last executing test programs: 24.988687969s ago: executing program 0 (id=2486): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x888, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x767}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x87) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6ca18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x3, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x47, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xffffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 23.705450149s ago: executing program 0 (id=2494): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, 0x1}, 0xc) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) 23.468578106s ago: executing program 2 (id=2495): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40049409, 0x5) 23.35171169s ago: executing program 0 (id=2496): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.35030171s ago: executing program 4 (id=2498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 23.268369343s ago: executing program 0 (id=2499): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000016c0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000180)="cfce03de546c6eae5efbbd79a27720509e50156590bcd7675067203ef1f5432d43bba2ab7c129ac37487ac264297d306b87301c7438bc716d5bb5fed2267eb3112c3b93e353d121da0ddb293c98255d739f62fa1ae5a0922ce5769135541d8c168924c6ac2e67927b01e04268447a661eb8b89ff87ae9e92d6d44284127ab74fc0b09321405ea24ef409292ca55d94de94fe6d73d7b14f53d928d281956d63212bcfa28145b96ecf3519effdc441d6e1738dad0224208788ec8dc969ade0f16679590a20", 0xc4}, {&(0x7f0000000280)="b7fb7161bc1029b121d2611b678d746247b2e4eec342f6282353ec6b4f8f08566ab0690d21c3", 0x26}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="aa6a85ae33929bf7443d9cb874b8dfbc242192c3677cd00383c9b02a6b836861e0a89f0a050c7af57c1e19111e8b6377f678d4249d41222bd3db49cd84c43d9ff512a6b9b6edf0ef7f9c0c3073fa01489ce0557ed3b98f6bcbe615d2b0e3212c6b6d78bd30ddd62558677bee0f5965f34660422584c1e758ce44d9c87ccf3251b645459a80654f0e2a5a3d5e9a7b5927da3d7a61b28472a0d0c627f80c96b760ecf23f960833acb4c0a20c713b899417741a33c84d9800d6491789aba08aedc2d291aa515207274489e48875d3797c02c7c66951034a892130bbdfe61f5f528c5b1b0c63256043adaca1fe4e8a268c0e17e0872d", 0xf4}, {&(0x7f00000013c0)="8611326706d55fa75ba63ea1aaafcf2f13c6d4d4350719fcad54d19aa4cd4f7a414e5ba66b0ca78050220ec9bf0412ad04425dfe27ef3d8a2c88d6d55c5a32c91fe6bad8bf91f22e51904b6b8cf5712caac2d10501593712934a2e5515632be3320b190866426802d4dc267686f43988e91927f0045b370f9bb488b330718fefedc2b7060ad1b9ddaee87d004a17d45553c221a56c27bfe4014d472530629ec80279780c66a74d24bd65774b917fd125485b5ab4b853948d0ccc3eee4711488127a2d0a83ab94d079919c2c780c8cbcd77b16003e6a54abaf0a52080640768f1a76d2b5771528b", 0xe7}, {&(0x7f00000014c0)="b1cacb1912ba2bc3fa8e93c75b4db6d29e478e145832b2621a5943c4ed4b457b69c95b96de1c5fd899164d11504e610c2d47203be4fa6106b3a50b4c142d72468fe963bad73112f4dcef85a83616", 0x4e}, {&(0x7f0000001540)="ece77d1a401faea29542ff6b8377f2c8f6979b1bb9d8e11efb1d13dfe87d64f873843cd2f636ea54f5ad0c782cbdfed0dd89a8fe22286fa8d17d1f222526f56fe9dd03c43d0cb3ca525b87c399f0445393b9", 0x52}], 0x7, &(0x7f0000001640)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}], 0x58, 0x41}, 0x8001) r5 = gettid() perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x53, 0x2, 0x9, 0x9, 0x0, 0x2, 0x8, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x7}, 0x400, 0x8000, 0xffff49b9, 0x6, 0x6a24, 0x6, 0x2, 0x0, 0x7ff, 0x0, 0x6}, r5, 0x1, r2, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001780)=r2, 0x4) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000017c0)={'some', 0x20, 0xff, 0x20, 0x80}, 0x2f) syz_open_procfs$namespace(r5, &(0x7f0000001800)='ns/cgroup\x00') sendmsg(r2, &(0x7f0000003200)={&(0x7f0000001840)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000018c0)="b50db4d1f50521d58c949be27a6420963621cb1b47bc0326dd074ecded71b0cad611f37a6c1178fd2f820935344d739bbc143be8f19921a6ab0831d07722fff4f1ae1c8ae2e9bdb14b09a5dfec892101ae3a0142eaba9216856906efcf16efe119c18f01f779e7f2b263292af64233250a0d0e8972e1d0f244af96dfab206c7afc4b349b55c814e8b2593380e20d5bbcbfc6a344f4e66e98333920bf33f1ac8b2ab59d76eeddb9373a702fdaf8763c8f72d9d5d206d32774a4a08a67047e120b3ebcf0b007cd74b67d2f061c77ce82b53d632323eb7a6a7370ab075dc9f3eef9ffc39c0424a3fc74e6dd79340d42398f", 0xf0}, {&(0x7f00000019c0)="1f9f2db980ca86b0f361a54ff7900a266b5ba646fada8a786dc79892b0bd0e137431a53739c9224a0159dca9d76f3533ec0dfe3b9d4e4130d2137c9b284f9f28e8b31cf364ab727a6b040810817fb8d8ae4d7c4f33ed6cd01e9125131f5d7c28b8e15cdf7230ceaa70e934aef27f687591fef05db56af150c3fa8e9feca821e7119090ee92cad5a39aad0c561149aa8055bd3110bee3f57816485d11ae140f3b55616e7902d3b9659ea7c6a8b6d4834c6562863005a7ec", 0xb7}, {&(0x7f0000001a80)="68fff5ee6ead467f58e61e3e3cf7c93ba0612877d55647b91a1411cd7799df8023f39aa6e9cd65313543e265920638ae0df61326af314cefe621699307afee1b2aeb3f389b9d85bd80bf191578376ac81c546acfff90d050f5874bce3f5bbed8084897264896afe4f2fe8e931d722931c442d792920031f758d4321c8b30b1c8d32594d80224eb2e801ac2a0664cc682b17d162cb4348c8eb796ee6314e136c8606f9becb16a6dbff895199f68dffa25ac16c82d114d1dbd03", 0xb9}, {&(0x7f0000001b40)="cbb025d50acae5", 0x7}, {&(0x7f0000001b80)="bc4e01173bbcb9bf3d35aa5875fe9b9c5422088d1d14d40ad8e820a71326859372efded7bbc714c6ef384851025d30991e3f1f20c50b79985128c9c857f0d6c5371ff59db56faddbeef9a94a18b67d6fa5c0664b99816866ed0b6ec56c36865ec929890d59c063574400ec9ef0e5db84232d451df53c9813e84509c9b5dac9f325325d", 0x83}, {&(0x7f0000001c40)="b3c6e2e0c7b615f4d5118b6376b7fa8a44522fe005abc644a4d196a4776a2cec58a75f3cea13875316f89d7d58a97cbe993ae9f7b479803bb6b5ecac61cb45dd24e8f9a4b7cc25577507498f2af5009f199b5a09bb416b3ee4d3d4ba48386074130843dc1857ffa5131dc51406f370a318d5a793b75cd3d740867fc2f53cfb8e51cd09027ee1391a473791ba899f657ced8cd2b9d0d2a81526845070156c398f8f400e", 0xa3}, {&(0x7f0000001d00)="27cbfe34e0ef3e12c527983257154b67ae7f85e97b7b1f925093b6e98185d7bb47bf6667c4287daa07a7bf71d57c9896f23a9d8eff35aef9166e250214f962800f17b7db1cfa3948f04f397aa0a1119bb2ff2130e691a748f1afa137baaeeebf9e39262f56ac63632541c196804adfbda484a11c91e44a94f636810d8ecf412d239c9aeb8bb1b88937a4853827832f84b970217b29d3c03b0e0ec4d1e8f6edc7a02f", 0xa2}], 0x7, &(0x7f0000001e40)=[{0x1010, 0x113, 0x8000, "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"}, {0x108, 0x3c, 0x4, "d3379be4ecb22088e30c3748575b9101aa32d08ca83725353d106e711db8315997eae0809c3e3689ed3050acb2e144d0509789a927cf63185de0afaa9eb5a8d08106a615d57aef639751cc9946034335b3a60b53da54a839f3f3c964c7127770a6607287b721b53543d0e5eea99c6cd773a7a9a5f456afe2374fb19e2ccf1afd2396871bb8c56421c377d708814f57f3132ca500496f57bdbdaad21b1ee610c613162c6a7e4736313ae8bfd50662fd5085b16f735dbf583ebffdcdb861759faad9b1c5d21f54db174fadfc34887d36850176c67b68ef7da03d8be23eba5175ac53c1dd32d6e128aa4eb51bf74590c8db4aefbf6a"}, {0x70, 0x107, 0xf, "4e9b31cf5bc8740281873b38291031e1e0d745a7712fd0213775b84c98dc18cf64042d3537adfb50dc70c3cd0e3d8afcd753388ba1c80346c8038a6961af3331c5586c5da7e5bd55a2f75002a32ac5444e4832b7a1421883d6a22ebea7a2b5"}, {0x28, 0x115, 0xc, "a8360f5cbd0d923ae2a3c7bd5a1444f979259515"}, {0x88, 0x10d, 0x5, "c79adf4f1a25b78d2e1a951df17daba7043c23557f7dd69e3166ab9b1d37e4e086586c650828ee8ca569a1a203d636f7efa63a920db61959ef9c719fc1f2dab1cde85d2f8bf03116f72e08b138a486d816b72c792aca06d2dfb8e822c0d7daa4a93f985bd0aa346c3b87351d8a25444aa25b29"}, {0xf8, 0x107, 0x8, "175c546d72244529a09e34fb344672d005bcdc48bf210c28cdf806d2ae33e7473c24426752b1becbf7e9fb68ae19c89475e95915de8908b7eecefef0b3678ee1bda570c5eeca50ce5d1a5100b58536545ebceb2c60671c8d1f997ce92c1f69c2cbfb900dea861a39a4601dc319eeff68b472d7893f32616769f3a7ee13d620da51aa8a64f0ab5a696665993eac6733f34f4f3f23723895f8eba6bd3443f00f0c5515fd739d832699b5317daa84410044572ad7aaea207edc79ce4efe2c21c357391a07dcdd50d6fee429c1039490c84ea32a29626c142c4a8914c79e12e6cd165968"}, {0x88, 0x0, 0x3, "df01577a7d958477c55d7e6b97be4a99a5057d54bc5f2c0978628cd845410455b39edcef21d75a2126d39ae4d37950face549a4ee85469d87c479e43aece6fcc4e172264e77ab025a60d0333784aabd99a85fbf03ec49f750c241ad19339bebe5bba828da884e7680fc0a9e82eabb682d0114eab56e04327"}], 0x13b8}, 0x20000041) socketpair(0x10, 0x800, 0x8, &(0x7f0000003240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000045c0)={&(0x7f0000003280)=@x25, 0x80, &(0x7f0000003580)=[{&(0x7f0000003300)=""/155, 0x9b}, {&(0x7f00000033c0)=""/240, 0xf0}, {&(0x7f00000034c0)=""/71, 0x47}, {&(0x7f0000003540)=""/21, 0x15}], 0x4, &(0x7f00000035c0)=""/4096, 0x1000}, 0x2000) sendmsg$kcm(r2, &(0x7f0000004a40)={&(0x7f0000004600)=@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004680)="5e005503e6ec01992d016723c8baae17f1c342bb2e52011643e2332fd84bc1006c3ad274b8f8a7bd0e99237b1f8e5e5d1bdce32a66a6592363b43a4809548ab44fd3440b6f42f29e30a0c75360cf", 0x4e}], 0x1, &(0x7f0000004740)=[{0x80, 0x1b, 0xff, "d7f93f8c24efbd02ddad68e486320fb81020358867fa9fe719d6247979ffdbf39d99eafcf25a8d54e94a8763a7eac943e253673228034872b2454674d31ff579e48b5e266ac3fa184e5a1c04711364c0e412e513a6c1245f055eb96231fa4708955cc992df9ddf1e20b8a8ed2c748cd2"}, {0xb8, 0x84, 0x7ff, "fe242039a2b24c7eca3ca16bd6b3713073a8e2fa381fb38798ce4274735e00ab3a2b3cb24eacb06d4c529bd8da689a17170aed3a64fcd8b31af9be4a86d2433c2e61bf730abdf90e6d29246792da24bf76b9360706fd6107df75a82290d5fda0436e92912d241b0a546cb3a1c53190a204f9f3351056aba0e8a0dd888365d096e5a8d470895980c691467bf98d290cea548fc303e94c3c6e756bb27d2b388d0ccc806292e05c2b"}, {0xd0, 0x113, 0x1, "70441e192e2739bdc3d75d753e6492caa8d00aa54be7b56014b541213617decb050e4c11d1fd4cc7a4c7de0c995fb123d68488b3e53e30989877208cb5c9963ee1b1faee5d89064f635e6ffd85da7dfe8cf05b84316e901183657ab4b85d8f8a0095689325157f86d2a1ec64274f6cea048b7c50858f9febd91522ee28fd24cc53d95180a0073e087810a2742eb68a5f09517d61796033ef53e8ae366c066bcc5a18eba54fe4d69216e7e8d95a9a59cae7b1225a262c3ca165d5300260be"}, {0x20, 0x111, 0x9, "ee99b408e9f94a501bebb7"}, {0xc8, 0xff, 0x8, "3e1b58e6140f43fe11796d4e55151d09489b49b2aba0e614b2e3c898cf66b87442e19780cf36d6ebcc6db2fd49ca9680fe87ad9114869d6f8db34ea7345660f5cba3678b12f10f9abe50fee2c2ddf6920e111d572afe0a13afabb4ab2afaedc4a97fe7ab3e7e279bff1554111176fc805262803bd30b874347d38db20a483941672ee431b5f4a3f6e3b4d78656846f2d9ce9eeb16b5963ac746f9c8b43b551250c6151fdab4ca0af8aed594d0a1069f7bd59ed"}], 0x2f0}, 0x4008080) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000004a80)={r2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x311) bpf$OBJ_GET_PROG(0x7, &(0x7f0000004b00)=@generic={&(0x7f0000004ac0)='./file0\x00', 0x0, 0x10}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000004b40), 0x380, 0x0) perf_event_open(&(0x7f0000004b80)={0x4, 0x80, 0x6, 0x3, 0x1, 0x3, 0x0, 0x6, 0x12020, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1f8, 0x4, @perf_config_ext={0x8, 0x5e33}, 0x200, 0x0, 0x9, 0xb, 0x0, 0x101, 0x2, 0x0, 0x1, 0x0, 0x4325fdf5}, r5, 0xe, r2, 0x2) r7 = getpid() perf_event_open(&(0x7f0000004c40)={0x2, 0x80, 0xff, 0x6, 0x7f, 0x3, 0x0, 0x5, 0x40a08, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000004c00), 0x6}, 0x1206, 0x2, 0x22642863, 0xd, 0x2, 0x1, 0x3, 0x0, 0x10001, 0x0, 0x7}, r7, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004dc0)={@map=r2, 0x1f, 0x0, 0x8000, &(0x7f0000004cc0)=[0x0], 0x1, 0x0, &(0x7f0000004d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004d40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004e40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xb5c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004e00)={@map=r10, r2, 0x2, 0x0, 0x0, @void, @value=r2, @void, @void, r9}, 0x20) r11 = openat$cgroup_ro(r8, &(0x7f0000004ec0)='cgroup.controllers\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000004f00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r12, &(0x7f0000005340)={&(0x7f0000004f40)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004fc0)="848a5c5543795abb09e2f261072e4e63fe892da0d7c064eb98fb8b96705a8bcd51208857a9f2afcdf0534422687df260f7068ef459f9fb79ed033a4096b08d82", 0x40}, {&(0x7f0000005000)}, {&(0x7f0000005040)="7a7677d0a028ae52a0fcfb33a5163e9df651dc1fbf580d375c622f5e7007ec593c50548e9f", 0x25}, {&(0x7f0000005080)="ef53caaa7794d8aa9cca1c49cbecf8e831da139fb85986776f6fa4436809214d9bb66904339e5973d608d6de175c19a2ffdcbf5ce7837046220b03ab69930241de4e650f9b886b19bff66002e84765b653c28baea0e32928b51b8b7ff3bfe7a272f63ee7cb045e779aa25a2a89f7d3f7aa3c6c004a92c2ff52a9aff6c5ed7841d506a8e317386f91c72d6d9364b84cd8b5e28e6dda73c82d8e883f3434355ace51920f82a8e599d2fd14334fec894002dae06cc96534a0a1", 0xb8}, {&(0x7f0000005140)="1f3f287885163c365f4ac9c2e5aaa8ab74cae5246d0a6a187cf9694ba66c207cc974fac7c2e9969e3948a48d81488f870d62730d1b82a9159162a56bcfbfa966b37cded238a030f32a4100ea0d7dd52301a3dbb30cc64e96c80595e52b0b36465216e450badb3827ff49d12716afe1b8b8fa8beb42d279af8611dd6076b8ad5e16d3b9ab44c3b36c602cb38dfc6e230c1ca3ead94f676c3256daae188078f830f4a2ce6eef5973c210e0f445b8088f1189aef4512b4e9c60fa4780d47fa5484af61446e178370b128cf38cf8328d0f9ac17fd166d2634472d567394c4f87e64ba90d7d1064", 0xe5}], 0x5, &(0x7f00000052c0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @mark={{0x14, 0x1, 0x24, 0xe41f}}], 0x60}, 0x4040004) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000053c0)=@generic={&(0x7f0000005380)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000005400)=r13, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005540)={@cgroup=r11, 0x31, 0x1, 0x10000, &(0x7f0000005440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000005480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000054c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005500)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 22.960694722s ago: executing program 4 (id=2500): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x32c24414, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7c27}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x8, 0x9, 0x3, 0x4, 0xf2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x5, 0x3, 0xe, 0x5}, {0x2, 0x1, 0xb, 0xa}, {0x3, 0x4, 0xe, 0xc}, {0x4, 0x5, 0xa, 0x6}, {0x3, 0x2, 0x9, 0x7}, {0x1, 0x2, 0x5, 0xa}, {0x1, 0x3, 0xc, 0x8}, {0x3, 0x5, 0xc, 0xa}], 0x10, 0x8}, 0x94) (async) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='devices.list\x00', 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="7bb82d9f05e041c80c32768b21a34b32087b23aa7032262c79b5fa8c6bc8f6a9b815f9d7d69f59b706515d077fac47815594c3f74b5b79e57247875038caa5", 0x3f}, {&(0x7f0000000100)="eec2e737ce8bd33a8269", 0xa}], 0x2, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r5, 0xffffffffffffffff, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80, 0x4801}, 0x8010) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) r10 = syz_clone(0x500c080, &(0x7f00000006c0)="ff7b3f29fb7f5364577a204586cb63edcfa922b2354424ce1e17a0b52dd1002868845174a1a70a7c9f11c3be50d52e643502b8843a833227232409786ce7d74ed6cf6db073631d98b0d28b3ed20b8a189e65b6f7e9a43e4749f5133ea822cf23ef9c434ca55413d32bde5dacd5b2ecb06c37cd012ba0b3f953e26fb1afaef1a5b0be7f3d702cd1c2bfdcdf81f5def8331fa71c9d90ccbaf1de6d0f", 0x9b, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="6d9adfc75196e6f6f7fc3ec3a7211146c5d0ffb9f66af35a76b9dfd8d579d2d20ea6751c9d9499eb1d2a391f47e10aa5335589123cd89051c3c513a163b7d55c3f555da08e55ed33b7e5593dcbec7f37e1e9894efc99592f0768cfc4c273466e81163ed1f2f29a0513ef9aceee7bb75d00e7ec956c2573e2a8563d61e9d9f666dd41191d42cff1cb0cda112a340a49ffb89cd312bbef0273358dff6fc79e9a496b4d0eeb379ae285ea976f83750aa903aa1726c05deb023f0f0a8d265afee4b9a8375729624039f679eae712113ba7ac62f117636a8a472a3afe") perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x1, 0x3, 0x9, 0x2, 0x0, 0x6, 0x840, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x1, 0x7ff}, 0x0, 0x3, 0x3, 0x3, 0x5, 0xde0b, 0x9, 0x0, 0xfff, 0x0, 0x3}, r10, 0x0, r9, 0x1) openat$cgroup_devices(r2, &(0x7f0000000900)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64) sendmsg$unix(r0, &(0x7f0000001ac0)={&(0x7f0000000940)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)}], 0x2, &(0x7f0000001a40)=[@rights={{0x24, 0x1, 0x1, [r1, r4, r5, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x60, 0x40}, 0x20004810) (rerun: 64) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x4) (async) write$cgroup_pid(r9, &(0x7f0000001b00)=r10, 0x12) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r9, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)=r9}, 0x20) perf_event_open$cgroup(&(0x7f0000001c40)={0x2, 0x80, 0x8, 0x9, 0x83, 0x5, 0x0, 0x1, 0x22010, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000001c00), 0x1}, 0x10161c, 0x100, 0x20000000, 0x6, 0x2, 0x10, 0x6, 0x0, 0xffffffff, 0x0, 0x40}, r2, 0x0, r8, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d40)={{r9, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d80)={r12}, 0x4) (async, rerun: 32) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001dc0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 32) socket$kcm(0x29, 0x0, 0x0) (async) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002040)=@bpf_tracing={0x1a, 0x6, &(0x7f0000001e00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @generic={0x6, 0x8, 0x5, 0x0, 0x81}, @alu={0x7, 0x0, 0x3, 0x3, 0x8, 0xfffffffffffffff8, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000001e40)='GPL\x00', 0x2, 0xb7, &(0x7f0000001e80)=""/183, 0x41100, 0x10, '\x00', 0x0, 0x18, r9, 0x8, &(0x7f0000001f40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001f80)={0x1, 0xa, 0x1, 0xffffacb4}, 0x10, 0x99ed, r6, 0x3, &(0x7f0000001fc0)=[r9], &(0x7f0000002000)=[{0x2, 0x3, 0x7, 0x9}, {0x3, 0x2, 0x2, 0xb}, {0x0, 0x1, 0x9, 0x5}], 0x10, 0xfffffffa}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002200)={@cgroup=r9, 0x1e, 0x1, 0x1000, &(0x7f0000002100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000002140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000021c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)={@cgroup=r2, r13, 0x29, 0x0, 0x0, @void, @value=r11, @void, @void, r14}, 0x20) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000002280)={r5}) (async, rerun: 32) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000022c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002300)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xc62e, '\x00', 0x0, r15, 0x4, 0x1, 0x2}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002380)=r12, 0x4) (async) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f00000023c0)=""/78) 22.911951634s ago: executing program 0 (id=2501): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x1, 0x0, 0x1, 0x4, 0x3, 0xffffffffffffffe0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x7, 0xcb, &(0x7f0000000240)=""/203, 0x41000, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x6, 0x7}, 0x10, 0xe5ac, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x3, 0x3, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) 22.788851117s ago: executing program 2 (id=2502): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c, 0xfffffffc}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xb, [@enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x5, 0x2}, {0x9, 0x638f}, {0xe, 0x9}, {0x5, 0xa}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0x6}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @enum64={0xd, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x7, 0x1}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x0, 0x5f, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000140)=""/102, 0x83, 0x66, 0x1, 0x57}, 0x28) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) (async) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x1c, 0xfffffffc}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0xb, [@enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x5, 0x2}, {0x9, 0x638f}, {0xe, 0x9}, {0x5, 0xa}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0x6}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @enum64={0xd, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x7, 0x1}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x0, 0x5f, 0x30, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000140)=""/102, 0x83, 0x66, 0x1, 0x57}, 0x28) (async) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) (async) 22.787831807s ago: executing program 1 (id=2503): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000013c0)="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"/627, 0x273}, {&(0x7f0000000380)="b0fef28adda42f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb289462231", 0x64}, {&(0x7f00000004c0)="e64df5ed05", 0x5}], 0x3}, 0x0) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) (async) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r3) ioctl$TUNGETVNETLE(r2, 0x8953, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0, r2}) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a60e000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 22.734503159s ago: executing program 4 (id=2504): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, &(0x7f0000000440)=""/236}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) 22.626878732s ago: executing program 2 (id=2505): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001000000000000006001820"], 0x0, 0x4}, 0x94) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x1, 0x0, 0x0, 0x200000000000000, 0x89128, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0xa0, 0xca, 0x1, 0x2, 0xfffffffffffffffc, 0x4008, 0x4, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYBLOB], 0x9a) 22.416105669s ago: executing program 4 (id=2506): close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x5, 0x9, &(0x7f0000002400)=@raw=[@call={0x85, 0x0, 0x0, 0x20}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000002480)='syzkaller\x00', 0x7fff, 0x6d, &(0x7f00000024c0)=""/109, 0x41000, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002580)={0x3, 0x9, 0x401, 0x100}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000025c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000038c0)={r0, 0x0, 0x7, 0xe8, &(0x7f00000026c0)="14a223ffa91c30", &(0x7f0000002700)=""/232, 0x2, 0x0, 0x83, 0x1000, &(0x7f0000002800)="c1173d2f9ba8fae35a1fe79cd7e89f970d0e8a9f43b7a355122cdc3bd375eab1f5d7c1e6291ad2d74f94aa64731c95518296c4e042d9f7f85e6ea47756caa2acbdcb3a1872503183e0b51f83c57013f239fbfb4a3c0c052e5676321913771682786821d06ea0284d4e78629fdedcab70ba5ca34c3b614e417399a1f9b72160b18a8d09", &(0x7f00000028c0)="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", 0x6, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000039c0)) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f00000023c0)={&(0x7f0000000080)=@qipcrtr, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/60, 0x3c}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/156, 0x9c}, {&(0x7f0000002200)=""/164, 0xa4}], 0x5, &(0x7f0000002340)=""/81, 0x51}, 0x40000100) r2 = perf_event_open(&(0x7f0000003940)={0x6, 0x80, 0x2, 0x6, 0x4, 0x8, 0x0, 0x3, 0x40002, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp, 0x800, 0x2, 0x7e, 0x1, 0x0, 0x8001, 0x5, 0x0, 0x6, 0x0, 0x10000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8983, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000003a00), 0x80200, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000003a80)={0x4, &(0x7f0000003a40)=[{0xc, 0x4, 0x6, 0x6}, {0x8, 0x10, 0x7, 0x8000}, {0x4, 0x9, 0x8, 0x1}, {0x4, 0x0, 0x8, 0x83c}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000007910000000000000c3000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 22.414906269s ago: executing program 2 (id=2507): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5e, 0x0, 0x1}, 0x28) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) close(r1) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f10", 0x8}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x57}], 0x2}, 0x4000000) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r2]}, 0x80) 21.812817678s ago: executing program 1 (id=2508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x1d, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000021891ade9958570a00000000040800035f274d00020000000000000c02000000000000000001000d0000000000005f00"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r10, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f0e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x0, r11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r12, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r8, 0x6, 0xd, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0xc1) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000ca0b0000000000008204000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001857000003000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000598af8ff000000003c950697504591c94bbfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000deea04eb2ca166f4cbcf88f9c668114e5fa75e4f438c941fe6bec32478dbce83666d7ab93701709c1f14341d359d5317eaff469159de9c9b2ac28eac8fbb125eeaaf"], &(0x7f0000000380)='syzkaller\x00', 0x5e, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x11, '\x00', r3, 0x0, r6, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r7, r0, 0xffffffffffffffff, 0xffffffffffffffff, r13], 0x0, 0x10, 0x8fb}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x2}, 0xa002, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 21.72152429s ago: executing program 1 (id=2509): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0xffff6efe, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x10000, 0x5}, {0x10000002, 0x4000, 0x9, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0x50) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x48, &(0x7f0000000340)=r1, 0x5b) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb5, 0xff, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600001, 0x2, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x80000000, 0x9}, 0x10138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 21.432356649s ago: executing program 1 (id=2510): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x4, 0x80, 0x8, 0x5, 0x0, 0x9, 0x0, 0x1, 0x46400, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x9}, 0x80, 0x1000, 0x0, 0x8, 0x80000001, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x37210d8c}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f0000000540)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x2400c885) 20.41625885s ago: executing program 1 (id=2511): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738ad6ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000120000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec", 0x5b}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) close(r3) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x5, 0x0, 0x1, 0x4c}]}) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'gre0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2000000000000090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffa8}, 0x90) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8919, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8902, &(0x7f0000000080)) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xe8}, 0x42, 0xc8, 0x0, 0x1, 0x9, 0x0, 0x214, 0x0, 0x2, 0x0, 0x400003ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.478935639s ago: executing program 4 (id=2513): socket$kcm(0x2b, 0x1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x6, @perf_config_ext={0x0, 0x1000000}, 0x10ca46, 0x89, 0x3c, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x480d0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r4 = getpid() perf_event_open(0x0, r4, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x0, 0x5, 0x0, 0x7, 0x8, 0x0, 0x820, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8040, 0x100000001, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) 19.477985069s ago: executing program 2 (id=2514): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01011800000000000000200002002000000004000000020000000000000c02000000000000000100000d00000000005f00"], 0x0, 0x3c}, 0x28) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xce5, 0x6, 0x6, 0x5804, r2, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x2, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)="ba"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x10040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d032b00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f00000000c0)) socket$kcm(0x10, 0x400000002, 0x0) 19.12448016s ago: executing program 3 (id=2516): bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200000056a2000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.936431826s ago: executing program 3 (id=2517): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r5}, 0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x10, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) close(0xffffffffffffffff) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x6a) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) 18.674913004s ago: executing program 3 (id=2518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000001000000000000006001820"], 0x0, 0x4}, 0x94) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x1, 0x0, 0x0, 0x200000000000000, 0x89128, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0xa0, 0xca, 0x1, 0x2, 0xfffffffffffffffc, 0x4008, 0x4, 0x0, 0x7fffffff, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYBLOB="3e97"], 0x9a) 18.596062506s ago: executing program 3 (id=2519): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r1}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0, r2}) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f", 0xc}], 0x1}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x10, 0x1, 0x2, [{0xd, 0x4, 0x10000}]}]}}, 0x0, 0x32}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000300000001000000000000000000000200000000000000000000000602"], 0x0, 0x56}, 0x20) (async) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="030000", 0x3}], 0x2}, 0x40) (async) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 18.381867993s ago: executing program 3 (id=2520): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="170000006a00f96b1324", 0x18}], 0x1}, 0x4080) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x80, 0xd9, 0x0, 0xf7, 0x0, 0x3, 0x800, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080)}, 0x100000, 0x8, 0x50f, 0x2, 0x6, 0x2be536c1, 0x9, 0x0, 0x8001, 0x0, 0x4}) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 17.001602706s ago: executing program 1 (id=2521): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, &(0x7f0000000100), 0x120) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xffe7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) socket$kcm(0xa, 0x6, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, &(0x7f0000000100), 0x120) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r3}, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xffe7) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000000c0)=r6, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) (async) 16.986682176s ago: executing program 0 (id=2522): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x4040950) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x29, 0x5, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000040), &(0x7f0000000340)='%pI4 \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x4040950) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$kcm(0x29, 0x5, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000040), &(0x7f0000000340)='%pI4 \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) (async) 16.948982577s ago: executing program 4 (id=2523): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdaa}, 0xffffffffffffffff, 0x5, r4, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x5, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 16.886068299s ago: executing program 2 (id=2524): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600290001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb79107005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16ca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee7de6ccd4d6e4ed6f3d93452a92954b43370e970189f97bb7fabe5163b0fa79c4fe", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) close(0x3) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0xc0, 0x9, 0x3e, 0x35, 0x0, 0x7ff, 0x20004, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x80, 0x2, 0x9, 0x8, 0x5, 0x5fc, 0x8001, 0x0, 0x1, 0x0, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffd8c, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0xd, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x101) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.881940479s ago: executing program 3 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x24}, {0x45, 0x0, 0x0, 0x80ffffff}, {0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 1.139796124s ago: executing program 32 (id=2522): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x4040950) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x29, 0x5, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000040), &(0x7f0000000340)='%pI4 \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x4040950) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$kcm(0x29, 0x5, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000040), &(0x7f0000000340)='%pI4 \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) (async) 1.039812867s ago: executing program 33 (id=2521): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, &(0x7f0000000100), 0x120) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r3}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xffe7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) socket$kcm(0xa, 0x6, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x2f, &(0x7f0000000100), 0x120) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r3}, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xffe7) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000000c0)=r6, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) (async) 759.236156ms ago: executing program 34 (id=2524): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600290001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb79107005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16ca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee7de6ccd4d6e4ed6f3d93452a92954b43370e970189f97bb7fabe5163b0fa79c4fe", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) close(0x3) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x5, 0x80, 0xc0, 0x9, 0x3e, 0x35, 0x0, 0x7ff, 0x20004, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x80, 0x2, 0x9, 0x8, 0x5, 0x5fc, 0x8001, 0x0, 0x1, 0x0, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xfffffffffffffd8c, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0xd, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x101) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x890c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 200.068213ms ago: executing program 35 (id=2525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x24}, {0x45, 0x0, 0x0, 0x80ffffff}, {0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) 0s ago: executing program 36 (id=2523): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x400, @empty, 0x6}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdaa}, 0xffffffffffffffff, 0x5, r4, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000240), 0x2, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x5, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000040)) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) kernel console output (not intermixed with test programs): 0x2b0 [ 255.927283][ T7170] ? __x64_sys_sendmsg+0x80/0x80 [ 255.932301][ T7170] ? lockdep_hardirqs_on+0x94/0x140 [ 255.937563][ T7170] do_syscall_64+0x4c/0xa0 [ 255.942046][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 255.946767][ T7170] ? clear_bhb_loop+0x60/0xb0 [ 255.951465][ T7170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.957398][ T7170] RIP: 0033:0x7fecd899ce59 [ 255.961838][ T7170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.981485][ T7170] RSP: 002b:00007fecd989a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.990026][ T7170] RAX: ffffffffffffffda RBX: 00007fecd8c15fa0 RCX: 00007fecd899ce59 [ 255.998222][ T7170] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 256.006234][ T7170] RBP: 00007fecd8a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 256.014224][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.022347][ T7170] R13: 00007fecd8c16038 R14: 00007fecd8c15fa0 R15: 00007fff3d59d428 [ 256.030387][ T7170] [ 256.573789][ T7201] netlink: 'syz.0.755': attribute type 3 has an invalid length. [ 256.599881][ T7201] netlink: 132 bytes leftover after parsing attributes in process `syz.0.755'. [ 256.809751][ T7206] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 256.842699][ T7206] netlink: 55 bytes leftover after parsing attributes in process `syz.3.757'. [ 257.262090][ T7222] netlink: 'syz.0.761': attribute type 2 has an invalid length. [ 257.699575][ T7204] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 257.709505][ T7204] netlink: 2 bytes leftover after parsing attributes in process `syz.1.756'. [ 257.718673][ T7204] device hsr0 entered promiscuous mode [ 257.726481][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.736306][ T7204] bridge0: port 3(hsr0) entered blocking state [ 257.753480][ T7204] bridge0: port 3(hsr0) entered disabled state [ 257.762143][ T7204] bridge0: port 3(hsr0) entered blocking state [ 257.768493][ T7204] bridge0: port 3(hsr0) entered forwarding state [ 257.838967][ T7222] device 0 entered promiscuous mode [ 258.784011][ T7259] device syzkaller0 entered promiscuous mode [ 260.239686][ T7299] netlink: 'syz.0.783': attribute type 21 has an invalid length. [ 260.420719][ T7309] netlink: 'syz.3.785': attribute type 27 has an invalid length. [ 260.995667][ T7325] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 261.012026][ T7325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.790'. [ 261.054399][ T7325] device hsr0 entered promiscuous mode [ 261.382056][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.388713][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.399673][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.419871][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.433620][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.451194][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.484053][ T7334] batman_adv: batadv0: Interface deactivated: vlan1 [ 261.502225][ T7334] batman_adv: batadv0: Removing interface: vlan1 [ 261.709154][ T7339] netlink: 'syz.2.794': attribute type 2 has an invalid length. [ 261.765303][ T7339] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 261.817398][ T7351] syz.0.797[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.853148][ T7351] syz.0.797[7351] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.854368][ T7339] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.794'. [ 262.019915][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 264.089564][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 264.654907][ T7347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.794'. [ 264.725886][ T7359] netlink: 'syz.0.798': attribute type 21 has an invalid length. [ 264.820434][ T7363] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.800'. [ 264.887788][ T7367] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.801'. [ 265.881831][ T7379] netlink: 'syz.0.803': attribute type 7 has an invalid length. [ 265.991676][ T7384] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 266.034261][ T7384] netlink: 2 bytes leftover after parsing attributes in process `syz.3.805'. [ 266.080463][ T7384] device hsr0 entered promiscuous mode [ 266.091341][ T7384] bridge0: port 3(hsr0) entered blocking state [ 266.127565][ T7384] bridge0: port 3(hsr0) entered disabled state [ 266.170024][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 266.186768][ T7384] bridge0: port 3(hsr0) entered blocking state [ 266.193580][ T7384] bridge0: port 3(hsr0) entered forwarding state [ 266.274285][ T7399] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.809'. [ 266.319443][ T7399] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.809'. [ 266.360218][ T7399] netlink: 2 bytes leftover after parsing attributes in process `syz.2.809'. [ 266.634254][ T7413] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 266.646777][ T7413] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.813'. [ 266.710770][ T7413] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.813'. [ 267.149174][ T7426] veth0_vlan: mtu greater than device maximum [ 267.348560][ T7428] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 267.902588][ T7446] netlink: 'syz.2.822': attribute type 33 has an invalid length. [ 267.912414][ T7446] netlink: 152 bytes leftover after parsing attributes in process `syz.2.822'. [ 268.259730][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 268.292812][ T7459] netlink: 'syz.0.825': attribute type 10 has an invalid length. [ 268.301557][ T7459] netlink: 2 bytes leftover after parsing attributes in process `syz.0.825'. [ 268.312700][ T7459] device hsr0 entered promiscuous mode [ 268.324549][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.347036][ T7459] bridge0: port 3(hsr0) entered blocking state [ 268.354471][ T7459] bridge0: port 3(hsr0) entered disabled state [ 268.397132][ T7459] bridge0: port 3(hsr0) entered blocking state [ 268.404281][ T7459] bridge0: port 3(hsr0) entered forwarding state [ 268.711446][ T7470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.829'. [ 269.146521][ T7490] netlink: 'syz.0.834': attribute type 29 has an invalid length. [ 270.329894][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 271.251681][ T7471] netlink: 10 bytes leftover after parsing attributes in process `syz.1.828'. [ 271.286695][ T7485] netlink: 'syz.4.833': attribute type 21 has an invalid length. [ 271.357677][ T7486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.833'. [ 271.415501][ T7486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.439993][ T7488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.834'. [ 271.450944][ T7490] netlink: 'syz.0.834': attribute type 29 has an invalid length. [ 271.824781][ T7502] netlink: 'syz.2.836': attribute type 39 has an invalid length. [ 271.878391][ T7511] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.840'. [ 271.922610][ T7511] openvswitch: netlink: Key type 386 is out of range max 32 [ 272.045968][ T7502] device hsr_slave_1 left promiscuous mode [ 272.419583][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 272.666975][ T7530] netlink: 'syz.1.843': attribute type 2 has an invalid length. [ 272.719516][ T7530] netlink: 'syz.1.843': attribute type 8 has an invalid length. [ 272.727275][ T7530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.843'. [ 273.095835][ T7540] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 273.270013][ T7540] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.847'. [ 273.447936][ T7551] netlink: 'syz.3.849': attribute type 4 has an invalid length. [ 273.479891][ T7551] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.849'. [ 273.801210][ T7561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 274.499721][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 274.511835][ T7590] netlink: 105316 bytes leftover after parsing attributes in process `syz.2.858'. [ 275.980473][ T7628] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 275.994958][ T7633] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.865'. [ 276.018370][ T7628] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 276.046781][ T7631] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 276.070042][ T7637] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 276.129073][ T7628] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 276.181506][ T7628] netlink: 'syz.1.866': attribute type 29 has an invalid length. [ 276.579436][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 276.998135][ T7665] netlink: 40 bytes leftover after parsing attributes in process `syz.1.875'. [ 278.649570][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 280.744857][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 280.908260][ T7707] validate_nla: 20 callbacks suppressed [ 280.908281][ T7707] netlink: 'syz.2.885': attribute type 29 has an invalid length. [ 280.928255][ T7707] netlink: 'syz.2.885': attribute type 29 has an invalid length. [ 280.938221][ T7707] netlink: 'syz.2.885': attribute type 29 has an invalid length. [ 281.787842][ T7728] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.890'. [ 282.250146][ T7736] netlink: 'syz.4.893': attribute type 25 has an invalid length. [ 282.269636][ T7736] netlink: 'syz.4.893': attribute type 9 has an invalid length. [ 282.290580][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 282.332742][ T7742] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 282.341883][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.352076][ T7742] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 282.361870][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.376708][ T7742] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 282.385112][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.394943][ T7742] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 282.403706][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.413433][ T7742] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 282.449387][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.476046][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.509638][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.562224][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.894'. [ 282.809458][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 282.862707][ T7754] team0: Device ipvlan1 failed to register rx_handler [ 282.940697][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.352142][ T7773] bridge0: port 3(hsr0) entered disabled state [ 283.358646][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.874674][ T7823] bridge_slave_0: mtu less than device minimum [ 284.899717][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 286.246407][ T7843] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 286.310668][ T7843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.973610][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 287.412916][ T7868] validate_nla: 67 callbacks suppressed [ 287.412933][ T7868] netlink: 'syz.0.930': attribute type 21 has an invalid length. [ 287.438080][ T7868] __nla_validate_parse: 63 callbacks suppressed [ 287.438098][ T7868] netlink: 164 bytes leftover after parsing attributes in process `syz.0.930'. [ 287.479949][ T7868] netlink: 'syz.0.930': attribute type 13 has an invalid length. [ 287.505402][ T7868] netlink: 160 bytes leftover after parsing attributes in process `syz.0.930'. [ 287.679268][ T7879] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 288.387261][ T7909] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 288.405397][ T7909] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.938'. [ 288.590498][ T7909] netlink: 'syz.2.938': attribute type 29 has an invalid length. [ 288.644984][ T7909] netlink: 'syz.2.938': attribute type 29 has an invalid length. [ 289.007775][ T7922] delete_channel: no stack [ 289.049386][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 290.196308][ T7955] netlink: 140 bytes leftover after parsing attributes in process `syz.4.951'. [ 290.566065][ T7963] netlink: 14 bytes leftover after parsing attributes in process `syz.4.958'. [ 290.610051][ T7965] netlink: 14 bytes leftover after parsing attributes in process `syz.4.958'. [ 290.875804][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.2.963'. [ 291.139691][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 291.604146][ T8005] bridge0: port 3(hsr0) entered disabled state [ 291.623895][ T8005] device bridge_slave_1 left promiscuous mode [ 291.639928][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.660983][ T8005] device bridge_slave_0 left promiscuous mode [ 291.667425][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.548662][ T8014] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 293.139560][ T8041] netlink: 'syz.2.979': attribute type 21 has an invalid length. [ 293.169738][ T8041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'. [ 293.214848][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 293.534628][ T8051] netlink: 'syz.1.982': attribute type 2 has an invalid length. [ 293.549892][ T8051] netlink: 10 bytes leftover after parsing attributes in process `syz.1.982'. [ 293.643601][ T8059] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 293.715081][ T8059] bridge0: port 3(hsr0) entered disabled state [ 293.733780][ T8060] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.982'. [ 293.768486][ T8059] bridge0: port 3(hsr0) entered disabled state [ 294.437018][ T8068] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.986'. [ 294.546064][ T8068] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 294.565076][ T8068] CPU: 0 PID: 8068 Comm: syz.0.986 Not tainted syzkaller #0 [ 294.572471][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.582724][ T8068] Call Trace: [ 294.586052][ T8068] [ 294.589023][ T8068] dump_stack_lvl+0x188/0x24e [ 294.593757][ T8068] ? show_regs_print_info+0x12/0x12 [ 294.599018][ T8068] ? load_image+0x410/0x410 [ 294.603674][ T8068] sysfs_warn_dup+0x8a/0xa0 [ 294.608246][ T8068] sysfs_do_create_link_sd+0xc0/0x110 [ 294.613741][ T8068] device_add+0x83b/0x1050 [ 294.618208][ T8068] wiphy_register+0x1d8b/0x2aa0 [ 294.623117][ T8068] ? cfg80211_event_work+0x40/0x40 [ 294.628268][ T8068] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 294.634487][ T8068] ieee80211_register_hw+0x2d48/0x39f0 [ 294.639994][ T8068] ? ieee80211_register_hw+0xed1/0x39f0 [ 294.645577][ T8068] ? ieee80211_register_hw+0xed1/0x39f0 [ 294.651159][ T8068] ? ieee80211_tasklet_handler+0x20/0x20 [ 294.656822][ T8068] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 294.662752][ T8068] ? __debug_object_init+0xed/0x440 [ 294.668422][ T8068] ? memset+0x1e/0x40 [ 294.672521][ T8068] ? __hrtimer_init+0x189/0x270 [ 294.677428][ T8068] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 294.683209][ T8068] ? memcpy+0x3c/0x60 [ 294.687241][ T8068] hwsim_new_radio_nl+0xab7/0xc90 [ 294.692355][ T8068] genl_family_rcv_msg_doit+0x22f/0x350 [ 294.697942][ T8068] ? end_current_label_crit_section+0x170/0x170 [ 294.704229][ T8068] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 294.710169][ T8068] ? bpf_lsm_capable+0x5/0x10 [ 294.714890][ T8068] ? security_capable+0x85/0xb0 [ 294.719791][ T8068] genl_rcv_msg+0x601/0x790 [ 294.724393][ T8068] ? genl_bind+0x360/0x360 [ 294.728863][ T8068] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 294.735282][ T8068] ? netlink_rcv_skb+0x1ce/0x440 [ 294.740446][ T8068] netlink_rcv_skb+0x1ef/0x440 [ 294.745297][ T8068] ? genl_bind+0x360/0x360 [ 294.749763][ T8068] ? netlink_ack+0x1160/0x1160 [ 294.754784][ T8068] ? down_read+0x1a8/0x2d0 [ 294.759250][ T8068] genl_rcv+0x24/0x40 [ 294.763288][ T8068] netlink_unicast+0x7ad/0x920 [ 294.768120][ T8068] netlink_sendmsg+0x8ad/0xbd0 [ 294.772937][ T8068] ? lockdep_hardirqs_on+0x94/0x140 [ 294.778183][ T8068] ? netlink_getsockopt+0x550/0x550 [ 294.783421][ T8068] ? netlink_getsockopt+0x550/0x550 [ 294.788708][ T8068] ? netlink_getsockopt+0x550/0x550 [ 294.794038][ T8068] ____sys_sendmsg+0x5ed/0x9a0 [ 294.798851][ T8068] ? __sys_sendmsg_sock+0x30/0x30 [ 294.803905][ T8068] ? __import_iovec+0x306/0x510 [ 294.808797][ T8068] ? import_iovec+0x6f/0xa0 [ 294.813333][ T8068] ___sys_sendmsg+0x2a2/0x360 [ 294.818053][ T8068] ? __sys_sendmsg+0x2a0/0x2a0 [ 294.822875][ T8068] ? ktime_get+0x7b/0x270 [ 294.827435][ T8068] __se_sys_sendmsg+0x1c3/0x2b0 [ 294.832409][ T8068] ? perf_trace_preemptirq_template+0x268/0x320 [ 294.838690][ T8068] ? __x64_sys_sendmsg+0x80/0x80 [ 294.843681][ T8068] ? lockdep_hardirqs_on+0x94/0x140 [ 294.848930][ T8068] do_syscall_64+0x4c/0xa0 [ 294.853385][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 294.858114][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 294.862934][ T8068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.869003][ T8068] RIP: 0033:0x7f22b6d9ce59 [ 294.873443][ T8068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.893175][ T8068] RSP: 002b:00007f22b7d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.901720][ T8068] RAX: ffffffffffffffda RBX: 00007f22b7015fa0 RCX: 00007f22b6d9ce59 [ 294.909835][ T8068] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 294.917833][ T8068] RBP: 00007f22b6e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 294.925838][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.933835][ T8068] R13: 00007f22b7016038 R14: 00007f22b7015fa0 R15: 00007ffff5322178 [ 294.941858][ T8068] [ 295.254566][ T8067] delete_channel: no stack [ 295.289447][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 295.488149][ T8081] netlink: 148 bytes leftover after parsing attributes in process `syz.3.990'. [ 295.750241][ T8077] delete_channel: no stack [ 295.997622][ T8104] netlink: 763 bytes leftover after parsing attributes in process `syz.3.997'. [ 297.234114][ T8144] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1008'. [ 297.293435][ T8150] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1009'. [ 297.344434][ T8127] can: request_module (can-proto-0) failed. [ 297.380575][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 297.583233][ T8141] delete_channel: no stack [ 298.440342][ T8168] netlink: 'syz.2.1015': attribute type 27 has an invalid length. [ 298.489613][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 298.585962][ T8166] delete_channel: no stack [ 298.730251][ T8191] netlink: 'syz.1.1020': attribute type 46 has an invalid length. [ 298.762626][ T8191] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1020'. [ 298.856783][ T8194] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1021'. [ 298.866246][ T8197] netlink: 'syz.2.1022': attribute type 2 has an invalid length. [ 298.866269][ T8197] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 298.866284][ T8197] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1022'. [ 298.910809][ T8198] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1023'. [ 299.178943][ T8195] delete_channel: no stack [ 299.449558][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 300.570393][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 301.255070][ T8264] netlink: 'syz.4.1042': attribute type 29 has an invalid length. [ 301.280558][ T8264] netlink: 'syz.4.1042': attribute type 29 has an invalid length. [ 301.321323][ T8262] netlink: 'syz.3.1043': attribute type 7 has an invalid length. [ 301.342455][ T8262] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.1043'. [ 301.366103][ T8265] netlink: 'syz.4.1042': attribute type 29 has an invalid length. [ 301.410856][ T8268] netlink: 'syz.4.1042': attribute type 29 has an invalid length. [ 301.519011][ T8264] netlink: 'syz.4.1042': attribute type 29 has an invalid length. [ 301.539573][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 301.742923][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1046'. [ 301.779514][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 302.160034][ T8289] netlink: 125060 bytes leftover after parsing attributes in process `syz.3.1052'. [ 302.296373][ T8289] tap0: tun_chr_ioctl cmd 1074812118 [ 302.649589][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 302.707186][ T8310] IPv6: Can't replace route, no match found [ 303.061516][ T8317] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1060'. [ 303.107125][ T8317] tc_dump_action: action bad kind [ 303.609726][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 303.652532][ T8326] validate_nla: 5 callbacks suppressed [ 303.652550][ T8326] netlink: 'syz.1.1064': attribute type 2 has an invalid length. [ 303.821406][ T8337] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1066'. [ 303.861426][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 304.164139][ T8345] GPL: port 1(syz_tun) entered blocking state [ 304.193743][ T8345] GPL: port 1(syz_tun) entered disabled state [ 304.206645][ T8345] device syz_tun entered promiscuous mode [ 304.393974][ T8352] netlink: 'syz.4.1070': attribute type 2 has an invalid length. [ 304.484846][ T8352] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 304.584901][ T8352] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1070'. [ 304.734043][ T8349] device syz_tun left promiscuous mode [ 304.739774][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 304.764870][ T8349] GPL: port 1(syz_tun) entered disabled state [ 305.006760][ T8356] device wg2 entered promiscuous mode [ 305.074908][ T8361] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1072'. [ 305.351645][ T8370] tipc: Started in network mode [ 305.357717][ T8370] tipc: Node identity 9215a268, cluster identity 4711 [ 305.374895][ T8370] tipc: Node number set to 2450891368 [ 305.691263][ T8378] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1078'. [ 305.700795][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 305.930230][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 306.456111][ T8398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1085'. [ 306.809602][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 307.769864][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 308.009832][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 308.304779][ T8449] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 308.346349][ T8446] device syzkaller0 entered promiscuous mode [ 308.359828][ T8449] netlink: 'syz.0.1099': attribute type 3 has an invalid length. [ 308.412355][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1099'. [ 308.489286][ T8455] netlink: 'syz.2.1101': attribute type 3 has an invalid length. [ 308.507543][ T8455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1101'. [ 308.826745][ T8452] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 308.839570][ T8452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1099'. [ 308.889552][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 309.064525][ T8468] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 309.852402][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 310.089541][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 310.979981][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 311.929692][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 312.179485][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 312.323634][ T8508] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 312.343212][ T8508] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1114'. [ 313.053018][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 314.013437][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 314.066406][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.200405][ T8496] : port 1(ip6gretap0) entered blocking state [ 314.206780][ T8496] : port 1(ip6gretap0) entered disabled state [ 314.220753][ T8496] device ip6gretap0 entered promiscuous mode [ 314.250523][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 314.296476][ T8498] device ip6gretap0 left promiscuous mode [ 314.310419][ T8498] : port 1(ip6gretap0) entered disabled state [ 314.331123][ T8524] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1117'. [ 314.653965][ T8529] device syzkaller0 entered promiscuous mode [ 314.870799][ T8546] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 314.941226][ T8546] netlink: 'syz.0.1125': attribute type 29 has an invalid length. [ 315.135805][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 315.253015][ T8554] netlink: 'syz.4.1127': attribute type 3 has an invalid length. [ 315.286783][ T8554] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1127'. [ 316.089740][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 316.332092][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 317.213957][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 317.588419][ T8563] netlink: 'syz.4.1129': attribute type 16 has an invalid length. [ 317.597061][ T8563] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1129'. [ 318.169713][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 318.409500][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 318.954941][ T8616] bridge0: port 4(ip6gretap0) entered blocking state [ 318.979692][ T8616] bridge0: port 4(ip6gretap0) entered disabled state [ 318.992409][ T8616] device ip6gretap0 entered promiscuous mode [ 319.068330][ T8616] netlink: 'syz.3.1144': attribute type 10 has an invalid length. [ 319.119951][ T8616] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.147350][ T8616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.193737][ T8616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.221645][ T8616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.238447][ T8619] netlink: 'syz.4.1145': attribute type 29 has an invalid length. [ 319.300073][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 319.335312][ T8616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.399696][ T8616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.439830][ T8616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.469567][ T8616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.523862][ T8616] team0: Port device geneve1 added [ 319.543217][ T8619] netlink: 'syz.4.1145': attribute type 29 has an invalid length. [ 319.616587][ T8620] netlink: 'syz.4.1145': attribute type 29 has an invalid length. [ 319.704835][ T8624] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 319.732276][ T8624] team0: Device wg1 is of different type [ 320.053367][ T8628] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1147'. [ 320.232714][ T8628] netlink: 'syz.2.1147': attribute type 27 has an invalid length. [ 320.250004][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 320.490334][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 320.985369][ T8660] netlink: 'syz.1.1153': attribute type 10 has an invalid length. [ 321.373801][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 321.798521][ T8686] netlink: 'syz.0.1161': attribute type 3 has an invalid length. [ 321.909652][ T8686] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1161'. [ 322.331051][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 322.405985][ T8696] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 322.427905][ T8696] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1162'. [ 322.438578][ T8695] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 322.449285][ T8694] netlink: 'syz.2.1162': attribute type 29 has an invalid length. [ 322.458035][ T8696] netlink: 'syz.2.1162': attribute type 29 has an invalid length. [ 322.468037][ T8694] netlink: 'syz.2.1162': attribute type 29 has an invalid length. [ 322.477527][ T8695] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1162'. [ 322.504761][ T8702] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1165'. [ 322.569806][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 322.820096][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.826552][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.379610][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 323.449473][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 323.856626][ T8736] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1175'. [ 324.419575][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 324.649973][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 325.235557][ T8776] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 325.275800][ T8776] netlink: 'syz.3.1184': attribute type 8 has an invalid length. [ 325.322371][ T8776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1184'. [ 325.419368][ T8782] netlink: 'syz.3.1184': attribute type 2 has an invalid length. [ 325.444794][ T8782] netlink: 'syz.3.1184': attribute type 8 has an invalid length. [ 325.453193][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 325.483157][ T8782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1184'. [ 325.494378][ T8790] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1188'. [ 325.529493][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 325.557983][ T8790] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1188'. [ 326.489894][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 326.730002][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 327.529374][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 327.619550][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 328.819554][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 329.090342][ T8826] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1198'. [ 329.120856][ T8826] openvswitch: netlink: Flow key attr not present in new flow. [ 329.159731][ T8820] netlink: 'syz.3.1197': attribute type 10 has an invalid length. [ 329.619583][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 329.696586][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 329.878477][ T8820] team0: Device wg1 is of different type [ 330.276619][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1204'. [ 330.402374][ T8854] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.889879][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 331.689619][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 331.769634][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 332.672109][ T8891] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 332.923961][ T8893] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1215'. [ 332.970703][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 332.995497][ T8895] netlink: 'syz.4.1214': attribute type 22 has an invalid length. [ 333.012108][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 333.072930][ T8897] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1214'. [ 333.767880][ T8901] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1217'. [ 333.779560][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 333.859675][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 334.527245][ T8926] delete_channel: no stack [ 334.756772][ T8930] device ip6gretap0 left promiscuous mode [ 334.777780][ T8930] bridge0: port 4(ip6gretap0) entered disabled state [ 334.850457][ T8930] bridge0: port 3(hsr0) entered disabled state [ 334.868400][ T8930] device bridge_slave_1 left promiscuous mode [ 334.916575][ T8930] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.949036][ T8930] device ÿÿÿÿÿÿ left promiscuous mode [ 335.012060][ T8930] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 335.051528][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 335.849459][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 335.929416][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 337.129511][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 337.735601][ T8930] bond0: (slave bridge0): Releasing backup interface [ 337.762664][ T8930] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 337.929375][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 338.009823][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 338.470790][ T8980] device pim6reg1 entered promiscuous mode [ 338.512458][ T8980] netlink: 'syz.1.1239': attribute type 17 has an invalid length. [ 338.570601][ T8980] netlink: 'syz.1.1239': attribute type 16 has an invalid length. [ 338.578542][ T8980] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1239'. [ 338.891309][ T9013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1244'. [ 339.209408][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 340.009404][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 340.109626][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 340.371560][ T9017] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1245'. [ 340.409606][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 340.423766][ T9013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1244'. [ 340.449644][ T9018] netlink: 'syz.4.1245': attribute type 11 has an invalid length. [ 340.485786][ T9021] netlink: 'syz.4.1245': attribute type 11 has an invalid length. [ 340.519498][ T9023] netlink: 'syz.3.1244': attribute type 21 has an invalid length. [ 340.528506][ T9023] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1244'. [ 340.566741][ T9023] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 340.596243][ T9023] netlink: 'syz.3.1244': attribute type 5 has an invalid length. [ 340.609268][ T9023] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1244'. [ 340.744539][ T9025] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1244'. [ 340.947980][ T9043] netlink: 'syz.0.1249': attribute type 39 has an invalid length. [ 341.033763][ T9051] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1250'. [ 341.098447][ T9043] device hsr_slave_1 left promiscuous mode [ 341.146361][ T9049] netlink: 'syz.4.1251': attribute type 21 has an invalid length. [ 341.157427][ T9054] netlink: 'syz.1.1250': attribute type 7 has an invalid length. [ 341.166157][ T9054] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1250'. [ 341.176602][ T9055] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.1250'. [ 341.289935][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 341.471898][ T9064] device wg2 entered promiscuous mode [ 342.107316][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 342.171548][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 342.489608][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 343.369480][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 344.192975][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 344.249956][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 344.569472][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 344.616365][ T9135] validate_nla: 2 callbacks suppressed [ 344.616383][ T9135] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 345.092272][ T8986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.449497][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 345.845309][ T9170] __nla_validate_parse: 2 callbacks suppressed [ 345.845327][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1281'. [ 346.249745][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 346.329372][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 346.538240][ T9157] device syzkaller0 entered promiscuous mode [ 346.649687][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 346.692755][ T9180] netlink: 'syz.4.1284': attribute type 11 has an invalid length. [ 346.749607][ T9180] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1284'. [ 347.322376][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.529683][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 348.240707][ T9198] netlink: 'syz.1.1290': attribute type 7 has an invalid length. [ 348.266924][ T9198] netlink: 'syz.1.1290': attribute type 7 has an invalid length. [ 348.286658][ T9198] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.1290'. [ 348.329544][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 348.411551][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 348.729594][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 349.613632][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 350.415939][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 350.489398][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 350.810438][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 351.689483][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 352.368057][ T4289] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 352.433016][ T9241] netlink: 60031 bytes leftover after parsing attributes in process `syz.0.1304'. [ 352.489806][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 352.570453][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 352.889633][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 353.769388][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 354.569461][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 354.649522][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 354.869036][ T9271] netlink: 'syz.0.1311': attribute type 4 has an invalid length. [ 354.919387][ T9271] netlink: 'syz.0.1311': attribute type 3 has an invalid length. [ 354.928236][ T9271] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1311'. [ 354.979609][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 355.058559][ T9244] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.851169][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 356.029149][ T9283] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.1316'. [ 356.400747][ T9283] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.1316'. [ 356.517747][ T9280] netlink: 'syz.4.1314': attribute type 3 has an invalid length. [ 356.580017][ T9280] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1314'. [ 356.657536][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 356.730258][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 356.941174][ T9302] netlink: 'syz.4.1322': attribute type 10 has an invalid length. [ 357.049454][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 357.449890][ T33] wlan1: Trigger new scan to find an IBSS to join [ 357.478393][ T9317] can: request_module (can-proto-0) failed. [ 357.589125][ T9321] netlink: 'syz.3.1325': attribute type 4 has an invalid length. [ 357.629712][ T9321] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1325'. [ 357.929471][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 358.061353][ T9339] netlink: 'syz.1.1331': attribute type 29 has an invalid length. [ 358.108669][ T9339] netlink: 'syz.1.1331': attribute type 29 has an invalid length. [ 358.731347][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 358.809780][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 359.129522][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 360.009457][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 360.409978][ T8981] wlan1: Trigger new scan to find an IBSS to join [ 360.816384][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 360.899530][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 361.209622][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 362.095903][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 362.716893][ T9007] wlan1: Creating new IBSS network, BSSID 1a:5e:64:50:fc:05 [ 362.889465][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 362.969589][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 363.155683][ T9423] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.1351'. [ 363.289417][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 364.173618][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 364.401313][ T9439] device wlan1 entered promiscuous mode [ 364.414653][ T9445] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1358'. [ 364.982223][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 365.049685][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 365.369831][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 365.914083][ T9484] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.1369'. [ 366.259380][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 366.340300][ T9495] netlink: 'syz.2.1374': attribute type 27 has an invalid length. [ 366.441180][ T9495] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1374'. [ 366.862464][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1378'. [ 366.909709][ T9505] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1378'. [ 367.049533][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 367.137139][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 367.251294][ T9516] netlink: 'syz.4.1380': attribute type 10 has an invalid length. [ 367.450686][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 368.189745][ T9522] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 368.224590][ T9522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 368.252693][ T9522] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 368.329641][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 368.559149][ T9542] netlink: 'syz.3.1386': attribute type 11 has an invalid length. [ 369.129397][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 369.209393][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 369.444178][ T9557] device wg2 entered promiscuous mode [ 369.529715][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 369.595584][ T9572] netlink: 'syz.2.1395': attribute type 3 has an invalid length. [ 369.633886][ T9572] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1395'. [ 369.744384][ T9574] netlink: 'syz.3.1396': attribute type 4 has an invalid length. [ 369.818886][ T9574] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1396'. [ 370.409428][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 370.825959][ T9599] device syzkaller0 entered promiscuous mode [ 371.209648][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 371.289579][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 371.609452][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 372.492081][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 373.291296][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 373.369818][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 373.689640][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 374.574996][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 375.345940][ T9650] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1414'. [ 375.369597][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 375.389576][ T9698] netlink: 'syz.2.1426': attribute type 2 has an invalid length. [ 375.398369][ T9698] netlink: 'syz.2.1426': attribute type 8 has an invalid length. [ 375.419508][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1426'. [ 375.449434][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 375.714910][ T9707] netlink: 'syz.3.1429': attribute type 21 has an invalid length. [ 375.769474][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 375.997314][ T9716] netlink: 6374 bytes leftover after parsing attributes in process `syz.3.1433'. [ 376.324452][ T8988] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.535376][ T9739] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1439'. [ 376.576856][ T9739] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1439'. [ 376.609880][ T9739] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1439'. [ 376.649668][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 377.470458][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 377.533726][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 377.859426][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 378.284128][ T9770] netlink: 'syz.1.1447': attribute type 6 has an invalid length. [ 378.375261][ T9774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1449'. [ 378.448991][ T9774] netlink: 'syz.4.1449': attribute type 12 has an invalid length. [ 378.494686][ T9774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1449'. [ 378.592847][ T9781] FAULT_INJECTION: forcing a failure. [ 378.592847][ T9781] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 378.640971][ T9781] CPU: 1 PID: 9781 Comm: syz.1.1451 Not tainted syzkaller #0 [ 378.649505][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.660634][ T9781] Call Trace: [ 378.664321][ T9781] [ 378.667385][ T9781] dump_stack_lvl+0x188/0x24e [ 378.673590][ T9781] ? show_regs_print_info+0x12/0x12 [ 378.679479][ T9781] ? load_image+0x410/0x410 [ 378.684903][ T9781] ? __lock_acquire+0x7bd0/0x7bd0 [ 378.690204][ T9781] should_fail_ex+0x390/0x4c0 [ 378.695640][ T9781] prepare_alloc_pages+0x1e1/0x5b0 [ 378.701450][ T9781] __alloc_pages+0x130/0x4f0 [ 378.706526][ T9781] ? zone_statistics+0x170/0x170 [ 378.711900][ T9781] ? alloc_pages+0x4dd/0x740 [ 378.717458][ T9781] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 378.723802][ T9781] __get_free_pages+0x8/0x30 [ 378.728727][ T9781] mem_rw+0x88/0x5b0 [ 378.733075][ T9781] ? mem_read+0x40/0x40 [ 378.738244][ T9781] vfs_write+0x2dc/0x9a0 [ 378.743830][ T9781] ? file_end_write+0x250/0x250 [ 378.750292][ T9781] ? __fget_files+0x28/0x460 [ 378.758251][ T9781] ? __fget_files+0x3fc/0x460 [ 378.764077][ T9781] ? __fdget_pos+0x2ae/0x360 [ 378.768863][ T9781] ? ksys_write+0x70/0x260 [ 378.774240][ T9781] ksys_write+0x14d/0x260 [ 378.778809][ T9781] ? __ia32_sys_read+0x80/0x80 [ 378.784941][ T9781] ? syscall_enter_from_user_mode+0x2a/0x80 [ 378.791591][ T9781] do_syscall_64+0x4c/0xa0 [ 378.797261][ T9781] ? clear_bhb_loop+0x60/0xb0 [ 378.802601][ T9781] ? clear_bhb_loop+0x60/0xb0 [ 378.807864][ T9781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.813929][ T9781] RIP: 0033:0x7f5a5b39ce59 [ 378.819608][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.841002][ T9781] RSP: 002b:00007f5a5c2bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.854269][ T9781] RAX: ffffffffffffffda RBX: 00007f5a5b615fa0 RCX: 00007f5a5b39ce59 [ 378.865546][ T9781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 378.877334][ T9781] RBP: 00007f5a5c2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 378.888398][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.898171][ T9781] R13: 00007f5a5b616038 R14: 00007f5a5b615fa0 R15: 00007ffd3bbfdfa8 [ 378.907527][ T9781] [ 378.928238][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 379.539823][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 379.609426][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 379.777858][ T9815] netlink: 'syz.4.1461': attribute type 19 has an invalid length. [ 379.831757][ T9815] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1461'. [ 379.929499][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 380.074950][ T9831] FAULT_INJECTION: forcing a failure. [ 380.074950][ T9831] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 380.095977][ T9831] CPU: 0 PID: 9831 Comm: syz.3.1466 Not tainted syzkaller #0 [ 380.107118][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 380.124493][ T9831] Call Trace: [ 380.129605][ T9831] [ 380.133520][ T9831] dump_stack_lvl+0x188/0x24e [ 380.140800][ T9831] ? show_regs_print_info+0x12/0x12 [ 380.149954][ T9831] ? load_image+0x410/0x410 [ 380.156465][ T9831] ? __lock_acquire+0x7bd0/0x7bd0 [ 380.164293][ T9831] ? snprintf+0xe5/0x140 [ 380.169484][ T9831] should_fail_ex+0x390/0x4c0 [ 380.177021][ T9831] _copy_to_user+0x2c/0x130 [ 380.185946][ T9831] simple_read_from_buffer+0xe3/0x150 [ 380.194459][ T9831] proc_fail_nth_read+0x1a6/0x220 [ 380.202355][ T9831] ? proc_fault_inject_write+0x310/0x310 [ 380.210882][ T9831] ? fsnotify_perm+0x248/0x550 [ 380.218450][ T9831] ? proc_fault_inject_write+0x310/0x310 [ 380.226055][ T9831] vfs_read+0x2db/0x960 [ 380.232024][ T9831] ? kernel_read+0x1e0/0x1e0 [ 380.238251][ T9831] ? __fget_files+0x28/0x460 [ 380.245772][ T9831] ? __fget_files+0x3fc/0x460 [ 380.253460][ T9831] ? __fdget_pos+0x2ae/0x360 [ 380.258815][ T9831] ? ksys_read+0x70/0x260 [ 380.264043][ T9831] ksys_read+0x14d/0x260 [ 380.271167][ T9831] ? vfs_write+0x9a0/0x9a0 [ 380.277654][ T9831] ? lockdep_hardirqs_on+0x94/0x140 [ 380.283462][ T9831] do_syscall_64+0x4c/0xa0 [ 380.287948][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 380.292778][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 380.297864][ T9831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.304883][ T9831] RIP: 0033:0x7fecd895d68e [ 380.309614][ T9831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.337794][ T9831] RSP: 002b:00007fecd9899fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.350351][ T9831] RAX: ffffffffffffffda RBX: 00007fecd989a6c0 RCX: 00007fecd895d68e [ 380.362668][ T9831] RDX: 000000000000000f RSI: 00007fecd989a0a0 RDI: 0000000000000006 [ 380.373646][ T9831] RBP: 00007fecd989a090 R08: 0000000000000000 R09: 0000000000000000 [ 380.384276][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.394891][ T9831] R13: 00007fecd8c16038 R14: 00007fecd8c15fa0 R15: 00007fff3d59d428 [ 380.406067][ T9831] [ 380.633560][ T9848] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 380.672624][ T9848] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1471'. [ 380.673416][ T9849] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1471'. [ 380.969852][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 381.610051][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 381.689661][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 381.933198][ T9898] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 382.009455][ T9898] netlink: 'syz.0.1485': attribute type 19 has an invalid length. [ 382.019503][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 382.039209][ T9898] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1485'. [ 382.104833][ T9900] netlink: 'syz.3.1486': attribute type 23 has an invalid length. [ 382.118478][ T9900] netlink: 'syz.3.1486': attribute type 27 has an invalid length. [ 382.705205][ T9920] netlink: 'syz.4.1490': attribute type 3 has an invalid length. [ 382.713564][ T9920] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1490'. [ 383.023826][ T9929] netlink: 'syz.1.1493': attribute type 3 has an invalid length. [ 383.045839][ T9929] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1493'. [ 383.059732][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 383.285946][ T9943] syz.2.1496[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.706741][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 383.770253][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 384.081637][ T9955] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 384.093310][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 384.139769][ T9955] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 384.229221][ T9955] batman_adv: batadv0: adding TT local entry ba:00:00:e1:ff:ff to non-existent VLAN 815 [ 384.252357][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.260547][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.129479][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 385.784047][ T4286] Bluetooth: hci2: command 0x206e tx timeout [ 385.875973][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 386.171149][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 386.271360][ T9997] netlink: 'syz.1.1510': attribute type 27 has an invalid length. [ 386.322670][ T9997] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1510'. [ 386.573434][T10004] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1513'. [ 386.842657][T10008] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 387.209585][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 387.333620][T10022] can: request_module (can-proto-0) failed. [ 387.456250][T10008] team0 (unregistering): Port device team_slave_0 removed [ 387.644682][T10008] team0 (unregistering): Port device team_slave_1 removed [ 387.692099][T10008] team0 (unregistering): Port device wlan1 removed [ 387.707532][T10008] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.728640][T10008] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.742219][T10008] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.756618][T10008] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.810901][T10008] team0 (unregistering): Port device geneve1 removed [ 387.849448][ T4289] Bluetooth: hci2: command 0x206e tx timeout [ 387.935766][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 387.994492][T10035] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1522'. [ 388.134485][T10035] device hsr_slave_0 left promiscuous mode [ 388.228222][T10035] device hsr_slave_1 left promiscuous mode [ 388.249652][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 389.044635][T10065] device syzkaller0 entered promiscuous mode [ 389.065392][T10067] netlink: 'syz.2.1531': attribute type 21 has an invalid length. [ 389.077741][T10067] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1531'. [ 389.289631][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 389.442893][T10075] netlink: 'syz.2.1535': attribute type 2 has an invalid length. [ 389.769628][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 389.873204][T10084] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 389.924200][T10084] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1538'. [ 390.017300][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 390.330435][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 390.566067][T10101] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 390.660477][T10101] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 390.695643][T10103] netlink: 'syz.2.1542': attribute type 2 has an invalid length. [ 390.718042][T10104] netlink: 'syz.0.1543': attribute type 33 has an invalid length. [ 390.755325][T10104] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1543'. [ 390.802568][T10104] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 390.858096][T10103] device 1 entered promiscuous mode [ 391.369534][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 391.510812][T10128] netlink: 'syz.4.1550': attribute type 21 has an invalid length. [ 391.599644][T10128] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1550'. [ 391.643606][T10132] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 391.678985][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 391.711031][T10134] netlink: 'syz.4.1550': attribute type 10 has an invalid length. [ 391.726086][T10134] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1550'. [ 391.757182][T10130] netlink: 'syz.1.1551': attribute type 7 has an invalid length. [ 391.849951][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 392.089395][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 392.378403][T10153] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1556'. [ 392.409817][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 392.721342][T10158] device syzkaller0 entered promiscuous mode [ 393.449545][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 393.929609][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 394.169478][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 394.492650][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 395.249414][T10170] netlink: 'syz.3.1561': attribute type 11 has an invalid length. [ 395.260265][T10175] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.309504][T10175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.319061][T10175] IPv6: NLM_F_CREATE should be set when creating new route [ 395.328856][T10175] IPv6: NLM_F_CREATE should be set when creating new route [ 395.339621][T10175] IPv6: NLM_F_CREATE should be set when creating new route [ 395.412321][T10176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.529618][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 395.789495][ T4557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.012107][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 396.264568][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 396.573746][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 397.609383][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 398.129125][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 398.354372][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 398.667807][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 398.705175][T10234] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 398.893670][T10234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1575'. [ 399.011361][T10234] device dummy0 entered promiscuous mode [ 399.143474][T10234] bond0: (slave dummy0): Releasing backup interface [ 399.342647][T10234] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 399.388456][T10237] netlink: 'syz.2.1576': attribute type 21 has an invalid length. [ 399.695717][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 400.169414][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 400.307627][T10255] netlink: 'syz.2.1580': attribute type 3 has an invalid length. [ 400.339761][T10255] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1580'. [ 400.365052][T10251] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 400.413098][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 400.739626][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 400.783688][T10251] team0 (unregistering): Port device team_slave_0 removed [ 400.842265][T10251] team0 (unregistering): Port device team_slave_1 removed [ 400.881923][T10251] team0 (unregistering): Port device wlan1 removed [ 401.769640][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 401.861206][T10283] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1589'. [ 402.249354][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 402.294848][T10295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1593'. [ 402.327576][T10295] netlink: 'syz.1.1593': attribute type 19 has an invalid length. [ 402.339048][T10295] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1593'. [ 402.493795][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 402.809635][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 403.436743][T10342] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 403.453489][T10342] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1602'. [ 403.733348][T10349] netlink: 'syz.1.1606': attribute type 28 has an invalid length. [ 403.783453][T10354] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1609'. [ 403.859902][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 404.144078][T10360] netlink: 'syz.2.1610': attribute type 4 has an invalid length. [ 404.179630][T10360] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1610'. [ 404.339464][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 404.443449][T10366] netlink: 'syz.1.1611': attribute type 10 has an invalid length. [ 404.579847][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 404.691855][T10374] netlink: 'syz.1.1615': attribute type 4 has an invalid length. [ 404.808735][T10374] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.1615'. [ 404.845210][T10377] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1614'. [ 404.889642][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 405.197585][T10390] netlink: 'syz.1.1618': attribute type 21 has an invalid length. [ 405.216239][T10390] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1618'. [ 405.461027][T10398] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1620'. [ 405.520341][T10398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.588659][T10404] netlink: 'syz.0.1623': attribute type 9 has an invalid length. [ 405.622268][T10400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1620'. [ 405.646791][T10404] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1623'. [ 405.668019][T10400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.765790][T10411] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1621'. [ 405.819744][T10411] netlink: 'syz.4.1621': attribute type 3 has an invalid length. [ 405.902296][T10411] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1621'. [ 405.929585][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 406.012135][T10418] netlink: 'syz.1.1625': attribute type 2 has an invalid length. [ 406.097910][T10418] netlink: 'syz.1.1625': attribute type 1 has an invalid length. [ 406.419647][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 406.567220][T10429] netlink: 'syz.3.1627': attribute type 21 has an invalid length. [ 406.641791][T10427] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 406.660216][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 406.970082][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 407.154369][T10443] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 407.189639][T10443] syzkaller1: linktype set to 825 [ 408.009561][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 408.199207][T10466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.210153][T10466] IPv6: NLM_F_CREATE should be set when creating new route [ 408.221120][T10466] IPv6: NLM_F_CREATE should be set when creating new route [ 408.230890][T10466] IPv6: NLM_F_CREATE should be set when creating new route [ 408.489569][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 408.735680][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 409.059431][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 410.085996][T10509] tap0: tun_chr_ioctl cmd 1074025677 [ 410.100045][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 410.175953][T10509] tap0: linktype set to 805 [ 410.268191][T10512] device syzkaller1 entered promiscuous mode [ 410.579398][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 410.809601][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 410.874068][T10523] device syzkaller0 entered promiscuous mode [ 411.139619][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 411.182935][T10546] netlink: 'syz.0.1655': attribute type 2 has an invalid length. [ 411.209369][T10546] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.1655'. [ 412.179576][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 412.649360][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 412.889542][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 413.209493][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 414.254874][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 414.730396][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 414.970578][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 415.289497][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 415.511450][T10563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1662'. [ 415.641401][T10563] delete_channel: no stack [ 415.966979][T10577] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1666'. [ 416.041278][T10581] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1668'. [ 416.109515][T10584] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 416.236005][T10587] device syzkaller0 entered promiscuous mode [ 416.329491][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 416.578157][T10597] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1670'. [ 416.672462][T10606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1673'. [ 416.809779][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 417.020365][T10606] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1673'. [ 417.039795][T10610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1673'. [ 417.059234][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 417.079648][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1675'. [ 417.158059][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1675'. [ 417.240451][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1675'. [ 417.369702][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 417.495249][T10631] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.1679'. [ 418.410089][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 418.889599][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 419.029547][T10665] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.1689'. [ 419.129615][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 419.459680][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 419.569851][T10680] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1693'. [ 419.631887][T10680] delete_channel: no stack [ 419.988067][T10686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.997065][T10686] IPv6: NLM_F_CREATE should be set when creating new route [ 420.005536][T10686] IPv6: NLM_F_CREATE should be set when creating new route [ 420.015312][T10686] IPv6: NLM_F_CREATE should be set when creating new route [ 420.489794][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 420.975912][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 421.191327][T10727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 421.208717][T10727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.229546][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 421.529764][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 421.543550][T10734] delete_channel: no stack [ 421.671138][T10735] netlink: 'syz.3.1709': attribute type 17 has an invalid length. [ 421.730842][T10735] netlink: 'syz.3.1709': attribute type 16 has an invalid length. [ 421.787452][T10735] __nla_validate_parse: 4 callbacks suppressed [ 421.787472][T10735] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1709'. [ 421.905091][T10740] device bridge_slave_1 left promiscuous mode [ 421.924905][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.985277][T10740] device bridge_slave_0 left promiscuous mode [ 422.025773][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.569540][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 423.049520][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 423.082912][T10758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.093194][T10758] IPv6: NLM_F_CREATE should be set when creating new route [ 423.102968][T10758] IPv6: NLM_F_CREATE should be set when creating new route [ 423.112488][T10758] IPv6: NLM_F_CREATE should be set when creating new route [ 423.289989][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 423.537472][T10775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1720'. [ 423.609436][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 423.680576][T10777] netlink: 'syz.4.1721': attribute type 21 has an invalid length. [ 423.731134][T10777] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1721'. [ 424.344426][T10806] netlink: 'syz.4.1730': attribute type 10 has an invalid length. [ 424.636440][T10815] netlink: 'syz.3.1732': attribute type 2 has an invalid length. [ 424.661647][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 424.700624][T10815] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 424.739755][T10815] netlink: 'syz.3.1732': attribute type 4 has an invalid length. [ 424.860122][T10815] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.1732'. [ 424.996845][T10806] team0: Port device geneve1 added [ 425.129408][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 425.369668][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 425.496888][T10829] netlink: 'syz.2.1734': attribute type 3 has an invalid length. [ 425.509640][T10829] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1734'. [ 425.548132][T10836] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1736'. [ 425.689914][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 425.956729][T10849] netlink: 'syz.3.1738': attribute type 27 has an invalid length. [ 426.012275][T10849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1738'. [ 426.169077][T10861] netlink: 'syz.4.1742': attribute type 7 has an invalid length. [ 426.549128][T10873] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1746'. [ 426.605989][T10873] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1746'. [ 426.729712][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 427.091304][T10890] delete_channel: no stack [ 427.219438][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 427.449473][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 427.769708][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 428.071648][T10909] validate_nla: 1 callbacks suppressed [ 428.071692][T10909] netlink: 'syz.1.1756': attribute type 3 has an invalid length. [ 428.077678][T10911] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1757'. [ 428.174013][T10911] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 428.611901][T10911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.674661][T10912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.693769][T10916] syz.2.1757 (10916) used obsolete PPPIOCDETACH ioctl [ 428.719003][T10912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.824900][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 428.952539][T10912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.964080][T10912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.146109][T10921] IPv6: Can't replace route, no match found [ 429.289691][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 429.397075][T10938] netlink: 'syz.3.1763': attribute type 8 has an invalid length. [ 429.489831][T10938] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1763'. [ 429.542930][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 429.690946][ T4559] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.859472][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 430.011468][T10955] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 430.079814][T10955] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1768'. [ 430.114974][T10959] netlink: 'syz.3.1769': attribute type 6 has an invalid length. [ 430.147711][T10959] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1769'. [ 430.373709][T10963] netlink: 'syz.1.1770': attribute type 2 has an invalid length. [ 430.405705][T10963] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 430.418219][T10963] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1770'. [ 430.501226][T10962] device syzkaller0 entered promiscuous mode [ 430.889526][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 431.369819][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 431.610219][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 431.929663][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 432.969441][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 433.450066][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 433.689513][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 434.009671][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 435.053392][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 435.491274][T10987] device wg2 left promiscuous mode [ 435.529651][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 435.769408][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 436.089512][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 436.401154][T11050] netlink: 'syz.4.1792': attribute type 10 has an invalid length. [ 436.463979][T11050] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.527203][T11050] bond0: (slave team0): Enslaving as an active interface with an up link [ 436.991336][T11080] netlink: 'syz.3.1802': attribute type 2 has an invalid length. [ 437.044825][T11080] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1802'. [ 437.129393][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 437.532408][T11095] -1: renamed from syzkaller0 [ 437.609962][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 437.849502][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 438.170424][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 438.805733][T11116] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1812'. [ 439.136673][T11137] syz.3.1817[11137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.136791][T11137] syz.3.1817[11137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.198120][T11139] syz.3.1817[11139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.211198][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 439.276289][T11131] netlink: 'syz.4.1816': attribute type 1 has an invalid length. [ 439.300019][T11139] syz.3.1817[11139] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.597232][T11148] netlink: 'syz.0.1820': attribute type 46 has an invalid length. [ 439.689428][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 439.778904][T11148] netlink: 'syz.0.1820': attribute type 46 has an invalid length. [ 439.788897][T11163] Ÿë: port 1(veth0_to_team) entered blocking state [ 439.817222][T11163] Ÿë: port 1(veth0_to_team) entered disabled state [ 439.889645][T11163] device veth0_to_team entered promiscuous mode [ 439.929564][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 440.118732][T11169] netlink: 'syz.4.1825': attribute type 39 has an invalid length. [ 440.250068][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 441.164055][T11184] netlink: 'syz.4.1828': attribute type 41 has an invalid length. [ 441.201152][T11185] device wlan1 left promiscuous mode [ 441.214443][T11185] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1829'. [ 441.254363][T11184] netlink: 'syz.4.1828': attribute type 21 has an invalid length. [ 441.289542][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 441.769410][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 442.009364][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 442.329393][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 442.440696][T11223] netlink: 'syz.0.1838': attribute type 2 has an invalid length. [ 442.471224][T11223] netlink: 'syz.0.1838': attribute type 29 has an invalid length. [ 442.499759][T11223] netlink: 'syz.0.1838': attribute type 29 has an invalid length. [ 442.531894][T11226] netlink: 'syz.0.1838': attribute type 29 has an invalid length. [ 442.590649][T11223] netlink: 'syz.0.1838': attribute type 29 has an invalid length. [ 442.761097][T11231] netlink: 'syz.1.1842': attribute type 2 has an invalid length. [ 442.780871][T11231] netlink: 'syz.1.1842': attribute type 8 has an invalid length. [ 442.813779][T11231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1842'. [ 443.023756][T11240] netlink: 'syz.0.1844': attribute type 3 has an invalid length. [ 443.040630][T11240] netlink: 'syz.0.1844': attribute type 4 has an invalid length. [ 443.180625][T11240] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.1844'. [ 443.370409][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 443.849501][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 444.032224][T11265] delete_channel: no stack [ 444.089594][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 444.409427][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 444.930893][T11292] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 444.996714][T11289] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1858'. [ 445.449593][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 445.691935][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.705699][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.929718][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 445.943206][T11318] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1868'. [ 446.169457][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 446.489723][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 446.778462][T11331] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1871'. [ 446.780837][T11328] Ÿë: port 1(gretap0) entered blocking state [ 446.819830][T11328] Ÿë: port 1(gretap0) entered disabled state [ 446.869597][T11328] device gretap0 entered promiscuous mode [ 447.461663][T11352] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 447.529653][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 447.839617][T11377] validate_nla: 2 callbacks suppressed [ 447.839636][T11377] netlink: 'syz.4.1882': attribute type 2 has an invalid length. [ 447.924602][T11377] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1882'. [ 448.009472][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 448.121518][T11387] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 448.140137][T11387] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1885'. [ 448.252118][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 448.569398][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 449.250622][T11411] netlink: 'syz.2.1892': attribute type 21 has an invalid length. [ 449.280098][T11411] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1892'. [ 449.355770][T11411] netlink: 'syz.2.1892': attribute type 4 has an invalid length. [ 449.360364][T11418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 449.432145][T11411] netlink: 'syz.2.1892': attribute type 5 has an invalid length. [ 449.476000][T11411] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1892'. [ 449.532352][T11418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 449.604839][T11420] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 449.610075][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 450.128484][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 450.365450][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 450.660205][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 450.975832][T11438] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1901'. [ 451.017210][T11438] device bridge_slave_1 entered promiscuous mode [ 451.062715][T11442] IPv6: Can't replace route, no match found [ 451.094629][T11442] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1900'. [ 451.201629][T11442] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1900'. [ 451.276091][ T4286] Bluetooth: hci3: unexpected event 0x01 length: 15 > 1 [ 451.689670][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 451.925352][T11476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.170878][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 452.195477][T11483] netlink: zone id is out of range [ 452.260833][T11483] netlink: zone id is out of range [ 452.273528][T11483] netlink: zone id is out of range [ 452.296805][T11483] netlink: zone id is out of range [ 452.317366][T11483] netlink: zone id is out of range [ 452.335409][T11483] netlink: zone id is out of range [ 452.377131][T11483] netlink: zone id is out of range [ 452.409488][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 452.474358][T11483] netlink: zone id is out of range [ 452.538488][T11483] netlink: zone id is out of range [ 452.557854][T11483] netlink: zone id is out of range [ 452.733179][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 453.769416][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 453.780164][T11527] __nla_validate_parse: 6 callbacks suppressed [ 453.780200][T11527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1922'. [ 453.874494][T11536] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.1924'. [ 453.886852][T11531] : port 1(ip6gretap0) entered blocking state [ 453.900070][T11531] : port 1(ip6gretap0) entered disabled state [ 453.917120][T11531] device ip6gretap0 entered promiscuous mode [ 453.939899][T11533] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1922'. [ 453.959919][T11533] device hsr_slave_0 left promiscuous mode [ 453.963488][T11536] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.250615][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 454.288953][T11547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1928'. [ 454.387250][T11547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1928'. [ 454.489651][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 454.809384][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 455.769727][T11572] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1933'. [ 455.849764][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 455.942890][T11585] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1938'. [ 456.051411][T11591] netlink: 'syz.0.1941': attribute type 11 has an invalid length. [ 456.207522][T11598] netlink: 'syz.2.1942': attribute type 10 has an invalid length. [ 456.329455][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 456.536772][T11608] netlink: 'syz.0.1944': attribute type 2 has an invalid length. [ 456.561984][T11608] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1944'. [ 456.570504][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 456.889470][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 457.517812][T11609] netlink: 'syz.0.1944': attribute type 39 has an invalid length. [ 457.702095][T11618] netlink: 'syz.4.1948': attribute type 13 has an invalid length. [ 457.714398][T11618] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1948'. [ 457.761754][T11618] syz_tun: refused to change device tx_queue_len [ 457.778110][T11618] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 457.929641][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 458.308608][T11643] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 458.324058][T11643] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1956'. [ 458.349175][T11643] device bond0 entered promiscuous mode [ 458.356443][T11643] device bond_slave_1 entered promiscuous mode [ 458.369812][T11643] device batadv_slave_0 entered promiscuous mode [ 458.409521][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 458.649718][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 458.969629][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 459.044313][T11666] netlink: 'syz.2.1965': attribute type 10 has an invalid length. [ 460.009560][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 460.250213][T11674] device wlan1 entered promiscuous mode [ 460.489927][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 460.525554][T11686] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 460.546438][T11686] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 460.576313][T11693] netlink: 'syz.0.1972': attribute type 29 has an invalid length. [ 460.729781][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 461.059820][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 461.203391][T11707] validate_nla: 3 callbacks suppressed [ 461.203409][T11707] netlink: 'syz.4.1978': attribute type 21 has an invalid length. [ 461.297158][T11707] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1978'. [ 461.319513][T11707] netlink: 'syz.4.1978': attribute type 4 has an invalid length. [ 461.357670][T11707] netlink: 'syz.4.1978': attribute type 28 has an invalid length. [ 461.455541][T11707] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1978'. [ 461.689370][ T8977] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.089379][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 462.212317][T11739] netlink: 'syz.2.1987': attribute type 10 has an invalid length. [ 462.410904][ T9] wlan1: Trigger new scan to find an IBSS to join [ 462.569427][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 462.810240][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 463.130635][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 463.325370][T11783] delete_channel: no stack [ 463.345616][T11785] netlink: 'syz.3.1999': attribute type 3 has an invalid length. [ 463.357470][T11785] netlink: 'syz.3.1999': attribute type 1 has an invalid length. [ 463.951391][T11812] netlink: 'syz.3.2006': attribute type 21 has an invalid length. [ 463.982204][T11812] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2006'. [ 464.005968][T11812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2006'. [ 464.169665][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 464.426147][T11835] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 464.650502][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 464.899566][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 465.104244][T11862] netlink: 'syz.1.2018': attribute type 2 has an invalid length. [ 465.150812][T11862] netlink: 159388 bytes leftover after parsing attributes in process `syz.1.2018'. [ 465.209424][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 465.418294][T11868] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2019'. [ 465.449865][ T9] wlan1: Trigger new scan to find an IBSS to join [ 466.259424][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 466.729499][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 466.979349][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 467.289417][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 468.329493][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 468.490982][ T9672] wlan1: Creating new IBSS network, BSSID aa:cf:c2:69:34:22 [ 468.541095][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 468.714365][T11930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2035'. [ 468.788685][T11947] netlink: 'syz.3.2038': attribute type 46 has an invalid length. [ 468.809568][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 468.829497][T11947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2038'. [ 469.016226][T11958] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2040'. [ 469.049521][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 469.071021][T11958] openvswitch: netlink: Message has 6 unknown bytes. [ 469.158760][T11965] netlink: 'syz.2.2042': attribute type 19 has an invalid length. [ 469.179596][T11965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2042'. [ 469.347259][T11966] netlink: 'syz.2.2042': attribute type 19 has an invalid length. [ 469.369573][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 469.381694][T11961] netlink: 'syz.4.2040': attribute type 3 has an invalid length. [ 469.391466][T11966] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2042'. [ 469.409531][T11961] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2040'. [ 470.310351][T12003] device batadv0 entered promiscuous mode [ 470.409565][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 470.485699][T12013] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2055'. [ 470.584420][T12017] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2059'. [ 470.599958][T12013] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2055'. [ 470.648568][T12013] openvswitch: netlink: Key type 8194 is out of range max 32 [ 470.862572][T12020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2058'. [ 470.889469][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 471.165295][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 471.450209][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 471.858903][T12033] delete_channel: no stack [ 472.085125][T12071] netlink: 'syz.2.2072': attribute type 8 has an invalid length. [ 472.504384][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 472.979183][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 473.209514][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 474.221083][T12076] device wg2 entered promiscuous mode [ 474.247602][T12078] netlink: 'syz.3.2073': attribute type 2 has an invalid length. [ 474.317565][T12078] netlink: 'syz.3.2073': attribute type 8 has an invalid length. [ 474.350436][T12078] __nla_validate_parse: 5 callbacks suppressed [ 474.350481][T12078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2073'. [ 474.478438][T12084] netlink: 'syz.0.2075': attribute type 21 has an invalid length. [ 474.560595][T12084] netlink: 'syz.0.2075': attribute type 20 has an invalid length. [ 474.579787][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 474.727469][T12087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2076'. [ 474.997785][T12093] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2075'. [ 475.059971][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 475.086914][T12092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2075'. [ 475.289413][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 475.532500][T12106] netlink: 'syz.1.2080': attribute type 5 has an invalid length. [ 476.408729][T12132] delete_channel: no stack [ 476.649406][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 477.133468][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 477.369382][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 477.795278][T12142] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 477.860576][T12136] netlink: 'syz.4.2088': attribute type 39 has an invalid length. [ 477.881910][T12142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2091'. [ 477.930746][T12139] tipc: Started in network mode [ 477.969426][T12139] tipc: Node identity 9215a268, cluster identity 4711 [ 478.038445][T12139] tipc: Node number set to 2450891368 [ 478.070154][T12142] netlink: 'syz.0.2091': attribute type 10 has an invalid length. [ 478.078989][T12142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2091'. [ 478.194340][T12152] netlink: 'syz.1.2093': attribute type 27 has an invalid length. [ 478.404487][T12152] bond0: (slave bond_slave_0): Releasing backup interface [ 478.683786][T12162] netlink: 'syz.0.2096': attribute type 2 has an invalid length. [ 478.710587][T12162] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2096'. [ 478.729387][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 479.209544][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 479.334956][T12184] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2105'. [ 479.449931][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 479.560542][T12192] netlink: 'syz.0.2106': attribute type 39 has an invalid length. [ 479.660014][T12190] netlink: 'syz.2.2104': attribute type 5 has an invalid length. [ 480.810203][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 481.304014][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 481.529398][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 481.648194][T12248] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2122'. [ 481.681871][T12248] bridge_slave_1: default FDB implementation only supports local addresses [ 482.125481][T12265] netlink: 'syz.3.2128': attribute type 13 has an invalid length. [ 482.160626][T12265] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2128'. [ 482.229723][T12265] syz_tun: refused to change device tx_queue_len [ 482.267831][T12265] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 482.302264][T12273] netlink: 'syz.2.2129': attribute type 2 has an invalid length. [ 482.401609][T12273] device 0 entered promiscuous mode [ 482.411315][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 482.457694][T12272] netlink: 'syz.3.2128': attribute type 3 has an invalid length. [ 482.494818][T12272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2128'. [ 482.889659][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 483.109074][T12289] sctp: [Deprecated]: syz.0.2135 (pid 12289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.109074][T12289] Use struct sctp_sack_info instead [ 483.369507][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 483.609379][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 484.158434][T12315] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 484.192618][T12314] netlink: 'syz.0.2143': attribute type 21 has an invalid length. [ 484.222570][T12314] netlink: 'syz.0.2143': attribute type 6 has an invalid length. [ 484.241652][T12315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2140'. [ 484.298004][T12314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2143'. [ 484.469991][T12322] netlink: 'syz.3.2146': attribute type 10 has an invalid length. [ 484.489507][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 484.498648][T12322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2146'. [ 484.591429][T12322] device dummy0 entered promiscuous mode [ 484.624244][T12322] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 484.969676][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 485.307521][T12358] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2155'. [ 485.355604][T12358] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.435496][T12358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.456749][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 485.484064][T12359] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2155'. [ 485.553152][T12359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.583994][T12361] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2156'. [ 485.618002][T12359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.690156][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 485.895383][T12371] GPL: port 1(syz_tun) entered blocking state [ 485.925329][T12371] GPL: port 1(syz_tun) entered disabled state [ 485.967941][T12379] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 485.984637][T12371] device syz_tun entered promiscuous mode [ 486.018528][T12374] device veth1_macvtap left promiscuous mode [ 486.029468][T12374] device macsec0 left promiscuous mode [ 486.125737][T12379] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 486.173637][T12375] device veth1_macvtap entered promiscuous mode [ 486.203753][T12375] device macsec0 entered promiscuous mode [ 486.239190][T12371] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2156'. [ 486.258645][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.302206][T12371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.342188][T12384] netlink: 'syz.3.2160': attribute type 29 has an invalid length. [ 486.569319][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 487.049720][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 487.534579][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 487.773193][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 488.651188][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 489.130230][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 489.609343][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 489.635703][T12424] : port 1(ip6gretap0) entered blocking state [ 489.730921][T12424] : port 1(ip6gretap0) entered disabled state [ 489.788119][T12424] device ip6gretap0 entered promiscuous mode [ 489.848782][T12434] device ip6gretap0 left promiscuous mode [ 489.855420][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 489.876235][T12434] : port 1(ip6gretap0) entered disabled state [ 490.087288][T12442] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2177'. [ 490.121561][T12442] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.729471][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 490.977872][T12459] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2183'. [ 490.992925][T12459] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 491.056354][T12459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.209639][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 491.689590][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 491.705438][T12483] netlink: 'syz.2.2191': attribute type 10 has an invalid length. [ 491.929616][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 492.443738][T12500] netlink: 'syz.0.2198': attribute type 13 has an invalid length. [ 492.479685][T12500] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2198'. [ 492.521544][T12500] erspan0: refused to change device tx_queue_len [ 492.809350][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 492.988643][T12510] netlink: 'syz.3.2200': attribute type 2 has an invalid length. [ 493.013939][T12510] netlink: 'syz.3.2200': attribute type 3 has an invalid length. [ 493.037146][T12510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2200'. [ 493.299607][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 493.779472][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 493.910039][T12536] netlink: 'syz.2.2207': attribute type 2 has an invalid length. [ 493.935407][T12536] netlink: 'syz.2.2207': attribute type 3 has an invalid length. [ 494.001044][T12536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2207'. [ 494.019642][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 494.777003][T12542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2210'. [ 494.810167][T12547] netlink: 'syz.4.2211': attribute type 29 has an invalid length. [ 494.836765][T12547] netlink: 'syz.4.2211': attribute type 29 has an invalid length. [ 494.847954][T12542] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2210'. [ 494.899527][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 494.913361][T12542] netlink: zone id is out of range [ 494.921571][T12542] netlink: zone id is out of range [ 494.943078][T12542] netlink: zone id is out of range [ 494.949614][T12542] netlink: zone id is out of range [ 494.955550][T12542] netlink: zone id is out of range [ 494.982514][T12552] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2212'. [ 494.990254][T12542] netlink: zone id is out of range [ 495.008956][T12542] netlink: zone id is out of range [ 495.019145][T12542] netlink: zone id is out of range [ 495.379512][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 495.583034][T12572] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2218'. [ 495.608852][T12575] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 495.699869][T12575] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 495.734275][T12572] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 495.849371][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 496.089422][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 496.723318][T12609] validate_nla: 2 callbacks suppressed [ 496.723345][T12609] netlink: 'syz.4.2227': attribute type 3 has an invalid length. [ 496.801546][T12610] netlink: 'syz.4.2227': attribute type 3 has an invalid length. [ 496.863545][T12610] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2227'. [ 496.870319][T12609] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2227'. [ 496.977785][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 497.290757][T12630] netlink: 'syz.1.2232': attribute type 29 has an invalid length. [ 497.367173][T12630] netlink: 'syz.1.2232': attribute type 29 has an invalid length. [ 497.380434][T12634] netlink: 'syz.1.2232': attribute type 29 has an invalid length. [ 497.449497][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 497.586982][T12638] netlink: 'syz.3.2234': attribute type 2 has an invalid length. [ 497.620939][T12639] netlink: 'syz.1.2232': attribute type 29 has an invalid length. [ 497.939429][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 498.170501][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 499.049371][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 499.512520][T12678] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 499.527113][T12678] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2243'. [ 499.539534][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 500.012048][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 500.252011][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 500.731182][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.134598][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 501.609352][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 502.089635][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 502.329394][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 502.753627][T12720] netlink: 'syz.2.2258': attribute type 2 has an invalid length. [ 502.967611][T12720] device 2 entered promiscuous mode [ 503.099385][T12730] net_ratelimit: 3 callbacks suppressed [ 503.099408][T12730] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 503.209682][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 503.297806][T12728] device syzkaller0 entered promiscuous mode [ 503.690232][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 504.043309][T12736] delete_channel: no stack [ 504.150397][T12751] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2265'. [ 504.169411][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 504.251123][T12750] delete_channel: no stack [ 504.419440][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 504.434116][T12756] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 504.447526][T12756] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2267'. [ 504.478655][T12756] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 504.749808][T12772] delete_channel: no stack [ 505.189768][T12780] tap0: tun_chr_ioctl cmd 1074025677 [ 505.195963][T12780] tap0: linktype set to 776 [ 505.299432][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 505.769700][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 505.824529][T12799] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2279'. [ 505.871011][T12800] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2279'. [ 506.249330][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 506.499576][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 506.788313][T12820] device pim6reg1 entered promiscuous mode [ 507.135742][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.142480][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.372846][T12840] netlink: 'syz.2.2290': attribute type 19 has an invalid length. [ 507.383775][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 507.449513][T12840] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2290'. [ 507.585450][T12838] netlink: 'syz.3.2291': attribute type 11 has an invalid length. [ 507.607667][T12835] netlink: 'syz.1.2289': attribute type 8 has an invalid length. [ 507.855360][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 508.329438][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 508.572573][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 508.686487][T12877] netlink: 'syz.4.2302': attribute type 29 has an invalid length. [ 509.449441][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 509.542554][T12886] netlink: 'syz.4.2306': attribute type 10 has an invalid length. [ 509.557621][T12886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2306'. [ 509.611886][T12886] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 509.667605][T12891] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2307'. [ 509.723817][T12893] netlink: 'syz.2.2308': attribute type 10 has an invalid length. [ 509.822796][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2308'. [ 509.859575][T12893] device dummy0 entered promiscuous mode [ 509.903618][T12893] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 509.922305][T12903] netlink: 'syz.3.2309': attribute type 3 has an invalid length. [ 509.922337][T12903] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2309'. [ 509.939505][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 509.982472][T12904] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2309'. [ 510.114018][T12891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2307'. [ 510.419477][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 510.655459][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 511.539400][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 512.019507][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 512.499586][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 512.739480][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 513.280072][T12939] device syzkaller0 entered promiscuous mode [ 513.330418][T12951] delete_channel: no stack [ 513.336604][T12951] delete_channel: no stack [ 513.609397][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 514.099378][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 514.593522][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 514.825007][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 515.694867][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 516.083918][T12971] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2327'. [ 516.169621][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 516.258754][T12971] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 516.330166][T12971] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2327'. [ 516.592161][T12985] netlink: 'syz.3.2330': attribute type 21 has an invalid length. [ 516.649394][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 516.889296][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 516.995320][T12986] sctp: [Deprecated]: syz.2.2332 (pid 12986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.995320][T12986] Use struct sctp_sack_info instead [ 517.779565][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 518.249442][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 518.450529][T13044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2348'. [ 518.729369][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 518.969418][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 519.267985][T13067] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2351'. [ 519.346469][T13067] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 519.427149][T13074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2355'. [ 519.818956][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2357'. [ 519.849686][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 519.871659][T13084] À: port 1(vlan0) entered blocking state [ 519.878531][T13084] À: port 1(vlan0) entered disabled state [ 519.892562][T13084] device vlan0 entered promiscuous mode [ 520.288773][T13079] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2356'. [ 520.350583][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 520.464300][T13094] device syzkaller0 entered promiscuous mode [ 520.830195][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 521.068455][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 521.929498][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 522.415016][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 522.893191][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 523.142967][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 524.016301][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 524.494978][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 524.970289][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 525.209407][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 525.884006][T13185] netlink: 'syz.2.2381': attribute type 2 has an invalid length. [ 526.037919][T13186] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2381'. [ 526.089610][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 526.575632][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 526.676334][T13185] device 1 entered promiscuous mode [ 526.700489][T13188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2382'. [ 526.736943][T13192] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2383'. [ 527.049769][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 527.218548][T13210] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2389'. [ 527.234656][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 527.257278][T13210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.292629][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 528.169629][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 528.659558][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 529.136159][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 529.374311][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 530.253298][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 530.729589][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 530.991966][T13268] netlink: 'syz.3.2402': attribute type 10 has an invalid length. [ 531.028252][T13268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2402'. [ 531.066200][T13268] device team0 entered promiscuous mode [ 531.100926][T13268] device team_slave_0 entered promiscuous mode [ 531.120166][T13268] device team_slave_1 entered promiscuous mode [ 531.137862][T13268] device geneve1 entered promiscuous mode [ 531.191899][T13268] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 531.209406][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 531.234564][T13281] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2406'. [ 531.459917][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 532.196382][T13317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 532.275276][T13317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 532.289933][T13319] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2416'. [ 532.329395][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 532.348060][T13317] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.2416'. [ 532.730697][ T9670] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 532.809524][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 532.991741][T13343] netlink: 'syz.0.2423': attribute type 21 has an invalid length. [ 533.030562][T13343] netlink: 'syz.0.2423': attribute type 6 has an invalid length. [ 533.095456][T13343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2423'. [ 533.289694][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 533.471454][T13337] netlink: 'syz.2.2420': attribute type 15 has an invalid length. [ 533.529704][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 533.575871][T13337] netlink: 'syz.2.2420': attribute type 7 has an invalid length. [ 533.663948][T13337] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2420'. [ 533.947901][T13372] netlink: 'syz.4.2430': attribute type 2 has an invalid length. [ 534.034747][T13367] netlink: 'syz.1.2429': attribute type 10 has an invalid length. [ 534.411045][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 534.889575][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 535.369567][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 535.609520][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 536.489404][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 536.814938][T13367] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 536.974688][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 537.179317][T13372] device 0 entered promiscuous mode [ 537.260883][T13401] device wg2 entered promiscuous mode [ 537.357250][T13408] netlink: 'syz.4.2436': attribute type 10 has an invalid length. [ 537.382437][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.436516][T13408] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.443854][T13408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.451622][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 537.462035][T13408] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 537.690476][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 538.139011][T13433] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 538.193963][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 538.239597][T13441] netlink: 'syz.1.2443': attribute type 3 has an invalid length. [ 538.247810][ T4289] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 538.265616][T13441] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2443'. [ 538.569432][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 538.648732][T13452] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2448'. [ 538.681906][T13450] netlink: 'syz.0.2449': attribute type 12 has an invalid length. [ 538.986170][T13466] netlink: 'syz.0.2453': attribute type 29 has an invalid length. [ 539.015566][T13466] netlink: 'syz.0.2453': attribute type 29 has an invalid length. [ 539.038845][T13468] netlink: 'syz.0.2453': attribute type 29 has an invalid length. [ 539.049646][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 539.057652][T13466] netlink: 'syz.0.2453': attribute type 29 has an invalid length. [ 539.112302][T13468] netlink: 'syz.0.2453': attribute type 29 has an invalid length. [ 539.266227][ T4289] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 539.464156][T13487] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2460'. [ 539.493153][T13487] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.2460'. [ 539.529526][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 539.728978][T13499] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2462'. [ 539.769344][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 540.267968][T13511] netlink: 'syz.3.2464': attribute type 2 has an invalid length. [ 540.482761][T13511] device .*! entered promiscuous mode [ 540.588615][ T4289] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 540.649426][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 541.129429][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 541.685143][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 542.013849][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 542.079473][ T4289] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 542.787290][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 543.285448][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 543.853839][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 544.169818][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 544.809837][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 545.082165][T13594] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2489'. [ 545.161062][T13594] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 545.369337][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 545.395846][T13602] validate_nla: 1 callbacks suppressed [ 545.395892][T13602] netlink: 'syz.1.2492': attribute type 27 has an invalid length. [ 545.490456][T13602] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2492'. [ 545.691423][ T4286] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 545.929301][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 546.249391][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 546.272401][T13603] device syzkaller0 entered promiscuous mode [ 546.845222][ T4286] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 546.889380][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 547.449602][ T4286] Bluetooth: hci3: command 0x206e tx timeout [ 548.009367][ T4286] Bluetooth: hci0: command 0x206e tx timeout [ 548.337224][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 548.975219][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 549.529346][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 550.101078][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 550.417112][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 551.049435][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 551.609437][ T4289] Bluetooth: hci3: command 0x206e tx timeout [ 552.173244][ T4289] Bluetooth: hci0: command 0x206e tx timeout [ 552.247553][T13681] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2511'. [ 552.272971][T13691] device wlan1 entered promiscuous mode [ 552.489312][ T4289] Bluetooth: hci4: command 0x206e tx timeout [ 552.573873][T13721] netlink: 'syz.2.2524': attribute type 12 has an invalid length. [ 553.429325][ T4289] Bluetooth: hci1: command 0x206e tx timeout [ 555.469675][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 557.569703][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 559.619876][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 561.719522][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 563.769488][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 565.869462][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 567.969695][ T4286] Bluetooth: hci1: command 0x206e tx timeout [ 568.578319][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.584766][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.619933][ T4286] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 571.869613][ T4289] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 572.269629][T13741] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 573.775548][T13745] Bluetooth: hci1: command 0x206e tx timeout [ 573.784063][T13745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.796018][T13741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 573.812630][T13741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.821198][T13745] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 573.830960][T13741] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 573.840284][T13745] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 573.851957][T13741] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 573.860603][T13745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 573.870751][T13741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 573.879757][T13745] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 573.889849][T13741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.900264][T13745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 573.907429][T13745] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 573.915462][T13741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.923441][T13745] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 573.932642][T13741] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 573.940793][T13745] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 573.948901][T13741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.957782][T13741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 573.965297][T13745] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 573.975466][T13745] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 573.983361][T13741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 573.990861][T13745] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 573.998321][T13745] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 574.007204][T13741] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 574.016618][T13741] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 574.024533][T13745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 574.032887][T13741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 574.040157][T13745] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 574.050426][ T4286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 574.061467][ T4286] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 574.118526][T13741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 575.869577][T13749] Bluetooth: hci1: command 0x206e tx timeout [ 576.119659][T13749] Bluetooth: hci6: command 0x0409 tx timeout [ 576.126267][T13749] Bluetooth: hci8: command 0x0409 tx timeout [ 576.132882][T13745] Bluetooth: hci5: command 0x0409 tx timeout [ 576.169565][T13749] Bluetooth: hci7: command 0x0409 tx timeout [ 576.176149][T13749] Bluetooth: hci9: command 0x0409 tx timeout [ 577.969578][T13749] Bluetooth: hci1: command 0x206e tx timeout [ 578.169515][T13749] Bluetooth: hci8: command 0x041b tx timeout [ 578.175613][T13749] Bluetooth: hci5: command 0x041b tx timeout [ 578.181724][T13745] Bluetooth: hci6: command 0x041b tx timeout [ 578.269412][T13749] Bluetooth: hci9: command 0x041b tx timeout [ 578.275522][T13749] Bluetooth: hci7: command 0x041b tx timeout [ 579.469635][T13396] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2680 jiffies s: 49117 root: 0x1/. [ 579.486649][T13396] rcu: blocking rcu_node structures (internal RCU debug): [ 579.494115][T13396] Sending NMI from CPU 1 to CPUs 0: [ 579.499417][ C0] NMI backtrace for cpu 0 [ 579.499428][ C0] CPU: 0 PID: 13721 Comm: syz.2.2524 Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.499445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.499456][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 579.499586][ C0] Code: 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 90 48 8b 04 24 <65> 48 8b 15 c4 4a 80 7e 65 8b 0d c5 4a 80 7e 81 e1 00 01 ff 00 74 [ 579.499602][ C0] RSP: 0018:ffffc90000007478 EFLAGS: 00000046 [ 579.499618][ C0] RAX: ffffffff81a5307a RBX: ffff888056566600 RCX: 1ffff1100acacd44 [ 579.499631][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.499642][ C0] RBP: ffff888056566a78 R08: ffff888056566a7b R09: 1ffff1100acacd4f [ 579.499655][ C0] R10: dffffc0000000000 R11: ffffed100acacd50 R12: 0000000000000000 [ 579.499667][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888056566a24 [ 579.499679][ C0] FS: 00007f33328286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 579.499695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.499707][ C0] CR2: 000000110c30c6a0 CR3: 0000000078bc4000 CR4: 00000000003506f0 [ 579.499723][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.499734][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 579.499745][ C0] Call Trace: [ 579.499750][ C0] [ 579.499755][ C0] __perf_event_overflow+0xda/0x630 [ 579.499816][ C0] perf_swevent_event+0x315/0x570 [ 579.499844][ C0] ? perf_tp_event+0xc10/0xc10 [ 579.499870][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 579.499909][ C0] ? __perf_event_overflow+0x50a/0x630 [ 579.499942][ C0] perf_tp_event+0x36b/0xc10 [ 579.499972][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 579.500027][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 579.500071][ C0] ? sched_clock_cpu+0x6e/0x260 [ 579.500126][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 579.500156][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 579.500187][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 579.500263][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 579.500290][ C0] ? __irq_exit_rcu+0x147/0x230 [ 579.500327][ C0] ? irq_exit_rcu+0x20/0x20 [ 579.500346][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 579.500372][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 579.500398][ C0] trace_hardirqs_on+0x24/0x40 [ 579.500420][ C0] asm_sysvec_irq_work+0x16/0x20 [ 579.500446][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 579.500470][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ef cb 23 f7 65 8b 05 f0 7c cd 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 579.500484][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000206 [ 579.500498][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 9fa83f9f45b1d800 [ 579.500510][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: 0000000000000001 [ 579.500522][ C0] RBP: ffffc90000007b00 R08: ffffffff90af2327 R09: 1ffffffff215e464 [ 579.500535][ C0] R10: dffffc0000000000 R11: fffffbfff215e465 R12: dffffc0000000000 [ 579.500548][ C0] R13: ffff8880579d60f0 R14: ffff8880579d6108 R15: 1ffff92000000f50 [ 579.500573][ C0] ? _raw_spin_unlock+0x40/0x40 [ 579.500595][ C0] ? __rwlock_init+0x140/0x140 [ 579.500617][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 579.500657][ C0] ? read_lock_is_recursive+0x10/0x10 [ 579.500685][ C0] skb_dequeue+0x120/0x150 [ 579.500714][ C0] mrp_join_timer+0x8d/0x170 [ 579.500786][ C0] call_timer_fn+0x1ac/0x670 [ 579.500840][ C0] ? mrp_init_applicant+0x4e0/0x4e0 [ 579.500863][ C0] ? call_timer_fn+0xcf/0x670 [ 579.500880][ C0] ? __run_timers+0x810/0x810 [ 579.500905][ C0] ? mrp_init_applicant+0x4e0/0x4e0 [ 579.500930][ C0] __run_timers+0x56c/0x810 [ 579.500957][ C0] ? detach_timer+0x350/0x350 [ 579.500985][ C0] run_timer_softirq+0x63/0xf0 [ 579.501003][ C0] handle_softirqs+0x291/0x910 [ 579.501023][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 579.501042][ C0] ? do_softirq+0x210/0x210 [ 579.501056][ C0] ? hrtimer_interrupt+0x775/0x980 [ 579.501081][ C0] __irq_exit_rcu+0x13b/0x230 [ 579.501103][ C0] ? irq_exit_rcu+0x20/0x20 [ 579.501126][ C0] irq_exit_rcu+0x5/0x20 [ 579.501141][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 579.501171][ C0] [ 579.501175][ C0] [ 579.501181][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.501208][ C0] RIP: 0010:memcpy_erms+0x6/0x10 [ 579.501231][ C0] Code: fe ff ff 00 eb 1e 0f 1f 00 48 89 f8 48 89 d1 48 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 c3 90 90 90 90 90 90 48 89 f8 48 89 d1 a4 c3 90 90 90 90 90 90 90 48 89 f8 48 83 fa 20 72 7e 40 38 fe [ 579.501245][ C0] RSP: 0018:ffffc90005ce79e8 EFLAGS: 00010202 [ 579.501259][ C0] RAX: ffff888024ea0000 RBX: ffff888024ea0000 RCX: 0000000000000ac0 [ 579.501272][ C0] RDX: 0000000000001d00 RSI: ffff88802e593040 RDI: ffff888024ea1240 [ 579.501284][ C0] RBP: ffffc90005ce7c50 R08: ffff888024ea1cff R09: 1ffff110049d439f [ 579.501297][ C0] R10: dffffc0000000000 R11: ffffed10049d43a0 R12: 00000000ffffffff [ 579.501309][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88802e591e00 [ 579.501333][ C0] arch_dup_task_struct+0x3e/0xb0 [ 579.501382][ C0] dup_task_struct+0x6d/0x6b0 [ 579.501429][ C0] copy_process+0x621/0x40c0 [ 579.501466][ C0] ? idle_dummy+0x10/0x10 [ 579.501484][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 579.501508][ C0] kernel_clone+0x24b/0x900 [ 579.501529][ C0] ? create_io_thread+0x170/0x170 [ 579.501546][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 579.501580][ C0] __x64_sys_clone+0x1a7/0x220 [ 579.501601][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 579.501634][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 579.501660][ C0] do_syscall_64+0x4c/0xa0 [ 579.501677][ C0] ? clear_bhb_loop+0x60/0xb0 [ 579.501692][ C0] ? clear_bhb_loop+0x60/0xb0 [ 579.501709][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.501735][ C0] RIP: 0033:0x7f333199ce59 [ 579.501750][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.501764][ C0] RSP: 002b:00007f3332827fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 579.501780][ C0] RAX: ffffffffffffffda RBX: 00007f3331c15fa0 RCX: 00007f333199ce59 [ 579.501793][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 579.501803][ C0] RBP: 00007f3331a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 579.501815][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 579.501825][ C0] R13: 00007f3331c16038 R14: 00007f3331c15fa0 R15: 00007ffdd4d0b3f8 [ 579.501847][ C0] [ 580.020335][T13749] Bluetooth: hci1: command 0x206e tx timeout [ 580.279724][T13749] Bluetooth: hci5: command 0x040f tx timeout [ 580.285836][T13749] Bluetooth: hci6: command 0x040f tx timeout [ 580.292181][T13741] Bluetooth: hci8: command 0x040f tx timeout [ 580.329658][T13749] Bluetooth: hci7: command 0x040f tx timeout [ 580.335739][T13749] Bluetooth: hci9: command 0x040f tx timeout [ 582.179515][T13749] Bluetooth: hci1: command 0x206e tx timeout [ 582.329481][T13749] Bluetooth: hci6: command 0x0419 tx timeout [ 582.335585][T13749] Bluetooth: hci8: command 0x0419 tx timeout [ 582.341727][T13745] Bluetooth: hci5: command 0x0419 tx timeout [ 582.429629][T13749] Bluetooth: hci9: command 0x0419 tx timeout [ 582.435818][T13749] Bluetooth: hci7: command 0x0419 tx timeout [ 584.279447][T13749] Bluetooth: hci1: command 0x206e tx timeout [ 586.329454][T13749] Bluetooth: hci1: command 0x206e tx timeout [ 588.429552][T13749] Bluetooth: hci1: command 0x206e tx timeout