last executing test programs: 17.541418661s ago: executing program 3 (id=4019): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a00d0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="35ad42fb41a6d8d3267f00000010000000020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872ee8ffabd2d730000df32edff00005e000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d800000018007b7be00212ba0d0505040a213f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x213666fb35dc79d6}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000580500001810", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r11, 0x4, r2}, 0x10) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="6025e887", 0x4}], 0x1}, 0x24000008) ioctl$TUNSETLINK(r5, 0x400454cd, 0x313) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 17.359072393s ago: executing program 3 (id=4036): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x22, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r1, 0x26, 0xc, 0x0, @void, @value, @void, @void, r2}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r0}) 16.943374419s ago: executing program 3 (id=4033): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x60}, {0x6}]}) 16.84946037s ago: executing program 1 (id=4034): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) 16.761938501s ago: executing program 1 (id=4037): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e24abe38a00"/23, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 16.699149982s ago: executing program 3 (id=4040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000)=r2, 0xfffffed3) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e105000000655800001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='\x80)#\x00') ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r5, @ANYRES32=r6], 0x18, 0x24000014}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRES32=r7, @ANYBLOB="00000000000000000300"/28], 0x50) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000100000001", @ANYRES8=r9], 0x18}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 16.638395253s ago: executing program 1 (id=4041): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x22, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r1, 0x26, 0xc, 0x0, @void, @value, @void, @void, r2}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0xe, &(0x7f0000000340), 0xfe62) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f00000001c0)={r0}) 16.410304526s ago: executing program 3 (id=4044): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x22, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r1, 0x26, 0xc, 0x0, @void, @value, @void, @void, r2}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r0}) 16.312273897s ago: executing program 3 (id=4046): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e24abe38a00"/23, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 16.207469239s ago: executing program 32 (id=4046): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e24abe38a00"/23, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 16.198876899s ago: executing program 1 (id=4049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x3, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000)=r1, 0xfffffed3) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e105000000655800001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='\x80)#\x00') ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRES32=r5], 0x18, 0x24000014}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="00000000000000000300"/28], 0x50) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 15.910762142s ago: executing program 1 (id=4053): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a00d000000880804fbb9bd02000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="35ad42fb41a6d8d3267f00000010000000020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872ee8ffabd2d730000df32edff00005e000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d800000018007b7be00212ba0d0505040a213f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x213666fb35dc79d6}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000580500001810", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r10, 0x4, r2}, 0x10) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="6025e887", 0x4}], 0x1}, 0x24000008) ioctl$TUNSETLINK(r5, 0x400454cd, 0x313) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 15.779952404s ago: executing program 1 (id=4056): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x22, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r1, 0x26, 0xc, 0x0, @void, @value, @void, @void, r2}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r0}) 15.548111937s ago: executing program 33 (id=4056): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x22, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r1, 0x26, 0xc, 0x0, @void, @value, @void, @void, r2}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r0}) 2.315882509s ago: executing program 5 (id=4156): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0da", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 2.092081152s ago: executing program 5 (id=4161): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000500)='signal_generate\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x22, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, r1, 0x26, 0xc, 0x0, @void, @value, @void, @void, r2}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0xe, &(0x7f0000000340), 0xfe62) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0xf) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x82, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x3) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f00000001c0)={r0}) 1.778094326s ago: executing program 5 (id=4166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff001, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 1.699984257s ago: executing program 2 (id=4167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000)=r1, 0xfffffed3) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e105000000655800001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='\x80)#\x00') ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRES32=r5], 0x18, 0x24000014}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="00000000000000000300"/28], 0x50) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000100000001", @ANYRES8=r8], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.328092532s ago: executing program 4 (id=4171): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 1.301105022s ago: executing program 2 (id=4172): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e24abe3", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 1.147027364s ago: executing program 0 (id=4173): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a00d000000880804fbb9bd02000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="35ad42fb41a6d8d3267f00000010000000020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872ee8ffabd2d730000df32edff00005e000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d800000018007b7be00212ba0d0505040a213f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x213666fb35dc79d6}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000580500001810", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r11, 0x4, r2}, 0x10) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="6025e887", 0x4}], 0x1}, 0x24000008) ioctl$TUNSETLINK(r5, 0x400454cd, 0x313) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.110984435s ago: executing program 6 (id=4174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.088272455s ago: executing program 4 (id=4175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000)=r1, 0xfffffed3) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e105000000655800001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='\x80)#\x00') ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='GPL\x00') r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRES32=r5], 0x18, 0x24000014}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="00000000000000000300"/28], 0x50) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000100000001", @ANYRES8=r8], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 996.063796ms ago: executing program 2 (id=4176): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 949.165297ms ago: executing program 6 (id=4177): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 948.352497ms ago: executing program 0 (id=4178): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 926.775618ms ago: executing program 5 (id=4179): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000080)=""/227, 0x0, 0xe3, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 925.972998ms ago: executing program 4 (id=4180): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a00d000000880804fbb9bd02000a0ada1b40d80800c500c50083", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="35ad42fb41a6d8d3267f00000010000000020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872ee8ffabd2d730000df32edff00005e000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d800000018007b7be00212ba0d0505040a213f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x213666fb35dc79d6}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000580500001810", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r10, 0x4, r2}, 0x10) r11 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="6025e887", 0x4}], 0x1}, 0x24000008) ioctl$TUNSETLINK(r5, 0x400454cd, 0x313) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 823.434379ms ago: executing program 6 (id=4181): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) 823.002859ms ago: executing program 2 (id=4182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000)=r1, 0xfffffed3) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e105000000655800001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000002c0)='\x80)#\x00') ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='GPL\x00') r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r4, @ANYRES32=r5], 0x18, 0x24000014}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="00000000000000000300"/28], 0x50) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000100000001", @ANYRES8=r8], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 755.45068ms ago: executing program 5 (id=4183): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x26, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xbd, 0x0, &(0x7f0000000240)=""/189, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) 754.7576ms ago: executing program 0 (id=4184): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180311d916e0dab44e24", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 669.915241ms ago: executing program 5 (id=4185): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00'}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) write$cgroup_int(r8, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000100), 0x20000000}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) 624.387441ms ago: executing program 6 (id=4186): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x2, 0x0, 0x0, 0x7fef, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc6009075ddf", 0xb}], 0x1}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3003f9ca5589aa900007f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f00000001c0)}, 0x51) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac00080325000000a4000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) 534.567093ms ago: executing program 4 (id=4187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xffffffffffffffa0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 514.651423ms ago: executing program 0 (id=4188): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088f747e0ffff200000002021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 479.630463ms ago: executing program 6 (id=4189): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a00d000000880804fbb9bd02000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="35ad42fb41a6d8d3267f00000010000000020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872ee8ffabd2d730000df32edff00005e000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d800000018007b7be00212ba0d0505040a213f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0, 0x213666fb35dc79d6}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000800000000000000580500001810", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r11, 0x4, r2}, 0x10) r12 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="6025e887", 0x4}], 0x1}, 0x24000008) ioctl$TUNSETLINK(r5, 0x400454cd, 0x313) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 243.298376ms ago: executing program 2 (id=4190): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 242.809756ms ago: executing program 0 (id=4191): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000e00)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 115.190448ms ago: executing program 4 (id=4192): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 114.477088ms ago: executing program 6 (id=4193): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ba00000000000000000000000000000000000000000029aed013b41295107b958f360ceba8e832977c4600d6f9fb78e89927ea7be8763fcd107d798bb64fcb6cd0dee4e61c9c5e747075937a8a74a4c1b3df324191c9c970a5d1a329fe50deaf33d4ea28e038f44ec652bcd40e7ec3ad13360fd7acff96c1d21de3896346ce231d51256d5f5bafb3e53479e1cd6ccefcb5a57549f0b649d73185084f09b937d56f94beed621b99835260e36b921436f338977877beb5f2f04e7a0c095f996f5618fafdc3e1d16cd9b17f21c61260dbdd9b5a3eec88e7d4fa6b9c7cd70e2c8b15ff5dbfa023110ccb"], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='@\x00') bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 97.268739ms ago: executing program 2 (id=4194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 79.053899ms ago: executing program 0 (id=4195): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1, 0x0, 0x0, 0x803e0000}, 0x20000040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x84) close(r0) 0s ago: executing program 4 (id=4196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): scuous mode [ 169.510204][ T7227] device syzkaller0 entered promiscuous mode [ 169.535669][ T7236] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 169.546193][ T7236] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1018'. [ 169.772927][ T7243] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.1019'. [ 169.877768][ T7243] netlink: 'syz.0.1019': attribute type 10 has an invalid length. [ 169.986661][ T7243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1019'. [ 170.092127][ T7243] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.157910][ T7243] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.176626][ T7243] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.200831][ T7243] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.223451][ T7250] netlink: 'syz.3.1024': attribute type 11 has an invalid length. [ 170.240529][ T7250] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1024'. [ 170.292373][ T7243] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.208068][ T7275] netlink: 'syz.3.1031': attribute type 1 has an invalid length. [ 171.227939][ T7275] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1031'. [ 171.485278][ T7286] device syzkaller0 entered promiscuous mode [ 171.520487][ T7296] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1037'. [ 171.589023][ T7299] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 171.597245][ T7299] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1039'. [ 172.254492][ T7317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 172.402792][ T7327] netlink: 'syz.0.1044': attribute type 11 has an invalid length. [ 172.426596][ T7327] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1044'. [ 172.501112][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1047'. [ 173.257917][ T7334] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1051'. [ 174.830819][ T7373] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1065'. [ 175.072006][ T7378] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.166098][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1067'. [ 175.349012][ T7378] netlink: 'syz.2.1066': attribute type 11 has an invalid length. [ 175.357152][ T7378] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1066'. [ 176.854943][ T7396] device syzkaller0 entered promiscuous mode [ 176.911412][ T7400] netlink: 'syz.4.1072': attribute type 13 has an invalid length. [ 176.928867][ T7400] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1072'. [ 177.063498][ T7400] erspan0: refused to change device tx_queue_len [ 177.074366][ T7400] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 177.421360][ T7423] device sit0 left promiscuous mode [ 177.915251][ T7420] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1081'. [ 178.502216][ T7436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1085'. [ 179.339574][ T7464] netlink: 'syz.1.1093': attribute type 13 has an invalid length. [ 179.352995][ T7464] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1093'. [ 179.431125][ T7464] erspan0: refused to change device tx_queue_len [ 179.450034][ T7464] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 179.866302][ T7463] device syzkaller0 entered promiscuous mode [ 179.974960][ T7474] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1095'. [ 180.454678][ T7485] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 180.475967][ T7485] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1102'. [ 180.652781][ T7493] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1113'. [ 180.908799][ T7505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1108'. [ 181.029230][ T7503] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1120'. [ 181.055023][ T7507] netlink: 'syz.3.1109': attribute type 13 has an invalid length. [ 181.075084][ T7507] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1109'. [ 181.370166][ T7507] erspan0: refused to change device tx_queue_len [ 181.399796][ T7507] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 181.629767][ T7518] device syzkaller0 entered promiscuous mode [ 182.098685][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1117'. [ 182.442589][ T7541] device syzkaller0 entered promiscuous mode [ 182.807431][ T7558] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1124'. [ 183.406827][ T7575] netlink: 'syz.0.1130': attribute type 13 has an invalid length. [ 184.059829][ T7575] erspan0: refused to change device tx_queue_len [ 184.074315][ T7575] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 184.378678][ T7592] __nla_validate_parse: 2 callbacks suppressed [ 184.378715][ T7592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1136'. [ 184.873738][ T7593] device syzkaller0 entered promiscuous mode [ 185.921250][ T7633] device syzkaller0 entered promiscuous mode [ 185.984677][ T7631] netlink: 'syz.4.1148': attribute type 10 has an invalid length. [ 186.023532][ T7631] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1148'. [ 186.146559][ T7642] delete_channel: no stack [ 186.357891][ T7649] device sit0 left promiscuous mode [ 188.389728][ T7700] device syzkaller0 entered promiscuous mode [ 188.622756][ T7717] netlink: 'syz.1.1176': attribute type 10 has an invalid length. [ 188.677903][ T7717] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1176'. [ 189.782845][ T7755] netlink: 'syz.4.1191': attribute type 21 has an invalid length. [ 189.828901][ T7755] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1191'. [ 190.061619][ T7758] netlink: 'syz.0.1192': attribute type 39 has an invalid length. [ 190.339815][ T7767] device bridge_slave_0 left promiscuous mode [ 191.059283][ T7765] device syzkaller0 entered promiscuous mode [ 191.427501][ T7800] device syzkaller0 entered promiscuous mode [ 191.433847][ T1335] Bluetooth: hci1: command 0x0406 tx timeout [ 191.445757][ T7798] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 191.454530][ T1335] Bluetooth: hci0: command 0x0406 tx timeout [ 191.467319][ T1335] Bluetooth: hci3: command 0x0406 tx timeout [ 191.473949][ T1335] Bluetooth: hci2: command 0x0406 tx timeout [ 191.495422][ T7798] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1200'. [ 191.508739][ T1335] Bluetooth: hci4: command 0x0406 tx timeout [ 192.876500][ T7831] netlink: 'syz.1.1215': attribute type 39 has an invalid length. [ 194.513022][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.519696][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.814293][ T7852] device syzkaller0 entered promiscuous mode [ 194.834808][ T7869] netlink: 'syz.2.1224': attribute type 21 has an invalid length. [ 194.845275][ T7869] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1224'. [ 195.310889][ T7879] device bridge_slave_0 left promiscuous mode [ 195.420092][ T7881] device bridge_slave_0 left promiscuous mode [ 195.445774][ T7882] O3ãc¤±: renamed from bridge_slave_0 [ 195.486840][ T7887] O3ãc¤±: renamed from bridge_slave_0 [ 195.888012][ T7895] netlink: 'syz.2.1233': attribute type 39 has an invalid length. [ 196.339259][ T7910] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 196.360162][ T7910] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1236'. [ 196.848737][ T7915] device syzkaller0 entered promiscuous mode [ 197.496799][ T7942] netlink: 'syz.4.1250': attribute type 10 has an invalid length. [ 197.519600][ T7942] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1250'. [ 197.739767][ T7948] netlink: 'syz.0.1251': attribute type 21 has an invalid length. [ 197.799648][ T7948] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1251'. [ 198.019783][ T7954] netlink: 'syz.3.1254': attribute type 39 has an invalid length. [ 199.318761][ T7988] O3ãc¤±: renamed from bridge_slave_0 [ 199.460330][ T7995] device wlan0 left promiscuous mode [ 199.540173][ T8000] device wlan0 entered promiscuous mode [ 199.850535][ T7995] netlink: 'syz.3.1266': attribute type 9 has an invalid length. [ 199.865000][ T7995] netlink: 144648 bytes leftover after parsing attributes in process `syz.3.1266'. [ 200.699093][ T8018] device syzkaller0 entered promiscuous mode [ 200.870646][ T8028] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 201.879875][ T8072] device wlan0 left promiscuous mode [ 202.068898][ T8072] netlink: 'syz.0.1289': attribute type 9 has an invalid length. [ 202.119166][ T8072] netlink: 144648 bytes leftover after parsing attributes in process `syz.0.1289'. [ 202.222930][ T8074] device syzkaller0 entered promiscuous mode [ 202.244257][ T8078] device wlan0 entered promiscuous mode [ 203.148678][ T8098] netlink: 'syz.4.1300': attribute type 39 has an invalid length. [ 204.160870][ T8129] device bridge_slave_0 left promiscuous mode [ 204.234555][ T8134] device syzkaller0 entered promiscuous mode [ 204.254038][ T8129] O3ãc¤±: renamed from bridge_slave_0 [ 204.428922][ T8141] netlink: 'syz.0.1313': attribute type 10 has an invalid length. [ 204.573152][ T8139] device bridge_slave_0 left promiscuous mode [ 205.169356][ T8150] device syzkaller0 entered promiscuous mode [ 205.694639][ T8183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1326'. [ 206.228883][ T8196] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1330'. [ 206.446866][ T8206] O3ãc¤±: renamed from bridge_slave_0 [ 206.907134][ T8214] device syzkaller0 entered promiscuous mode [ 206.923310][ T8225] netlink: 'syz.4.1340': attribute type 39 has an invalid length. [ 206.946499][ T8225] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1340'. [ 207.199114][ T8236] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1342'. [ 207.216767][ T8235] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 207.442625][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1347'. [ 207.932925][ T8260] netlink: 'syz.4.1352': attribute type 22 has an invalid length. [ 207.978804][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 208.694180][ T8266] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1352'. [ 209.099728][ T8295] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1356'. [ 209.373411][ T8299] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1358'. [ 209.443575][ T8306] netlink: 'syz.1.1363': attribute type 39 has an invalid length. [ 209.498675][ T8310] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1363'. [ 209.524276][ T8309] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 209.784103][ T8309] team0: Port device geneve0 removed [ 209.792100][ T8316] netlink: 'syz.0.1364': attribute type 27 has an invalid length. [ 210.900069][ T8334] device syzkaller0 entered promiscuous mode [ 212.576948][ T8348] __nla_validate_parse: 2 callbacks suppressed [ 212.576966][ T8348] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1373'. [ 213.043247][ T8369] netlink: 'syz.2.1377': attribute type 9 has an invalid length. [ 213.087062][ T8369] netlink: 144648 bytes leftover after parsing attributes in process `syz.2.1377'. [ 213.121390][ T8374] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1378'. [ 213.131654][ T8363] device wlan0 left promiscuous mode [ 213.241818][ T8367] device wlan0 entered promiscuous mode [ 213.579898][ T8370] device syzkaller0 entered promiscuous mode [ 214.440017][ T8385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1379'. [ 216.063740][ T8395] netlink: 'syz.0.1385': attribute type 39 has an invalid length. [ 216.192420][ T8399] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1385'. [ 216.620912][ T8403] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 217.004363][ T8403] team0: Port device geneve0 removed [ 217.106706][ T8406] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1386'. [ 217.427299][ T8424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1395'. [ 218.160014][ T8431] device wlan0 left promiscuous mode [ 218.243302][ T8432] device wlan0 entered promiscuous mode [ 218.322281][ T8433] device syzkaller0 entered promiscuous mode [ 218.955865][ T8443] netlink: 'syz.1.1400': attribute type 27 has an invalid length. [ 218.964774][ T8443] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1400'. [ 220.716408][ T8454] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1402'. [ 220.904873][ T8452] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1404'. [ 221.106708][ T8460] netlink: 'syz.3.1406': attribute type 39 has an invalid length. [ 221.216341][ T8460] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1406'. [ 221.302323][ T8462] syz.4.1407[8462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.302854][ T8462] syz.4.1407[8462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.329928][ T8459] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1416'. [ 221.976055][ T8486] netlink: 'syz.3.1413': attribute type 27 has an invalid length. [ 222.024321][ T8486] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1413'. [ 222.253037][ T8488] device syzkaller0 entered promiscuous mode [ 223.216634][ T8507] netlink: 'syz.3.1420': attribute type 10 has an invalid length. [ 225.317948][ T8515] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1422'. [ 225.804899][ T8531] netlink: 'syz.1.1430': attribute type 3 has an invalid length. [ 225.939668][ T8531] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1430'. [ 226.089604][ T8530] delete_channel: no stack [ 226.586016][ T8555] device syzkaller0 entered promiscuous mode [ 229.589677][ T8558] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1439'. [ 229.616665][ T8565] netlink: 'syz.0.1440': attribute type 21 has an invalid length. [ 229.636394][ T8565] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1440'. [ 229.788034][ T8576] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1443'. [ 231.496001][ T8615] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1454'. [ 231.683876][ T8618] device syzkaller0 entered promiscuous mode [ 232.051133][ T8637] netlink: 'syz.3.1460': attribute type 3 has an invalid length. [ 232.090099][ T8637] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1460'. [ 232.481987][ T8639] netlink: 'syz.3.1460': attribute type 2 has an invalid length. [ 232.497812][ T8639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1460'. [ 232.543251][ T8632] delete_channel: no stack [ 233.096960][ T8668] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1470'. [ 233.235927][ T8674] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1474'. [ 233.449835][ T8679] netlink: 'syz.4.1473': attribute type 27 has an invalid length. [ 233.488950][ T8679] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1473'. [ 233.583893][ T8689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1476'. [ 234.161373][ T8697] netlink: 'syz.4.1478': attribute type 3 has an invalid length. [ 234.214089][ T8697] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1478'. [ 234.262526][ T8691] device syzkaller0 entered promiscuous mode [ 234.488408][ T8695] delete_channel: no stack [ 235.220633][ T8725] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1486'. [ 235.492494][ T8740] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1492'. [ 235.501688][ T8738] netlink: 'syz.2.1491': attribute type 27 has an invalid length. [ 235.911811][ T8755] netlink: 'syz.2.1495': attribute type 3 has an invalid length. [ 235.973428][ T8751] device syzkaller0 entered promiscuous mode [ 235.990625][ T8756] netlink: 'syz.2.1495': attribute type 2 has an invalid length. [ 236.516457][ T8750] delete_channel: no stack [ 237.049943][ T8774] __nla_validate_parse: 4 callbacks suppressed [ 237.049998][ T8774] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1503'. [ 237.868924][ T8788] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1518'. [ 237.994438][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1509'. [ 238.235837][ T8809] netlink: 'syz.3.1511': attribute type 27 has an invalid length. [ 238.244082][ T8809] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1511'. [ 238.776342][ T8816] device syzkaller0 entered promiscuous mode [ 239.177869][ T8838] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1523'. [ 239.356203][ T8845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1525'. [ 240.754364][ T8872] device syzkaller0 entered promiscuous mode [ 243.961714][ T8906] netlink: 'syz.1.1555': attribute type 3 has an invalid length. [ 244.015825][ T8906] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1555'. [ 244.805596][ T8936] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1553'. [ 244.982773][ T8941] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 245.292488][ T8941] team0 (unregistering): Port device team_slave_0 removed [ 245.316889][ T8941] team0 (unregistering): Port device team_slave_1 removed [ 245.362498][ T8943] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1554'. [ 245.372935][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 245.477203][ T8947] device syzkaller0 entered promiscuous mode [ 245.781117][ T8964] bond_slave_1: mtu less than device minimum [ 245.848393][ T8966] netlink: 'syz.1.1566': attribute type 10 has an invalid length. [ 246.433517][ T8985] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1571'. [ 246.664985][ T9001] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1576'. [ 247.164165][ T8999] device syzkaller0 entered promiscuous mode [ 247.185676][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1581'. [ 247.203400][ T9013] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 247.523929][ T9025] bond_slave_1: mtu less than device minimum [ 247.628714][ T9027] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1588'. [ 247.856325][ T9043] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1596'. [ 248.417791][ T9062] netlink: 'syz.1.1609': attribute type 27 has an invalid length. [ 248.451358][ T9062] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1609'. [ 248.598822][ T9056] netlink: 'syz.0.1599': attribute type 10 has an invalid length. [ 248.682314][ T9051] device syzkaller0 entered promiscuous mode [ 248.832133][ T9066] netlink: 'syz.2.1600': attribute type 10 has an invalid length. [ 249.402766][ T9079] __nla_validate_parse: 2 callbacks suppressed [ 249.402825][ T9079] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1604'. [ 249.715233][ T9101] netlink: 'syz.4.1613': attribute type 10 has an invalid length. [ 249.861903][ T9104] netlink: 'syz.0.1614': attribute type 27 has an invalid length. [ 249.887723][ T9104] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1614'. [ 249.908934][ T9101] team0 (unregistering): Port device team_slave_0 removed [ 249.939396][ T9101] team0 (unregistering): Port device team_slave_1 removed [ 249.974636][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'. [ 250.161200][ T9110] netlink: 'syz.3.1615': attribute type 10 has an invalid length. [ 251.106542][ T9141] netlink: 'syz.0.1624': attribute type 3 has an invalid length. [ 251.126988][ T9141] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1624'. [ 251.329582][ T9147] device pim6reg1 entered promiscuous mode [ 251.345677][ T9142] netlink: 'syz.3.1625': attribute type 2 has an invalid length. [ 251.372997][ T9142] netlink: 'syz.3.1625': attribute type 2 has an invalid length. [ 251.394349][ T9142] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.1625'. [ 251.626343][ T9162] netlink: 'syz.4.1632': attribute type 27 has an invalid length. [ 251.651654][ T9162] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1632'. [ 251.885143][ T9172] netlink: 'syz.4.1633': attribute type 10 has an invalid length. [ 251.903144][ T9177] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 251.980615][ T9177] team0 (unregistering): Port device team_slave_0 removed [ 252.021001][ T9177] team0 (unregistering): Port device team_slave_1 removed [ 252.142271][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 252.450431][ T9195] netlink: 'syz.1.1641': attribute type 21 has an invalid length. [ 252.475827][ T9195] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1641'. [ 252.561779][ T9199] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1647'. [ 252.666115][ T9203] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1648'. [ 254.851200][ T9274] validate_nla: 3 callbacks suppressed [ 254.851217][ T9274] netlink: 'syz.2.1673': attribute type 10 has an invalid length. [ 255.035917][ T9274] team0 (unregistering): Port device team_slave_0 removed [ 255.083566][ T9274] team0 (unregistering): Port device team_slave_1 removed [ 255.141744][ T9275] __nla_validate_parse: 2 callbacks suppressed [ 255.141799][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 255.284432][ T9283] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1675'. [ 255.656674][ T9294] netlink: 'syz.2.1676': attribute type 27 has an invalid length. [ 255.681229][ T9294] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1676'. [ 255.714878][ T9291] device pim6reg1 entered promiscuous mode [ 255.796439][ T9287] netlink: 'syz.4.1677': attribute type 2 has an invalid length. [ 255.815853][ T9287] netlink: 'syz.4.1677': attribute type 2 has an invalid length. [ 255.827166][ T9287] netlink: 198628 bytes leftover after parsing attributes in process `syz.4.1677'. [ 255.911519][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918239][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.098914][ T9323] device syzkaller0 entered promiscuous mode [ 257.220701][ T9338] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1689'. [ 257.416644][ T9341] netlink: 'syz.1.1692': attribute type 11 has an invalid length. [ 257.893155][ T9352] device pim6reg1 entered promiscuous mode [ 258.015194][ T9349] netlink: 'syz.2.1697': attribute type 2 has an invalid length. [ 258.037409][ T9349] netlink: 'syz.2.1697': attribute type 2 has an invalid length. [ 258.146850][ T9349] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.1697'. [ 258.620582][ T9378] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1705'. [ 258.772013][ T9383] netlink: 'syz.0.1707': attribute type 27 has an invalid length. [ 258.825865][ T9383] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1707'. [ 259.584854][ T9385] device syzkaller0 entered promiscuous mode [ 261.426913][ T9420] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1718'. [ 261.700506][ T9438] netlink: 'syz.4.1726': attribute type 10 has an invalid length. [ 261.805866][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 263.245954][ T9447] device syzkaller0 entered promiscuous mode [ 263.804152][ T9473] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1734'. [ 265.139010][ T9514] device syzkaller0 entered promiscuous mode [ 265.467492][ T9519] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1749'. [ 265.832786][ T9539] netlink: 'syz.4.1755': attribute type 1 has an invalid length. [ 265.893664][ T9539] netlink: 11774 bytes leftover after parsing attributes in process `syz.4.1755'. [ 266.042941][ T9552] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1767'. [ 266.863732][ T9575] netlink: 'syz.4.1763': attribute type 17 has an invalid length. [ 266.910712][ T9575] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1763'. [ 266.959927][ T9573] netlink: 'syz.0.1766': attribute type 2 has an invalid length. [ 267.010472][ T9573] netlink: 'syz.0.1766': attribute type 2 has an invalid length. [ 267.043019][ T9579] device pim6reg1 entered promiscuous mode [ 267.058128][ T9573] netlink: 198628 bytes leftover after parsing attributes in process `syz.0.1766'. [ 267.223203][ T9574] device syzkaller0 entered promiscuous mode [ 267.645289][ T9599] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1772'. [ 267.937268][ T9619] netlink: 'syz.2.1783': attribute type 7 has an invalid length. [ 268.007795][ T9619] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 268.068167][ T9619] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1783'. [ 268.551378][ T9631] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1790'. [ 268.589554][ T9635] device pim6reg1 entered promiscuous mode [ 268.847172][ T9635] netlink: 'syz.1.1788': attribute type 2 has an invalid length. [ 268.869321][ T9635] netlink: 'syz.1.1788': attribute type 2 has an invalid length. [ 268.918014][ T9635] netlink: 198628 bytes leftover after parsing attributes in process `syz.1.1788'. [ 270.823224][ T9704] device pim6reg1 entered promiscuous mode [ 271.029896][ T9699] netlink: 'syz.3.1812': attribute type 2 has an invalid length. [ 271.053533][ T9699] netlink: 'syz.3.1812': attribute type 2 has an invalid length. [ 271.083095][ T9699] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.1812'. [ 271.523630][ T9733] netlink: 'syz.0.1821': attribute type 17 has an invalid length. [ 271.605196][ T9733] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1821'. [ 271.824727][ T9735] netlink: 11774 bytes leftover after parsing attributes in process `syz.1.1823'. [ 271.921776][ T9738] validate_nla: 1 callbacks suppressed [ 271.921795][ T9738] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 272.098837][ T9738] netlink: 'syz.4.1824': attribute type 4 has an invalid length. [ 272.224057][ T9738] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1824'. [ 273.258574][ T9775] netlink: 'syz.0.1835': attribute type 2 has an invalid length. [ 273.319079][ T9775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1835'. [ 273.451253][ T9772] delete_channel: no stack [ 274.043020][ T9787] netlink: 'syz.1.1837': attribute type 17 has an invalid length. [ 274.081862][ T9787] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1837'. [ 275.882472][ T9842] netlink: 'syz.3.1852': attribute type 17 has an invalid length. [ 275.968345][ T9842] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1852'. [ 276.158134][ T9844] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 276.166658][ T9855] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.1854'. [ 276.651957][ T9871] netlink: 'syz.3.1859': attribute type 2 has an invalid length. [ 276.680565][ T9871] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1859'. [ 277.556490][ T9876] netlink: 'syz.4.1865': attribute type 3 has an invalid length. [ 277.580979][ T9876] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1865'. [ 277.961540][ T9896] netlink: 'syz.4.1871': attribute type 2 has an invalid length. [ 277.985314][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1871'. [ 278.063438][ T9895] delete_channel: no stack [ 279.162597][ T9924] device syzkaller0 entered promiscuous mode [ 279.474550][ T9934] netlink: 'syz.2.1882': attribute type 3 has an invalid length. [ 279.495114][ T9934] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1882'. [ 279.802129][ T9953] netlink: 'syz.2.1888': attribute type 2 has an invalid length. [ 279.811682][ T9953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1888'. [ 279.835281][ T9952] delete_channel: no stack [ 282.247457][T10020] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1912'. [ 282.289326][T10020] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 283.376397][T10047] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 283.411415][T10047] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1920'. [ 283.435688][T10042] device wlan0 left promiscuous mode [ 283.436998][T10047] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 283.657939][T10058] netlink: 'syz.0.1924': attribute type 3 has an invalid length. [ 283.667896][T10060] netlink: 'syz.3.1921': attribute type 17 has an invalid length. [ 283.684327][T10060] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1921'. [ 283.694676][T10058] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1924'. [ 284.109045][T10068] netlink: 'syz.1.1926': attribute type 3 has an invalid length. [ 284.145214][T10068] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1926'. [ 284.174141][T10071] netlink: 'syz.1.1926': attribute type 2 has an invalid length. [ 284.201739][T10071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1926'. [ 284.279793][T10067] delete_channel: no stack [ 285.431470][T10099] device wg2 left promiscuous mode [ 285.928675][T10109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1949'. [ 286.416915][T10120] netlink: 'syz.1.1942': attribute type 17 has an invalid length. [ 286.456245][T10120] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1942'. [ 287.315677][T10149] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 287.378429][T10149] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1948'. [ 287.449757][T10149] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 289.985494][T10193] netlink: 'syz.1.1962': attribute type 17 has an invalid length. [ 290.016818][T10193] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1962'. [ 290.047265][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 290.249004][T10199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 290.255888][T10199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 290.881926][T10217] netlink: 'syz.0.1970': attribute type 17 has an invalid length. [ 290.938616][T10217] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1970'. [ 291.162448][T10225] netlink: 'syz.3.1974': attribute type 3 has an invalid length. [ 291.198389][T10225] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1974'. [ 291.202295][T10229] netlink: 'syz.3.1974': attribute type 2 has an invalid length. [ 291.235181][T10229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1974'. [ 291.346100][T10224] delete_channel: no stack [ 291.418095][T10236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1978'. [ 292.379213][T10264] device wg2 left promiscuous mode [ 292.610542][T10259] device wg2 entered promiscuous mode [ 292.754579][T10279] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.761089][T10279] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 293.079110][T10287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1992'. [ 293.355219][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2001'. [ 293.549641][T10313] netlink: 'syz.4.2003': attribute type 3 has an invalid length. [ 293.575551][T10313] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2003'. [ 293.600675][T10315] netlink: 'syz.4.2003': attribute type 2 has an invalid length. [ 293.637002][T10315] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2003'. [ 293.717416][T10310] delete_channel: no stack [ 294.075993][T10334] netlink: 'syz.3.2007': attribute type 17 has an invalid length. [ 294.112858][T10332] netlink: 'syz.4.2005': attribute type 17 has an invalid length. [ 294.735816][T10352] netlink: 'syz.0.2016': attribute type 3 has an invalid length. [ 294.783999][T10352] netlink: 'syz.0.2016': attribute type 2 has an invalid length. [ 294.901184][T10351] delete_channel: no stack [ 295.336455][T10374] device wg2 entered promiscuous mode [ 295.622622][T10386] TCP: TCP_TX_DELAY enabled [ 295.991287][T10403] netlink: 'syz.2.2033': attribute type 3 has an invalid length. [ 296.003006][T10406] netlink: 'syz.4.2032': attribute type 17 has an invalid length. [ 296.016911][T10403] __nla_validate_parse: 6 callbacks suppressed [ 296.016947][T10403] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2033'. [ 296.040252][T10406] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2032'. [ 296.105626][T10403] netlink: 'syz.2.2033': attribute type 2 has an invalid length. [ 296.136167][T10403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'. [ 296.207876][T10400] delete_channel: no stack [ 296.821708][T10431] sctp: [Deprecated]: syz.2.2043 (pid 10431) Use of int in max_burst socket option deprecated. [ 296.821708][T10431] Use struct sctp_assoc_value instead [ 297.014727][T10440] netlink: 'syz.4.2044': attribute type 9 has an invalid length. [ 297.035855][T10435] device wlan0 left promiscuous mode [ 297.048993][T10440] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2044'. [ 297.838220][T10479] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2060'. [ 298.406395][T10503] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2068'. [ 298.875354][T10522] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 298.881965][T10522] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 299.357935][T10536] netlink: 'syz.1.2078': attribute type 2 has an invalid length. [ 299.401988][T10536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2078'. [ 299.511447][T10526] delete_channel: no stack [ 299.619183][T10541] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 299.649281][T10541] netlink: 'syz.0.2081': attribute type 3 has an invalid length. [ 299.661225][T10541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2081'. [ 301.326939][T10590] netlink: 'syz.3.2094': attribute type 3 has an invalid length. [ 301.340927][T10590] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2094'. [ 301.397814][T10590] netlink: 'syz.3.2094': attribute type 2 has an invalid length. [ 301.435706][T10598] netlink: 'syz.1.2096': attribute type 29 has an invalid length. [ 301.448048][T10590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2094'. [ 301.499068][T10598] netlink: 'syz.1.2096': attribute type 3 has an invalid length. [ 301.531501][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2096'. [ 301.552547][T10589] delete_channel: no stack [ 301.621607][T10600] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 301.628203][T10600] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 301.825786][T10606] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2098'. [ 302.328361][T10619] sctp: [Deprecated]: syz.4.2105 (pid 10619) Use of int in max_burst socket option deprecated. [ 302.328361][T10619] Use struct sctp_assoc_value instead [ 302.750223][T10626] netlink: 'syz.0.2108': attribute type 9 has an invalid length. [ 302.799895][T10626] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2108'. [ 303.683122][T10648] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2113'. [ 304.042303][T10663] netlink: 'syz.4.2119': attribute type 39 has an invalid length. [ 304.956410][T10699] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2129'. [ 304.987178][T10697] netlink: 'syz.3.2131': attribute type 39 has an invalid length. [ 305.045828][T10705] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2133'. [ 306.139967][T10742] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2145'. [ 307.081899][T10776] netlink: 'syz.3.2156': attribute type 39 has an invalid length. [ 307.795994][T10814] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2166'. [ 307.867409][T10807] netlink: 'syz.4.2166': attribute type 11 has an invalid length. [ 308.518458][T10834] netlink: 'syz.1.2173': attribute type 39 has an invalid length. [ 308.725765][T10846] netlink: 'syz.2.2177': attribute type 39 has an invalid length. [ 308.915194][T10853] syz.1.2180[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.916387][T10853] syz.1.2180[10853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.022085][T10856] netlink: 'syz.1.2180': attribute type 10 has an invalid length. [ 309.411109][T10875] netlink: 'syz.0.2187': attribute type 11 has an invalid length. [ 309.514992][T10875] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2187'. [ 309.996924][T10903] netlink: 'syz.0.2195': attribute type 10 has an invalid length. [ 310.057268][T10906] syz.0.2195[10906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.057377][T10906] syz.0.2195[10906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 310.079240][T10896] netlink: 'syz.2.2193': attribute type 39 has an invalid length. [ 310.290691][T10912] netlink: 'syz.0.2198': attribute type 39 has an invalid length. [ 310.886709][T10944] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2208'. [ 310.926907][T10938] netlink: 'syz.3.2208': attribute type 11 has an invalid length. [ 311.185678][T10953] syz.4.2211[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.186205][T10953] syz.4.2211[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.383285][T11015] syz.2.2227[11015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.383407][T11015] syz.2.2227[11015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.405071][T11006] validate_nla: 2 callbacks suppressed [ 314.405110][T11006] netlink: 'syz.2.2227': attribute type 10 has an invalid length. [ 314.859573][T11028] netlink: 'syz.2.2238': attribute type 11 has an invalid length. [ 315.443171][T11049] netlink: 'syz.4.2243': attribute type 39 has an invalid length. [ 317.285714][T11098] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.2260'. [ 317.347504][T11095] netlink: 'syz.2.2258': attribute type 39 has an invalid length. [ 317.367728][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.374073][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.408913][T11092] netlink: 'syz.3.2257': attribute type 39 has an invalid length. [ 317.430137][T11098] IPv6: Can't replace route, no match found [ 317.457799][T11098] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 317.806029][T11105] syz.4.2262 (11105) used greatest stack depth: 19752 bytes left [ 322.226294][T11157] netlink: 'syz.2.2279': attribute type 3 has an invalid length. [ 322.279482][T11157] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2279'. [ 323.505110][T11204] netlink: 'syz.1.2295': attribute type 3 has an invalid length. [ 323.517868][T11204] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2295'. [ 324.840659][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2310'. [ 327.954540][T11271] netlink: 'syz.0.2317': attribute type 3 has an invalid length. [ 327.974120][T11271] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2317'. [ 329.292057][T11320] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2334'. [ 329.337126][T11320] IPv6: Can't replace route, no match found [ 329.372428][T11313] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2330'. [ 329.539413][T11333] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2339'. [ 329.554899][T11334] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2342'. [ 329.677955][T11333] IPv6: Can't replace route, no match found [ 329.699537][T11334] IPv6: Can't replace route, no match found [ 330.518707][T11360] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2350'. [ 330.573023][T11362] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2351'. [ 330.624161][T11367] IPv6: Can't replace route, no match found [ 330.947012][T11378] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2356'. [ 331.032793][T11378] IPv6: Can't replace route, no match found [ 331.417352][T11395] netlink: 'syz.3.2364': attribute type 3 has an invalid length. [ 331.459040][T11395] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2364'. [ 331.484324][T11401] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2367'. [ 331.544029][T11399] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2366'. [ 331.579455][T11401] IPv6: Can't replace route, no match found [ 334.908085][T11514] netlink: 'syz.3.2407': attribute type 9 has an invalid length. [ 334.926331][T11514] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2407'. [ 336.300600][T11558] netlink: 'syz.2.2418': attribute type 10 has an invalid length. [ 336.334205][T11558] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.353520][T11558] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.367755][T11558] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.388766][T11558] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.497983][T11565] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.2422'. [ 336.818515][T11581] device sit0 entered promiscuous mode [ 338.306360][T11618] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2438'. [ 338.550523][T11626] netlink: 64851 bytes leftover after parsing attributes in process `syz.4.2442'. [ 338.734727][T11636] device sit0 left promiscuous mode [ 338.874399][T11647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.229345][T11655] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2452'. [ 339.520241][T11664] netlink: 'syz.4.2455': attribute type 3 has an invalid length. [ 339.574970][T11664] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2455'. [ 339.707156][T11674] device sit0 entered promiscuous mode [ 341.732565][T11722] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2474'. [ 341.771550][T11727] netlink: 'syz.0.2477': attribute type 3 has an invalid length. [ 341.779788][T11727] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2477'. [ 341.807467][T11729] netlink: 64851 bytes leftover after parsing attributes in process `syz.3.2478'. [ 341.879172][T11736] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.2480'. [ 342.009076][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 342.087766][T11738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.116821][T11746] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2481'. [ 342.197108][T11751] device sit0 entered promiscuous mode [ 343.749887][T11777] device sit0 left promiscuous mode [ 343.935156][T11778] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2491'. [ 343.972658][T11782] IPv6: Can't replace route, no match found [ 343.985948][T11785] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.2493'. [ 344.009365][T11778] netlink: 'syz.3.2491': attribute type 10 has an invalid length. [ 344.173651][T11792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.323216][T11799] netlink: 'syz.4.2497': attribute type 9 has an invalid length. [ 344.349932][T11799] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2497'. [ 344.860804][T11800] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2498'. [ 344.987083][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 345.037138][T11811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.064698][T11817] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2501'. [ 345.184913][T11811] syz.3.2501 (11811) used greatest stack depth: 19520 bytes left [ 345.348461][T11816] netlink: 'syz.2.2502': attribute type 39 has an invalid length. [ 345.630714][T11822] device sit0 entered promiscuous mode [ 346.387128][T11837] IPv6: Can't replace route, no match found [ 346.508251][T11837] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 346.712744][T11850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.147713][T11863] __nla_validate_parse: 3 callbacks suppressed [ 347.147806][T11863] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2519'. [ 347.558994][T11867] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 347.614412][T11867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.702456][T11867] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2521'. [ 347.755470][T11881] netlink: 'syz.1.2525': attribute type 10 has an invalid length. [ 347.973036][T11895] device sit0 entered promiscuous mode [ 349.175783][T11910] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2532'. [ 349.261424][T11912] netlink: 'syz.2.2534': attribute type 9 has an invalid length. [ 349.295214][T11912] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2534'. [ 349.472968][T11914] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2533'. [ 349.706346][T11928] netlink: 'syz.4.2539': attribute type 39 has an invalid length. [ 349.899564][T11933] netlink: 'syz.4.2540': attribute type 10 has an invalid length. [ 349.955996][T11935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.098090][T11976] netlink: 'syz.0.2556': attribute type 9 has an invalid length. [ 351.128139][T11976] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2556'. [ 351.184665][T11971] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2555'. [ 351.425601][T11990] syz.2.2558[11990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.425723][T11990] syz.2.2558[11990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.571696][T11992] device sit0 left promiscuous mode [ 351.594793][T11973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.885379][T11990] device syzkaller0 entered promiscuous mode [ 352.420914][T12010] device sit0 left promiscuous mode [ 353.186265][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.227365][T12041] device sit0 left promiscuous mode [ 353.707858][T12044] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2573'. [ 353.791591][T12053] device sit0 entered promiscuous mode [ 354.303495][T12068] device sit0 left promiscuous mode [ 354.896489][T12080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.151314][T12091] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2591'. [ 355.783947][T12119] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 355.822394][T12124] syz.4.2604[12124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.822510][T12124] syz.4.2604[12124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.979767][T12128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.241688][T12130] device syzkaller0 entered promiscuous mode [ 356.967821][T12165] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 357.040863][T12159] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2614'. [ 357.346151][T12177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.430515][T12181] netlink: 'syz.0.2622': attribute type 21 has an invalid length. [ 357.477861][T12181] netlink: 'syz.0.2622': attribute type 1 has an invalid length. [ 357.521895][T12181] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2622'. [ 357.569933][T12181] netlink: set zone limit has 8 unknown bytes [ 357.781019][T12189] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2625'. [ 357.811127][T12191] syz.1.2623[12191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.811234][T12191] syz.1.2623[12191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.874427][T12189] IPv6: Can't replace route, no match found [ 357.911913][T12189] netlink: 'syz.4.2625': attribute type 10 has an invalid length. [ 358.040226][T12191] device syzkaller0 entered promiscuous mode [ 358.543999][T12206] device sit0 entered promiscuous mode [ 358.969624][T12221] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2634'. [ 358.993409][T12217] tap0: tun_chr_ioctl cmd 1074025677 [ 359.005926][T12217] tap0: linktype set to 6 [ 359.064976][T12226] netlink: 'syz.1.2637': attribute type 16 has an invalid length. [ 359.073187][T12226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2637'. [ 359.369798][T12236] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2641'. [ 359.408877][T12236] IPv6: Can't replace route, no match found [ 359.426241][T12241] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 359.462334][T12236] netlink: 'syz.3.2641': attribute type 10 has an invalid length. [ 360.005294][T12255] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 360.111608][T12265] syz.3.2652[12265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.111796][T12265] syz.3.2652[12265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.349439][T12265] device syzkaller0 entered promiscuous mode [ 360.410636][T12270] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2650'. [ 361.043614][T12292] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2659'. [ 361.264314][T12292] IPv6: Can't replace route, no match found [ 361.452639][T12292] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 361.599312][T12304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2663'. [ 361.755595][T12304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.790961][T12304] bond0 (unregistering): Released all slaves [ 361.886219][T12313] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2665'. [ 361.942450][T12317] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 362.008912][T12320] device sit0 entered promiscuous mode [ 362.975650][T12322] device sit0 entered promiscuous mode [ 363.252224][T12350] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2675'. [ 363.284461][T12349] netlink: 'syz.4.2674': attribute type 16 has an invalid length. [ 363.298274][T12349] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2674'. [ 363.350734][T12350] IPv6: Can't replace route, no match found [ 363.486507][T12350] netlink: 'syz.3.2675': attribute type 10 has an invalid length. [ 363.898571][T12374] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2682'. [ 364.455744][T12390] device sit0 entered promiscuous mode [ 364.869254][T12399] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.2691'. [ 364.968042][T12399] IPv6: Can't replace route, no match found [ 365.104606][T12403] device sit0 left promiscuous mode [ 365.556655][T12401] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2692'. [ 365.706684][T12401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.911521][T12401] bond0 (unregistering): Released all slaves [ 365.950440][T12411] netlink: 'syz.1.2691': attribute type 10 has an invalid length. [ 366.051924][T12422] netlink: 'syz.0.2697': attribute type 16 has an invalid length. [ 366.070617][T12422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2697'. [ 366.149423][T12422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 366.447207][T12429] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2700'. [ 366.826892][T12446] GPL: port 1(erspan0) entered blocking state [ 366.853388][T12446] GPL: port 1(erspan0) entered disabled state [ 366.863456][T12446] device erspan0 entered promiscuous mode [ 367.102733][T12454] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2709'. [ 367.240586][T12459] IPv6: Can't replace route, no match found [ 367.439860][T12458] netlink: 'syz.1.2710': attribute type 21 has an invalid length. [ 367.526107][T12458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2710'. [ 367.754499][T12459] netlink: 'syz.2.2709': attribute type 10 has an invalid length. [ 368.763208][T12490] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2719'. [ 368.947327][T12493] netlink: 'syz.4.2720': attribute type 21 has an invalid length. [ 368.972181][T12493] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 368.985727][T12493] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2720'. [ 369.021764][T12493] netlink: set zone limit has 8 unknown bytes [ 369.484209][T12504] GPL: port 1(erspan0) entered blocking state [ 369.513491][T12504] GPL: port 1(erspan0) entered disabled state [ 369.564472][T12504] device erspan0 entered promiscuous mode [ 370.649571][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.666530][T12538] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2735'. [ 371.003488][T12537] syz.1.2736 (12537) used greatest stack depth: 18944 bytes left [ 371.638915][T12563] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2748'. [ 371.854969][T12572] GPL: port 1(erspan0) entered blocking state [ 371.897683][T12572] GPL: port 1(erspan0) entered disabled state [ 371.962566][T12572] device erspan0 entered promiscuous mode [ 371.991995][T12571] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2743'. [ 372.014246][T12573] IPv6: Can't replace route, no match found [ 372.037897][T12576] device sit0 left promiscuous mode [ 372.335357][T12571] netlink: 'syz.3.2743': attribute type 10 has an invalid length. [ 372.641228][T12587] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.2749'. [ 372.731267][T12594] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 372.790562][T12589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.810743][T12594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.872378][T12587] IPv6: Can't replace route, no match found [ 372.896423][T12590] netlink: 'syz.0.2749': attribute type 10 has an invalid length. [ 373.233180][T12603] netlink: 'syz.3.2754': attribute type 21 has an invalid length. [ 373.305239][T12603] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2754'. [ 373.815110][T12621] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2759'. [ 373.838878][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 373.904094][T12626] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2761'. [ 373.983166][T12626] IPv6: Can't replace route, no match found [ 374.016243][T12626] netlink: 'syz.2.2761': attribute type 10 has an invalid length. [ 374.264318][T12633] GPL: port 1(erspan0) entered blocking state [ 374.283604][T12633] GPL: port 1(erspan0) entered disabled state [ 374.385906][T12633] device erspan0 entered promiscuous mode [ 374.512718][T12639] device sit0 entered promiscuous mode [ 375.178271][T12650] netlink: 'syz.4.2765': attribute type 10 has an invalid length. [ 375.263418][T12650] device veth0_macvtap left promiscuous mode [ 375.346408][T12652] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.2767'. [ 375.407935][T12656] IPv6: Can't replace route, no match found [ 375.422550][T12663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.918420][T12674] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2774'. [ 376.070068][T12678] netlink: 'syz.1.2776': attribute type 21 has an invalid length. [ 376.290204][T12678] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2776'. [ 376.348681][T12678] netlink: 'syz.1.2776': attribute type 4 has an invalid length. [ 376.392412][T12681] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2776'. [ 376.399786][T12678] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2776'. [ 376.452953][T12670] netlink: 'syz.2.2770': attribute type 21 has an invalid length. [ 376.467622][T12670] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2770'. [ 376.487227][T12676] IPv6: Can't replace route, no match found [ 376.502080][T12680] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2775'. [ 376.542201][T12674] netlink: 'syz.3.2774': attribute type 10 has an invalid length. [ 376.628202][T12688] device sit0 left promiscuous mode [ 377.185190][T12708] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2781'. [ 377.266850][T12708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.448446][T12708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.499763][T12708] bond0 (unregistering): Released all slaves [ 377.611362][T12723] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.2786'. [ 377.822560][T12723] IPv6: Can't replace route, no match found [ 377.914182][T12725] netlink: 'syz.4.2788': attribute type 21 has an invalid length. [ 377.958313][T12725] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2788'. [ 378.039896][T12723] netlink: 'syz.1.2786': attribute type 10 has an invalid length. [ 378.081846][T12733] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2790'. [ 378.184680][T12733] IPv6: Can't replace route, no match found [ 378.391064][T12733] netlink: 'syz.2.2790': attribute type 10 has an invalid length. [ 378.799925][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.806452][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.067376][T12755] netlink: 'syz.4.2800': attribute type 10 has an invalid length. [ 379.101205][T12755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.385361][T12767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.388305][T12755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.523605][T12766] netlink: 'syz.2.2804': attribute type 10 has an invalid length. [ 379.772108][T12773] IPv6: Can't replace route, no match found [ 379.822151][T12773] netlink: 'syz.4.2806': attribute type 10 has an invalid length. [ 381.023788][T12799] device sit0 left promiscuous mode [ 381.661356][T12808] __nla_validate_parse: 5 callbacks suppressed [ 381.661376][T12808] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2816'. [ 381.828444][T12813] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.2818'. [ 381.857981][T12816] IPv6: Can't replace route, no match found [ 382.222382][T12822] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2821'. [ 382.272309][T12827] IPv6: Can't replace route, no match found [ 382.363851][T12822] netlink: 'syz.3.2821': attribute type 10 has an invalid length. [ 382.414515][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 382.671105][T12838] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2826'. [ 382.724598][T12847] netlink: 'syz.0.2829': attribute type 10 has an invalid length. [ 382.755497][T12847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.774099][T12847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.828467][T12847] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 383.263433][T12865] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2836'. [ 383.319584][T12865] IPv6: Can't replace route, no match found [ 383.354096][T12865] netlink: 'syz.4.2836': attribute type 10 has an invalid length. [ 383.718354][T12882] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 384.627997][T12898] delete_channel: no stack [ 384.639505][T12906] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 384.823242][T12907] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2849'. [ 384.993419][T12910] netlink: 'syz.0.2851': attribute type 10 has an invalid length. [ 385.045589][T12916] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.2853'. [ 385.122016][T12916] netlink: 'syz.1.2853': attribute type 10 has an invalid length. [ 385.525452][T12936] device sit0 entered promiscuous mode [ 385.594953][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.349192][T12946] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 386.370820][T12952] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2867'. [ 386.450794][T12955] netlink: 'syz.2.2867': attribute type 10 has an invalid length. [ 386.597962][T12960] netlink: 'syz.1.2869': attribute type 10 has an invalid length. [ 386.761549][T12960] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 386.781146][T12969] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2870'. [ 387.191480][T12974] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2873'. [ 387.585601][T12988] device sit0 left promiscuous mode [ 388.079994][T12999] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2881'. [ 388.129933][T13001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.197719][T13001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.255804][T13001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.282869][T13001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.293289][T13001] batman_adv: batadv0: Interface deactivated: vlan1 [ 388.300502][T13001] batman_adv: batadv0: Removing interface: vlan1 [ 388.378020][T13003] netlink: 'syz.4.2881': attribute type 10 has an invalid length. [ 388.402759][T13005] device sit0 entered promiscuous mode [ 388.925111][T13013] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 389.226760][T13025] netlink: 'syz.3.2886': attribute type 10 has an invalid length. [ 389.235211][T13017] delete_channel: no stack [ 389.268646][T13025] device veth0_macvtap left promiscuous mode [ 389.353896][T13028] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2888'. [ 390.166407][T13046] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2897'. [ 390.278720][T13044] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2904'. [ 390.302864][T13046] netlink: 'syz.3.2897': attribute type 10 has an invalid length. [ 390.662095][T13066] device sit0 entered promiscuous mode [ 391.167883][T13080] netlink: 'syz.2.2906': attribute type 10 has an invalid length. [ 391.188427][T13080] device veth0_macvtap left promiscuous mode [ 391.295992][T13073] delete_channel: no stack [ 391.343201][T13084] netlink: 'syz.4.2910': attribute type 10 has an invalid length. [ 391.384727][T13088] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2912'. [ 391.433630][T13088] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 391.538454][T13092] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 391.570107][T13090] netlink: 'syz.1.2913': attribute type 10 has an invalid length. [ 391.596188][T13090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.736215][T13090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.853371][T13090] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 392.203484][T13111] device sit0 left promiscuous mode [ 392.488458][T13117] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2918'. [ 392.542380][T13112] netlink: 'syz.0.2920': attribute type 4 has an invalid length. [ 392.557658][T13112] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2920'. [ 392.640166][T13112] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 392.817803][T13129] netlink: 'syz.1.2924': attribute type 10 has an invalid length. [ 392.828192][T13129] device veth0_macvtap left promiscuous mode [ 392.846194][T13136] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2926'. [ 392.903411][T13128] delete_channel: no stack [ 392.942867][T13136] netlink: 'syz.2.2926': attribute type 10 has an invalid length. [ 392.975537][T13140] device sit0 left promiscuous mode [ 393.142302][T13138] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 393.236494][T13147] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2929'. [ 393.362988][T13145] netlink: 'syz.2.2928': attribute type 10 has an invalid length. [ 393.436837][T13147] netlink: 'syz.3.2929': attribute type 10 has an invalid length. [ 393.573843][T13153] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 393.798075][T13162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.805693][T13162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.855539][T13162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.896884][T13162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.939707][T13162] batman_adv: batadv0: Interface deactivated: vlan1 [ 393.965454][T13162] batman_adv: batadv0: Removing interface: vlan1 [ 394.014060][T13171] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2934'. [ 394.032310][T13175] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.2939'. [ 394.083166][T13175] IPv6: Can't replace route, no match found [ 394.366068][T13184] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 394.393824][T13187] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.2943'. [ 394.456109][T13187] IPv6: Can't replace route, no match found [ 394.781617][T13189] bond0: (slave wlan1): Error: Slave device does not support XDP [ 394.914180][T13198] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 395.235429][T13209] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2952'. [ 395.313240][T13209] IPv6: Can't replace route, no match found [ 395.331782][T13213] device sit0 entered promiscuous mode [ 395.618779][T13212] validate_nla: 4 callbacks suppressed [ 395.618800][T13212] netlink: 'syz.4.2952': attribute type 10 has an invalid length. [ 395.723927][T13223] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2955'. [ 395.801802][T13228] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.2958'. [ 395.940936][T13228] IPv6: Can't replace route, no match found [ 395.948493][T13236] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 395.996708][T13231] delete_channel: no stack [ 396.214718][T13251] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 396.636693][T13265] IPv6: Can't replace route, no match found [ 396.667141][T13265] netlink: 'syz.4.2971': attribute type 10 has an invalid length. [ 396.842262][T13278] IPv6: Can't replace route, no match found [ 396.903592][T13278] netlink: 'syz.1.2976': attribute type 10 has an invalid length. [ 396.972445][T13278] bond0: (slave wlan1): Releasing backup interface [ 396.979727][T13279] delete_channel: no stack [ 397.378779][T13288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.409001][T13288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.436286][T13288] batman_adv: batadv0: Interface deactivated: vlan1 [ 397.465272][T13288] batman_adv: batadv0: Removing interface: vlan1 [ 397.918681][T13305] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 397.933832][T13308] __nla_validate_parse: 3 callbacks suppressed [ 397.933872][T13308] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.2987'. [ 398.040661][T13310] IPv6: Can't replace route, no match found [ 398.065098][T13314] device sit0 entered promiscuous mode [ 398.449415][T13308] netlink: 'syz.2.2987': attribute type 10 has an invalid length. [ 398.505077][T13317] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2988'. [ 398.911883][T13331] delete_channel: no stack [ 398.953263][T13335] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 399.233636][T13347] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3001'. [ 399.272588][T13350] IPv6: Can't replace route, no match found [ 399.371748][T13355] device sit0 entered promiscuous mode [ 399.593784][T13347] netlink: 'syz.4.3001': attribute type 10 has an invalid length. [ 399.623556][T13363] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3002'. [ 399.742458][T13370] netlink: 'syz.4.3009': attribute type 10 has an invalid length. [ 399.861161][T13373] delete_channel: no stack [ 401.114960][T13401] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3019'. [ 401.134642][T13403] IPv6: Can't replace route, no match found [ 401.146973][T13404] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 401.220567][T13401] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 401.236956][T13399] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3018'. [ 401.392584][T13412] netlink: 'syz.2.3023': attribute type 10 has an invalid length. [ 401.414323][T13419] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 401.446435][T13421] netlink: 'syz.1.3027': attribute type 4 has an invalid length. [ 401.488139][T13421] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3027'. [ 401.593564][T13421] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 402.146519][T13445] netlink: 'syz.3.3034': attribute type 10 has an invalid length. [ 402.533615][T13453] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3037'. [ 402.592940][T13447] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3036'. [ 402.621355][T13453] IPv6: Can't replace route, no match found [ 402.663139][T13453] netlink: 'syz.0.3037': attribute type 10 has an invalid length. [ 402.940649][T13464] netlink: 'syz.2.3043': attribute type 4 has an invalid length. [ 402.973706][T13464] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3043'. [ 403.021332][T13464] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 403.162067][T13479] device sit0 entered promiscuous mode [ 403.777819][T13477] netlink: 'syz.1.3048': attribute type 10 has an invalid length. [ 403.941467][T13494] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3050'. [ 404.022122][T13498] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.3051'. [ 404.250500][T13498] IPv6: Can't replace route, no match found [ 404.307087][T13498] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 404.733398][T13525] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 404.890804][T13534] device sit0 left promiscuous mode [ 405.191904][T13536] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3066'. [ 405.277704][T13555] netlink: 'syz.4.3070': attribute type 10 has an invalid length. [ 405.599166][T13566] delete_channel: no stack [ 405.824884][T13577] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 406.325938][T13589] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3083'. [ 406.394943][T13595] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.3087'. [ 406.442916][T13595] IPv6: Can't replace route, no match found [ 406.458840][T13595] netlink: 'syz.3.3087': attribute type 10 has an invalid length. [ 406.511732][T13604] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3092'. [ 406.539335][T13601] device sit0 entered promiscuous mode [ 407.029412][T13604] IPv6: Can't replace route, no match found [ 407.039831][T13615] netlink: 'syz.2.3092': attribute type 10 has an invalid length. [ 407.455234][T13632] device sit0 left promiscuous mode [ 407.640121][T13637] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3101'. [ 407.692564][T13640] IPv6: Can't replace route, no match found [ 407.970395][T13653] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3106'. [ 408.042991][T13653] IPv6: Can't replace route, no match found [ 408.071637][T13653] netlink: 'syz.4.3106': attribute type 10 has an invalid length. [ 409.309242][T13692] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.3121'. [ 409.435477][T13692] IPv6: Can't replace route, no match found [ 409.509169][T13692] netlink: 'syz.1.3121': attribute type 10 has an invalid length. [ 409.922716][T13716] device sit0 entered promiscuous mode [ 410.574354][T13729] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 410.684818][T13740] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.3137'. [ 410.811374][T13740] IPv6: Can't replace route, no match found [ 410.866562][T13740] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 410.887316][T13746] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3139'. [ 410.930249][T13744] netlink: 'syz.0.3138': attribute type 10 has an invalid length. [ 411.038983][T13750] netlink: 'syz.3.3141': attribute type 7 has an invalid length. [ 411.048491][T13746] IPv6: Can't replace route, no match found [ 411.060662][T13750] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3141'. [ 411.072137][T13751] netlink: 'syz.4.3139': attribute type 10 has an invalid length. [ 411.133478][T13755] netlink: 'syz.2.3143': attribute type 7 has an invalid length. [ 411.482906][T13762] netlink: 'syz.0.3146': attribute type 10 has an invalid length. [ 411.512854][T13773] netlink: 'syz.1.3150': attribute type 17 has an invalid length. [ 411.854498][T13785] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3155'. [ 411.880155][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.899595][T13775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.206761][T13785] IPv6: Can't replace route, no match found [ 412.222321][T13788] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 412.236890][T13792] netlink: 'syz.4.3155': attribute type 10 has an invalid length. [ 412.327316][T13796] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3157'. [ 412.538338][T13796] IPv6: Can't replace route, no match found [ 412.554292][T13796] netlink: 'syz.2.3157': attribute type 10 has an invalid length. [ 412.613127][T13805] netlink: 'syz.0.3161': attribute type 10 has an invalid length. [ 412.824125][T13817] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3167'. [ 412.929163][T13825] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3170'. [ 413.132975][T13825] IPv6: Can't replace route, no match found [ 413.162243][T13834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3174'. [ 413.188878][T13825] netlink: 'syz.4.3170': attribute type 10 has an invalid length. [ 413.372794][T13840] IPv6: Can't replace route, no match found [ 413.470556][T13838] netlink: 'syz.0.3176': attribute type 10 has an invalid length. [ 413.914040][T13854] netlink: 'syz.0.3182': attribute type 17 has an invalid length. [ 414.207501][T13862] netlink: 'syz.1.3186': attribute type 7 has an invalid length. [ 414.236528][T13864] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3187'. [ 414.306330][T13868] IPv6: Can't replace route, no match found [ 414.322235][T13864] IPv6: Can't replace route, no match found [ 414.344061][T13868] netlink: 'syz.3.3189': attribute type 10 has an invalid length. [ 415.163311][T13897] __nla_validate_parse: 1 callbacks suppressed [ 415.163346][T13897] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.3202'. [ 415.195938][T13899] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3203'. [ 415.230737][T13897] IPv6: Can't replace route, no match found [ 415.386463][T13899] IPv6: Can't replace route, no match found [ 415.719901][T13909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3207'. [ 415.995284][T13911] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3208'. [ 416.240442][T13925] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3216'. [ 416.300606][T13932] IPv6: Can't replace route, no match found [ 416.452092][T13936] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.3219'. [ 416.552102][T13940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3220'. [ 416.646232][T13936] IPv6: Can't replace route, no match found [ 416.689126][T13936] validate_nla: 6 callbacks suppressed [ 416.689164][T13936] netlink: 'syz.3.3219': attribute type 10 has an invalid length. [ 417.266357][T13957] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3224'. [ 417.356872][T13960] netlink: 'syz.1.3227': attribute type 21 has an invalid length. [ 417.417727][T13960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3227'. [ 417.426838][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3227'. [ 417.572551][T13961] netlink: 'syz.3.3228': attribute type 10 has an invalid length. [ 417.861618][T13974] netlink: 'syz.3.3234': attribute type 10 has an invalid length. [ 417.945998][T13976] IPv6: Can't replace route, no match found [ 418.042137][T13986] IPv6: Can't replace route, no match found [ 418.064392][T13976] netlink: 'syz.4.3235': attribute type 10 has an invalid length. [ 418.135564][T13984] netlink: 'syz.3.3239': attribute type 10 has an invalid length. [ 418.749531][T14008] netlink: 'syz.4.3245': attribute type 10 has an invalid length. [ 419.021817][T14013] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 419.920934][T14037] IPv6: Can't replace route, no match found [ 419.933299][T14044] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 419.980566][T14049] netlink: 'syz.1.3260': attribute type 10 has an invalid length. [ 419.998132][T14050] netlink: 'syz.0.3263': attribute type 10 has an invalid length. [ 420.751066][T14077] __nla_validate_parse: 5 callbacks suppressed [ 420.751107][T14077] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3274'. [ 420.994063][T14077] IPv6: Can't replace route, no match found [ 421.089903][T14086] delete_channel: no stack [ 421.136848][T14093] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 421.394396][T14105] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3284'. [ 421.426544][T14105] IPv6: Can't replace route, no match found [ 421.736793][T14117] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3290'. [ 421.819148][T14117] IPv6: Can't replace route, no match found [ 421.825951][T14124] delete_channel: no stack [ 421.877228][T14117] validate_nla: 5 callbacks suppressed [ 421.877268][T14117] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 422.261364][T14136] netlink: 'syz.4.3296': attribute type 10 has an invalid length. [ 422.371546][T14137] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 422.622993][T14139] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3298'. [ 422.670903][T14144] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3300'. [ 422.785787][T14144] IPv6: Can't replace route, no match found [ 422.835495][T14146] netlink: 'syz.1.3301': attribute type 10 has an invalid length. [ 422.862594][T14148] netlink: 'syz.4.3303': attribute type 10 has an invalid length. [ 422.910547][T14144] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 422.978952][T14155] delete_channel: no stack [ 423.070947][T14160] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3307'. [ 423.216021][T14168] IPv6: Can't replace route, no match found [ 423.249223][T14170] netlink: 'syz.4.3307': attribute type 10 has an invalid length. [ 423.792926][T14181] netlink: 'syz.1.3314': attribute type 10 has an invalid length. [ 424.004740][T14185] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3316'. [ 424.133996][T14192] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3312'. [ 424.174782][T14188] IPv6: Can't replace route, no match found [ 424.204434][T14185] netlink: 'syz.0.3316': attribute type 10 has an invalid length. [ 424.225454][T14187] netlink: 'syz.3.3317': attribute type 10 has an invalid length. [ 424.370308][T14200] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.3322'. [ 424.461978][T14200] IPv6: Can't replace route, no match found [ 424.510872][T14200] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 424.701178][T14222] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3331'. [ 424.894995][T14222] IPv6: Can't replace route, no match found [ 425.110284][T14228] syz.3.3335[14228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.110395][T14228] syz.3.3335[14228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.449908][T14242] IPv6: Can't replace route, no match found [ 426.119013][T14258] __nla_validate_parse: 2 callbacks suppressed [ 426.119049][T14258] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3346'. [ 426.236206][T14261] IPv6: Can't replace route, no match found [ 426.302764][T14263] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3347'. [ 426.553009][T14281] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3355'. [ 426.678665][T14279] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3354'. [ 426.699198][T14282] IPv6: Can't replace route, no match found [ 427.234306][T14306] netlink: 16625 bytes leftover after parsing attributes in process `syz.3.3364'. [ 427.318485][T14308] validate_nla: 11 callbacks suppressed [ 427.318507][T14308] netlink: 'syz.1.3363': attribute type 10 has an invalid length. [ 427.497564][T14314] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3362'. [ 427.509008][T14307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.521178][T14307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.578819][T14307] batman_adv: batadv0: Interface deactivated: vlan1 [ 427.586136][T14307] batman_adv: batadv0: Removing interface: vlan1 [ 427.696211][T14313] IPv6: Can't replace route, no match found [ 427.704308][T14306] netlink: 'syz.3.3364': attribute type 10 has an invalid length. [ 427.723667][T14318] netlink: 'syz.1.3367': attribute type 12 has an invalid length. [ 427.736389][T14318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3367'. [ 427.795472][T14324] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3370'. [ 427.850727][T14324] IPv6: Can't replace route, no match found [ 427.866818][T14324] netlink: 'syz.2.3370': attribute type 10 has an invalid length. [ 428.125473][T14343] netlink: 'syz.2.3379': attribute type 7 has an invalid length. [ 428.163371][T14340] netlink: 'syz.3.3377': attribute type 10 has an invalid length. [ 428.186479][T14343] netlink: 'syz.2.3379': attribute type 1 has an invalid length. [ 428.267912][T14343] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3379'. [ 428.877380][T14344] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3378'. [ 429.051166][T14367] netlink: 'syz.3.3387': attribute type 21 has an invalid length. [ 429.069741][T14362] IPv6: Can't replace route, no match found [ 429.094067][T14362] netlink: 'syz.2.3386': attribute type 10 has an invalid length. [ 429.238316][T14376] netlink: 'syz.2.3391': attribute type 10 has an invalid length. [ 429.970892][T14397] IPv6: Can't replace route, no match found [ 430.228350][T14410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.235684][T14410] IPv6: NLM_F_CREATE should be set when creating new route [ 430.242985][T14410] IPv6: NLM_F_CREATE should be set when creating new route [ 430.685499][T14443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.693071][T14443] IPv6: NLM_F_CREATE should be set when creating new route [ 430.700459][T14443] IPv6: NLM_F_CREATE should be set when creating new route [ 430.823653][T14439] IPv6: Can't replace route, no match found [ 431.665394][T14474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.672764][T14474] IPv6: NLM_F_CREATE should be set when creating new route [ 431.680060][T14474] IPv6: NLM_F_CREATE should be set when creating new route [ 431.843511][T14482] __nla_validate_parse: 5 callbacks suppressed [ 431.843576][T14482] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3433'. [ 432.079595][T14482] IPv6: Can't replace route, no match found [ 432.975544][T14517] validate_nla: 11 callbacks suppressed [ 432.975565][T14517] netlink: 'syz.2.3446': attribute type 10 has an invalid length. [ 433.084178][T14521] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 433.203741][T14529] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.3453'. [ 433.271506][T14529] IPv6: Can't replace route, no match found [ 433.323801][T14529] netlink: 'syz.1.3453': attribute type 10 has an invalid length. [ 434.235617][T14498] ODEBUG: Out of memory. ODEBUG disabled [ 434.373219][T14564] netlink: 'syz.1.3464': attribute type 10 has an invalid length. [ 434.390309][T14563] IPv6: Can't replace route, no match found [ 434.430424][T14563] netlink: 'syz.3.3468': attribute type 10 has an invalid length. [ 434.453277][T14565] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 435.073744][T14590] netlink: 'syz.2.3479': attribute type 10 has an invalid length. [ 435.180313][T14593] IPv6: Can't replace route, no match found [ 435.264817][T14593] netlink: 'syz.1.3480': attribute type 10 has an invalid length. [ 435.666238][T14605] netlink: 'syz.3.3482': attribute type 10 has an invalid length. [ 435.864741][T14619] netlink: 'syz.4.3492': attribute type 29 has an invalid length. [ 435.900043][T14619] netlink: 'syz.4.3492': attribute type 29 has an invalid length. [ 435.998864][T14623] IPv6: Can't replace route, no match found [ 436.244919][T14630] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 436.350997][T14638] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3500'. [ 436.744149][T14655] IPv6: Can't replace route, no match found [ 437.545217][T14687] IPv6: Can't replace route, no match found [ 438.381945][T14716] validate_nla: 15 callbacks suppressed [ 438.386174][T14716] netlink: 'syz.2.3534': attribute type 10 has an invalid length. [ 438.428135][T14719] IPv6: Can't replace route, no match found [ 438.443891][T14721] netlink: 'syz.0.3537': attribute type 10 has an invalid length. [ 438.482936][T14719] netlink: 'syz.4.3535': attribute type 10 has an invalid length. [ 438.485441][T14723] netlink: 'syz.3.3538': attribute type 29 has an invalid length. [ 438.505201][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 438.528489][T14723] netlink: 'syz.3.3538': attribute type 29 has an invalid length. [ 438.557992][T14726] netlink: 'syz.3.3538': attribute type 29 has an invalid length. [ 438.801937][T14737] netlink: 'syz.4.3542': attribute type 10 has an invalid length. [ 439.024824][T14749] IPv6: Can't replace route, no match found [ 439.040265][T14751] netlink: 'syz.0.3551': attribute type 10 has an invalid length. [ 439.049071][T14749] netlink: 'syz.4.3549': attribute type 10 has an invalid length. [ 439.086152][T14755] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3553'. [ 439.119123][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'. [ 439.159626][T14755] IPv6: Can't replace route, no match found [ 439.179511][T14755] netlink: 'syz.2.3553': attribute type 10 has an invalid length. [ 439.619971][T14786] IPv6: Can't replace route, no match found [ 439.994524][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3567'. [ 440.238552][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245064][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.486131][T14810] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 440.762790][T14840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3587'. [ 440.798932][T14840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3587'. [ 440.847985][T14835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3587'. [ 442.249368][T14895] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 442.324668][T14900] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3612'. [ 442.794924][T14909] netlink: 16625 bytes leftover after parsing attributes in process `syz.0.3613'. [ 442.906532][T14910] IPv6: Can't replace route, no match found [ 443.209652][T14923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3619'. [ 443.295440][T14934] netlink: set zone limit has 8 unknown bytes [ 443.405383][T14939] validate_nla: 10 callbacks suppressed [ 443.405403][T14939] netlink: 'syz.3.3622': attribute type 10 has an invalid length. [ 443.514577][T14946] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.3629'. [ 443.634065][T14946] IPv6: Can't replace route, no match found [ 443.790754][T14963] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3636'. [ 443.816897][T14959] netlink: 'syz.4.3632': attribute type 10 has an invalid length. [ 443.870757][T14965] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 443.971479][T14972] netlink: set zone limit has 8 unknown bytes [ 444.116111][T14977] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3641'. [ 444.319666][T14986] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3645'. [ 444.385389][T14986] IPv6: Can't replace route, no match found [ 444.421404][T14986] netlink: 'syz.4.3645': attribute type 10 has an invalid length. [ 444.506073][T14997] netlink: set zone limit has 8 unknown bytes [ 444.541405][T15001] netlink: 'syz.3.3649': attribute type 10 has an invalid length. [ 444.824895][T15015] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3657'. [ 445.564244][T15029] netlink: 16625 bytes leftover after parsing attributes in process `syz.4.3663'. [ 445.638108][T15029] IPv6: Can't replace route, no match found [ 445.657721][T15029] netlink: 'syz.4.3663': attribute type 10 has an invalid length. [ 445.924847][T15041] netlink: 'syz.2.3668': attribute type 9 has an invalid length. [ 445.942622][T15041] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3668'. [ 445.985329][T15045] netlink: 'syz.4.3669': attribute type 10 has an invalid length. [ 446.363521][T15049] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3670'. [ 446.579676][T15063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3677'. [ 446.595141][T15067] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3679'. [ 446.651277][T15070] IPv6: Can't replace route, no match found [ 446.661939][T15070] netlink: 'syz.0.3680': attribute type 10 has an invalid length. [ 446.788505][T15080] netlink: 'syz.2.3683': attribute type 10 has an invalid length. [ 447.016229][T15086] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 447.212235][T15103] IPv6: Can't replace route, no match found [ 447.281812][T15103] netlink: 'syz.0.3695': attribute type 10 has an invalid length. [ 447.404334][T15116] IPv6: Can't replace route, no match found [ 448.075640][T15121] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 448.411235][T15146] IPv6: Can't replace route, no match found [ 448.423576][T15146] validate_nla: 4 callbacks suppressed [ 448.423619][T15146] netlink: 'syz.1.3713': attribute type 10 has an invalid length. [ 448.515837][T15151] tap0: tun_chr_ioctl cmd 2148553947 [ 448.577631][T15153] __nla_validate_parse: 10 callbacks suppressed [ 448.577650][T15153] netlink: 16625 bytes leftover after parsing attributes in process `syz.1.3717'. [ 448.619626][T15153] IPv6: Can't replace route, no match found [ 448.629080][T15153] netlink: 'syz.1.3717': attribute type 10 has an invalid length. [ 448.793949][T15176] IPv6: Can't replace route, no match found [ 448.811408][T15176] netlink: 'syz.0.3727': attribute type 10 has an invalid length. [ 448.833247][T15166] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 448.875531][T15177] netlink: 'syz.4.3724': attribute type 10 has an invalid length. [ 448.986787][T15170] netlink: 'syz.1.3725': attribute type 10 has an invalid length. [ 449.170087][T15196] netlink: 16625 bytes leftover after parsing attributes in process `syz.2.3736'. [ 449.202206][T15196] IPv6: Can't replace route, no match found [ 449.216430][T15196] netlink: 'syz.2.3736': attribute type 10 has an invalid length. [ 449.313102][T15203] netlink: 'syz.1.3740': attribute type 28 has an invalid length. [ 449.347401][T15206] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 449.365137][T15205] IPv6: Can't replace route, no match found [ 449.429655][T15205] netlink: 'syz.4.3739': attribute type 10 has an invalid length. [ 449.529650][T15220] netlink: 'syz.3.3743': attribute type 10 has an invalid length. [ 449.591125][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3746'. [ 449.624079][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3746'. [ 449.636244][T15219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3746'. [ 449.646372][T15224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3746'. [ 449.793618][T15233] IPv6: Can't replace route, no match found [ 449.824200][T15233] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 449.970767][T15239] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3752'. [ 450.096498][T15247] IPv6: Can't replace route, no match found [ 450.109778][T15249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3758'. [ 450.424035][T15267] IPv6: Can't replace route, no match found [ 450.469406][T15263] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3765'. [ 450.605061][T15275] IPv6: Can't replace route, no match found [ 450.617257][T15278] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 450.754592][T15285] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3773'. [ 450.963085][T15288] netlink: del zone limit has 8 unknown bytes [ 451.045925][T15292] IPv6: Can't replace route, no match found [ 451.423172][T15316] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 451.998895][T15333] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 452.025544][T15337] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 452.724577][T15374] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 453.403654][T15407] IPv6: Can't replace route, no match found [ 453.464661][T15411] validate_nla: 19 callbacks suppressed [ 453.464679][T15411] netlink: 'syz.0.3821': attribute type 10 has an invalid length. [ 453.669292][T15421] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 453.738254][T15418] __nla_validate_parse: 4 callbacks suppressed [ 453.738361][T15418] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3826'. [ 453.859393][T15435] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3834'. [ 454.039699][T15428] netlink: 'syz.0.3830': attribute type 10 has an invalid length. [ 454.091081][T15439] IPv6: Can't replace route, no match found [ 454.141387][T15439] netlink: 'syz.3.3835': attribute type 10 has an invalid length. [ 454.310610][T15454] netlink: 'syz.0.3839': attribute type 10 has an invalid length. [ 454.451658][T15458] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 454.617365][T15466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 454.654211][T15466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 454.664297][T15462] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 454.675913][T15467] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3844'. [ 454.727950][T15468] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3854'. [ 454.762685][T15465] netlink: 'syz.3.3845': attribute type 9 has an invalid length. [ 454.771553][T15465] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3845'. [ 455.190562][T15480] netlink: 'syz.4.3849': attribute type 10 has an invalid length. [ 455.403414][T15493] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 455.689957][T15511] netlink: 'syz.0.3862': attribute type 10 has an invalid length. [ 455.858942][T15512] netlink: 'syz.1.3863': attribute type 10 has an invalid length. [ 456.745167][T15550] netlink: 'syz.0.3876': attribute type 10 has an invalid length. [ 456.808456][T15551] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 456.864384][T15549] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3879'. [ 456.948664][T15559] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3894'. [ 457.691528][T15615] IPv6: Can't replace route, no match found [ 458.078708][T15633] IPv6: Can't replace route, no match found [ 458.353307][T15650] IPv6: Can't replace route, no match found [ 458.550442][T15659] validate_nla: 7 callbacks suppressed [ 458.550459][T15659] netlink: 'syz.4.3925': attribute type 10 has an invalid length. [ 458.686134][T15673] IPv6: Can't replace route, no match found [ 458.701867][T15673] netlink: 'syz.3.3933': attribute type 10 has an invalid length. [ 458.760397][T15680] netlink: 'syz.3.3936': attribute type 9 has an invalid length. [ 458.771353][T15680] __nla_validate_parse: 3 callbacks suppressed [ 458.771369][T15680] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3936'. [ 458.915454][T15686] IPv6: Can't replace route, no match found [ 459.072075][T15687] netlink: 'syz.0.3939': attribute type 10 has an invalid length. [ 459.090981][T15690] netlink: 'syz.2.3940': attribute type 10 has an invalid length. [ 459.336127][T15693] netlink: 'syz.1.3942': attribute type 10 has an invalid length. [ 459.433278][T15709] IPv6: Can't replace route, no match found [ 459.498806][T15709] netlink: 'syz.3.3947': attribute type 10 has an invalid length. [ 459.609437][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 459.680836][T15720] netlink: 'syz.0.3953': attribute type 2 has an invalid length. [ 459.709095][T15725] IPv6: Can't replace route, no match found [ 459.748649][T15725] netlink: 'syz.4.3956': attribute type 10 has an invalid length. [ 459.752577][T15722] netlink: 'syz.1.3954': attribute type 9 has an invalid length. [ 459.847705][T15722] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3954'. [ 460.338606][T15745] IPv6: Can't replace route, no match found [ 460.402294][T15748] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3967'. [ 460.463517][T15753] IPv6: Can't replace route, no match found [ 460.583398][T15760] IPv6: Can't replace route, no match found [ 460.870324][T15773] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3977'. [ 461.494453][T15790] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 461.649975][T15793] IPv6: Can't replace route, no match found [ 462.582566][T15837] IPv6: Can't replace route, no match found [ 462.644168][T15840] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4001'. [ 463.476918][T15856] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 463.600318][T15854] validate_nla: 15 callbacks suppressed [ 463.600360][T15854] netlink: 'syz.3.4012': attribute type 10 has an invalid length. [ 463.805535][T15872] IPv6: Can't replace route, no match found [ 463.845734][T15872] netlink: 'syz.3.4019': attribute type 10 has an invalid length. [ 464.408226][T15899] netlink: 'syz.2.4030': attribute type 10 has an invalid length. [ 464.574218][T15912] IPv6: Can't replace route, no match found [ 464.602150][T15912] netlink: 'syz.2.4038': attribute type 10 has an invalid length. [ 464.791945][T15916] netlink: 'syz.3.4040': attribute type 10 has an invalid length. [ 464.989342][T15929] netlink: 'syz.4.4047': attribute type 29 has an invalid length. [ 465.001708][ T3086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.021094][T15929] netlink: 'syz.4.4047': attribute type 29 has an invalid length. [ 465.079578][ T3086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.140237][T15935] netlink: 'syz.4.4050': attribute type 29 has an invalid length. [ 465.235922][T15935] netlink: 'syz.4.4050': attribute type 29 has an invalid length. [ 465.250877][T15940] netlink: 'syz.4.4050': attribute type 29 has an invalid length. [ 465.290528][ T3086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.368675][ T3086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.270825][T15943] chnl_net:caif_netlink_parms(): no params data found [ 466.517362][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.524623][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.535296][T15943] device bridge_slave_0 entered promiscuous mode [ 466.546562][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.553767][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.561879][T15943] device bridge_slave_1 entered promiscuous mode [ 466.594564][T15943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.606274][T15943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.642818][T15943] team0: Port device team_slave_0 added [ 466.669967][T15943] team0: Port device team_slave_1 added [ 466.710595][T15943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.718794][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.746390][T15943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.759382][T15943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.766348][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.792367][T15943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.818068][T15967] chnl_net:caif_netlink_parms(): no params data found [ 466.883528][T15943] device hsr_slave_0 entered promiscuous mode [ 466.890853][T15943] device hsr_slave_1 entered promiscuous mode [ 466.901194][T15943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.909050][T15943] Cannot create hsr debugfs directory [ 467.000849][T15967] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.008730][T15967] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.017040][T15967] device bridge_slave_0 entered promiscuous mode [ 467.041420][T15967] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.051541][T15967] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.060650][T15967] device bridge_slave_1 entered promiscuous mode [ 467.158270][T15967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.179666][T15967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.238118][T15967] team0: Port device team_slave_0 added [ 467.246419][T15967] team0: Port device team_slave_1 added [ 467.320782][T15943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.331282][T15967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.340308][T15967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.369531][T15967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.386501][T15943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.425615][T15967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.433503][T12078] Bluetooth: hci1: command 0x0409 tx timeout [ 467.440382][T15967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.467125][T15967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.479352][T15943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 467.499122][T15943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 467.567042][T15967] device hsr_slave_0 entered promiscuous mode [ 467.574350][T15967] device hsr_slave_1 entered promiscuous mode [ 467.583025][T15967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.590644][T15967] Cannot create hsr debugfs directory [ 467.776462][T15943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.806475][T15967] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.824257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.833255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.845827][T15943] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.856831][T15967] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 467.891763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.902094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.913701][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.920930][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.930462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.939200][T15967] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.967875][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.977301][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.986479][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.993606][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.005470][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.014914][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.024458][T15967] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.057591][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.073228][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.085560][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.095254][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.105809][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.132579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.143515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.147815][ T6592] Bluetooth: hci0: command 0x0409 tx timeout [ 468.157758][T15943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.172115][T15943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.185848][ T3086] device hsr_slave_0 left promiscuous mode [ 468.192520][ T3086] device hsr_slave_1 left promiscuous mode [ 468.201549][ T3086] device veth1_macvtap left promiscuous mode [ 468.208314][ T3086] device veth1_vlan left promiscuous mode [ 468.214214][ T3086] device veth0_vlan left promiscuous mode [ 468.390674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.400785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.536752][T15967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.568417][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.575999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.596456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.607137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.619050][T15943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.630471][T15967] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.676546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.685911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.713223][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.720372][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.758353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.766812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.793843][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.818138][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.825244][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.838958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.858330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.882105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.910046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.930935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.940639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.964896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.983659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.005761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.031690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.040939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.054188][T15967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.092937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.106054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.138034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.147186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.162878][T15943] device veth0_vlan entered promiscuous mode [ 469.178780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.186804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.218720][T15943] device veth1_vlan entered promiscuous mode [ 469.270547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 469.284909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 469.309732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.322098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.334488][T15943] device veth0_macvtap entered promiscuous mode [ 469.355798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 469.376012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.385452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.400711][T15943] device veth1_macvtap entered promiscuous mode [ 469.411256][T15967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.420325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.461205][T15943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.477815][T15943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.485328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.508000][ T4978] Bluetooth: hci1: command 0x041b tx timeout [ 469.520214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.533863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.561369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.574571][T15943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.600319][T15943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.617510][T15943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.626255][T15943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.763983][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.779808][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.801893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 469.850474][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.873037][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.882275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.893806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.906029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 469.965226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.978211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.999587][T15967] device veth0_vlan entered promiscuous mode [ 470.015921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.066587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.101395][T15967] device veth1_vlan entered promiscuous mode [ 470.152828][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.188265][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.208255][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.245277][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.257866][T12078] Bluetooth: hci0: command 0x041b tx timeout [ 470.268088][T15967] device veth0_macvtap entered promiscuous mode [ 470.293180][T15967] device veth1_macvtap entered promiscuous mode [ 470.344625][T16099] IPv6: Can't replace route, no match found [ 470.356877][T16104] validate_nla: 5 callbacks suppressed [ 470.356947][T16104] netlink: 'syz.5.4063': attribute type 9 has an invalid length. [ 470.371595][T15967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.406879][T15967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.430725][T16104] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4063'. [ 470.452005][T15967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.465020][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.483352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.492326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.504851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.517041][T16111] netlink: 'syz.0.4065': attribute type 10 has an invalid length. [ 470.573823][T15967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.596795][T15967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.617073][T15967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.628797][T16109] IPv6: Can't replace route, no match found [ 470.639916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.659129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.681474][T16117] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 470.711370][T15967] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.741171][T15967] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.760792][T15967] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.786209][T15967] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.071795][T16128] netlink: 'syz.4.4068': attribute type 10 has an invalid length. [ 471.083451][T16129] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 471.619761][T16097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.660643][T16097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.684240][T12078] Bluetooth: hci1: command 0x040f tx timeout [ 471.816070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 471.845212][T16097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.865134][T16097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.883788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.194052][T16159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.279388][T16159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.306817][T16159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.317962][ T4978] Bluetooth: hci0: command 0x040f tx timeout [ 472.343285][T16159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.448330][T16161] IPv6: Can't replace route, no match found [ 472.467423][T16167] IPv6: Can't replace route, no match found [ 472.501982][T16177] netlink: 'syz.4.4083': attribute type 10 has an invalid length. [ 472.523387][T16178] netlink: 'syz.0.4085': attribute type 10 has an invalid length. [ 472.532881][T16167] netlink: 'syz.2.4084': attribute type 10 has an invalid length. [ 472.717807][T16189] IPv6: Can't replace route, no match found [ 472.734023][T16191] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 472.763916][T16190] netlink: 'syz.6.4088': attribute type 9 has an invalid length. [ 472.769945][T16189] netlink: 'syz.0.4098': attribute type 10 has an invalid length. [ 472.795105][T16190] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4088'. [ 472.922185][ T3086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.084319][ T3086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.160199][ T3086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.330501][ T3086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.419687][T16217] IPv6: Can't replace route, no match found [ 473.457989][T16224] netlink: 'syz.2.4097': attribute type 10 has an invalid length. [ 473.838255][ T1335] Bluetooth: hci1: command 0x0419 tx timeout [ 473.951959][T16235] IPv6: Can't replace route, no match found [ 474.112863][T16247] team0: Port device wlan1 added [ 474.265357][T16251] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.4110'. [ 474.319145][T16252] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 474.387848][T12078] Bluetooth: hci0: command 0x0419 tx timeout [ 474.541656][T16261] IPv6: Can't replace route, no match found [ 474.784534][T16272] device sit0 entered promiscuous mode [ 474.854712][ T3086] device erspan0 left promiscuous mode [ 474.870611][ T3086] GPL: port 1(erspan0) entered disabled state [ 474.940247][T16279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4121'. [ 475.068575][T16277] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4120'. [ 475.115452][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4122'. [ 475.376650][T16292] IPv6: Can't replace route, no match found [ 475.444647][T16292] validate_nla: 6 callbacks suppressed [ 475.453775][T16292] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 475.476430][T16297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.510320][T16297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.564482][T16297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.599659][T16297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.759708][T16326] netlink: 'syz.5.4130': attribute type 10 has an invalid length. [ 476.834519][T16326] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 476.862885][T16324] IPv6: Can't replace route, no match found [ 476.870768][T16329] netlink: 'syz.4.4132': attribute type 10 has an invalid length. [ 477.009481][T16335] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4134'. [ 477.071733][ T3086] device hsr_slave_0 left promiscuous mode [ 477.093151][ T3086] device hsr_slave_1 left promiscuous mode [ 477.148356][ T3086] device veth1_macvtap left promiscuous mode [ 477.154477][ T3086] device veth1_vlan left promiscuous mode [ 477.209697][ T3086] device veth0_vlan left promiscuous mode [ 477.905870][ T3086] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 477.972760][ T3086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.996263][ T3086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.094622][ T3086] bond0 (unregistering): Released all slaves [ 478.147870][T16350] IPv6: Can't replace route, no match found [ 478.160688][T16359] netlink: 'syz.6.4139': attribute type 10 has an invalid length. [ 478.211489][T16359] team0: Port device wlan1 added [ 478.228007][T16365] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 478.269374][T16381] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 478.298165][T16381] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 478.316770][T16381] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 478.356243][T16381] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 478.371975][T16381] netlink: 'syz.2.4144': attribute type 29 has an invalid length. [ 478.556120][T16389] IPv6: Can't replace route, no match found [ 478.674854][T16396] netlink: 'syz.6.4148': attribute type 10 has an invalid length. [ 479.033785][T16407] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4154'. [ 479.080094][T16410] IPv6: Can't replace route, no match found [ 479.532279][T16440] IPv6: Can't replace route, no match found [ 480.209666][T16463] IPv6: Can't replace route, no match found [ 480.411454][T16480] IPv6: Can't replace route, no match found [ 480.471407][T16480] validate_nla: 7 callbacks suppressed [ 480.471441][T16480] netlink: 'syz.4.4180': attribute type 10 has an invalid length. [ 480.581982][T16492] netlink: 'syz.2.4182': attribute type 10 has an invalid length. [ 480.914563][T16507] IPv6: Can't replace route, no match found [ 481.010667][T16507] netlink: 'syz.6.4189': attribute type 10 has an invalid length. [ 481.348308][T16528] [ 481.350681][T16528] ====================================================== [ 481.357702][T16528] WARNING: possible circular locking dependency detected [ 481.364727][T16528] 5.15.181-syzkaller #0 Not tainted [ 481.370374][T16528] ------------------------------------------------------ [ 481.377391][T16528] syz.4.4196/16528 is trying to acquire lock: [ 481.383444][T16528] ffff8880236279b8 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 481.392324][T16528] [ 481.392324][T16528] but task is already holding lock: [ 481.399670][T16528] ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 481.409139][T16528] [ 481.409139][T16528] which lock already depends on the new lock. [ 481.409139][T16528] [ 481.419539][T16528] [ 481.419539][T16528] the existing dependency chain (in reverse order) is: [ 481.428560][T16528] [ 481.428560][T16528] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 481.435849][T16528] _raw_spin_lock_nested+0x2e/0x40 [ 481.441477][T16528] raw_spin_rq_lock_nested+0x26/0x140 [ 481.447642][T16528] task_fork_fair+0x5c/0x350 [ 481.452755][T16528] sched_cgroup_fork+0x2c6/0x320 [ 481.458215][T16528] copy_process+0x22bd/0x3e60 [ 481.463413][T16528] kernel_clone+0x219/0x930 [ 481.468425][T16528] kernel_thread+0xc8/0x120 [ 481.473546][T16528] rest_init+0x21/0x330 [ 481.478215][T16528] start_kernel+0x486/0x530 [ 481.483227][T16528] secondary_startup_64_no_verify+0xb1/0xbb [ 481.489626][T16528] [ 481.489626][T16528] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 481.496922][T16528] _raw_spin_lock_irqsave+0xa4/0xf0 [ 481.502647][T16528] try_to_wake_up+0x5c/0x1050 [ 481.507862][T16528] __wake_up_common+0x2a4/0x4e0 [ 481.513222][T16528] __wake_up+0x108/0x180 [ 481.517972][T16528] tty_port_default_wakeup+0xa5/0xf0 [ 481.523766][T16528] serial8250_tx_chars+0x629/0x830 [ 481.529387][T16528] serial8250_handle_irq+0x519/0x610 [ 481.535181][T16528] serial8250_default_handle_irq+0xb4/0x1a0 [ 481.541653][T16528] serial8250_interrupt+0x9b/0x1c0 [ 481.547314][T16528] __handle_irq_event_percpu+0x291/0x9b0 [ 481.553461][T16528] handle_irq_event+0xa5/0x220 [ 481.558751][T16528] handle_edge_irq+0x243/0xb20 [ 481.564044][T16528] __common_interrupt+0xd7/0x1e0 [ 481.569489][T16528] common_interrupt+0xb0/0xd0 [ 481.574691][T16528] asm_common_interrupt+0x22/0x40 [ 481.580236][T16528] __sanitizer_cov_trace_pc+0x0/0x60 [ 481.586109][T16528] mark_page_accessed+0x1ff/0x12b0 [ 481.591728][T16528] unmap_page_range+0xe10/0x2520 [ 481.597172][T16528] unmap_vmas+0x11b/0x230 [ 481.602008][T16528] exit_mmap+0x38f/0x5f0 [ 481.606769][T16528] __mmput+0x115/0x3b0 [ 481.611361][T16528] exit_mm+0x567/0x6c0 [ 481.615939][T16528] do_exit+0x599/0x20a0 [ 481.620604][T16528] do_group_exit+0x12e/0x300 [ 481.625705][T16528] __x64_sys_exit_group+0x3b/0x40 [ 481.631237][T16528] do_syscall_64+0x4c/0xa0 [ 481.636177][T16528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.642605][T16528] [ 481.642605][T16528] -> #3 (&tty->write_wait){-...}-{2:2}: [ 481.650324][T16528] _raw_spin_lock_irqsave+0xa4/0xf0 [ 481.656038][T16528] __wake_up+0xed/0x180 [ 481.660710][T16528] tty_port_default_wakeup+0xa5/0xf0 [ 481.666528][T16528] serial8250_tx_chars+0x629/0x830 [ 481.672157][T16528] serial8250_handle_irq+0x519/0x610 [ 481.677973][T16528] serial8250_default_handle_irq+0xb4/0x1a0 [ 481.684377][T16528] serial8250_interrupt+0x9b/0x1c0 [ 481.689995][T16528] __handle_irq_event_percpu+0x291/0x9b0 [ 481.696136][T16528] handle_irq_event+0xa5/0x220 [ 481.701407][T16528] handle_edge_irq+0x243/0xb20 [ 481.706680][T16528] __common_interrupt+0xd7/0x1e0 [ 481.712125][T16528] common_interrupt+0xb0/0xd0 [ 481.717311][T16528] asm_common_interrupt+0x22/0x40 [ 481.722843][T16528] default_idle+0xb/0x10 [ 481.727614][T16528] default_idle_call+0x81/0xc0 [ 481.732888][T16528] do_idle+0x21b/0x5b0 [ 481.737465][T16528] cpu_startup_entry+0x14/0x20 [ 481.742736][T16528] start_kernel+0x486/0x530 [ 481.747749][T16528] secondary_startup_64_no_verify+0xb1/0xbb [ 481.754153][T16528] [ 481.754153][T16528] -> #2 (&port_lock_key){-...}-{2:2}: [ 481.761711][T16528] _raw_spin_lock_irqsave+0xa4/0xf0 [ 481.767421][T16528] serial8250_console_write+0x170/0xf80 [ 481.773478][T16528] console_unlock+0xc86/0x1200 [ 481.778753][T16528] vprintk_emit+0xc0/0x150 [ 481.783699][T16528] _printk+0xcc/0x110 [ 481.788190][T16528] register_console+0x682/0x960 [ 481.793551][T16528] univ8250_console_init+0x41/0x50 [ 481.799176][T16528] console_init+0x177/0x5d0 [ 481.804188][T16528] start_kernel+0x2f9/0x530 [ 481.809199][T16528] secondary_startup_64_no_verify+0xb1/0xbb [ 481.815603][T16528] [ 481.815603][T16528] -> #1 (console_owner){-...}-{0:0}: [ 481.823058][T16528] console_lock_spinning_enable+0x51/0x60 [ 481.829283][T16528] console_unlock+0x9f8/0x1200 [ 481.834559][T16528] vprintk_emit+0xc0/0x150 [ 481.839486][T16528] _printk+0xcc/0x110 [ 481.843978][T16528] debug_objects_oom+0x89/0x2f0 [ 481.849342][T16528] debug_object_activate+0x409/0x480 [ 481.855136][T16528] kvfree_call_rcu+0xb5/0x7c0 [ 481.860324][T16528] trie_update_elem+0x86e/0xc50 [ 481.865686][T16528] bpf_map_update_value+0x591/0x670 [ 481.871391][T16528] generic_map_update_batch+0x525/0x7c0 [ 481.877443][T16528] bpf_map_do_batch+0x466/0x600 [ 481.882890][T16528] __sys_bpf+0x601/0x670 [ 481.887643][T16528] __x64_sys_bpf+0x78/0x90 [ 481.892571][T16528] do_syscall_64+0x4c/0xa0 [ 481.897492][T16528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.903897][T16528] [ 481.903897][T16528] -> #0 (&trie->lock){....}-{2:2}: [ 481.911180][T16528] __lock_acquire+0x2c33/0x7c60 [ 481.916543][T16528] lock_acquire+0x197/0x3f0 [ 481.921555][T16528] _raw_spin_lock_irqsave+0xa4/0xf0 [ 481.927260][T16528] trie_delete_elem+0x90/0x710 [ 481.932537][T16528] bpf_prog_23acd8d4dd37acf1+0x58/0x7f4 [ 481.938596][T16528] bpf_trace_run2+0x15b/0x2d0 [ 481.943809][T16528] trace_tlb_flush+0xe6/0x110 [ 481.948994][T16528] switch_mm_irqs_off+0x6e3/0x9a0 [ 481.954524][T16528] __schedule+0x1021/0x43b0 [ 481.959536][T16528] schedule+0x11b/0x1e0 [ 481.964217][T16528] futex_wait_queue_me+0x22d/0x440 [ 481.969837][T16528] futex_wait+0x202/0x5c0 [ 481.974671][T16528] do_futex+0xd1c/0x1240 [ 481.979420][T16528] __se_sys_futex+0x3a3/0x430 [ 481.984602][T16528] do_syscall_64+0x4c/0xa0 [ 481.989541][T16528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 481.995944][T16528] [ 481.995944][T16528] other info that might help us debug this: [ 481.995944][T16528] [ 482.006153][T16528] Chain exists of: [ 482.006153][T16528] &trie->lock --> &p->pi_lock --> &rq->__lock [ 482.006153][T16528] [ 482.018131][T16528] Possible unsafe locking scenario: [ 482.018131][T16528] [ 482.025581][T16528] CPU0 CPU1 [ 482.030941][T16528] ---- ---- [ 482.036306][T16528] lock(&rq->__lock); [ 482.040379][T16528] lock(&p->pi_lock); [ 482.046949][T16528] lock(&rq->__lock); [ 482.053524][T16528] lock(&trie->lock); [ 482.057577][T16528] [ 482.057577][T16528] *** DEADLOCK *** [ 482.057577][T16528] [ 482.065701][T16528] 2 locks held by syz.4.4196/16528: [ 482.070887][T16528] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 482.080793][T16528] #1: ffffffff8c11be60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 482.090086][T16528] [ 482.090086][T16528] stack backtrace: [ 482.095983][T16528] CPU: 0 PID: 16528 Comm: syz.4.4196 Not tainted 5.15.181-syzkaller #0 [ 482.104235][T16528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 482.114303][T16528] Call Trace: [ 482.117575][T16528] [ 482.120495][T16528] dump_stack_lvl+0x168/0x230 [ 482.125175][T16528] ? load_image+0x3b0/0x3b0 [ 482.129669][T16528] ? show_regs_print_info+0x20/0x20 [ 482.134889][T16528] ? print_circular_bug+0x12b/0x1a0 [ 482.140078][T16528] check_noncircular+0x274/0x310 [ 482.145004][T16528] ? add_chain_block+0x940/0x940 [ 482.149924][T16528] ? lockdep_lock+0xdc/0x1e0 [ 482.154502][T16528] ? register_lock_class+0xb1/0x880 [ 482.159691][T16528] ? mark_lock+0x94/0x320 [ 482.164009][T16528] ? _find_first_zero_bit+0xce/0xf0 [ 482.169193][T16528] __lock_acquire+0x2c33/0x7c60 [ 482.174050][T16528] ? __lock_acquire+0x12d9/0x7c60 [ 482.179070][T16528] ? verify_lock_unused+0x140/0x140 [ 482.184260][T16528] ? perf_trace_lock_acquire+0xe3/0x3c0 [ 482.189800][T16528] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 482.196386][T16528] lock_acquire+0x197/0x3f0 [ 482.200921][T16528] ? trie_delete_elem+0x90/0x710 [ 482.205850][T16528] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 482.212427][T16528] ? read_lock_is_recursive+0x10/0x10 [ 482.217787][T16528] ? perf_trace_lock+0xdf/0x370 [ 482.222632][T16528] _raw_spin_lock_irqsave+0xa4/0xf0 [ 482.227836][T16528] ? trie_delete_elem+0x90/0x710 [ 482.232779][T16528] ? _raw_spin_lock+0x40/0x40 [ 482.237471][T16528] trie_delete_elem+0x90/0x710 [ 482.242232][T16528] ? strncpy_from_user_nofault+0xde/0x140 [ 482.247952][T16528] bpf_prog_23acd8d4dd37acf1+0x58/0x7f4 [ 482.253490][T16528] bpf_trace_run2+0x15b/0x2d0 [ 482.258161][T16528] ? __update_load_avg_se+0x6e9/0xb90 [ 482.263541][T16528] ? bpf_trace_run1+0x2d0/0x2d0 [ 482.268406][T16528] ? __perf_event_task_sched_out+0xa6a/0xdb0 [ 482.274387][T16528] trace_tlb_flush+0xe6/0x110 [ 482.279067][T16528] switch_mm_irqs_off+0x6e3/0x9a0 [ 482.284081][T16528] ? switch_mm+0x120/0x120 [ 482.288571][T16528] ? psi_task_switch+0x4d6/0x810 [ 482.293506][T16528] __schedule+0x1021/0x43b0 [ 482.298038][T16528] ? futex_wait_queue_me+0x178/0x440 [ 482.303314][T16528] ? release_firmware_map_entry+0x190/0x190 [ 482.309201][T16528] ? __lock_acquire+0x7c60/0x7c60 [ 482.314312][T16528] ? plist_add+0x3d4/0x480 [ 482.318722][T16528] schedule+0x11b/0x1e0 [ 482.322868][T16528] futex_wait_queue_me+0x22d/0x440 [ 482.327974][T16528] futex_wait+0x202/0x5c0 [ 482.332295][T16528] ? do_futex+0x1240/0x1240 [ 482.336800][T16528] ? perf_trace_lock+0xdf/0x370 [ 482.341649][T16528] do_futex+0xd1c/0x1240 [ 482.345887][T16528] ? rcu_lock_release+0x5/0x20 [ 482.350666][T16528] ? futex_exit_release+0x1c0/0x1c0 [ 482.355856][T16528] ? __context_tracking_exit+0x4c/0x80 [ 482.361310][T16528] ? __lock_acquire+0x7c60/0x7c60 [ 482.366457][T16528] __se_sys_futex+0x3a3/0x430 [ 482.371268][T16528] ? __x64_sys_futex+0xf0/0xf0 [ 482.376077][T16528] ? vtime_user_exit+0x2dc/0x400 [ 482.381113][T16528] ? __x64_sys_futex+0x1d/0xf0 [ 482.385876][T16528] do_syscall_64+0x4c/0xa0 [ 482.390287][T16528] ? clear_bhb_loop+0x15/0x70 [ 482.394954][T16528] ? clear_bhb_loop+0x15/0x70 [ 482.399619][T16528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.405515][T16528] RIP: 0033:0x7f9f2c4d5969 [ 482.409920][T16528] Code: Unable to access opcode bytes at RIP 0x7f9f2c4d593f. [ 482.417268][T16528] RSP: 002b:00007f9f2a33d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.425670][T16528] RAX: ffffffffffffffda RBX: 00007f9f2c6fcfa8 RCX: 00007f9f2c4d5969 [ 482.433631][T16528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f2c6fcfa8 [ 482.441599][T16528] RBP: 00007f9f2c6fcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 482.449647][T16528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f2c6fcfac [ 482.457606][T16528] R13: 0000000000000000 R14: 00007ffd972e82c0 R15: 00007ffd972e83a8 [ 482.465597][T16528]