last executing test programs: 4.720128951s ago: executing program 2 (id=2997): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x402, 0xc262, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x8000, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0xddcb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x47f41) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r6) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x402, 0xc262, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x8000, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0xddcb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x47f41) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r6) (async) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) 3.063618633s ago: executing program 1 (id=3004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xf1ab, 0x80, 0x2, 0x6}, {0x0, 0x18, 0x1, 0xffffffff}]}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x300) 1.99297377s ago: executing program 3 (id=3005): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x0) 1.929786252s ago: executing program 2 (id=3006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="ef1ed33bcfc9ea4af30e606553e653941aa90c54e59fc951c7816b6c8363565702a96de14d3eac2503360855ce490b346159e2a5c8d3fa09b7e2a75a634b58c430ed64a9d5f18d5cdd717bd7a4de8e576444fbe421543679951666bdc99b9f00"/107, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="6c9508000b00000018270000", @ANYRES32=r2, @ANYBLOB="00000000090000001839000003000000000000000001000e205ae20400ad0000c000faa5c0032d36000849abc9db8eb137be23d4855114ec608ae880a168f613ba3393d8e5bf352965f5f5d0d833fb1bdb50615e75ca73d0aa196da91eb67efb42e8cce3f5ae1e9fc564f4c8b03c07c58dc414bd880c403ff962bd01fe2884c1e0c98a9b3f42"], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/\x00'], 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) 1.928474312s ago: executing program 1 (id=3007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000008000000010400000b00000001000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$sock(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3a, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/210, 0xd2}, {&(0x7f0000000700)=""/21, 0x15}], 0x2}, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0xfe33) 1.913793692s ago: executing program 0 (id=3008): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) sendmsg$inet(r1, 0x0, 0x200040c4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x7, 0x102, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x2}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4009044) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r5}) close(r6) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.858791334s ago: executing program 3 (id=3009): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x62}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x63, 0x2, 0x0, 0x8, 0x0, 0x0, 0x8430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500, 0x100000001}, 0x119406, 0x8, 0x0, 0x5, 0xffffffffffffbbfe, 0x1000, 0x1, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0x200000, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.720709897s ago: executing program 3 (id=3010): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20) r2 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, &(0x7f0000000140), 0x16) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={0x1, &(0x7f0000000580)="9e070d8401f1ee644b32ae12e257af8a783b828834862f28536adef5491162bf6b24498ae5c8d83d5372218c52f7ef35d4151dedf8a7e2ab87d8c7f7997d07b3377aa32e01b0d4f41d248a3efeb198bef3e55c2d54a461ae3eaeedf04e2d670025bf1e4d307f767d8d3904788e4500bb2bcf0b4c7d47a9a59cf6844b18a839a03ed895f53f7c98af4bd2ef8445149fb1c2dcc131f5b73b53c92cc81db08c80ec7027e4f2d09e505394d8803be9a8f13447948fea99c3423aff7dd48b47d84c750902cdea6ce882a3359aba5542ee", &(0x7f0000000680)=""/57, 0x4}, 0x20) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="0212970902000000e4a17c45c8568660", 0x10}, {&(0x7f0000000240)="adb72df293974a", 0x7}], 0x2}, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) (async) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair(0xf, 0x800, 0x6, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) (async) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="18085b3686f6258e9700006200000000000000208018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r5, @ANYRES8=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="18085b3686f6258e9700006200000000000000208018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r5, @ANYRES8=r6], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.692423728s ago: executing program 2 (id=3011): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r3, @ANYRES64=r1, @ANYRESHEX=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.561953531s ago: executing program 1 (id=3012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0xda, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0xd}]}, {0x0, [0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000600)=""/248, 0x2a, 0xf8, 0x1, 0x3}, 0x28) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f00000000c0), &(0x7f0000000400), 0x2000000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x682}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='pids.events\x00', 0x0, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x43c, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000740)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xc, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[r4, r5, r6, r0, r7, 0x1, r8, r9, r10, r11], &(0x7f0000000a40)=[{0x5, 0x5, 0x0, 0xe}, {0x5, 0x3, 0x7, 0xc}, {0x4, 0x5, 0xa, 0x3}, {0x2, 0x2, 0xb, 0x9}, {0x2, 0x4, 0x9, 0x2}, {0x0, 0x5, 0xc, 0x2}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x20000}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xe6}, 0x94) 1.485871563s ago: executing program 0 (id=3013): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="897a00cc", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x60) r4 = socket$kcm(0x2, 0x3, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8970, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f00000001c0)='syzkaller\x00', 0x66c, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0xf88c, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000004c0)=[{0x3, 0x5, 0xd, 0x6}, {0x3, 0x1, 0x10, 0xb}, {0x0, 0x5, 0x3, 0x8}], 0x10, 0x5}, 0x94) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES8=r5, @ANYRES64=r4, @ANYRESDEC=r4], 0x68}, 0x80) 1.485021533s ago: executing program 3 (id=3014): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="9fc9ffc274566d3b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x6, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b", 0x7}, {0x0}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x5, 0x80, 0xa1, 0x5, 0xd, 0x75, 0x0, 0x5, 0x2, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9fe, 0xa81}, 0x11219, 0xd, 0x10000, 0x8, 0x0, 0x4, 0x1, 0x0, 0x34bb, 0x0, 0x6bb}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x1}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$unix(r5, 0x0, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 1.434098544s ago: executing program 1 (id=3015): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'cpuset'}]}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x181000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000a00)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x20000000000000}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000300)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3, 0x0, 0xfffe}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7b1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, @perf_bp={0x0}, 0x18004, 0x5, 0x43a1bd76, 0x7, 0x80000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000500)=r9, 0x4) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @multicast1}, 0x10, 0x0}, 0x200448e0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r11}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x11, 0xe, 0x0, &(0x7f0000000700)="0300000000000000a139d475c695", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r11, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', r12, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) 1.21965403s ago: executing program 0 (id=3016): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f00000000c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000380)=""/57, 0x39}, {&(0x7f0000000800)=""/223, 0xdf}], 0x3, &(0x7f0000000980)=""/88, 0x58}, 0x2000) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e300250002", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, 0x0, 0x40000000) 809.74371ms ago: executing program 0 (id=3017): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 780.55761ms ago: executing program 3 (id=3018): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x10000, &(0x7f0000000280)="6e979d079502403c5ff95fe4368037b21a862d7dde2bebbe1504b1d1aa8361949283f7d7f7eeb8fbfa091739b3134fcb19faaae647c587c0fe5de6bec8466bccd6b59fd4e79c82fc4bc9cf4388a4f111dfe68ae59611775e7b483b166216bcf5dc59944ba63e5ad82747bee3c865cf9055466b0c336982c863bc0c0f901c72d277a688df421ce395887a98c59d9bc788aa2743d97416f22250bb8bc543f3084fb7e3e827e6422fcbe8e8a735db621cbe4b81aa813e48f71dac4cc40536c408e81413c28990cd4b345673bc6178dad36c3968cc31879236d88f4bb80682bf1161fae7807248afe7db1958f271a77f748a17df1fffe31b7fda", 0xf8, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000740)="a274ddc851dd747a5466fbed557f5734c85190a427d75e52ee40e975a43c7b0e699824b418d4f04290663ba89a44c3edb7fcfa8a2951e368c6bd8ba7aceebce8c84219069ed07c12c1aecac46d17ddcf084a7532c902262b732c611ade53acab0b04a635a2814c29faccebf08e329b8f9564a473202873e953945dd8b1211619b4c793820d1079f4c57e25379514903cc37e268c8a990e0ddae0b68eeb903c47482fe294fb0e3258d789753880b2a85eead5150725de61917319fe9c97b1e3dea2ec5c2629a8434577fe6bbfec465109016103de6cfec97feebb0e1bf3444a15497b") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x400, 0xfffffffffffffffd}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000001, 0x5}, 0x2019, 0x100000, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x2, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x2, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000580), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x10}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0xfff, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x9, 0x0, 0x0, 0x0, 0x5, 0x500c4, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x3aae, 0x40, 0x0, 0x2, 0x3, 0x83, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) close(r5) 728.297122ms ago: executing program 2 (id=3019): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) (async) sendmsg(0xffffffffffffffff, 0x0, 0x40001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1e, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x8, 0x0, 0x0, 0x8, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit, @ringbuf_query], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x40, &(0x7f0000000600)=""/64, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x28040, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x180a2, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0xe, 0x0, 0x0, 0x0, 0xbb, 0x2300, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(0x0, 0x0, 0x9, r3, 0x0) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) 583.144076ms ago: executing program 0 (id=3020): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000700000000000000ffffffff85100000010000009500000000000000180900002020702500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 498.405578ms ago: executing program 1 (id=3021): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x940, 0x4, 0x0, 0x0, 0x4006d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a8064", 0xc}], 0x1}, 0x0) (async) recvmsg$kcm(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)}, 0x2122) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9", 0x6b}, {&(0x7f0000000280)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00000000000000", 0x7f}, {&(0x7f0000001400)="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", 0xa3d}], 0x3}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/132, 0x1a, 0x84, 0x1, 0x1}, 0x28) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) (async, rerun: 64) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)) 457.672319ms ago: executing program 0 (id=3022): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@map, 0xffffffffffffffff, 0x6, 0x2051}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x480, 0x0, 0x0) 367.589021ms ago: executing program 2 (id=3023): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r6 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x4, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xa, &(0x7f0000000340)=@raw=[@exit, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x9, 0x6, 0x2, 0x7, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000580)=""/64, 0x40f00, 0x3, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000006c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x7, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000740)=[{0x0, 0x1, 0x8, 0x5}, {0x4, 0x4, 0xc, 0x7}, {0x0, 0x4, 0x3, 0x1}, {0x1, 0x4, 0x10, 0xa}, {0x1, 0x1, 0x5, 0x3}], 0x10, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r9, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="dbfce9d8a9cd3d11e48fab5ea0c34a2a85a8289b0f3e482a5b3bd3cbee4d31a1d2067ab23b88d8dc6eddf1f8f19241f036439c3fd1081176", @ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) 279.805043ms ago: executing program 2 (id=3024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x80, 0x10000, 0x9e4, 0x3bb90e72c4539fc1, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, r1, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x9, 0x2, 0xc, 0x8, 0x0, 0x5, 0x80000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x2280, 0x2, 0x9, 0x9, 0xe, 0x699, 0xffab, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x2, r1, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x48, 0x43, 0x9, 0x4, 0x0, 0x4, 0x20, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0xea}, 0x2000, 0x800, 0x36, 0x9, 0x8, 0x5, 0x3d, 0x0, 0x3, 0x0, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x88043, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r5, 0x0, 0x10182) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\x00'], 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 225.016784ms ago: executing program 3 (id=3025): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000080), &(0x7f0000000280)='%pK \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500050002008178a8001500030001400200000901ac0400", 0x40}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500050002008178a8001500030001400200000901ac0400", 0x40}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, r0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0x2, 0x2, 0x73) (async) r8 = socket$kcm(0x2, 0x2, 0x73) syz_clone(0x40008100, &(0x7f00000001c0)="06d969ea2be18c139e13c43c3aff508ce7de19966e14af42529f232b82d708473dd0417fa92262871959b7b9c6c9cac3bdaeb2074eee9633aa9ba09d210c6f8ed93ae2ba5b0eb0705ff1d01e33662d126e1d09881c48244730a447b0f7a4004d53ecb42df5ab9ff623d84cadf9baf627e3900888776bdc03911dc5", 0x7b, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000680)="e74f0e5d3cb4ccfb6c283a1d349473e8585a5d0f8c9d0245a562cc3a3f2aaead22511c21eb7fbd53580f296e0ddf4b634061a0f76e313d621797fec8441766df694a66a3da8adfce41b9dc2134cd74ca53580ac376042c408e5965c7178113695adde91c82aba9f15aeae996e9e7cb11936074521678221855ab0a7a1529607a1534dcdcc61c63884a9d50143b3f445df2e3a4183aeb98a15f98fc3be630f8fd931873a93003d2f6d90625eab942c2e84eaf439c7456bd336753b45f") (async) syz_clone(0x40008100, &(0x7f00000001c0)="06d969ea2be18c139e13c43c3aff508ce7de19966e14af42529f232b82d708473dd0417fa92262871959b7b9c6c9cac3bdaeb2074eee9633aa9ba09d210c6f8ed93ae2ba5b0eb0705ff1d01e33662d126e1d09881c48244730a447b0f7a4004d53ecb42df5ab9ff623d84cadf9baf627e3900888776bdc03911dc5", 0x7b, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000680)="e74f0e5d3cb4ccfb6c283a1d349473e8585a5d0f8c9d0245a562cc3a3f2aaead22511c21eb7fbd53580f296e0ddf4b634061a0f76e313d621797fec8441766df694a66a3da8adfce41b9dc2134cd74ca53580ac376042c408e5965c7178113695adde91c82aba9f15aeae996e9e7cb11936074521678221855ab0a7a1529607a1534dcdcc61c63884a9d50143b3f445df2e3a4183aeb98a15f98fc3be630f8fd931873a93003d2f6d90625eab942c2e84eaf439c7456bd336753b45f") sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) 0s ago: executing program 1 (id=3026): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916b60000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, r1}, 0x94) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.2.1546'. [ 372.047027][T10954] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 372.123605][T10952] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1546'. [ 372.312956][T10963] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1549'. [ 372.352379][T10962] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1549'. [ 372.575577][T10967] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 373.611397][T10982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.619844][T10982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.739514][T10982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.759747][T10982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.880509][T10982] batadv0 (unregistering): left allmulticast mode [ 373.900530][T10982] batadv0 (unregistering): left promiscuous mode [ 373.907975][T10982] bridge0: port 3(batadv0) entered disabled state [ 373.974159][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 374.051421][T10990] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 374.070846][T10990] pim6reg0: persist enabled [ 375.535785][T11025] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1564'. [ 375.684961][T11025] validate_nla: 2 callbacks suppressed [ 375.684978][T11025] netlink: 'syz.2.1564': attribute type 10 has an invalid length. [ 375.883668][T11036] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1563'. [ 376.732250][T11035] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 376.863799][T11035] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 379.080838][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.087941][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.182520][T11135] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 380.203669][T11135] macvlan0: entered promiscuous mode [ 380.263652][T11137] netlink: 'syz.2.1597': attribute type 11 has an invalid length. [ 380.338963][T11137] netlink: 212572 bytes leftover after parsing attributes in process `syz.2.1597'. [ 380.358165][T11136] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1596'. [ 380.389824][T11135] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 380.409192][T11133] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1596'. [ 380.504186][T11147] netlink: 'syz.0.1599': attribute type 4 has an invalid length. [ 381.368377][T11152] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 381.482549][T11156] netlink: 'syz.3.1600': attribute type 3 has an invalid length. [ 381.500354][T11156] netlink: 'syz.3.1600': attribute type 275 has an invalid length. [ 383.399658][T11161] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1604'. [ 383.409756][T11162] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1604'. [ 383.510037][T11171] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1606'. [ 383.545928][T11166] syzkaller0: entered promiscuous mode [ 383.554425][T11166] syzkaller0: entered allmulticast mode [ 385.871987][T11189] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1611'. [ 387.058319][T11241] netlink: 'syz.3.1627': attribute type 27 has an invalid length. [ 387.067111][T11241] netlink: 'syz.3.1627': attribute type 3 has an invalid length. [ 387.094538][T11241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1627'. [ 387.139040][T11235] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 387.191705][T11235] dvmrp1: tun_chr_ioctl cmd 1074820166 [ 387.379002][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1630'. [ 387.389027][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1630'. [ 387.401319][T11253] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1630'. [ 389.705298][T11297] syzkaller0: entered promiscuous mode [ 389.725816][T11297] syzkaller0: entered allmulticast mode [ 389.767652][T11303] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1645'. [ 390.054042][T11309] cgroup: fork rejected by pids controller in /syz0 [ 392.195389][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.404291][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.788901][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.869515][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.052994][T11436] veth0_vlan: entered allmulticast mode [ 394.287201][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.297315][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.305824][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.314958][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.322993][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.331103][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.593686][T11447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 394.610487][T11446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 394.619661][T11446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 394.664880][T11447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 394.714058][T11446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 394.915259][T11461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1658'. [ 394.963219][ T142] ip6gretap0 (unregistering): left allmulticast mode [ 394.970220][ T142] ip6gretap0 (unregistering): left promiscuous mode [ 394.987476][ T142] : port 1(ip6gretap0) entered disabled state [ 395.263081][T11467] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1659'. [ 395.970199][T11469] C: renamed from team_slave_0 [ 395.992426][T11469] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 396.010627][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1660'. [ 396.020134][T11469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 396.267546][T11482] netlink: 'syz.2.1661': attribute type 27 has an invalid length. [ 396.304993][T11482] netlink: 'syz.2.1661': attribute type 3 has an invalid length. [ 396.330433][T11482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1661'. [ 396.430492][ T5785] Bluetooth: hci0: command tx timeout [ 396.508277][T11494] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1664'. [ 396.541591][T11494] netlink: del zone limit has 8 unknown bytes [ 396.660306][T11493] netlink: del zone limit has 8 unknown bytes [ 396.934637][T11509] netlink: 'syz.3.1667': attribute type 9 has an invalid length. [ 397.429689][T11506] netlink: 'syz.3.1667': attribute type 10 has an invalid length. [ 397.788293][T11519] delete_channel: no stack [ 397.800468][T11519] delete_channel: no stack [ 398.286216][T11521] netlink: 'syz.1.1669': attribute type 21 has an invalid length. [ 398.302686][T11511] netlink: 'syz.3.1667': attribute type 9 has an invalid length. [ 398.375378][T11438] chnl_net:caif_netlink_parms(): no params data found [ 398.500508][ T5785] Bluetooth: hci0: command tx timeout [ 399.059169][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.091726][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.109269][T11438] bridge_slave_0: entered allmulticast mode [ 399.124692][T11438] bridge_slave_0: entered promiscuous mode [ 399.136981][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.166317][T11438] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.203185][T11438] bridge_slave_1: entered allmulticast mode [ 399.224056][T11438] bridge_slave_1: entered promiscuous mode [ 399.738102][T11438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.776591][T11438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.910204][ T142] hsr_slave_0: left promiscuous mode [ 399.954198][ T142] hsr0: left allmulticast mode [ 399.960353][ T142] bridge0: port 4(hsr0) entered disabled state [ 399.985339][ T142] bridge_slave_1: left allmulticast mode [ 399.991290][ T142] bridge_slave_1: left promiscuous mode [ 399.997088][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.029449][ T142] bridge_slave_0: left allmulticast mode [ 400.054976][ T142] bridge_slave_0: left promiscuous mode [ 400.065114][T11601] netlink: 'syz.2.1684': attribute type 3 has an invalid length. [ 400.074270][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.082287][T11601] __nla_validate_parse: 7 callbacks suppressed [ 400.082308][T11601] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1684'. [ 400.127072][ T142] veth1_macvtap: left promiscuous mode [ 400.134437][ T142] veth0_macvtap: left promiscuous mode [ 400.307521][T11604] netlink: 'syz.1.1685': attribute type 153 has an invalid length. [ 400.316240][T11604] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1685'. [ 400.590515][ T5785] Bluetooth: hci0: command tx timeout [ 400.677062][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.936777][ T142] bond0 (unregistering): Released all slaves [ 401.012032][T11438] team0: Port device team_slave_0 added [ 401.027047][T11438] team0: Port device team_slave_1 added [ 401.118164][T11438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.137316][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.164914][T11438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.261492][T11438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.268576][T11438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.295200][T11438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.916813][T11438] hsr_slave_0: entered promiscuous mode [ 401.969774][T11438] hsr_slave_1: entered promiscuous mode [ 402.233187][T11638] netlink: 'syz.1.1695': attribute type 2 has an invalid length. [ 402.254244][T11638] netlink: 'syz.1.1695': attribute type 8 has an invalid length. [ 402.286385][T11638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1695'. [ 402.362756][T11642] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 402.624878][T11637] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 402.662309][ T5785] Bluetooth: hci0: command tx timeout [ 402.904993][T11659] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1698'. [ 402.936962][T11659] hsr_slave_0: left promiscuous mode [ 402.953864][T11659] hsr_slave_1: left promiscuous mode [ 402.979213][T11663] netlink: 'syz.2.1699': attribute type 29 has an invalid length. [ 403.179858][T11663] netlink: 'syz.2.1699': attribute type 29 has an invalid length. [ 403.300583][T11667] netlink: 'syz.2.1699': attribute type 29 has an invalid length. [ 403.361082][T11673] delete_channel: no stack [ 403.420621][T11669] netlink: 'syz.2.1699': attribute type 29 has an invalid length. [ 403.429307][T11670] netlink: 'syz.2.1699': attribute type 29 has an invalid length. [ 403.445838][T11672] netlink: 'syz.2.1699': attribute type 29 has an invalid length. [ 403.861079][T11438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.588148][T11438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.622285][T11694] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1705'. [ 404.657002][T11698] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1705'. [ 404.690159][T11438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.749418][T11438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 405.044576][T11438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.095690][T11438] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.132335][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.139492][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.184344][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.191614][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.863780][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.965388][T11438] veth0_vlan: entered promiscuous mode [ 406.009141][T11438] veth1_vlan: entered promiscuous mode [ 406.224832][T11438] veth0_macvtap: entered promiscuous mode [ 406.284894][T11438] veth1_macvtap: entered promiscuous mode [ 406.369224][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.410328][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.454908][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.480119][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.511386][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.540448][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.574477][T11438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.613929][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.651659][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.684229][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.703685][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.726061][T11438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 406.748643][T11438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.771864][T11438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.861215][T11438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.896062][T11438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.927501][T11438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.992555][T11438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.339121][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.389074][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.445300][ T7683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.457818][ T7683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.110040][T11811] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1729'. [ 408.389243][T11828] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1733'. [ 409.041240][T11846] netlink: 'syz.0.1737': attribute type 29 has an invalid length. [ 409.101943][T11846] netlink: 'syz.0.1737': attribute type 29 has an invalid length. [ 409.244491][T11853] netlink: 'syz.0.1738': attribute type 2 has an invalid length. [ 409.527172][T11867] sctp: [Deprecated]: syz.0.1741 (pid 11867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.527172][T11867] Use struct sctp_sack_info instead [ 411.754780][T11943] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.1754'. [ 411.920133][T11948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 411.939363][T11948] : renamed from caif0 [ 412.516070][T11948] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 413.272898][T11998] netlink: 'syz.3.1767': attribute type 9 has an invalid length. [ 413.300604][T11998] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1767'. [ 413.431986][T12004] netlink: 'syz.2.1768': attribute type 21 has an invalid length. [ 413.525184][T12004] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1768'. [ 414.684279][T12052] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1783'. [ 414.703133][T12056] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 415.500024][T12075] netlink: 'syz.2.1791': attribute type 3 has an invalid length. [ 415.527215][T12075] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1791'. [ 415.871005][T12091] netlink: 'syz.1.1796': attribute type 10 has an invalid length. [ 415.886444][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1796'. [ 416.414824][T12107] ref_ctr_offset mismatch. inode: 0x9b6 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 416.548109][T12112] netlink: 'syz.3.1803': attribute type 12 has an invalid length. [ 416.570933][T12112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1803'. [ 416.609083][T12112] netlink: 'syz.3.1803': attribute type 21 has an invalid length. [ 416.634629][T12112] netlink: 'syz.3.1803': attribute type 6 has an invalid length. [ 416.650890][T12112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1803'. [ 416.726160][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1804'. [ 416.744831][T12115] : renamed from caif0 [ 416.755863][T12115] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 417.998735][T12149] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 418.024140][T12149] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1813'. [ 418.036522][T12149] hsr0: left allmulticast mode [ 418.052531][T12149] hsr_slave_0: left allmulticast mode [ 418.059953][T12149] hsr_slave_1: left allmulticast mode [ 418.082684][T12149] nr0: port 1(hsr0) entered disabled state [ 418.586282][ T5785] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 418.587703][ T5785] Bluetooth: hci2: hardware error 0x00 [ 418.762071][T12183] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 418.778591][T12183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1824'. [ 418.978184][T12196] netlink: 'syz.1.1827': attribute type 2 has an invalid length. [ 418.987755][T12198] netlink: 'syz.1.1827': attribute type 5 has an invalid length. [ 420.380614][T12211] netlink: 'syz.3.1831': attribute type 3 has an invalid length. [ 420.389028][T12211] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1831'. [ 420.662787][ T5785] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 422.187392][T12220] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 422.256419][T12220] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1834'. [ 422.313482][T12221] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 422.350599][T12221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1833'. [ 422.372066][T12221] ipvlan1: entered promiscuous mode [ 422.377754][T12221] ipvlan1: entered allmulticast mode [ 422.443523][T12221] bridge0: port 3(ipvlan1) entered blocking state [ 422.451693][T12221] bridge0: port 3(ipvlan1) entered disabled state [ 422.494327][T12221] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 422.506026][T12224] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1836'. [ 422.516745][T12220] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 422.540644][T12224] openvswitch: netlink: Flow actions attr not present in new flow. [ 422.631341][T12220] team0: Device wg1 is of different type [ 422.772088][T12233] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 422.808564][T12233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1837'. [ 423.698711][T12243] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.1841'. [ 424.655068][T12266] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.1848'. [ 425.275954][T12285] FAULT_INJECTION: forcing a failure. [ 425.275954][T12285] name failslab, interval 1, probability 0, space 0, times 0 [ 425.290457][T12285] CPU: 1 PID: 12285 Comm: syz.2.1860 Not tainted syzkaller #0 [ 425.297990][T12285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.308089][T12285] Call Trace: [ 425.311380][T12285] [ 425.314328][T12285] dump_stack_lvl+0x18c/0x250 [ 425.319093][T12285] ? show_regs_print_info+0x20/0x20 [ 425.324353][T12285] ? load_image+0x420/0x420 [ 425.328884][T12285] ? __might_sleep+0xe0/0xe0 [ 425.333538][T12285] ? __lock_acquire+0x7d80/0x7d80 [ 425.338613][T12285] should_fail_ex+0x394/0x4c0 [ 425.343330][T12285] should_failslab+0x9/0x20 [ 425.347878][T12285] slab_pre_alloc_hook+0x59/0x300 [ 425.352949][T12285] ? __lock_acquire+0x7d80/0x7d80 [ 425.358961][T12285] ? kvmalloc_node+0x70/0x180 [ 425.363684][T12285] ? kvmalloc_node+0x70/0x180 [ 425.368401][T12285] __kmem_cache_alloc_node+0x53/0x250 [ 425.374248][T12285] ? __schedule_delayed_monitor_work+0x200/0x200 [ 425.380623][T12285] ? kvmalloc_node+0x70/0x180 [ 425.385376][T12285] __kmalloc_node+0xa6/0x240 [ 425.390101][T12285] kvmalloc_node+0x70/0x180 [ 425.395265][T12285] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 425.400859][T12285] ? bpf_dispatcher_xdp+0x800/0x1000 [ 425.406436][T12285] ? bpf_dispatcher_xdp+0x800/0x1000 [ 425.411835][T12285] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 425.417744][T12285] ? xdp_convert_md_to_buff+0x330/0x330 [ 425.423352][T12285] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 425.430085][T12285] ? xdp_convert_md_to_buff+0x5b/0x330 [ 425.435578][T12285] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 425.440967][T12285] ? __lock_acquire+0x7d80/0x7d80 [ 425.446198][T12285] ? dev_put+0x80/0x80 [ 425.450289][T12285] ? dev_put+0x80/0x80 [ 425.454367][T12285] bpf_prog_test_run+0x31f/0x390 [ 425.459307][T12285] __sys_bpf+0x49d/0x890 [ 425.463550][T12285] ? bpf_link_show_fdinfo+0x390/0x390 [ 425.468983][T12285] ? lock_chain_count+0x20/0x20 [ 425.473843][T12285] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 425.480209][T12285] __x64_sys_bpf+0x7c/0x90 [ 425.484675][T12285] do_syscall_64+0x55/0xb0 [ 425.489091][T12285] ? clear_bhb_loop+0x40/0x90 [ 425.493768][T12285] ? clear_bhb_loop+0x40/0x90 [ 425.498443][T12285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.504333][T12285] RIP: 0033:0x7fd02359e0d9 [ 425.508918][T12285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.528623][T12285] RSP: 002b:00007fd0243dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.537478][T12285] RAX: ffffffffffffffda RBX: 00007fd023825fa0 RCX: 00007fd02359e0d9 [ 425.545757][T12285] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 425.554134][T12285] RBP: 00007fd0243dd090 R08: 0000000000000000 R09: 0000000000000000 [ 425.562143][T12285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.570481][T12285] R13: 00007fd023826038 R14: 00007fd023825fa0 R15: 00007ffed18d1fa8 [ 425.578748][T12285] [ 426.269290][T12307] netlink: 'syz.2.1858': attribute type 9 has an invalid length. [ 426.299970][T12307] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1858'. [ 426.462496][T12306] netlink: 'syz.2.1858': attribute type 9 has an invalid length. [ 426.505738][T12306] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1858'. [ 427.855605][T12316] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1861'. [ 427.902973][T12316] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1861'. [ 427.933393][T12316] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 428.106607][T12324] netlink: 'syz.0.1864': attribute type 21 has an invalid length. [ 428.118649][T12324] netlink: 'syz.0.1864': attribute type 1 has an invalid length. [ 428.205023][T12328] FAULT_INJECTION: forcing a failure. [ 428.205023][T12328] name failslab, interval 1, probability 0, space 0, times 0 [ 428.236867][T12328] CPU: 1 PID: 12328 Comm: syz.3.1865 Not tainted syzkaller #0 [ 428.244480][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.254559][T12328] Call Trace: [ 428.257850][T12328] [ 428.260871][T12328] dump_stack_lvl+0x18c/0x250 [ 428.265584][T12328] ? show_regs_print_info+0x20/0x20 [ 428.270779][T12328] ? load_image+0x420/0x420 [ 428.275302][T12328] ? __might_sleep+0xe0/0xe0 [ 428.279923][T12328] ? __lock_acquire+0x7d80/0x7d80 [ 428.284968][T12328] should_fail_ex+0x394/0x4c0 [ 428.289697][T12328] should_failslab+0x9/0x20 [ 428.294209][T12328] slab_pre_alloc_hook+0x59/0x300 [ 428.299242][T12328] ? kvmalloc_node+0x70/0x180 [ 428.303925][T12328] ? kvmalloc_node+0x70/0x180 [ 428.308598][T12328] __kmem_cache_alloc_node+0x53/0x250 [ 428.313981][T12328] ? kvmalloc_node+0x70/0x180 [ 428.318661][T12328] __kmalloc_node+0xa6/0x240 [ 428.323264][T12328] kvmalloc_node+0x70/0x180 [ 428.327768][T12328] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 428.333174][T12328] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 428.338933][T12328] ? 0xffffffffa0004740 [ 428.343108][T12328] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 428.349028][T12328] ? xdp_convert_md_to_buff+0x330/0x330 [ 428.354624][T12328] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 428.360868][T12328] ? _copy_from_user+0xa5/0xe0 [ 428.365658][T12328] ? bpf_test_init+0x119/0x140 [ 428.370421][T12328] ? xdp_convert_md_to_buff+0x5b/0x330 [ 428.375921][T12328] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 428.381321][T12328] ? __lock_acquire+0x7d80/0x7d80 [ 428.386446][T12328] ? dev_put+0x80/0x80 [ 428.390533][T12328] ? dev_put+0x80/0x80 [ 428.394600][T12328] bpf_prog_test_run+0x31f/0x390 [ 428.399563][T12328] __sys_bpf+0x49d/0x890 [ 428.403808][T12328] ? bpf_link_show_fdinfo+0x390/0x390 [ 428.409189][T12328] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.415362][T12328] __x64_sys_bpf+0x7c/0x90 [ 428.419779][T12328] do_syscall_64+0x55/0xb0 [ 428.424197][T12328] ? clear_bhb_loop+0x40/0x90 [ 428.428888][T12328] ? clear_bhb_loop+0x40/0x90 [ 428.433563][T12328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.439454][T12328] RIP: 0033:0x7fe60ad9e0d9 [ 428.443871][T12328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.463756][T12328] RSP: 002b:00007fe60bc18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 428.472169][T12328] RAX: ffffffffffffffda RBX: 00007fe60b025fa0 RCX: 00007fe60ad9e0d9 [ 428.480157][T12328] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 428.488145][T12328] RBP: 00007fe60bc18090 R08: 0000000000000000 R09: 0000000000000000 [ 428.496121][T12328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.504093][T12328] R13: 00007fe60b026038 R14: 00007fe60b025fa0 R15: 00007ffc15f5b428 [ 428.512083][T12328] [ 428.608097][T12332] netlink: 'syz.2.1866': attribute type 4 has an invalid length. [ 428.621270][T12332] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1866'. [ 428.674018][T12335] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.1868'. [ 428.819580][T12344] netlink: 'syz.1.1872': attribute type 3 has an invalid length. [ 428.821226][T12345] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1871'. [ 428.857576][T12344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1872'. [ 429.251987][T12354] syzkaller0: entered promiscuous mode [ 429.275779][T12354] syzkaller0: entered allmulticast mode [ 429.310791][T12352] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1874'. [ 429.628245][T12361] FAULT_INJECTION: forcing a failure. [ 429.628245][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 429.642926][T12361] CPU: 0 PID: 12361 Comm: syz.2.1877 Not tainted syzkaller #0 [ 429.651285][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.662283][T12361] Call Trace: [ 429.665585][T12361] [ 429.668540][T12361] dump_stack_lvl+0x18c/0x250 [ 429.673270][T12361] ? show_regs_print_info+0x20/0x20 [ 429.678935][T12361] ? load_image+0x420/0x420 [ 429.683612][T12361] ? __might_sleep+0xe0/0xe0 [ 429.688790][T12361] ? __lock_acquire+0x7d80/0x7d80 [ 429.693842][T12361] should_fail_ex+0x394/0x4c0 [ 429.698613][T12361] should_failslab+0x9/0x20 [ 429.703122][T12361] slab_pre_alloc_hook+0x59/0x300 [ 429.708253][T12361] ? kvmalloc_node+0x70/0x180 [ 429.712940][T12361] ? kvmalloc_node+0x70/0x180 [ 429.717983][T12361] __kmem_cache_alloc_node+0x53/0x250 [ 429.723491][T12361] ? kvmalloc_node+0x70/0x180 [ 429.728646][T12361] __kmalloc_node+0xa6/0x240 [ 429.733267][T12361] kvmalloc_node+0x70/0x180 [ 429.737874][T12361] bpf_test_run_xdp_live+0x1e9/0x1b30 [ 429.743273][T12361] ? bpf_dispatcher_xdp+0x800/0x1000 [ 429.749126][T12361] ? bpf_dispatcher_xdp+0x800/0x1000 [ 429.754525][T12361] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 429.760509][T12361] ? xdp_convert_md_to_buff+0x330/0x330 [ 429.766163][T12361] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 429.772424][T12361] ? bpf_prog_test_run_xdp+0x743/0x1140 [ 429.778078][T12361] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 429.783460][T12361] ? __lock_acquire+0x7d80/0x7d80 [ 429.788508][T12361] ? dev_put+0x80/0x80 [ 429.792583][T12361] ? dev_put+0x80/0x80 [ 429.796739][T12361] bpf_prog_test_run+0x31f/0x390 [ 429.801914][T12361] __sys_bpf+0x49d/0x890 [ 429.806220][T12361] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.811640][T12361] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.818402][T12361] __x64_sys_bpf+0x7c/0x90 [ 429.823488][T12361] do_syscall_64+0x55/0xb0 [ 429.828769][T12361] ? clear_bhb_loop+0x40/0x90 [ 429.835222][T12361] ? clear_bhb_loop+0x40/0x90 [ 429.840143][T12361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.846420][T12361] RIP: 0033:0x7fd02359e0d9 [ 429.850848][T12361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.872211][T12361] RSP: 002b:00007fd0243dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.881873][T12361] RAX: ffffffffffffffda RBX: 00007fd023825fa0 RCX: 00007fd02359e0d9 [ 429.890114][T12361] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 429.898662][T12361] RBP: 00007fd0243dd090 R08: 0000000000000000 R09: 0000000000000000 [ 429.907271][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.915944][T12361] R13: 00007fd023826038 R14: 00007fd023825fa0 R15: 00007ffed18d1fa8 [ 429.923950][T12361] [ 432.362220][T12391] FAULT_INJECTION: forcing a failure. [ 432.362220][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 432.375793][T12391] CPU: 1 PID: 12391 Comm: syz.2.1886 Not tainted syzkaller #0 [ 432.383312][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 432.393547][T12391] Call Trace: [ 432.396839][T12391] [ 432.399769][T12391] dump_stack_lvl+0x18c/0x250 [ 432.404458][T12391] ? show_regs_print_info+0x20/0x20 [ 432.409728][T12391] ? load_image+0x420/0x420 [ 432.414284][T12391] ? __might_sleep+0xe0/0xe0 [ 432.418913][T12391] ? __lock_acquire+0x7d80/0x7d80 [ 432.423954][T12391] should_fail_ex+0x394/0x4c0 [ 432.429492][T12391] should_failslab+0x9/0x20 [ 432.434023][T12391] slab_pre_alloc_hook+0x59/0x300 [ 432.439099][T12391] ? kvmalloc_node+0x70/0x180 [ 432.443814][T12391] ? kvmalloc_node+0x70/0x180 [ 432.448516][T12391] __kmem_cache_alloc_node+0x53/0x250 [ 432.453900][T12391] ? kvmalloc_node+0x70/0x180 [ 432.458580][T12391] __kmalloc_node+0xa6/0x240 [ 432.463327][T12391] kvmalloc_node+0x70/0x180 [ 432.467917][T12391] page_pool_create+0x1eb/0x5c0 [ 432.472858][T12391] bpf_test_run_xdp_live+0x203/0x1b30 [ 432.478244][T12391] ? bpf_dispatcher_xdp+0x800/0x1000 [ 432.483734][T12391] ? bpf_dispatcher_xdp+0x800/0x1000 [ 432.489237][T12391] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 432.495145][T12391] ? xdp_convert_md_to_buff+0x330/0x330 [ 432.500740][T12391] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 432.506995][T12391] ? _copy_from_user+0xa5/0xe0 [ 432.511763][T12391] ? bpf_test_init+0x119/0x140 [ 432.516525][T12391] ? xdp_convert_md_to_buff+0x5b/0x330 [ 432.521984][T12391] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 432.527356][T12391] ? __lock_acquire+0x7d80/0x7d80 [ 432.532390][T12391] ? dev_put+0x80/0x80 [ 432.536503][T12391] ? dev_put+0x80/0x80 [ 432.540684][T12391] bpf_prog_test_run+0x31f/0x390 [ 432.546528][T12391] __sys_bpf+0x49d/0x890 [ 432.550778][T12391] ? bpf_link_show_fdinfo+0x390/0x390 [ 432.556179][T12391] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.562430][T12391] __x64_sys_bpf+0x7c/0x90 [ 432.566890][T12391] do_syscall_64+0x55/0xb0 [ 432.571330][T12391] ? clear_bhb_loop+0x40/0x90 [ 432.576365][T12391] ? clear_bhb_loop+0x40/0x90 [ 432.581049][T12391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.587035][T12391] RIP: 0033:0x7fd02359e0d9 [ 432.591480][T12391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.611715][T12391] RSP: 002b:00007fd0243dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.620158][T12391] RAX: ffffffffffffffda RBX: 00007fd023825fa0 RCX: 00007fd02359e0d9 [ 432.628231][T12391] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 432.636508][T12391] RBP: 00007fd0243dd090 R08: 0000000000000000 R09: 0000000000000000 [ 432.644515][T12391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.653944][T12391] R13: 00007fd023826038 R14: 00007fd023825fa0 R15: 00007ffed18d1fa8 [ 432.662306][T12391] [ 432.675940][T12391] page_pool_create() gave up with errno -12 [ 432.942622][T12359] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1876'. [ 432.952645][T12359] bridge_slave_1: default FDB implementation only supports local addresses [ 433.226053][T12402] netlink: 'syz.0.1888': attribute type 2 has an invalid length. [ 433.270430][T12402] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1888'. [ 433.386539][T12407] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 433.430766][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.446194][T12407] bridge_slave_1: left allmulticast mode [ 433.453328][T12407] bridge_slave_1: left promiscuous mode [ 433.459356][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.491370][T12407] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 433.556606][T12409] netlink: 'syz.2.1894': attribute type 2 has an invalid length. [ 433.580589][T12409] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1894'. [ 433.680974][T12412] FAULT_INJECTION: forcing a failure. [ 433.680974][T12412] name failslab, interval 1, probability 0, space 0, times 0 [ 433.710694][T12412] CPU: 1 PID: 12412 Comm: syz.0.1895 Not tainted syzkaller #0 [ 433.718254][T12412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 433.728586][T12412] Call Trace: [ 433.731989][T12412] [ 433.734937][T12412] dump_stack_lvl+0x18c/0x250 [ 433.739908][T12412] ? show_regs_print_info+0x20/0x20 [ 433.745134][T12412] ? load_image+0x420/0x420 [ 433.749724][T12412] ? __might_sleep+0xe0/0xe0 [ 433.754899][T12412] ? __lock_acquire+0x7d80/0x7d80 [ 433.759967][T12412] should_fail_ex+0x394/0x4c0 [ 433.764681][T12412] should_failslab+0x9/0x20 [ 433.769217][T12412] slab_pre_alloc_hook+0x59/0x300 [ 433.774280][T12412] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 433.779712][T12412] __kmem_cache_alloc_node+0x53/0x250 [ 433.785206][T12412] ? __asan_memset+0x22/0x40 [ 433.789803][T12412] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 433.795273][T12412] kmalloc_trace+0x2a/0xe0 [ 433.799731][T12412] __xdp_reg_mem_model+0x1e3/0x5a0 [ 433.804867][T12412] ? kvmalloc_node+0x70/0x180 [ 433.809553][T12412] ? kvmalloc_node+0x70/0x180 [ 433.814228][T12412] ? xdp_reg_mem_model+0x40/0x40 [ 433.819172][T12412] xdp_reg_mem_model+0x22/0x40 [ 433.824127][T12412] bpf_test_run_xdp_live+0x262/0x1b30 [ 433.830749][T12412] ? 0xffffffffa0004740 [ 433.834910][T12412] ? 0xffffffffa0004740 [ 433.839205][T12412] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 433.845123][T12412] ? xdp_convert_md_to_buff+0x330/0x330 [ 433.850703][T12412] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 433.858025][T12412] ? _copy_from_user+0xa5/0xe0 [ 433.863630][T12412] ? bpf_test_init+0x119/0x140 [ 433.868532][T12412] ? xdp_convert_md_to_buff+0x5b/0x330 [ 433.874271][T12412] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 433.879764][T12412] ? __lock_acquire+0x7d80/0x7d80 [ 433.885102][T12412] ? dev_put+0x80/0x80 [ 433.889394][T12412] ? dev_put+0x80/0x80 [ 433.893811][T12412] bpf_prog_test_run+0x31f/0x390 [ 433.898861][T12412] __sys_bpf+0x49d/0x890 [ 433.903147][T12412] ? bpf_link_show_fdinfo+0x390/0x390 [ 433.908634][T12412] ? lock_chain_count+0x20/0x20 [ 433.913907][T12412] __x64_sys_bpf+0x7c/0x90 [ 433.918522][T12412] do_syscall_64+0x55/0xb0 [ 433.922988][T12412] ? clear_bhb_loop+0x40/0x90 [ 433.927758][T12412] ? clear_bhb_loop+0x40/0x90 [ 433.933339][T12412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.939413][T12412] RIP: 0033:0x7f3a0179e0d9 [ 433.943830][T12412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.963539][T12412] RSP: 002b:00007f3a026e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.972058][T12412] RAX: ffffffffffffffda RBX: 00007f3a01a25fa0 RCX: 00007f3a0179e0d9 [ 433.980150][T12412] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 433.988135][T12412] RBP: 00007f3a026e8090 R08: 0000000000000000 R09: 0000000000000000 [ 433.996199][T12412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.004190][T12412] R13: 00007f3a01a26038 R14: 00007f3a01a25fa0 R15: 00007fffcf48f138 [ 434.012188][T12412] [ 434.389704][T12427] netlink: 'syz.2.1900': attribute type 21 has an invalid length. [ 434.416334][T12427] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1900'. [ 436.317933][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.328930][T12446] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.336231][T12446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.359058][T12451] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 436.386307][T12451] syzkaller0: entered promiscuous mode [ 436.396082][T12451] syzkaller0: entered allmulticast mode [ 436.673143][T12464] netlink: 176400 bytes leftover after parsing attributes in process `syz.1.1906'. [ 436.761397][T12464] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1906'. [ 436.968954][T12483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1912'. [ 437.062880][T12487] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1913'. [ 437.628070][T12505] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1916'. [ 437.854242][T12515] netlink: 'syz.2.1920': attribute type 8 has an invalid length. [ 437.877547][T12515] netlink: 'syz.2.1920': attribute type 3 has an invalid length. [ 437.937999][T12515] netlink: 138908 bytes leftover after parsing attributes in process `syz.2.1920'. [ 438.709367][T12531] syzkaller0: entered promiscuous mode [ 438.730565][T12531] syzkaller0: entered allmulticast mode [ 439.067919][T12538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1926'. [ 439.903203][T12555] netlink: 'syz.0.1932': attribute type 9 has an invalid length. [ 439.930392][T12555] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1932'. [ 440.505761][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.512705][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.126480][T12556] netlink: 'syz.0.1932': attribute type 9 has an invalid length. [ 443.145384][T12556] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1932'. [ 443.210374][T12554] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.1931'. [ 444.607435][T12620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 444.634190][T12620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 444.674857][T12620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 444.698662][T12620] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1952'. [ 445.166261][T12641] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1955'. [ 448.075069][T12673] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 448.098594][T12673] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 448.970411][T12691] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 451.467584][T12702] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1975'. [ 451.507032][T12702] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 451.521389][T12702] CPU: 0 PID: 12702 Comm: syz.1.1975 Not tainted syzkaller #0 [ 451.528927][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.539021][T12702] Call Trace: [ 451.543135][T12702] [ 451.546195][T12702] dump_stack_lvl+0x18c/0x250 [ 451.551194][T12702] ? show_regs_print_info+0x20/0x20 [ 451.556568][T12702] ? load_image+0x420/0x420 [ 451.561229][T12702] sysfs_warn_dup+0x8e/0xa0 [ 451.565814][T12702] sysfs_do_create_link_sd+0xc0/0x110 [ 451.572112][T12702] device_add_class_symlinks+0x1cf/0x240 [ 451.578510][T12702] device_add+0x4f9/0xc40 [ 451.583279][T12702] wiphy_register+0x1d99/0x2ac0 [ 451.589263][T12702] ? cfg80211_event_work+0x40/0x40 [ 451.594696][T12702] ? minstrel_ht_alloc+0x88a/0x990 [ 451.601164][T12702] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 451.609397][T12702] ieee80211_register_hw+0x2dd8/0x3b30 [ 451.617920][T12702] ? ieee80211_register_hw+0xfb1/0x3b30 [ 451.623997][T12702] ? ieee80211_tasklet_handler+0x20/0x20 [ 451.631009][T12702] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 451.637322][T12702] ? __debug_object_init+0xec/0x450 [ 451.643365][T12702] ? __asan_memset+0x22/0x40 [ 451.648794][T12702] ? __hrtimer_init+0x189/0x270 [ 451.654289][T12702] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 451.660062][T12702] ? mac80211_hwsim_free+0x220/0x220 [ 451.665414][T12702] ? rcu_is_watching+0x15/0xb0 [ 451.670256][T12702] ? kstrndup+0xbd/0x140 [ 451.674712][T12702] hwsim_new_radio_nl+0xdad/0x1a70 [ 451.679866][T12702] ? __nla_validate+0x50/0x50 [ 451.684776][T12702] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 451.691126][T12702] ? __nla_parse+0x40/0x50 [ 451.695579][T12702] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 451.701996][T12702] genl_family_rcv_msg_doit+0x21a/0x310 [ 451.707790][T12702] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 451.713930][T12702] ? bpf_lsm_capable+0x9/0x10 [ 451.718670][T12702] ? security_capable+0x89/0xb0 [ 451.723990][T12702] genl_rcv_msg+0x611/0x7a0 [ 451.729314][T12702] ? genl_bind+0x360/0x360 [ 451.734722][T12702] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 451.741595][T12702] netlink_rcv_skb+0x235/0x4c0 [ 451.748286][T12702] ? genl_bind+0x360/0x360 [ 451.752843][T12702] ? netlink_ack+0x1160/0x1160 [ 451.757719][T12702] ? __lock_acquire+0x7d80/0x7d80 [ 451.762903][T12702] ? down_read+0x1ac/0x2e0 [ 451.767327][T12702] genl_rcv+0x28/0x40 [ 451.771596][T12702] netlink_unicast+0x7b1/0x930 [ 451.776465][T12702] netlink_sendmsg+0x8d0/0xbf0 [ 451.781386][T12702] ? netlink_getsockopt+0x590/0x590 [ 451.786597][T12702] ? apparmor_socket_sendmsg+0x8e/0x330 [ 451.792171][T12702] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 451.797459][T12702] ? security_socket_sendmsg+0x80/0xa0 [ 451.802917][T12702] ? netlink_getsockopt+0x590/0x590 [ 451.808115][T12702] ____sys_sendmsg+0x61b/0x980 [ 451.812947][T12702] ? __asan_memset+0x22/0x40 [ 451.817539][T12702] ? __sys_sendmsg_sock+0x30/0x30 [ 451.822557][T12702] ? __import_iovec+0x5f2/0x850 [ 451.827419][T12702] ? import_iovec+0x73/0xa0 [ 451.831923][T12702] ___sys_sendmsg+0x2a6/0x360 [ 451.836747][T12702] ? __sys_sendmsg+0x2b0/0x2b0 [ 451.841564][T12702] __se_sys_sendmsg+0x1d0/0x2c0 [ 451.846530][T12702] ? __x64_sys_sendmsg+0x80/0x80 [ 451.851492][T12702] ? lockdep_hardirqs_on+0x98/0x150 [ 451.856705][T12702] do_syscall_64+0x55/0xb0 [ 451.861121][T12702] ? clear_bhb_loop+0x40/0x90 [ 451.865816][T12702] ? clear_bhb_loop+0x40/0x90 [ 451.870518][T12702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.876525][T12702] RIP: 0033:0x7fd71fd9e0d9 [ 451.880981][T12702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.901383][T12702] RSP: 002b:00007fd720cc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.911991][T12702] RAX: ffffffffffffffda RBX: 00007fd720025fa0 RCX: 00007fd71fd9e0d9 [ 451.921055][T12702] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 451.930459][T12702] RBP: 00007fd71fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 451.939182][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.949056][T12702] R13: 00007fd720026038 R14: 00007fd720025fa0 R15: 00007ffe05cb2c38 [ 451.957422][T12702] [ 452.416917][T12724] netlink: 'syz.1.1980': attribute type 21 has an invalid length. [ 452.431499][T12724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1980'. [ 452.488986][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1980'. [ 452.552567][T12730] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1991'. [ 456.886372][T12762] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1992'. [ 456.887814][T12766] netlink: 'syz.1.1993': attribute type 29 has an invalid length. [ 456.904166][T12765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1990'. [ 456.925138][T12766] netlink: 'syz.1.1993': attribute type 29 has an invalid length. [ 456.965927][T12766] netlink: 'syz.1.1993': attribute type 29 has an invalid length. [ 457.091922][T12772] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1995'. [ 458.235347][T12798] netlink: 'syz.3.2003': attribute type 39 has an invalid length. [ 458.269747][T12800] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 458.287537][T12800] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 458.909394][T12817] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2011'. [ 458.974628][T12824] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2012'. [ 459.184208][T12831] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2015'. [ 459.730540][T12843] netlink: 'syz.0.2018': attribute type 3 has an invalid length. [ 459.738956][T12843] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2018'. [ 461.080677][T12895] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2033'. [ 461.215281][T12898] netlink: 'syz.2.2034': attribute type 2 has an invalid length. [ 461.242807][T12898] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2034'. [ 461.440022][T12912] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2037'. [ 461.606589][T12924] sit0: entered allmulticast mode [ 461.765155][T12924] sit0: entered promiscuous mode [ 462.013190][T12934] netlink: 'syz.3.2043': attribute type 17 has an invalid length. [ 462.034430][T12932] netlink: 'syz.3.2043': attribute type 17 has an invalid length. [ 462.050870][T12934] netlink: 'syz.3.2043': attribute type 17 has an invalid length. [ 462.762868][T12963] __nla_validate_parse: 3 callbacks suppressed [ 462.762900][T12963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2053'. [ 463.066840][T12977] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 463.623898][T12986] netlink: 'syz.1.2060': attribute type 9 has an invalid length. [ 463.727362][T12986] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2060'. [ 464.051982][T12997] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 464.329692][T13016] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.2070'. [ 464.529146][T13020] syzkaller0: entered promiscuous mode [ 464.548367][T13020] syzkaller0: entered allmulticast mode [ 465.028494][T13034] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2075'. [ 465.053630][T13034] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 466.769635][T13034] netlink: 'syz.0.2075': attribute type 25 has an invalid length. [ 466.779002][T13034] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 467.030183][T13051] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.283126][T13101] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 468.306024][T13101] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2095'. [ 468.399837][T13113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2098'. [ 468.446043][T13113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2098'. [ 468.474232][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2098'. [ 468.495059][T13113] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2098'. [ 468.521809][T13115] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2099'. [ 468.547125][T13115] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2099'. [ 468.584134][T13115] bond0: (slave bond_slave_0): Releasing backup interface [ 468.976423][T13115] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 469.152905][T13130] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2103'. [ 469.183958][T13130] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.2103'. [ 469.267275][T13137] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2112'. [ 470.562869][T13167] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 471.014454][T13181] netlink: 'syz.1.2122': attribute type 49 has an invalid length. [ 471.049946][T13181] netlink: set zone limit has 8 unknown bytes [ 471.931898][T13201] netlink: 'syz.3.2129': attribute type 21 has an invalid length. [ 472.008241][T13201] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 472.212198][T13206] netlink: 'syz.1.2130': attribute type 153 has an invalid length. [ 472.540894][T13209] netlink: 'syz.0.2127': attribute type 21 has an invalid length. [ 472.554969][T13209] netlink: 'syz.0.2127': attribute type 6 has an invalid length. [ 472.750822][T13209] netlink: 'syz.0.2127': attribute type 10 has an invalid length. [ 472.853113][T13209] team0: Port device virt_wifi0 added [ 479.279738][T13262] __nla_validate_parse: 10 callbacks suppressed [ 479.279760][T13262] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2146'. [ 479.318212][T13262] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2146'. [ 479.732854][T13283] delete_channel: no stack [ 479.739534][T13283] delete_channel: no stack [ 480.417202][T13306] dvmrp1: tun_chr_ioctl cmd 21731 [ 480.518213][T13302] netlink: 'syz.1.2160': attribute type 10 has an invalid length. [ 480.532587][T13302] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2160'. [ 481.308444][T13328] delete_channel: no stack [ 481.639678][T13336] netlink: 'syz.3.2174': attribute type 19 has an invalid length. [ 481.806667][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.818808][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.828668][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.863940][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.879439][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 481.887851][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.052566][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2178'. [ 482.080590][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2178'. [ 482.200366][ T7686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.252936][T13353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2178'. [ 482.269584][T13358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2178'. [ 482.364420][ T7686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.499785][ T7686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.634533][ T7686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.685926][T13342] chnl_net:caif_netlink_parms(): no params data found [ 482.788207][T13342] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.795682][T13342] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.803709][T13342] bridge_slave_0: entered allmulticast mode [ 482.811544][T13342] bridge_slave_0: entered promiscuous mode [ 482.819747][T13342] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.841268][T13342] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.848737][T13342] bridge_slave_1: entered allmulticast mode [ 482.860842][T13342] bridge_slave_1: entered promiscuous mode [ 483.002515][T13342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.029035][T13342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.258959][T13342] team0: Port device team_slave_0 added [ 483.313786][T13342] team0: Port device team_slave_1 added [ 483.357457][T13381] netlink: 'syz.3.2183': attribute type 21 has an invalid length. [ 483.401466][T13381] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2183'. [ 483.442847][T13381] netlink: 'syz.3.2183': attribute type 4 has an invalid length. [ 483.933496][T13342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.950652][ T51] Bluetooth: hci4: command tx timeout [ 483.972451][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.127231][T13342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.149118][T13342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.189525][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.239440][T13342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.613485][T13342] hsr_slave_0: entered promiscuous mode [ 484.640179][T13342] hsr_slave_1: entered promiscuous mode [ 484.655023][T13342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.672684][T13342] Cannot create hsr debugfs directory [ 485.845411][T13442] -1: renamed from syzkaller0 [ 486.022837][ T51] Bluetooth: hci4: command tx timeout [ 486.233175][T13465] netlink: 'syz.1.2196': attribute type 21 has an invalid length. [ 486.335108][T13465] netlink: 'syz.1.2196': attribute type 6 has an invalid length. [ 486.370816][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2196'. [ 487.547969][T13470] netlink: 'syz.3.2197': attribute type 13 has an invalid length. [ 487.558498][T13470] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2197'. [ 487.645766][T13470] erspan0: refused to change device tx_queue_len [ 487.702364][T13459] netlink: 'syz.1.2196': attribute type 10 has an invalid length. [ 487.736328][T13459] virt_wifi0: left promiscuous mode [ 487.756176][T13459] virt_wifi0: left allmulticast mode [ 488.119998][ T51] Bluetooth: hci4: command tx timeout [ 489.113779][T13342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.137727][T13491] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2202'. [ 489.224164][T13342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.279414][T13342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.493113][T13342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.943415][T13520] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2206'. [ 490.044223][T13342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.181307][ T51] Bluetooth: hci4: command tx timeout [ 491.643739][T13342] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.719920][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.727843][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.894375][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.902403][ T7683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.929289][T13549] netlink: 'syz.1.2209': attribute type 29 has an invalid length. [ 492.000028][T13547] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2210'. [ 492.097583][ T7686] hsr_slave_0: left promiscuous mode [ 492.142682][ T7686] hsr_slave_1: left promiscuous mode [ 492.152497][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.173659][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.186259][ T7686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.210686][ T7686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.230544][ T7686] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 492.238115][ T7686] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 492.277821][ T7686] veth1_macvtap: left promiscuous mode [ 492.291139][ T7686] veth0_macvtap: left promiscuous mode [ 492.314497][ T7686] veth1_vlan: left promiscuous mode [ 492.321183][ T7686] veth0_vlan: left promiscuous mode [ 492.984613][ T7686] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 493.324698][ T7686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.432943][ T7686] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 493.662961][ T7686] bond0 (unregistering): Released all slaves [ 493.698119][T13549] netlink: 'syz.1.2209': attribute type 29 has an invalid length. [ 493.741774][T13554] syzkaller0: entered promiscuous mode [ 493.747333][T13554] syzkaller0: entered allmulticast mode [ 493.762250][T13563] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2212'. [ 496.291277][T13603] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2216'. [ 496.582281][T13342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.935178][T13342] veth0_vlan: entered promiscuous mode [ 497.155820][T13342] veth1_vlan: entered promiscuous mode [ 497.187995][T13621] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.2217'. [ 497.458452][T13342] veth0_macvtap: entered promiscuous mode [ 497.475075][T13342] veth1_macvtap: entered promiscuous mode [ 497.519818][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.591042][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.619722][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.639965][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.650579][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.669969][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.688413][T13342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.736260][T13634] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.2223'. [ 497.765278][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.811933][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.839021][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 497.849172][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.867933][T13342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.886808][T13342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.913569][T13342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.390147][T13342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.415994][T13342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.426958][T13342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.436658][T13342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.575210][T13651] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2228'. [ 498.603639][T13649] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2227'. [ 498.608255][T13651] netlink: del zone limit has 4 unknown bytes [ 498.716958][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.740300][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.834890][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.864645][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.661910][T13674] netlink: 'syz.2.2168': attribute type 6 has an invalid length. [ 499.669948][T13674] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2168'. [ 499.794702][T13681] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2234'. [ 499.838362][T13681] netlink: zone id is out of range [ 499.856901][T13681] netlink: zone id is out of range [ 499.877558][T13681] netlink: zone id is out of range [ 499.892580][T13681] netlink: zone id is out of range [ 499.909630][T13681] netlink: zone id is out of range [ 499.924701][T13681] netlink: zone id is out of range [ 499.939796][T13681] netlink: zone id is out of range [ 499.949881][T13681] netlink: zone id is out of range [ 499.960673][T13681] netlink: zone id is out of range [ 501.077067][T13693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2236'. [ 501.957018][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.964107][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.259661][T13693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2236'. [ 505.315672][T13734] macvlan1: entered promiscuous mode [ 505.336156][T13734] macvlan1: entered allmulticast mode [ 505.344728][T13734] veth1_vlan: entered allmulticast mode [ 505.359666][T13739] netlink: 'syz.3.2250': attribute type 10 has an invalid length. [ 507.498652][T13739] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 507.650989][T13744] netlink: 'syz.3.2251': attribute type 10 has an invalid length. [ 507.659396][T13744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'. [ 507.678431][T13744] batman_adv: batadv0: Adding interface: virt_wifi0 [ 507.685586][T13744] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.744617][T13744] batman_adv: batadv0: Interface activated: virt_wifi0 [ 507.774338][T13745] netlink: 'syz.3.2251': attribute type 10 has an invalid length. [ 507.786036][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'. [ 508.478657][T13753] veth1_vlan (unregistering): left allmulticast mode [ 508.635838][T13763] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2254'. [ 508.645342][T13763] bridge_slave_1: default FDB implementation only supports local addresses [ 508.759323][T13769] netlink: 'syz.0.2257': attribute type 1 has an invalid length. [ 508.767749][T13769] netlink: 60179 bytes leftover after parsing attributes in process `syz.0.2257'. [ 509.382406][T13790] netlink: 'syz.3.2265': attribute type 9 has an invalid length. [ 509.417347][T13790] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2265'. [ 512.794363][T13835] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2272'. [ 512.815163][T13835] net_ratelimit: 217 callbacks suppressed [ 512.815182][T13835] openvswitch: netlink: Key type 4112 is out of range max 32 [ 513.002716][T13838] netlink: 'syz.3.2275': attribute type 29 has an invalid length. [ 513.074189][T13838] netlink: 'syz.3.2275': attribute type 29 has an invalid length. [ 513.499411][T13839] netlink: 'syz.3.2275': attribute type 29 has an invalid length. [ 513.547894][T13840] netlink: 'syz.3.2275': attribute type 29 has an invalid length. [ 513.597510][T13841] netlink: 'syz.3.2275': attribute type 29 has an invalid length. [ 513.761667][T13849] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2278'. [ 513.874406][T13849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2278'. [ 514.421800][T13858] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 514.430063][T13858] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2280'. [ 514.503257][T13858] team0: Port device virt_wifi0 removed [ 514.875322][T13871] netlink: 'syz.0.2285': attribute type 29 has an invalid length. [ 514.885587][T13871] netlink: 'syz.0.2285': attribute type 3 has an invalid length. [ 514.900208][T13871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2285'. [ 515.050145][T13882] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 515.058550][T13882] netlink: 'syz.1.2289': attribute type 29 has an invalid length. [ 515.124831][T13879] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2288'. [ 515.247562][T13879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2288'. [ 519.386017][T13915] Bluetooth: hci0: command 0x0406 tx timeout [ 520.555031][T13913] sit0: entered allmulticast mode [ 521.395965][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2305'. [ 523.739297][T13972] syzkaller0: entered promiscuous mode [ 523.747658][T13972] syzkaller0: entered allmulticast mode [ 523.776609][T13972] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2309'. [ 523.787384][T13972] openvswitch: netlink: Key type 4112 is out of range max 32 [ 523.925495][T13983] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2313'. [ 526.373108][T13991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2314'. [ 526.444535][T13991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.481560][T13991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.499208][T13991] bond0 (unregistering): Released all slaves [ 527.014586][T14027] netlink: 'syz.0.2326': attribute type 49 has an invalid length. [ 527.687729][T14062] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2335'. [ 528.963392][T14087] netlink: 'syz.3.2343': attribute type 9 has an invalid length. [ 529.051513][T14087] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2343'. [ 529.502582][T14093] netlink: 'syz.0.2345': attribute type 10 has an invalid length. [ 529.541351][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.549076][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.657397][T14093] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.664690][T14093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.672285][T14093] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.679487][T14093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.736257][T14093] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 529.750528][T14096] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 530.589705][T14110] netlink: 'syz.1.2347': attribute type 49 has an invalid length. [ 530.688473][T14111] netlink: 'syz.0.2355': attribute type 6 has an invalid length. [ 530.720646][T14111] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2355'. [ 531.159391][T14116] netlink: 'syz.2.2349': attribute type 1 has an invalid length. [ 533.502754][T14161] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2361'. [ 533.535245][T14160] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2361'. [ 533.929719][T14174] netlink: 'syz.2.2364': attribute type 5 has an invalid length. [ 534.064781][T13915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.074372][T13915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.090448][T13915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 534.101403][T13915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.118339][T13915] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 534.126825][T13915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.612669][T14186] netlink: 'syz.3.2368': attribute type 10 has an invalid length. [ 534.637994][T14186] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2368'. [ 534.679191][T14191] netlink: 'syz.3.2368': attribute type 10 has an invalid length. [ 534.697918][T14191] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2368'. [ 534.843265][T14198] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 534.851363][T14198] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2371'. [ 534.867298][ T7685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.988968][ T7685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.011204][T14206] netlink: 'syz.2.2372': attribute type 49 has an invalid length. [ 535.025214][T14175] chnl_net:caif_netlink_parms(): no params data found [ 535.119091][ T7685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.148625][T14211] netlink: 'syz.3.2373': attribute type 2 has an invalid length. [ 535.156517][T14211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2373'. [ 535.219115][ T7685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.273218][T14175] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.287465][T14175] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.295474][T14175] bridge_slave_0: entered allmulticast mode [ 535.304686][T14175] bridge_slave_0: entered promiscuous mode [ 535.319130][T14175] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.348626][T14175] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.360651][T14175] bridge_slave_1: entered allmulticast mode [ 535.367543][T14175] bridge_slave_1: entered promiscuous mode [ 535.689496][T14175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.782546][T14175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.897345][T14231] netlink: set zone limit has 8 unknown bytes [ 535.951728][T14175] team0: Port device team_slave_0 added [ 536.255820][T14240] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.2381'. [ 536.270638][T13915] Bluetooth: hci2: command tx timeout [ 536.332006][T14240] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.2381'. [ 537.161605][ T7685] ip6gretap0 (unregistering): left allmulticast mode [ 537.169038][ T7685] ip6gretap0 (unregistering): left promiscuous mode [ 537.176279][ T7685] : port 1(ip6gretap0) entered disabled state [ 537.253258][T14175] team0: Port device team_slave_1 added [ 537.776013][T14273] netlink: 'syz.2.2388': attribute type 5 has an invalid length. [ 537.807099][T14175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.822915][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.870313][T14175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.955599][T14175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.962727][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.989510][T14175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.340851][T13915] Bluetooth: hci2: command tx timeout [ 538.544210][T14175] hsr_slave_0: entered promiscuous mode [ 538.587559][T14175] hsr_slave_1: entered promiscuous mode [ 538.615377][T14175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.637310][T14175] Cannot create hsr debugfs directory [ 538.852723][T14316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2396'. [ 538.887436][T14316] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 539.218948][T14323] -1: renamed from syzkaller0 [ 539.729446][T14329] netlink: 'syz.0.2401': attribute type 21 has an invalid length. [ 539.740501][T14329] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 539.759678][T14329] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.2401'. [ 539.783727][T14334] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 539.793585][T14334] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2404'. [ 540.067362][T14338] syzkaller0: entered promiscuous mode [ 540.083384][T14338] syzkaller0: entered allmulticast mode [ 540.421005][T13915] Bluetooth: hci2: command tx timeout [ 540.800140][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.808243][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.825117][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.836948][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.868310][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.158656][ T7685] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 541.627988][ T7685] bond0 (unregistering): (slave c): Releasing backup interface [ 541.757295][ T7685] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 542.016098][ T7685] bond0 (unregistering): Released all slaves [ 542.150079][T14175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 542.191705][T14175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 542.224021][T14175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 542.267908][T14175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 542.394011][T13915] Bluetooth: hci3: ISO packet for unknown connection handle 30 [ 542.489184][T14175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.500881][T13915] Bluetooth: hci2: command tx timeout [ 542.599472][T14175] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.644330][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.651617][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.694611][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.701817][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.375183][T14175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.518058][T14175] veth0_vlan: entered promiscuous mode [ 543.546756][T14175] veth1_vlan: entered promiscuous mode [ 543.623398][T14175] veth0_macvtap: entered promiscuous mode [ 543.648114][T14175] veth1_macvtap: entered promiscuous mode [ 543.871085][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.900466][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.927922][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.943897][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.955465][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.971397][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.984137][T14175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.005626][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 544.026411][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.042356][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.066444][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.077387][T14175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.088976][T14175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.111706][T14175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.119865][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2431'. [ 544.195579][T14175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.219423][T14175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.238598][T14175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.260640][T14175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.585236][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.599441][T14468] syzkaller0: entered promiscuous mode [ 544.608931][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.640865][T14468] syzkaller0: entered allmulticast mode [ 544.823050][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.862109][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.107512][T14497] netlink: 'syz.0.2441': attribute type 9 has an invalid length. [ 545.120486][T14497] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2441'. [ 545.233906][T14498] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 545.255617][T14498] netlink: 'syz.1.2362': attribute type 19 has an invalid length. [ 545.274816][T14498] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2362'. [ 546.283784][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.303826][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.317412][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.342750][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.353904][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 546.363777][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.390866][T14536] netlink: 'syz.0.2446': attribute type 2 has an invalid length. [ 546.421934][T14536] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.2446'. [ 546.457192][ T5780] bond0: (slave syz_tun): Releasing backup interface [ 546.486228][T14531] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 546.518949][T14531] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2446'. [ 546.549375][T14531] batadv_slave_1: entered promiscuous mode [ 546.581307][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.597885][T14531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.621547][T14542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2446'. [ 546.654833][T14542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2446'. [ 546.655463][T14545] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2448'. [ 546.688870][T14545] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 546.690806][T14531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2446'. [ 546.782429][T14536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.861428][T14542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2446'. [ 547.015002][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.119798][T14553] Q6`Ҙ: renamed from lo (while UP) [ 547.283221][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.503190][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.773901][T14596] netlink: 'syz.2.2457': attribute type 9 has an invalid length. [ 547.881061][T14599] netlink: set zone limit has 8 unknown bytes [ 548.023770][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 548.057943][T14526] chnl_net:caif_netlink_parms(): no params data found [ 548.420388][T13915] Bluetooth: hci1: command tx timeout [ 548.519389][T14526] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.570541][T14526] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.578050][T14526] bridge_slave_0: entered allmulticast mode [ 548.609445][T14526] bridge_slave_0: entered promiscuous mode [ 548.633386][T14526] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.647701][T14526] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.655439][T14526] bridge_slave_1: entered allmulticast mode [ 548.675504][T14526] bridge_slave_1: entered promiscuous mode [ 548.720467][T14526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.739051][T14526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.934060][T14526] team0: Port device team_slave_0 added [ 548.953281][T14526] team0: Port device team_slave_1 added [ 549.018536][T14635] netlink: 'syz.0.2463': attribute type 3 has an invalid length. [ 549.099435][T14526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.122949][T14526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.180890][T14526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.213043][T14526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.220041][T14526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.275437][T14526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.460755][T14526] hsr_slave_0: entered promiscuous mode [ 549.483377][T14526] hsr_slave_1: entered promiscuous mode [ 549.508843][T14526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.531200][T14526] Cannot create hsr debugfs directory [ 550.418688][T14672] netlink: 'syz.1.2471': attribute type 2 has an invalid length. [ 550.445482][T14672] __nla_validate_parse: 1 callbacks suppressed [ 550.445499][T14672] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.2471'. [ 550.500553][T13915] Bluetooth: hci1: command tx timeout [ 550.594650][T14678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2471'. [ 550.692000][T14673] netlink: 'syz.1.2471': attribute type 10 has an invalid length. [ 550.699892][T14673] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2471'. [ 550.720619][T14673] batadv_slave_1: entered promiscuous mode [ 550.726721][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.770427][T14673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.834141][T14672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.855343][T14678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2471'. [ 550.887556][T14680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2471'. [ 550.956690][T14688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2471'. [ 552.582346][T13915] Bluetooth: hci1: command tx timeout [ 554.647405][T14735] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2483'. [ 554.660636][T13915] Bluetooth: hci1: command tx timeout [ 554.766215][T14739] netlink: 'syz.2.2484': attribute type 10 has an invalid length. [ 554.776360][T14739] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2484'. [ 554.791422][T14739] batadv_slave_1: entered promiscuous mode [ 554.797632][T14739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.813110][T14739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.832763][T14741] netlink: 'syz.2.2484': attribute type 2 has an invalid length. [ 554.847547][T14741] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.2484'. [ 554.848264][T14735] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 554.981193][T14739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.984230][T14741] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2484'. [ 555.228781][T14746] sit0: entered allmulticast mode [ 555.342722][T14752] netlink: 'syz.0.2486': attribute type 21 has an invalid length. [ 555.402330][T14747] sit0: entered promiscuous mode [ 555.824321][T14526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 555.836414][T14759] __nla_validate_parse: 4 callbacks suppressed [ 555.836446][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2487'. [ 555.892405][T14759] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2487'. [ 555.910514][T14768] netlink: 'syz.0.2488': attribute type 21 has an invalid length. [ 555.922640][T14526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.111576][T14526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.142313][T14526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 556.532933][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.547292][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.578950][ T11] batman_adv: batadv0: Interface deactivated: 0 [ 556.603612][ T11] batman_adv: batadv0: Removing interface: 0 [ 556.626301][ T11] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 556.654829][ T11] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 556.691248][ T11] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 556.698378][ T11] batman_adv: batadv0: Removing interface: virt_wifi0 [ 556.745302][ T11] veth1_macvtap: left promiscuous mode [ 556.751136][ T11] veth0_macvtap: left promiscuous mode [ 557.895176][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.975155][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.028787][ T11] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 558.069935][ T11] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 558.368799][ T11] bond0 (unregistering): Released all slaves [ 558.437101][T14800] netlink: 'syz.1.2495': attribute type 21 has an invalid length. [ 558.449565][T14800] netlink: 'syz.1.2495': attribute type 13 has an invalid length. [ 558.458286][T14800] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.2495'. [ 558.476007][T14806] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2496'. [ 558.625827][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2497'. [ 558.649509][T14810] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2497'. [ 558.662259][T14811] netlink: 'syz.1.2498': attribute type 3 has an invalid length. [ 558.686587][T14811] netlink: 'syz.1.2498': attribute type 1 has an invalid length. [ 558.713236][T14811] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.2498'. [ 558.759069][T14526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.788779][T14526] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.842308][T14448] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.849512][T14448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.903902][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.911125][T14448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.073003][T14821] netlink: 'syz.1.2500': attribute type 21 has an invalid length. [ 559.461535][T14526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.505450][T14526] veth0_vlan: entered promiscuous mode [ 559.519041][T14526] veth1_vlan: entered promiscuous mode [ 559.585137][T14526] veth0_macvtap: entered promiscuous mode [ 559.608695][T14526] veth1_macvtap: entered promiscuous mode [ 559.662974][T14526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.700394][T14526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.730937][T14526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.767172][T14526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.783303][T14526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.804296][T14526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.826238][T14834] netlink: 'syz.1.2503': attribute type 153 has an invalid length. [ 559.841040][T14526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.848802][T13915] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 559.857001][T14834] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2503'. [ 559.925739][T14526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.952991][T14526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.961830][T14526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.970652][T14526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.979377][T14526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.112239][ T7684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.130615][ T7684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.159318][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.171428][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.217296][T14842] netlink: 'syz.1.2505': attribute type 12 has an invalid length. [ 560.241871][T14842] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2505'. [ 560.321503][T14851] netlink: 'syz.3.2442': attribute type 2 has an invalid length. [ 560.361103][T14851] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 560.628788][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2507'. [ 562.803755][T14893] __nla_validate_parse: 1 callbacks suppressed [ 562.803771][T14893] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2519'. [ 562.921611][T14894] delete_channel: no stack [ 563.383965][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.390720][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.686775][T14937] pim6reg1: entered promiscuous mode [ 566.916067][T13915] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 566.959054][T14944] netlink: 'syz.2.2534': attribute type 21 has an invalid length. [ 566.976073][T14944] netlink: 'syz.2.2534': attribute type 1 has an invalid length. [ 567.007716][T14944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2534'. [ 568.002206][T14965] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 568.010094][T14965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 568.059458][T14965] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 568.071276][T14968] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2541'. [ 568.109658][T14965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.141005][T14969] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 569.097054][T14992] netlink: 'syz.3.2546': attribute type 10 has an invalid length. [ 569.115401][T14992] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2546'. [ 569.442367][T15001] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2549'. [ 569.483919][T15001] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 571.730788][T15032] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 571.815442][T15032] team0: Device veth1_vlan failed to register rx_handler [ 572.118069][T15042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 572.259489][T15042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 572.641117][T15043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 572.670831][T15046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2559'. [ 572.866914][T15056] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2564'. [ 573.538297][T15072] netlink: 'syz.1.2567': attribute type 21 has an invalid length. [ 573.585904][T15072] netlink: 'syz.1.2567': attribute type 1 has an invalid length. [ 573.594731][T15072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2567'. [ 574.218166][T15084] netlink: 'syz.0.2569': attribute type 3 has an invalid length. [ 574.250774][T15084] netlink: 'syz.0.2569': attribute type 1 has an invalid length. [ 574.258574][T15084] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2569'. [ 575.013561][T15106] netlink: 'syz.1.2571': attribute type 3 has an invalid length. [ 575.037543][T15106] netlink: 'syz.1.2571': attribute type 4 has an invalid length. [ 575.058195][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2571'. [ 576.066512][T15128] netlink: 'syz.1.2578': attribute type 153 has an invalid length. [ 576.100535][T15128] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2578'. [ 576.899273][T15144] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 576.994211][T15143] netlink: 'syz.0.2580': attribute type 21 has an invalid length. [ 577.055467][T15143] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 577.130790][T15143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2580'. [ 578.971560][T15175] validate_nla: 2 callbacks suppressed [ 578.971579][T15175] netlink: 'syz.1.2590': attribute type 39 has an invalid length. [ 579.870880][T15174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2589'. [ 579.890173][T15174] : renamed from caif0 [ 579.922934][T15174] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 580.055491][T15181] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 580.081272][T15183] netlink: 'syz.0.2591': attribute type 3 has an invalid length. [ 580.130085][T15183] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2591'. [ 581.304987][T15215] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2600'. [ 582.351218][T14448] wlan1: Trigger new scan to find an IBSS to join [ 582.861636][T15229] netlink: 'syz.1.2606': attribute type 10 has an invalid length. [ 582.890000][T15229] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2606'. [ 583.337982][T15249] netlink: 'syz.3.2611': attribute type 21 has an invalid length. [ 583.360593][T15249] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2611'. [ 583.442696][T15248] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 583.487417][T15248] netlink: 'syz.1.2612': attribute type 3 has an invalid length. [ 583.507848][T15248] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2612'. [ 583.737536][T15257] netlink: 'syz.2.2614': attribute type 29 has an invalid length. [ 583.768103][T15257] netlink: 'syz.2.2614': attribute type 29 has an invalid length. [ 583.781938][T15258] netlink: 'syz.2.2614': attribute type 29 has an invalid length. [ 583.818627][T15257] netlink: 'syz.2.2614': attribute type 29 has an invalid length. [ 583.881591][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'. [ 583.893286][T15257] netlink: 'syz.2.2614': attribute type 29 has an invalid length. [ 583.926652][T15263] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2616'. [ 584.395385][T15263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.519111][T15263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.634864][T15263] bond0 (unregistering): Released all slaves [ 587.380410][ T142] wlan1: Trigger new scan to find an IBSS to join [ 587.386978][ T142] wlan1: Trigger new scan to find an IBSS to join [ 588.365237][T14448] wlan1: Creating new IBSS network, BSSID 56:55:f1:32:28:19 [ 588.416603][T15313] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2631'. [ 588.942280][T15321] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2633'. [ 588.982900][T15321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.234654][T15332] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2633'. [ 589.630985][T15353] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2642'. [ 590.245508][T15359] syzkaller0: entered promiscuous mode [ 590.260309][T15359] syzkaller0: entered allmulticast mode [ 590.265022][T15363] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 590.597221][T15368] netlink: 'syz.1.2645': attribute type 3 has an invalid length. [ 590.613893][T15368] netlink: 'syz.1.2645': attribute type 5 has an invalid length. [ 590.630632][T15368] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2645'. [ 592.344535][ T11] wlan1: Trigger new scan to find an IBSS to join [ 592.854896][T15363] netlink: 'syz.3.2644': attribute type 29 has an invalid length. [ 592.863147][T15365] netlink: 'syz.1.2645': attribute type 6 has an invalid length. [ 592.873798][T15365] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2645'. [ 593.122013][T15377] syzkaller0: entered promiscuous mode [ 593.127552][T15377] syzkaller0: entered allmulticast mode [ 593.262424][ T49] wlan1: Creating new IBSS network, BSSID fa:1b:51:40:a5:28 [ 593.358834][T15384] syzkaller0: entered promiscuous mode [ 593.364852][T15384] syzkaller0: entered allmulticast mode [ 595.152883][T15405] netlink: 'syz.0.2657': attribute type 2 has an invalid length. [ 595.162689][T15405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2657'. [ 595.342235][T15413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2660'. [ 595.388365][T15413] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2660'. [ 595.748993][T15429] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.760998][T15429] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.783650][T15429] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.813687][T15429] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.838548][T15429] Dead loop on virtual device ip6_vti0, fix it urgently! [ 595.848881][T15429] Dead loop on virtual device ip6_vti0, fix it urgently! [ 596.298905][T15447] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2669'. [ 596.341332][T15445] syzkaller0: entered promiscuous mode [ 596.347127][T15445] syzkaller0: entered allmulticast mode [ 596.455650][T13915] Bluetooth: hci4: ISO packet for unknown connection handle 8 [ 598.990432][T15504] syzkaller0: entered promiscuous mode [ 598.995965][T15504] syzkaller0: entered allmulticast mode [ 601.616404][T15526] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 601.629233][T15526] team0: Device wg1 is of different type [ 601.646727][T15527] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 601.658609][T15527] team0: Device wg1 is of different type [ 601.805523][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'. [ 602.196465][T15540] netlink: 'syz.3.2695': attribute type 10 has an invalid length. [ 602.258413][T15547] netlink: 'syz.3.2695': attribute type 9 has an invalid length. [ 602.349926][T15547] netlink: 182472 bytes leftover after parsing attributes in process `syz.3.2695'. [ 602.925324][T15563] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2701'. [ 602.939049][T15563] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.2701'. [ 603.025800][T15565] netlink: 'syz.2.2702': attribute type 39 has an invalid length. [ 603.264660][T15567] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2703'. [ 603.583740][T15571] netlink: 'syz.1.2704': attribute type 8 has an invalid length. [ 603.637570][T15571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2704'. [ 603.957660][T15559] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2699'. [ 604.068378][T15585] netlink: 'syz.0.2707': attribute type 10 has an invalid length. [ 604.105925][T15585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2707'. [ 604.116365][T15582] netlink: 'syz.0.2707': attribute type 25 has an invalid length. [ 604.148103][T15582] netlink: 'syz.0.2707': attribute type 3 has an invalid length. [ 606.422660][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 606.506387][T15647] netlink: 'syz.3.2724': attribute type 28 has an invalid length. [ 606.514369][T15647] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2724'. [ 606.873273][T15658] netlink: 'syz.0.2728': attribute type 11 has an invalid length. [ 606.941383][T15658] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2728'. [ 607.231526][T15670] 0: renamed from pim6reg1 [ 608.563449][T15691] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2735'. [ 608.627936][T15691] netlink: zone id is out of range [ 608.655426][T15691] netlink: zone id is out of range [ 608.690431][T15691] netlink: zone id is out of range [ 608.695607][T15691] netlink: zone id is out of range [ 608.758223][T15691] netlink: zone id is out of range [ 608.770548][T15691] netlink: zone id is out of range [ 608.798012][T15691] netlink: zone id is out of range [ 608.847880][T15691] netlink: zone id is out of range [ 608.890305][T15691] netlink: zone id is out of range [ 608.895493][T15691] netlink: zone id is out of range [ 610.746178][T15683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2733'. [ 611.026482][T15698] netlink: 'syz.2.2744': attribute type 29 has an invalid length. [ 611.083656][T15698] netlink: 'syz.2.2744': attribute type 29 has an invalid length. [ 612.384437][T15721] syzkaller0: entered promiscuous mode [ 612.402358][T15721] syzkaller0: entered allmulticast mode [ 612.422205][T15722] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.2743'. [ 614.157548][T15737] netlink: 'syz.3.2748': attribute type 10 has an invalid length. [ 614.165573][T15737] netlink: 'syz.3.2748': attribute type 4 has an invalid length. [ 614.174026][T15737] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2748'. [ 614.382822][T15742] sit0: left promiscuous mode [ 614.530795][T15744] sit0: entered promiscuous mode [ 614.684549][T15746] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2753'. [ 615.004080][T15756] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2759'. [ 615.060820][T15756] net_ratelimit: 8 callbacks suppressed [ 615.060835][T15756] netlink: zone id is out of range [ 615.079837][T15756] netlink: zone id is out of range [ 615.120136][T15756] netlink: zone id is out of range [ 615.136826][T15756] netlink: zone id is out of range [ 615.161559][T15756] netlink: zone id is out of range [ 615.166921][T15756] netlink: zone id is out of range [ 615.192858][T15756] netlink: zone id is out of range [ 615.198343][T15761] netlink: 'syz.2.2754': attribute type 29 has an invalid length. [ 615.207267][T15756] netlink: zone id is out of range [ 615.212910][T15756] netlink: zone id is out of range [ 615.218245][T15756] netlink: zone id is out of range [ 615.296643][T15764] netlink: 'syz.2.2754': attribute type 3 has an invalid length. [ 615.315089][T15764] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 615.328769][T15759] mac80211_hwsim hwsim48 .3c: renamed from wlan1 (while UP) [ 615.354247][T15761] netlink: 'syz.2.2754': attribute type 29 has an invalid length. [ 615.588700][T15775] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2760'. [ 615.907419][T15796] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2766'. [ 616.206320][T15815] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.2772'. [ 616.221571][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2771'. [ 616.233918][T15814] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2771'. [ 616.244231][T15815] netlink: 'syz.1.2772': attribute type 21 has an invalid length. [ 616.280398][T15815] netlink: 'syz.1.2772': attribute type 25 has an invalid length. [ 616.309435][T15815] netlink: 'syz.1.2772': attribute type 27 has an invalid length. [ 616.333879][T15815] netlink: 'syz.1.2772': attribute type 28 has an invalid length. [ 616.380227][T15815] netlink: 'syz.1.2772': attribute type 29 has an invalid length. [ 616.411567][T15815] netlink: 'syz.1.2772': attribute type 30 has an invalid length. [ 616.493494][T15823] tap0: tun_chr_ioctl cmd 1074025677 [ 616.520615][T15823] tap0: linktype set to 780 [ 616.992445][T15838] netlink: 'syz.2.2780': attribute type 10 has an invalid length. [ 616.994720][T15836] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2779'. [ 617.016420][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.045698][T15838] bridge_slave_1: left allmulticast mode [ 617.051616][T15838] bridge_slave_1: left promiscuous mode [ 617.057621][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.441578][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.538215][T15847] bridge_slave_0 (unregistering): left allmulticast mode [ 617.591342][T15847] bridge_slave_0 (unregistering): left promiscuous mode [ 617.599108][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.396820][ T142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 618.527403][T15909] __nla_validate_parse: 1 callbacks suppressed [ 618.527420][T15909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2799'. [ 618.581835][T15909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2799'. [ 618.630672][T15917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2799'. [ 618.676757][T15921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2799'. [ 618.708993][T15920] netlink: 'syz.2.2804': attribute type 2 has an invalid length. [ 622.101985][T15934] netlink: 'syz.3.2807': attribute type 27 has an invalid length. [ 622.109978][T15934] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2807'. [ 622.430118][T15941] netlink: 'syz.2.2810': attribute type 21 has an invalid length. [ 622.455014][T15941] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 622.471282][T15941] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.2810'. [ 623.198950][T15970] netlink: 'syz.3.2818': attribute type 10 has an invalid length. [ 623.243933][T15970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2818'. [ 623.288311][T15970] bond0: entered promiscuous mode [ 623.325804][T15970] bond_slave_0: entered promiscuous mode [ 623.352063][T15970] bond_slave_1: entered promiscuous mode [ 623.382654][T15970] bridge0: port 3(bond0) entered blocking state [ 623.431812][T15970] bridge0: port 3(bond0) entered disabled state [ 623.440636][T15970] bond0: entered allmulticast mode [ 623.446303][T15970] bond_slave_0: entered allmulticast mode [ 623.458928][T15970] bond_slave_1: entered allmulticast mode [ 623.541512][T15970] bridge0: port 3(bond0) entered blocking state [ 623.548815][T15970] bridge0: port 3(bond0) entered forwarding state [ 623.993215][T15998] netlink: 'syz.2.2827': attribute type 21 has an invalid length. [ 624.002465][T15998] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2827'. [ 624.020646][T15992] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2825'. [ 624.071455][T15992] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2825'. [ 624.083474][T15992] netlink: 'syz.3.2825': attribute type 6 has an invalid length. [ 624.825460][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.833730][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.959387][T16044] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2841'. [ 626.017808][T16079] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2850'. [ 626.040607][T16079] net_ratelimit: 260 callbacks suppressed [ 626.040624][T16079] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 626.059791][T16078] sctp: [Deprecated]: syz.0.2851 (pid 16078) Use of int in maxseg socket option. [ 626.059791][T16078] Use struct sctp_assoc_value instead [ 626.071679][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 626.090634][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 626.099547][T16081] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2852'. [ 626.131108][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 626.150387][T16081] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2852'. [ 626.234586][T16084] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 626.330628][T16095] netlink: 'syz.0.2857': attribute type 29 has an invalid length. [ 628.369509][T16095] netlink: 'syz.0.2857': attribute type 29 has an invalid length. [ 630.047953][T16133] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2864'. [ 631.232762][T16133] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 631.320071][T16141] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2865'. [ 631.344733][T16141] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2865'. [ 631.746243][T16164] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2871'. [ 631.773065][T16162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.920741][T16173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2877'. [ 631.930061][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2877'. [ 632.961753][T16179] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 632.980740][T16179] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 633.367228][T16203] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2881'. [ 633.410654][T16203] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2881'. [ 633.419683][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.432579][T16197] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2881'. [ 633.453023][T16203] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2881'. [ 634.055514][T16216] Dead loop on virtual device ip6_vti0, fix it urgently! [ 634.101754][T16216] Dead loop on virtual device ip6_vti0, fix it urgently! [ 634.154887][T16216] Dead loop on virtual device ip6_vti0, fix it urgently! [ 634.197002][T16216] Dead loop on virtual device ip6_vti0, fix it urgently! [ 634.224761][T16220] -1: renamed from syzkaller0 [ 634.239782][T16216] Dead loop on virtual device ip6_vti0, fix it urgently! [ 634.266609][T16216] Dead loop on virtual device ip6_vti0, fix it urgently! [ 635.408871][T16239] cgroup: fork rejected by pids controller in /syz3 [ 636.438337][T16359] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 636.530329][T16359] __nla_validate_parse: 9 callbacks suppressed [ 636.530347][T16359] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2898'. [ 637.797371][T16385] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 637.822403][T16385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2906'. [ 637.881001][T16386] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 637.906858][T16386] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2906'. [ 638.405899][T16397] netlink: 'syz.1.2909': attribute type 2 has an invalid length. [ 638.430734][T16400] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 638.443144][T16397] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.2909'. [ 638.453126][T16400] syzkaller1: linktype set to 769 [ 638.481853][T16400] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 638.709141][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 638.719528][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 638.740529][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 638.761941][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 638.778029][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 638.790479][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 639.388167][T16403] chnl_net:caif_netlink_parms(): no params data found [ 639.553906][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.561366][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.568666][T16403] bridge_slave_0: entered allmulticast mode [ 639.577528][T16403] bridge_slave_0: entered promiscuous mode [ 639.586650][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.594701][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.602586][T16403] bridge_slave_1: entered allmulticast mode [ 639.610882][T16403] bridge_slave_1: entered promiscuous mode [ 639.643570][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.656660][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.753684][T16403] team0: Port device team_slave_0 added [ 639.809801][T16403] team0: Port device team_slave_1 added [ 639.959060][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.982566][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.090427][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.121114][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.128176][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.260376][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.706448][T16403] hsr_slave_0: entered promiscuous mode [ 640.729493][T16403] hsr_slave_1: entered promiscuous mode [ 640.770500][T16403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.778154][T16403] Cannot create hsr debugfs directory [ 640.830938][ T51] Bluetooth: hci1: command tx timeout [ 642.900931][ T51] Bluetooth: hci1: command tx timeout [ 643.448638][T16403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.980638][ T51] Bluetooth: hci1: command tx timeout [ 646.656068][T16403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.700913][T16447] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 646.707096][T16447] syzkaller1: linktype set to 769 [ 646.712927][T16448] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 647.076032][ T51] Bluetooth: hci1: command tx timeout [ 647.524266][T16459] delete_channel: no stack [ 650.045243][T16403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.574599][ T7684] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 652.617870][T16403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.259138][T16471] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2927'. [ 653.363693][T16403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 653.388778][T16403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 653.426309][T16403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 653.467656][T16403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 653.900855][T16403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.973096][T16403] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.098669][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.105960][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.162728][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.169935][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.315628][T16403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 654.335601][T16403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.608757][T16495] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 654.615895][T16495] syzkaller1: linktype set to 769 [ 654.643045][T16403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.656501][T16495] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 654.738568][T16403] veth0_vlan: entered promiscuous mode [ 654.759305][T16403] veth1_vlan: entered promiscuous mode [ 654.839948][T16403] veth0_macvtap: entered promiscuous mode [ 654.876841][T16403] veth1_macvtap: entered promiscuous mode [ 655.013250][T16512] netlink: 'syz.1.2936': attribute type 2 has an invalid length. [ 655.033243][T16512] netlink: 'syz.1.2936': attribute type 1 has an invalid length. [ 655.047942][T16512] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.2936'. [ 655.316992][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 655.388236][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.426878][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.437735][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.455509][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.469147][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.485847][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.496750][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.513545][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.525447][T16403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.569506][T16403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.585576][T16403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.598956][T16403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.624357][T16403] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.639444][T16403] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.649163][T16403] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.664719][T16403] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.831732][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.839611][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.899155][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.909534][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.330674][T16534] netlink: 'syz.2.2945': attribute type 9 has an invalid length. [ 656.338526][T16534] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2945'. [ 656.692237][T16541] netlink: 'syz.3.2907': attribute type 21 has an invalid length. [ 657.308790][T16564] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2950'. [ 657.620453][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 659.819216][T16601] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2964'. [ 660.235670][T16615] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2972'. [ 660.268665][T16615] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 664.257077][T16652] netlink: 'syz.3.2983': attribute type 21 has an invalid length. [ 664.289942][T13915] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 664.521270][T16669] netlink: zone id is out of range [ 664.537014][T16669] netlink: set zone limit has 8 unknown bytes [ 664.596494][T16671] netlink: zone id is out of range [ 664.606610][T16671] netlink: set zone limit has 8 unknown bytes [ 665.163575][T16678] bridge0: port 3(ip6gretap0) entered blocking state [ 665.186738][T16678] bridge0: port 3(ip6gretap0) entered disabled state [ 665.195283][T16678] ip6gretap0: entered allmulticast mode [ 665.211472][T16678] ip6gretap0: entered promiscuous mode [ 665.217671][T16678] bridge0: port 3(ip6gretap0) entered blocking state [ 665.224533][T16678] bridge0: port 3(ip6gretap0) entered forwarding state [ 665.254708][T16678] ip6gretap0: left allmulticast mode [ 665.260121][T16678] ip6gretap0: left promiscuous mode [ 665.265870][T16678] bridge0: port 3(ip6gretap0) entered disabled state [ 665.551894][T16700] syzkaller0: entered promiscuous mode [ 665.562843][T16700] syzkaller0: entered allmulticast mode [ 668.092606][T16697] netlink: 'syz.3.2995': attribute type 21 has an invalid length. [ 668.103989][T16697] netlink: 'syz.3.2995': attribute type 6 has an invalid length. [ 668.111904][T16697] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2995'. [ 668.386712][T16738] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.404263][T16738] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.425494][T16738] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.452947][T16738] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.467552][T16738] Dead loop on virtual device ip6_vti0, fix it urgently! [ 668.491432][T16738] Dead loop on virtual device ip6_vti0, fix it urgently! [ 669.137437][T16767] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.3016'. [ 670.628394][ C0] [ 670.628403][ C0] ================================ [ 670.628409][ C0] WARNING: inconsistent lock state [ 670.628429][ C0] syzkaller #0 Not tainted [ 670.628440][ C0] -------------------------------- [ 670.628445][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 670.628453][ C0] syz.3.3025/16792 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 670.628474][ C0] ffff888059423218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 670.628527][ C0] {INITIAL USE} state was registered at: [ 670.628533][ C0] lock_acquire+0x19e/0x420 [ 670.628553][ C0] _raw_spin_lock+0x2e/0x40 [ 670.628577][ C0] htab_lock_bucket+0x17d/0x300 [ 670.628593][ C0] htab_map_update_elem+0x237/0x1270 [ 670.628608][ C0] bpf_map_update_value+0x64b/0x710 [ 670.628623][ C0] map_update_elem+0x586/0x710 [ 670.628638][ C0] __sys_bpf+0x6b5/0x890 [ 670.628653][ C0] __x64_sys_bpf+0x7c/0x90 [ 670.628667][ C0] do_syscall_64+0x55/0xb0 [ 670.628683][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.628706][ C0] irq event stamp: 1912 [ 670.628711][ C0] hardirqs last enabled at (1911): [] syscall_enter_from_user_mode+0x25/0x80 [ 670.628745][ C0] hardirqs last disabled at (1912): [] exc_debug+0x73/0x140 [ 670.628766][ C0] softirqs last enabled at (1860): [] __irq_exit_rcu+0xd3/0x190 [ 670.628787][ C0] softirqs last disabled at (1853): [] __irq_exit_rcu+0xd3/0x190 [ 670.628807][ C0] [ 670.628807][ C0] other info that might help us debug this: [ 670.628811][ C0] Possible unsafe locking scenario: [ 670.628811][ C0] [ 670.628815][ C0] CPU0 [ 670.628818][ C0] ---- [ 670.628820][ C0] lock(&htab->lockdep_key); [ 670.628831][ C0] [ 670.628834][ C0] lock(&htab->lockdep_key); [ 670.628844][ C0] [ 670.628844][ C0] *** DEADLOCK *** [ 670.628844][ C0] [ 670.628847][ C0] no locks held by syz.3.3025/16792. [ 670.628854][ C0] [ 670.628854][ C0] stack backtrace: [ 670.628859][ C0] CPU: 0 PID: 16792 Comm: syz.3.3025 Not tainted syzkaller #0 [ 670.628875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 670.628885][ C0] Call Trace: [ 670.628892][ C0] <#DB> [ 670.628969][ C0] dump_stack_lvl+0x18c/0x250 [ 670.628993][ C0] ? show_regs_print_info+0x20/0x20 [ 670.629021][ C0] ? print_usage_bug+0x43d/0x6a0 [ 670.629041][ C0] ? verify_lock_unused+0x15/0x140 [ 670.629065][ C0] lock_acquire+0x2c2/0x420 [ 670.629083][ C0] ? migrate_disable+0xd3/0x180 [ 670.629097][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 670.629116][ C0] ? htab_lock_bucket+0x17d/0x300 [ 670.629139][ C0] ? read_lock_is_recursive+0x20/0x20 [ 670.629157][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 670.629184][ C0] ? perf_trace_lock_acquire+0x342/0x400 [ 670.629208][ C0] _raw_spin_lock+0x2e/0x40 [ 670.629229][ C0] ? htab_lock_bucket+0x17d/0x300 [ 670.629246][ C0] htab_lock_bucket+0x17d/0x300 [ 670.629270][ C0] ? htab_lru_map_delete_node+0x770/0x770 [ 670.629290][ C0] ? look_up_lock_class+0x75/0x140 [ 670.629315][ C0] ? verify_lock_unused+0x15/0x140 [ 670.629336][ C0] ? jhash+0x3c3/0x740 [ 670.629357][ C0] htab_map_delete_elem+0x19f/0x640 [ 670.629383][ C0] ? htab_map_update_elem+0x1270/0x1270 [ 670.629399][ C0] ? rcu_is_watching+0x15/0xb0 [ 670.629422][ C0] ? perf_callchain+0x220/0x220 [ 670.629440][ C0] ? perf_swevent_get_recursion_context+0xde/0x150 [ 670.629468][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 670.629489][ C0] bpf_overflow_handler+0x43f/0x510 [ 670.629518][ C0] ? bpf_overflow_handler+0xde/0x510 [ 670.629541][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 670.629569][ C0] ? trace_event_raw_event_lock+0x240/0x240 [ 670.629588][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 670.629612][ C0] __perf_event_overflow+0x461/0x660 [ 670.629640][ C0] perf_swevent_overflow+0x274/0x340 [ 670.629667][ C0] ? perf_event_switch_output+0x790/0x790 [ 670.629693][ C0] ? __perf_event_overflow+0x514/0x660 [ 670.629720][ C0] perf_swevent_event+0x45c/0x570 [ 670.629750][ C0] ? perf_tp_event+0x1550/0x1550 [ 670.629785][ C0] perf_bp_event+0x319/0x430 [ 670.629812][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 670.629867][ C0] ? lock_acquire+0x2c2/0x420 [ 670.629897][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 670.629925][ C0] notifier_call_chain+0x18f/0x380 [ 670.629950][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 670.629974][ C0] atomic_notifier_call_chain+0xda/0x180 [ 670.629999][ C0] notify_die+0x145/0x1a0 [ 670.630023][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 670.630054][ C0] ? rcu_is_watching+0x15/0xb0 [ 670.630080][ C0] notify_debug+0x2e/0x50 [ 670.630116][ C0] exc_debug+0xde/0x140 [ 670.630139][ C0] asm_exc_debug+0x1e/0x40 [ 670.630157][ C0] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 670.630179][ C0] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 670.630193][ C0] RSP: 0018:ffffc900045cfae0 EFLAGS: 00040212 [ 670.630207][ C0] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000010 [ 670.630217][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc900045cfc20 [ 670.630229][ C0] RBP: 0000200000000300 R08: ffffc900045cfc2f R09: 1ffff920008b9f85 [ 670.630242][ C0] R10: dffffc0000000000 R11: fffff520008b9f86 R12: 0000200000000310 [ 670.630254][ C0] R13: ffffc900045cfbc0 R14: ffffc900045cfc20 R15: 0000200000000300 [ 670.630280][ C0] [ 670.630284][ C0] [ 670.630289][ C0] _copy_from_user+0x8b/0xe0 [ 670.630312][ C0] __copy_msghdr+0x388/0x560 [ 670.630339][ C0] ___sys_sendmsg+0x214/0x360 [ 670.630364][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 670.630405][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 670.630450][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 670.630472][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 670.630502][ C0] ? lock_chain_count+0x20/0x20 [ 670.630526][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 670.630551][ C0] do_syscall_64+0x55/0xb0 [ 670.630568][ C0] ? clear_bhb_loop+0x40/0x90 [ 670.630584][ C0] ? clear_bhb_loop+0x40/0x90 [ 670.630605][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.630622][ C0] RIP: 0033:0x7fae7939e0d9 [ 670.630636][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.630654][ C0] RSP: 002b:00007fae7a239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.630670][ C0] RAX: ffffffffffffffda RBX: 00007fae79625fa0 RCX: 00007fae7939e0d9 [ 670.630682][ C0] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000010 [ 670.630693][ C0] RBP: 00007fae79435024 R08: 0000000000000000 R09: 0000000000000000 [ 670.630703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.630713][ C0] R13: 00007fae79626038 R14: 00007fae79625fa0 R15: 00007ffc672233e8 [ 670.630749][ C0]