b579ce59 [ 469.562470][T13884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.582084][T13884] RSP: 002b:00007f05b66f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.590502][T13884] RAX: ffffffffffffffda RBX: 00007f05b5a15fa0 RCX: 00007f05b579ce59 [ 469.598484][T13884] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 469.606453][T13884] RBP: 00007f05b66f5090 R08: 0000000000000000 R09: 0000000000000000 [ 469.614421][T13884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.622389][T13884] R13: 00007f05b5a16038 R14: 00007f05b5a15fa0 R15: 00007fff946f3d78 [ 469.630380][T13884] [ 469.649303][T13884] ERROR: Out of memory at tomoyo_realpath_from_path. [ 469.741557][T13889] delete_channel: no stack [ 469.828891][T13894] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2773'. [ 470.133217][T13915] netlink: 'syz.2.2777': attribute type 1 has an invalid length. [ 470.912101][T13943] device lo entered promiscuous mode [ 471.027674][T13943] netlink: 'syz.4.2786': attribute type 10 has an invalid length. [ 471.359888][T13957] FAULT_INJECTION: forcing a failure. [ 471.359888][T13957] name failslab, interval 1, probability 0, space 0, times 0 [ 471.406928][T13957] CPU: 1 PID: 13957 Comm: syz.1.2789 Not tainted syzkaller #0 [ 471.414437][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.424514][T13957] Call Trace: [ 471.427806][T13957] [ 471.430746][T13957] dump_stack_lvl+0x188/0x24e [ 471.435447][T13957] ? show_regs_print_info+0x12/0x12 [ 471.440668][T13957] ? load_image+0x400/0x400 [ 471.445199][T13957] ? __might_sleep+0xd0/0xd0 [ 471.449816][T13957] ? __lock_acquire+0x7d10/0x7d10 [ 471.454868][T13957] should_fail_ex+0x399/0x4d0 [ 471.459562][T13957] should_failslab+0x5/0x20 [ 471.464060][T13957] slab_pre_alloc_hook+0x59/0x310 [ 471.469103][T13957] ? prepend_path+0xa68/0xc20 [ 471.473868][T13957] ? tomoyo_encode+0x27e/0x540 [ 471.478641][T13957] __kmem_cache_alloc_node+0x4f/0x260 [ 471.484039][T13957] ? tomoyo_encode+0x27e/0x540 [ 471.488799][T13957] __kmalloc+0xa0/0x240 [ 471.492957][T13957] tomoyo_encode+0x27e/0x540 [ 471.497550][T13957] tomoyo_realpath_from_path+0x58e/0x5d0 [ 471.503188][T13957] ? tomoyo_path_number_perm+0x205/0x650 [ 471.508816][T13957] tomoyo_path_number_perm+0x22f/0x650 [ 471.514280][T13957] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 471.520865][T13957] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 471.526317][T13957] ? ksys_write+0x1c0/0x250 [ 471.530822][T13957] ? common_file_perm+0x171/0x1c0 [ 471.535879][T13957] ? __fget_files+0x28/0x4b0 [ 471.540473][T13957] ? __fget_files+0x28/0x4b0 [ 471.545072][T13957] security_file_ioctl+0x6c/0xa0 [ 471.550023][T13957] __se_sys_ioctl+0x48/0x170 [ 471.554617][T13957] do_syscall_64+0x4c/0xa0 [ 471.559027][T13957] ? clear_bhb_loop+0x60/0xb0 [ 471.563702][T13957] ? clear_bhb_loop+0x60/0xb0 [ 471.568376][T13957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.574263][T13957] RIP: 0033:0x7f5da579ce59 [ 471.578671][T13957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.598282][T13957] RSP: 002b:00007f5da664d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.606688][T13957] RAX: ffffffffffffffda RBX: 00007f5da5a16090 RCX: 00007f5da579ce59 [ 471.614649][T13957] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 471.622609][T13957] RBP: 00007f5da664d090 R08: 0000000000000000 R09: 0000000000000000 [ 471.630575][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.638538][T13957] R13: 00007f5da5a16128 R14: 00007f5da5a16090 R15: 00007ffd068f1d08 [ 471.646513][T13957] [ 471.656620][T13957] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.845183][T13975] netlink: 'syz.0.2793': attribute type 3 has an invalid length. [ 471.917239][T13975] __nla_validate_parse: 3 callbacks suppressed [ 471.917254][T13975] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2793'. [ 472.093769][T13984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2795'. [ 473.231055][T14001] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2802'. [ 475.559413][T14018] FAULT_INJECTION: forcing a failure. [ 475.559413][T14018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.572921][T14018] CPU: 0 PID: 14018 Comm: syz.0.2806 Not tainted syzkaller #0 [ 475.580419][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 475.590508][T14018] Call Trace: [ 475.593823][T14018] [ 475.596779][T14018] dump_stack_lvl+0x188/0x24e [ 475.601499][T14018] ? show_regs_print_info+0x12/0x12 [ 475.606734][T14018] ? load_image+0x400/0x400 [ 475.611277][T14018] ? __lock_acquire+0x7d10/0x7d10 [ 475.616340][T14018] ? mutex_lock_nested+0x10/0x10 [ 475.621315][T14018] should_fail_ex+0x399/0x4d0 [ 475.626033][T14018] _copy_from_user+0x2c/0x170 [ 475.630750][T14018] ppp_ioctl+0x744/0x1a40 [ 475.635205][T14018] ? ppp_poll+0x250/0x250 [ 475.639560][T14018] ? __fget_files+0x28/0x4b0 [ 475.644205][T14018] ? bpf_lsm_file_ioctl+0x5/0x10 [ 475.649264][T14018] ? security_file_ioctl+0x7c/0xa0 [ 475.654416][T14018] ? ppp_poll+0x250/0x250 [ 475.658780][T14018] __se_sys_ioctl+0xfa/0x170 [ 475.663411][T14018] do_syscall_64+0x4c/0xa0 [ 475.667866][T14018] ? clear_bhb_loop+0x60/0xb0 [ 475.672574][T14018] ? clear_bhb_loop+0x60/0xb0 [ 475.677287][T14018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.683205][T14018] RIP: 0033:0x7fac7f79ce59 [ 475.687642][T14018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.707279][T14018] RSP: 002b:00007fac805df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.715699][T14018] RAX: ffffffffffffffda RBX: 00007fac7fa15fa0 RCX: 00007fac7f79ce59 [ 475.723675][T14018] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 475.731654][T14018] RBP: 00007fac805df090 R08: 0000000000000000 R09: 0000000000000000 [ 475.739627][T14018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.747599][T14018] R13: 00007fac7fa16038 R14: 00007fac7fa15fa0 R15: 00007ffd27454058 [ 475.755599][T14018] [ 475.797293][T14026] validate_nla: 2 callbacks suppressed [ 475.797306][T14026] netlink: 'syz.2.2809': attribute type 13 has an invalid length. [ 475.813381][T14026] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2809'. [ 475.980775][T14032] netlink: 'syz.3.2811': attribute type 29 has an invalid length. [ 476.017285][T14032] netlink: 'syz.3.2811': attribute type 29 has an invalid length. [ 476.037086][T14040] netlink: 'syz.3.2811': attribute type 29 has an invalid length. [ 476.071357][T14032] netlink: 'syz.3.2811': attribute type 29 has an invalid length. [ 476.079819][T14032] netlink: 'syz.3.2811': attribute type 29 has an invalid length. [ 476.143692][T14044] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 476.203224][T14045] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 476.399138][T14050] netlink: 'syz.1.2816': attribute type 10 has an invalid length. [ 476.411585][T14050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2816'. [ 477.019463][T14067] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 477.064343][T14067] netlink: 187476 bytes leftover after parsing attributes in process `syz.1.2820'. [ 477.212421][T14078] FAULT_INJECTION: forcing a failure. [ 477.212421][T14078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.261897][T14078] CPU: 1 PID: 14078 Comm: syz.4.2824 Not tainted syzkaller #0 [ 477.269431][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 477.279517][T14078] Call Trace: [ 477.282820][T14078] [ 477.285775][T14078] dump_stack_lvl+0x188/0x24e [ 477.290488][T14078] ? show_regs_print_info+0x12/0x12 [ 477.295724][T14078] ? load_image+0x400/0x400 [ 477.300266][T14078] ? __lock_acquire+0x7d10/0x7d10 [ 477.305331][T14078] should_fail_ex+0x399/0x4d0 [ 477.310041][T14078] _copy_from_user+0x2c/0x170 [ 477.314750][T14078] ppp_set_compress+0x114/0x730 [ 477.319630][T14078] ? mutex_lock_nested+0x10/0x10 [ 477.324595][T14078] ? ppp_bridge_channels+0x4d0/0x4d0 [ 477.329919][T14078] ? __might_fault+0xc2/0x120 [ 477.334691][T14078] ? __might_fault+0xa6/0x120 [ 477.339404][T14078] ppp_ioctl+0x157b/0x1a40 [ 477.343870][T14078] ? ppp_poll+0x250/0x250 [ 477.348229][T14078] ? __fget_files+0x28/0x4b0 [ 477.352870][T14078] ? bpf_lsm_file_ioctl+0x5/0x10 [ 477.357855][T14078] ? security_file_ioctl+0x7c/0xa0 [ 477.363003][T14078] ? ppp_poll+0x250/0x250 [ 477.367362][T14078] __se_sys_ioctl+0xfa/0x170 [ 477.371992][T14078] do_syscall_64+0x4c/0xa0 [ 477.376434][T14078] ? clear_bhb_loop+0x60/0xb0 [ 477.381137][T14078] ? clear_bhb_loop+0x60/0xb0 [ 477.385847][T14078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.391772][T14078] RIP: 0033:0x7fd7c919ce59 [ 477.396189][T14078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.415797][T14078] RSP: 002b:00007fd7c9fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.424220][T14078] RAX: ffffffffffffffda RBX: 00007fd7c9415fa0 RCX: 00007fd7c919ce59 [ 477.432214][T14078] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 477.440205][T14078] RBP: 00007fd7c9fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 477.448185][T14078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.456153][T14078] R13: 00007fd7c9416038 R14: 00007fd7c9415fa0 R15: 00007ffcfd471508 [ 477.464145][T14078] [ 477.618048][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 478.648622][T14132] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2839'. [ 478.673805][T14132] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 478.687291][T14132] net_ratelimit: 137 callbacks suppressed [ 478.687389][T14132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.710655][T14138] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2840'. [ 478.738584][T14138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.812272][T14145] FAULT_INJECTION: forcing a failure. [ 478.812272][T14145] name failslab, interval 1, probability 0, space 0, times 0 [ 478.838049][T14145] CPU: 1 PID: 14145 Comm: syz.4.2842 Not tainted syzkaller #0 [ 478.845574][T14145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.855660][T14145] Call Trace: [ 478.858967][T14145] [ 478.861925][T14145] dump_stack_lvl+0x188/0x24e [ 478.866642][T14145] ? show_regs_print_info+0x12/0x12 [ 478.871863][T14145] ? load_image+0x400/0x400 [ 478.876377][T14145] ? __might_sleep+0xd0/0xd0 [ 478.880976][T14145] ? __lock_acquire+0x7d10/0x7d10 [ 478.886042][T14145] should_fail_ex+0x399/0x4d0 [ 478.890761][T14145] should_failslab+0x5/0x20 [ 478.895291][T14145] slab_pre_alloc_hook+0x59/0x310 [ 478.900346][T14145] ? __request_module+0x31c/0xa00 [ 478.905515][T14145] __kmem_cache_alloc_node+0x4f/0x260 [ 478.910925][T14145] ? __request_module+0x31c/0xa00 [ 478.916162][T14145] kmalloc_trace+0x26/0xe0 [ 478.920617][T14145] __request_module+0x31c/0xa00 [ 478.925519][T14145] ? copy_regset_to_user+0x1f0/0x1f0 [ 478.930871][T14145] ? __lock_acquire+0x7d10/0x7d10 [ 478.935934][T14145] ? do_raw_spin_lock+0x128/0x2f0 [ 478.940994][T14145] ? __rwlock_init+0x140/0x140 [ 478.945798][T14145] ? do_raw_spin_unlock+0x11d/0x230 [ 478.951045][T14145] ppp_set_compress+0x339/0x730 [ 478.955941][T14145] ? ppp_bridge_channels+0x4d0/0x4d0 [ 478.961279][T14145] ? __might_fault+0xc2/0x120 [ 478.965986][T14145] ? __might_fault+0xa6/0x120 [ 478.970747][T14145] ppp_ioctl+0x157b/0x1a40 [ 478.975218][T14145] ? ppp_poll+0x250/0x250 [ 478.979586][T14145] ? __fget_files+0x28/0x4b0 [ 478.984236][T14145] ? bpf_lsm_file_ioctl+0x5/0x10 [ 478.989211][T14145] ? security_file_ioctl+0x7c/0xa0 [ 478.994363][T14145] ? ppp_poll+0x250/0x250 [ 478.998716][T14145] __se_sys_ioctl+0xfa/0x170 [ 479.003312][T14145] do_syscall_64+0x4c/0xa0 [ 479.007726][T14145] ? clear_bhb_loop+0x60/0xb0 [ 479.012401][T14145] ? clear_bhb_loop+0x60/0xb0 [ 479.017081][T14145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.022969][T14145] RIP: 0033:0x7fd7c919ce59 [ 479.027390][T14145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.047025][T14145] RSP: 002b:00007fd7c9fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.055477][T14145] RAX: ffffffffffffffda RBX: 00007fd7c9415fa0 RCX: 00007fd7c919ce59 [ 479.063478][T14145] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 479.071480][T14145] RBP: 00007fd7c9fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 479.079480][T14145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.087482][T14145] R13: 00007fd7c9416038 R14: 00007fd7c9415fa0 R15: 00007ffcfd471508 [ 479.095513][T14145] [ 479.374402][T14163] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2846'. [ 479.470649][T14165] netlink: 117372 bytes leftover after parsing attributes in process `syz.1.2848'. [ 479.782346][T14173] netlink: 'syz.4.2849': attribute type 11 has an invalid length. [ 479.803452][T14173] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2849'. [ 479.862251][T14173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.042249][T14169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2846'. [ 480.288998][T14188] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 480.326900][T14189] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2854'. [ 480.437731][T14194] delete_channel: no stack [ 480.583072][T14210] FAULT_INJECTION: forcing a failure. [ 480.583072][T14210] name failslab, interval 1, probability 0, space 0, times 0 [ 480.620963][T14210] CPU: 1 PID: 14210 Comm: syz.2.2860 Not tainted syzkaller #0 [ 480.628506][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.638608][T14210] Call Trace: [ 480.641932][T14210] [ 480.644899][T14210] dump_stack_lvl+0x188/0x24e [ 480.649627][T14210] ? show_regs_print_info+0x12/0x12 [ 480.654858][T14210] ? load_image+0x400/0x400 [ 480.659403][T14210] ? __might_sleep+0xd0/0xd0 [ 480.664019][T14210] ? __lock_acquire+0x7d10/0x7d10 [ 480.669082][T14210] should_fail_ex+0x399/0x4d0 [ 480.673795][T14210] should_failslab+0x5/0x20 [ 480.678398][T14210] slab_pre_alloc_hook+0x59/0x310 [ 480.683471][T14210] ? __request_module+0x338/0xa00 [ 480.688542][T14210] __kmem_cache_alloc_node+0x4f/0x260 [ 480.693969][T14210] ? __request_module+0x338/0xa00 [ 480.699018][T14210] __kmalloc_node_track_caller+0x9e/0x230 [ 480.704783][T14210] kstrdup+0x37/0x70 [ 480.708703][T14210] __request_module+0x338/0xa00 [ 480.713604][T14210] ? copy_regset_to_user+0x1f0/0x1f0 [ 480.718958][T14210] ? __lock_acquire+0x7d10/0x7d10 [ 480.723999][T14210] ? do_raw_spin_lock+0x128/0x2f0 [ 480.729057][T14210] ? __rwlock_init+0x140/0x140 [ 480.733851][T14210] ? do_raw_spin_unlock+0x11d/0x230 [ 480.739169][T14210] ppp_set_compress+0x339/0x730 [ 480.744075][T14210] ? ppp_bridge_channels+0x4d0/0x4d0 [ 480.749390][T14210] ? __might_fault+0xc2/0x120 [ 480.754076][T14210] ? __might_fault+0xa6/0x120 [ 480.758817][T14210] ppp_ioctl+0x157b/0x1a40 [ 480.763273][T14210] ? ppp_poll+0x250/0x250 [ 480.767617][T14210] ? __fget_files+0x28/0x4b0 [ 480.772265][T14210] ? bpf_lsm_file_ioctl+0x5/0x10 [ 480.777231][T14210] ? security_file_ioctl+0x7c/0xa0 [ 480.782360][T14210] ? ppp_poll+0x250/0x250 [ 480.786707][T14210] __se_sys_ioctl+0xfa/0x170 [ 480.791322][T14210] do_syscall_64+0x4c/0xa0 [ 480.795746][T14210] ? clear_bhb_loop+0x60/0xb0 [ 480.800440][T14210] ? clear_bhb_loop+0x60/0xb0 [ 480.805146][T14210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.811058][T14210] RIP: 0033:0x7f496cb9ce59 [ 480.815491][T14210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.835116][T14210] RSP: 002b:00007f496d9fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.843546][T14210] RAX: ffffffffffffffda RBX: 00007f496ce15fa0 RCX: 00007f496cb9ce59 [ 480.851534][T14210] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 480.859524][T14210] RBP: 00007f496d9fd090 R08: 0000000000000000 R09: 0000000000000000 [ 480.867503][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.875487][T14210] R13: 00007f496ce16038 R14: 00007f496ce15fa0 R15: 00007fff21ed4818 [ 480.883522][T14210] [ 480.984683][T14218] validate_nla: 10 callbacks suppressed [ 480.984702][T14218] netlink: 'syz.0.2862': attribute type 10 has an invalid length. [ 481.124837][T14214] netlink: 'syz.1.2861': attribute type 3 has an invalid length. [ 481.461584][T14241] netlink: 'syz.1.2866': attribute type 10 has an invalid length. [ 481.531539][T14244] netlink: 'syz.4.2869': attribute type 2 has an invalid length. [ 482.289919][T14259] FAULT_INJECTION: forcing a failure. [ 482.289919][T14259] name failslab, interval 1, probability 0, space 0, times 0 [ 482.324378][T14259] CPU: 0 PID: 14259 Comm: syz.4.2875 Not tainted syzkaller #0 [ 482.331902][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.341981][T14259] Call Trace: [ 482.345279][T14259] [ 482.348225][T14259] dump_stack_lvl+0x188/0x24e [ 482.352941][T14259] ? show_regs_print_info+0x12/0x12 [ 482.358170][T14259] ? load_image+0x400/0x400 [ 482.362702][T14259] ? __might_sleep+0xd0/0xd0 [ 482.367319][T14259] ? __lock_acquire+0x7d10/0x7d10 [ 482.372386][T14259] should_fail_ex+0x399/0x4d0 [ 482.377101][T14259] should_failslab+0x5/0x20 [ 482.381622][T14259] slab_pre_alloc_hook+0x59/0x310 [ 482.386679][T14259] ? call_usermodehelper_setup+0x8a/0x260 [ 482.392548][T14259] __kmem_cache_alloc_node+0x4f/0x260 [ 482.397964][T14259] ? call_usermodehelper_setup+0x8a/0x260 [ 482.403723][T14259] kmalloc_trace+0x26/0xe0 [ 482.408186][T14259] call_usermodehelper_setup+0x8a/0x260 [ 482.413774][T14259] ? __request_module+0xa00/0xa00 [ 482.418833][T14259] __request_module+0x406/0xa00 [ 482.423734][T14259] ? copy_regset_to_user+0x1f0/0x1f0 [ 482.429084][T14259] ? __lock_acquire+0x7d10/0x7d10 [ 482.434124][T14259] ? do_raw_spin_lock+0x128/0x2f0 [ 482.439181][T14259] ? __rwlock_init+0x140/0x140 [ 482.443960][T14259] ? do_raw_spin_unlock+0x11d/0x230 [ 482.449180][T14259] ppp_set_compress+0x339/0x730 [ 482.454073][T14259] ? ppp_bridge_channels+0x4d0/0x4d0 [ 482.459391][T14259] ? __might_fault+0xc2/0x120 [ 482.464090][T14259] ? __might_fault+0xa6/0x120 [ 482.468804][T14259] ppp_ioctl+0x157b/0x1a40 [ 482.473254][T14259] ? ppp_poll+0x250/0x250 [ 482.477612][T14259] ? __fget_files+0x28/0x4b0 [ 482.482252][T14259] ? bpf_lsm_file_ioctl+0x5/0x10 [ 482.487215][T14259] ? security_file_ioctl+0x7c/0xa0 [ 482.492354][T14259] ? ppp_poll+0x250/0x250 [ 482.496680][T14259] __se_sys_ioctl+0xfa/0x170 [ 482.501286][T14259] do_syscall_64+0x4c/0xa0 [ 482.505732][T14259] ? clear_bhb_loop+0x60/0xb0 [ 482.510450][T14259] ? clear_bhb_loop+0x60/0xb0 [ 482.515167][T14259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.521100][T14259] RIP: 0033:0x7fd7c919ce59 [ 482.525546][T14259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.545184][T14259] RSP: 002b:00007fd7c9fa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.545816][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.553614][T14259] RAX: ffffffffffffffda RBX: 00007fd7c9415fa0 RCX: 00007fd7c919ce59 [ 482.553657][T14259] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000004 [ 482.553670][T14259] RBP: 00007fd7c9fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 482.553683][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.553695][T14259] R13: 00007fd7c9416038 R14: 00007fd7c9415fa0 R15: 00007ffcfd471508 [ 482.563412][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.568751][T14259] [ 482.618215][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.626174][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.628055][T14272] __nla_validate_parse: 3 callbacks suppressed [ 482.628067][T14272] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.2878'. [ 482.634753][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 482.659528][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.889245][T14289] netlink: 'syz.1.2881': attribute type 1 has an invalid length. [ 482.918903][T14265] chnl_net:caif_netlink_parms(): no params data found [ 483.056270][T14290] ref_ctr_offset mismatch. inode: 0xb73 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 483.057040][T14265] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.089169][T14265] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.098186][T14265] device bridge_slave_0 entered promiscuous mode [ 483.130338][T14265] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.142156][T14265] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.151046][T14265] device bridge_slave_1 entered promiscuous mode [ 483.183706][T14265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.252216][T14265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.380393][T14265] team0: Port device team_slave_0 added [ 483.411961][T14265] team0: Port device team_slave_1 added [ 483.494812][T14265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.502057][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.541687][T14265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.554855][T14265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.562122][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.605468][T14265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.704371][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 485.263894][T14322] netlink: 64019 bytes leftover after parsing attributes in process `syz.3.2888'. [ 485.381787][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.419740][T14265] device hsr_slave_0 entered promiscuous mode [ 485.462321][T14265] device hsr_slave_1 entered promiscuous mode [ 485.481307][T14265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.494212][T14265] Cannot create hsr debugfs directory [ 485.553594][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.647275][T14346] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2895'. [ 485.658511][T14338] FAULT_INJECTION: forcing a failure. [ 485.658511][T14338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.679081][T14338] CPU: 1 PID: 14338 Comm: syz.3.2893 Not tainted syzkaller #0 [ 485.679223][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.686562][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.686589][T14338] Call Trace: [ 485.686598][T14338] [ 485.686607][T14338] dump_stack_lvl+0x188/0x24e [ 485.686638][T14338] ? show_regs_print_info+0x12/0x12 [ 485.686657][T14338] ? load_image+0x400/0x400 [ 485.686685][T14338] ? __lock_acquire+0x7d10/0x7d10 [ 485.686712][T14338] ? snprintf+0xe5/0x140 [ 485.736776][T14338] should_fail_ex+0x399/0x4d0 [ 485.741487][T14338] _copy_to_user+0x2c/0x130 [ 485.746010][T14338] simple_read_from_buffer+0xe3/0x150 [ 485.751396][T14338] proc_fail_nth_read+0x1a6/0x220 [ 485.756445][T14338] ? proc_fault_inject_write+0x310/0x310 [ 485.762083][T14338] ? fsnotify_perm+0x248/0x550 [ 485.766878][T14338] ? proc_fault_inject_write+0x310/0x310 [ 485.772540][T14338] vfs_read+0x2de/0xa00 [ 485.776720][T14338] ? kernel_read+0x1e0/0x1e0 [ 485.781315][T14338] ? __fget_files+0x28/0x4b0 [ 485.785908][T14338] ? __fget_files+0x28/0x4b0 [ 485.790503][T14338] ? __fget_files+0x43d/0x4b0 [ 485.795193][T14338] ? __fdget_pos+0x2ae/0x360 [ 485.799781][T14338] ? ksys_read+0x71/0x250 [ 485.804138][T14338] ksys_read+0x14c/0x250 [ 485.808392][T14338] ? vfs_write+0xa30/0xa30 [ 485.812818][T14338] ? lockdep_hardirqs_on+0x94/0x140 [ 485.818026][T14338] do_syscall_64+0x4c/0xa0 [ 485.822450][T14338] ? clear_bhb_loop+0x60/0xb0 [ 485.827136][T14338] ? clear_bhb_loop+0x60/0xb0 [ 485.831822][T14338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.837716][T14338] RIP: 0033:0x7f05b575d68e [ 485.842130][T14338] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 485.861738][T14338] RSP: 002b:00007f05b66f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.870157][T14338] RAX: ffffffffffffffda RBX: 00007f05b66f56c0 RCX: 00007f05b575d68e [ 485.878124][T14338] RDX: 000000000000000f RSI: 00007f05b66f50a0 RDI: 0000000000000005 [ 485.886090][T14338] RBP: 00007f05b66f5090 R08: 0000000000000000 R09: 0000000000000000 [ 485.894057][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.902028][T14338] R13: 00007f05b5a16038 R14: 00007f05b5a15fa0 R15: 00007fff946f3d78 [ 485.910020][T14338] [ 486.009600][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.217072][T14362] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2899'. [ 486.285476][T14362] netlink: 'syz.0.2899': attribute type 14 has an invalid length. [ 486.302203][T14362] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2899'. [ 486.737136][ T56] tipc: Left network mode [ 486.784688][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 487.612067][T14404] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 487.634548][T14404] syzkaller1: linktype set to 825 [ 487.811793][T14265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 487.863304][T14265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 487.877748][T14265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 487.911746][T14265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.922425][T14420] netlink: 'syz.4.2912': attribute type 29 has an invalid length. [ 487.955381][T14420] netlink: 'syz.4.2912': attribute type 29 has an invalid length. [ 488.026925][ T56] device gretap0 left promiscuous mode [ 488.048397][ T56] : port 1(gretap0) entered disabled state [ 488.121128][T14422] netlink: 'syz.4.2912': attribute type 29 has an invalid length. [ 488.244317][T14265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.284065][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 488.298951][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 488.322196][T14265] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.342161][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 488.368031][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 488.392924][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.400169][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.428901][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 488.473328][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 488.486652][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 488.516892][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.524042][T14117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.535114][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.555704][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.571850][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.602768][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.812922][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.828956][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.857044][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.874424][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 488.930523][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.939667][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.949424][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.969860][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.079995][T14449] device syzkaller0 entered promiscuous mode [ 489.132387][T14265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.436308][T14478] syz.4.2923[14478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.436408][T14478] syz.4.2923[14478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.946652][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 491.011515][T14477] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2923'. [ 491.844113][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 491.878337][T14117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 491.945831][T14265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.977128][ T56] device bridge_slave_1 left promiscuous mode [ 492.005141][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.078009][ T56] device bridge_slave_0 left promiscuous mode [ 492.089046][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.400623][ C0] ================================================================== [ 492.408797][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 492.416660][ C0] Write of size 64 at addr ffff88805b127290 by task syz.4.2941/14546 [ 492.424752][ C0] [ 492.427108][ C0] CPU: 0 PID: 14546 Comm: syz.4.2941 Not tainted syzkaller #0 [ 492.434585][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.444627][ C0] Call Trace: [ 492.447895][ C0] [ 492.450728][ C0] dump_stack_lvl+0x188/0x24e [ 492.455402][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 492.460428][ C0] ? show_regs_print_info+0x12/0x12 [ 492.465611][ C0] ? load_image+0x400/0x400 [ 492.470105][ C0] ? __virt_addr_valid+0x465/0x540 [ 492.475212][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 492.480308][ C0] print_report+0xa8/0x210 [ 492.484716][ C0] kasan_report+0x10b/0x140 [ 492.489212][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 492.494313][ C0] kasan_check_range+0x235/0x290 [ 492.499237][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 492.504335][ C0] memcpy+0x3c/0x60 [ 492.508131][ C0] __bpf_get_stackid+0x6c9/0x920 [ 492.513057][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 492.518069][ C0] bpf_prog_ebdd8313a69a195f+0x28/0x3d [ 492.523533][ C0] bpf_overflow_handler+0x522/0x7c0 [ 492.528775][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 492.534060][ C0] ? perf_swevent_overflow+0x230/0x230 [ 492.539513][ C0] ? sched_clock_cpu+0x6e/0x260 [ 492.544355][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 492.550586][ C0] __perf_event_overflow+0x448/0x610 [ 492.555865][ C0] perf_swevent_hrtimer+0x472/0x630 [ 492.561054][ C0] ? cpu_clock_event_read+0x50/0x50 [ 492.566248][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 492.572133][ C0] ? _raw_spin_unlock+0x40/0x40 [ 492.576976][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 492.582267][ C0] ? cpu_clock_event_read+0x50/0x50 [ 492.587458][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 492.592559][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 492.597495][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 492.603489][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 492.609113][ C0] [ 492.612030][ C0] [ 492.614949][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 492.620923][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 492.626742][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 30 ba df 08 e8 cb 30 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 492.646360][ C0] RSP: 0018:ffffc90004447cd8 EFLAGS: 00000286 [ 492.652418][ C0] RAX: 8a01f98897524a00 RBX: 0000000000000000 RCX: 8a01f98897524a00 [ 492.660379][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 492.668358][ C0] RBP: ffffc90004447d30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 492.676319][ C0] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff888024ae3c00 [ 492.684277][ C0] R13: dffffc0000000000 R14: ffff88801b740000 R15: ffff8880b8e3b5d0 [ 492.692248][ C0] ? finish_task_switch+0x265/0x8f0 [ 492.697440][ C0] __schedule+0x11d9/0x40e0 [ 492.701929][ C0] ? clockevents_program_event+0x22c/0x310 [ 492.707802][ C0] ? __sched_text_start+0x8/0x8 [ 492.712636][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 492.718629][ C0] ? lock_chain_count+0x20/0x20 [ 492.723491][ C0] ? __irq_exit_rcu+0x147/0x230 [ 492.728410][ C0] schedule+0xb9/0x180 [ 492.732481][ C0] exit_to_user_mode_loop+0x47/0x110 [ 492.737811][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 492.743348][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 492.748796][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 492.754768][ C0] RIP: 0033:0x7fd7c919ce59 [ 492.759171][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.778763][ C0] RSP: 002b:00007fd7c9fa1028 EFLAGS: 00000246 [ 492.784821][ C0] RAX: 0000000000000000 RBX: 00007fd7c9415fa0 RCX: 00007fd7c919ce59 [ 492.792787][ C0] RDX: 0000000000000005 RSI: 0000000040042408 RDI: 0000000000000006 [ 492.800765][ C0] RBP: 00007fd7c9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 492.808723][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.816681][ C0] R13: 00007fd7c9416038 R14: 00007fd7c9415fa0 R15: 00007ffcfd471508 [ 492.824644][ C0] [ 492.827648][ C0] [ 492.829970][ C0] Allocated by task 14546: [ 492.834431][ C0] kasan_set_track+0x4b/0x70 [ 492.839019][ C0] __kasan_kmalloc+0x8e/0xa0 [ 492.843596][ C0] __kmalloc_node+0xb0/0x240 [ 492.848175][ C0] bpf_map_area_alloc+0x47/0xe0 [ 492.853059][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 492.858775][ C0] stack_map_alloc+0x390/0x520 [ 492.863530][ C0] map_create+0x534/0x1000 [ 492.867934][ C0] __sys_bpf+0x38b/0x780 [ 492.872165][ C0] __x64_sys_bpf+0x78/0x90 [ 492.876566][ C0] do_syscall_64+0x4c/0xa0 [ 492.880965][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.886849][ C0] [ 492.889155][ C0] Last potentially related work creation: [ 492.894850][ C0] kasan_save_stack+0x3a/0x60 [ 492.899517][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 492.904870][ C0] call_rcu+0x14f/0x990 [ 492.909075][ C0] __nf_register_net_hook+0x788/0x910 [ 492.914471][ C0] nf_register_net_hook+0xae/0x190 [ 492.919566][ C0] nf_register_net_hooks+0x40/0x1a0 [ 492.924751][ C0] nf_ct_netns_do_get+0x20f/0x5b0 [ 492.929799][ C0] nf_ct_netns_inet_get+0x3b/0x150 [ 492.934909][ C0] nf_conncount_init+0x123/0x380 [ 492.939893][ C0] ovs_ct_init+0x312/0x480 [ 492.944325][ C0] ovs_init_net+0x1e2/0x240 [ 492.948846][ C0] ops_init+0x355/0x5f0 [ 492.953026][ C0] setup_net+0x4f2/0xbd0 [ 492.957258][ C0] copy_net_ns+0x348/0x5b0 [ 492.961660][ C0] create_new_namespaces+0x3d3/0x6f0 [ 492.966930][ C0] copy_namespaces+0x3b0/0x410 [ 492.971695][ C0] copy_process+0x19c2/0x4080 [ 492.976372][ C0] kernel_clone+0x24b/0x900 [ 492.980869][ C0] __x64_sys_clone+0x1a7/0x220 [ 492.985624][ C0] do_syscall_64+0x4c/0xa0 [ 492.990029][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.995914][ C0] [ 492.998220][ C0] Second to last potentially related work creation: [ 493.004811][ C0] kasan_save_stack+0x3a/0x60 [ 493.009479][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 493.014836][ C0] call_rcu+0x14f/0x990 [ 493.018981][ C0] __nf_register_net_hook+0x788/0x910 [ 493.024366][ C0] nf_register_net_hook+0xae/0x190 [ 493.029463][ C0] nf_register_net_hooks+0x40/0x1a0 [ 493.034649][ C0] ebt_register_table+0xc97/0x1020 [ 493.039815][ C0] find_inlist_lock_noload+0x178/0x260 [ 493.045264][ C0] do_ebt_get_ctl+0x2c7/0x1cf0 [ 493.050013][ C0] nf_getsockopt+0x25e/0x280 [ 493.054591][ C0] ip_getsockopt+0x19b/0x230 [ 493.059180][ C0] __sys_getsockopt+0x1b0/0x230 [ 493.064017][ C0] __x64_sys_getsockopt+0xb1/0xc0 [ 493.069024][ C0] do_syscall_64+0x4c/0xa0 [ 493.073428][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.079309][ C0] [ 493.081623][ C0] The buggy address belongs to the object at ffff88805b127280 [ 493.081623][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 493.095838][ C0] The buggy address is located 16 bytes inside of [ 493.095838][ C0] 64-byte region [ffff88805b127280, ffff88805b1272c0) [ 493.108923][ C0] [ 493.111230][ C0] The buggy address belongs to the physical page: [ 493.117684][ C0] page:ffffea00016c49c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805b127900 pfn:0x5b127 [ 493.129119][ C0] memcg:ffff8880749b1801 [ 493.133344][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 493.140890][ C0] raw: 00fff00000000200 ffffea0000bb2a00 dead000000000002 ffff888017442780 [ 493.149477][ C0] raw: ffff88805b127900 000000008020001d 00000001ffffffff ffff8880749b1801 [ 493.158038][ C0] page dumped because: kasan: bad access detected [ 493.164443][ C0] page_owner tracks the page as allocated [ 493.170137][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4276, tgid 4276 (syz-executor), ts 58553671737, free_ts 12395573063 [ 493.188436][ C0] post_alloc_hook+0x173/0x1a0 [ 493.193261][ C0] get_page_from_freelist+0x1a1e/0x1ab0 [ 493.198795][ C0] __alloc_pages+0x1ec/0x4f0 [ 493.203372][ C0] alloc_slab_page+0x5d/0x160 [ 493.208034][ C0] new_slab+0x87/0x2c0 [ 493.212088][ C0] ___slab_alloc+0xbc6/0x1240 [ 493.216746][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 493.222189][ C0] __kmalloc_node+0xa0/0x240 [ 493.226772][ C0] kvmalloc_node+0x6c/0x180 [ 493.231264][ C0] nf_hook_entries_grow+0x309/0x730 [ 493.236450][ C0] __nf_register_net_hook+0x2c9/0x910 [ 493.241810][ C0] nf_register_net_hook+0xae/0x190 [ 493.246907][ C0] nf_register_net_hooks+0x40/0x1a0 [ 493.252088][ C0] nf_ct_netns_do_get+0x20f/0x5b0 [ 493.257098][ C0] nf_ct_netns_inet_get+0x3b/0x150 [ 493.262196][ C0] nf_conncount_init+0x123/0x380 [ 493.267119][ C0] page last free stack trace: [ 493.271769][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 493.277215][ C0] free_unref_page+0x2e/0x3f0 [ 493.281878][ C0] free_contig_range+0x9d/0x150 [ 493.286713][ C0] destroy_args+0xf0/0xa0a [ 493.291173][ C0] debug_vm_pgtable+0x33c/0x38e [ 493.296004][ C0] do_one_initcall+0x26a/0x840 [ 493.300806][ C0] do_initcall_level+0x137/0x1e4 [ 493.305737][ C0] do_initcalls+0x4b/0x8a [ 493.310053][ C0] kernel_init_freeable+0x415/0x5be [ 493.315237][ C0] kernel_init+0x19/0x1b0 [ 493.319609][ C0] ret_from_fork+0x1f/0x30 [ 493.324012][ C0] [ 493.326324][ C0] Memory state around the buggy address: [ 493.331940][ C0] ffff88805b127180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 493.339984][ C0] ffff88805b127200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 493.348027][ C0] >ffff88805b127280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 493.356067][ C0] ^ [ 493.361417][ C0] ffff88805b127300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 493.369459][ C0] ffff88805b127380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 493.377501][ C0] ================================================================== [ 493.385542][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 493.392714][ C0] CPU: 0 PID: 14546 Comm: syz.4.2941 Not tainted syzkaller #0 [ 493.400155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 493.410195][ C0] Call Trace: [ 493.413463][ C0] [ 493.416297][ C0] dump_stack_lvl+0x188/0x24e [ 493.420966][ C0] ? memcpy+0x3c/0x60 [ 493.424930][ C0] ? show_regs_print_info+0x12/0x12 [ 493.430111][ C0] ? load_image+0x400/0x400 [ 493.434606][ C0] panic+0x2e5/0x730 [ 493.438489][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 493.442983][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 493.448870][ C0] ? _raw_spin_unlock+0x40/0x40 [ 493.453706][ C0] ? print_memory_metadata+0x314/0x400 [ 493.459159][ C0] check_panic_on_warn+0x80/0xa0 [ 493.464086][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 493.469182][ C0] end_report+0x66/0x110 [ 493.473433][ C0] kasan_report+0x118/0x140 [ 493.477926][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 493.483046][ C0] kasan_check_range+0x235/0x290 [ 493.487977][ C0] ? __bpf_get_stackid+0x6c9/0x920 [ 493.493075][ C0] memcpy+0x3c/0x60 [ 493.496866][ C0] __bpf_get_stackid+0x6c9/0x920 [ 493.501793][ C0] bpf_get_stackid_pe+0x33f/0x400 [ 493.506808][ C0] bpf_prog_ebdd8313a69a195f+0x28/0x3d [ 493.512254][ C0] bpf_overflow_handler+0x522/0x7c0 [ 493.517444][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 493.522717][ C0] ? perf_swevent_overflow+0x230/0x230 [ 493.528160][ C0] ? sched_clock_cpu+0x6e/0x260 [ 493.533000][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 493.539233][ C0] __perf_event_overflow+0x448/0x610 [ 493.544513][ C0] perf_swevent_hrtimer+0x472/0x630 [ 493.549702][ C0] ? cpu_clock_event_read+0x50/0x50 [ 493.554895][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 493.560775][ C0] ? _raw_spin_unlock+0x40/0x40 [ 493.565615][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 493.570804][ C0] ? cpu_clock_event_read+0x50/0x50 [ 493.575993][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 493.581089][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 493.586020][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 493.591992][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 493.597611][ C0] [ 493.600528][ C0] [ 493.603446][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 493.609417][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 493.615213][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 30 ba df 08 e8 cb 30 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 493.634807][ C0] RSP: 0018:ffffc90004447cd8 EFLAGS: 00000286 [ 493.640858][ C0] RAX: 8a01f98897524a00 RBX: 0000000000000000 RCX: 8a01f98897524a00 [ 493.648815][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1aa0 RDI: ffffffff8adf2060 [ 493.656772][ C0] RBP: ffffc90004447d30 R08: ffff8880b8e3ab03 R09: 1ffff110171c7560 [ 493.664731][ C0] R10: dffffc0000000000 R11: ffffed10171c7561 R12: ffff888024ae3c00 [ 493.672688][ C0] R13: dffffc0000000000 R14: ffff88801b740000 R15: ffff8880b8e3b5d0 [ 493.680678][ C0] ? finish_task_switch+0x265/0x8f0 [ 493.685885][ C0] __schedule+0x11d9/0x40e0 [ 493.690384][ C0] ? clockevents_program_event+0x22c/0x310 [ 493.696189][ C0] ? __sched_text_start+0x8/0x8 [ 493.701020][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 493.706994][ C0] ? lock_chain_count+0x20/0x20 [ 493.711831][ C0] ? __irq_exit_rcu+0x147/0x230 [ 493.716667][ C0] schedule+0xb9/0x180 [ 493.720722][ C0] exit_to_user_mode_loop+0x47/0x110 [ 493.726084][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 493.731624][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 493.737075][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 493.743064][ C0] RIP: 0033:0x7fd7c919ce59 [ 493.747487][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.767088][ C0] RSP: 002b:00007fd7c9fa1028 EFLAGS: 00000246 [ 493.773147][ C0] RAX: 0000000000000000 RBX: 00007fd7c9415fa0 RCX: 00007fd7c919ce59 [ 493.781105][ C0] RDX: 0000000000000005 RSI: 0000000040042408 RDI: 0000000000000006 [ 493.789063][ C0] RBP: 00007fd7c9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 493.797020][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.804974][ C0] R13: 00007fd7c9416038 R14: 00007fd7c9415fa0 R15: 00007ffcfd471508 [ 493.812936][ C0] [ 493.816192][ C0] Kernel Offset: disabled [ 493.820498][ C0] Rebooting in 86400 seconds..