last executing test programs: 1m0.875365101s ago: executing program 3 (id=2332): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f0000000380)="45e709220c24481a59bfec90a72d85", &(0x7f00000003c0)=""/49}, 0x20) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="e03f03002f000b08d25a80648c7494f90424fc600b00026ace17f6eb280eba24b6bd2efd4b33e50ead8f5bd4195f525277a8533ed508bbb907815d01a8f57722266540fcd01c8c0fd3e7e3c0faadaa0abb98b1531db0b3b32733", 0x5a}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x6, 0xfc, 0x76, 0x0, 0x0, 0x6, 0x15c08, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x5, 0x8}, 0x2000, 0x4, 0x7, 0x2, 0x6, 0x9, 0xfffe, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0x9, r0, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 59.723239207s ago: executing program 3 (id=2337): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200"/32], 0xfdef) 59.554675771s ago: executing program 3 (id=2342): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000000000000008000000", @ANYRESOCT], 0x38}, 0x0) 59.359773285s ago: executing program 3 (id=2344): socket$kcm(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x1}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x40, 0x4, 0x8, 0x0, 0x0, 0xe, 0x6000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}, 0x12010, 0x2, 0x0, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7f, 0x0, 0x2}, r2, 0x6, r0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 55.951936122s ago: executing program 3 (id=2355): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x41000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 55.775054266s ago: executing program 3 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb012018000000000000000c0000000c00000304000000020000000000000f0400002c60005f00"], 0x0, 0x28, 0x0, 0x0, 0x9}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001280)={r0, &(0x7f00000002c0)="98de304a3a780b66", 0x0, 0x4}, 0x20) recvmsg$kcm(r2, &(0x7f0000000880)={&(0x7f0000000340)=@tipc=@id, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000000740)=""/66, 0x42}], 0x4, &(0x7f0000000800)=""/115, 0x73}, 0x42) (async) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d", 0x1e}], 0x1, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x38}, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, @perf_bp={0x0}, 0x820, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 47.939628012s ago: executing program 1 (id=2381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600000011000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 44.526922889s ago: executing program 2 (id=2385): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000d000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4009044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 41.626106234s ago: executing program 2 (id=2387): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x7}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f03000000ffff002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 41.575424755s ago: executing program 1 (id=2388): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x201, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff0720670600001f000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 41.471933838s ago: executing program 0 (id=2389): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x64}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 41.419485328s ago: executing program 2 (id=2390): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000028bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 41.310017921s ago: executing program 1 (id=2391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2, @perf_bp={0x0, 0x8}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 41.251843722s ago: executing program 2 (id=2392): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffc}, 0x0, 0x7, r3, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000000000000000000000000ffff"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 41.249392702s ago: executing program 0 (id=2399): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x201, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff0720670600001f000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 38.390132637s ago: executing program 0 (id=2393): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf00}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) 38.383747077s ago: executing program 1 (id=2394): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x0, 0x46, 0x0, 0x6, 0xffffffff}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r0], 0x0, 0x46, 0x0, 0x6, 0xffffffff}, 0x28) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffbb) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB="adfa7e9eb400935856d3d7f0f911c6e4ab2e6108bb209cd4316db9846fbc8327bd3f4d54857083276ad66ea3e29fda887d38c3bd4a11636d6b4c665d5dccd42d21a5f0b254af48b5e9e0526a9bd0e620cfbfe851e1bd9739fd99c82a7cc3f0bb4a90eb099dcb5c3084262e35067f616e6f0fd881169251a13bf25489108d2de0f16e68e344a2e1ee63469fd298254430dbf3", @ANYRES64=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="9f32076e90ed156ee85167e921ad67f714a0ed969c69bb1d8227ca6713a3c98921e79b252d2b793bac28eeeeddc736e1252e62176facf31fdef8bac8b2636c3cf4726fc8e6d29866ce1982440bc6f785f42a4bb3b5ec"], 0x48) close(r4) (async) close(r4) socket$kcm(0x2, 0x5, 0x0) (async) socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x1000, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x4000400004, 0xffffffffffffffff, 0xb) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000005c0), 0xe}, 0x1000, 0x32, 0x43a1bd77, 0x2, 0x9, 0x400006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000300), &(0x7f00000004c0)=r7}, 0x20) close(0x3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) (async) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x1e, 0x5, 0x0) (async) r10 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x79) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4010, r6}, 0x18) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000440), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000440), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 38.092119983s ago: executing program 2 (id=2395): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790712117df37538e486dd6317ce220000000000000000000000000000ffff"], 0xfdef) 37.965003866s ago: executing program 0 (id=2396): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 37.885754888s ago: executing program 2 (id=2397): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000002c00000085000000d000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x9, 0x2, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x320) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 37.830113689s ago: executing program 1 (id=2398): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="a0", 0x1}, {&(0x7f0000000240)="94", 0x1}], 0x2}, 0xd0a0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 37.670700273s ago: executing program 0 (id=2400): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000060002007a17d30460bc24eab556a705251e6182949a36c23d3b48dfd8cdbfb367b498fa51f60a64c9f4d4938037e786a6d0bdd7", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r4, 0x0, 0x800000000}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x2}, {0x1, 0x2}]}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000f40)=""/4089, 0x38, 0xff9, 0x8, 0xfffffffa}, 0x28) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000000fb8af8ff00000000bca200ffb7f5b455e223b609b70353c1f6a8dbbe03000008000000b7040000000000008500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r10 = socket$kcm(0x18, 0x2, 0x0) sendmsg$inet(r10, 0x0, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000002c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) 37.670447703s ago: executing program 1 (id=2401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002b40)={&(0x7f0000001980), &(0x7f0000002980)=""/206, 0x0, 0x0, 0x8000, r0, 0x4}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 37.067905997s ago: executing program 0 (id=2402): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x48a, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 214.134875ms ago: executing program 32 (id=2402): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0xc045d6e08e8aad4e, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x48a, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 0s ago: executing program 33 (id=2401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002b40)={&(0x7f0000001980), &(0x7f0000002980)=""/206, 0x0, 0x0, 0x8000, r0, 0x4}, 0x38) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 74.663771][ T5761] cgroup: Unknown subsys name 'net' [ 74.802527][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.535555][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.053600][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.063697][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.071424][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.080878][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.089850][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.097835][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.105699][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.125792][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.138127][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.146620][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.154902][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.163480][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.164721][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.179311][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.186659][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.214901][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.234324][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.242004][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.250638][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.251271][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.258505][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.266453][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.273008][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.280183][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.602167][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.787271][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.796349][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.803779][ T5773] bridge_slave_0: entered allmulticast mode [ 78.813195][ T5773] bridge_slave_0: entered promiscuous mode [ 78.825699][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.832904][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.840648][ T5773] bridge_slave_1: entered allmulticast mode [ 78.847814][ T5773] bridge_slave_1: entered promiscuous mode [ 78.896200][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 78.912548][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.928675][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 78.951702][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.999208][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.052104][ T5773] team0: Port device team_slave_0 added [ 79.087141][ T5773] team0: Port device team_slave_1 added [ 79.162253][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.169480][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.195719][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.209860][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.216903][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.243267][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.270469][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.278068][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.285805][ T5780] bridge_slave_0: entered allmulticast mode [ 79.292716][ T5780] bridge_slave_0: entered promiscuous mode [ 79.300964][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.308453][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.315757][ T5780] bridge_slave_1: entered allmulticast mode [ 79.322719][ T5780] bridge_slave_1: entered promiscuous mode [ 79.343460][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.350776][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.358401][ T5783] bridge_slave_0: entered allmulticast mode [ 79.366044][ T5783] bridge_slave_0: entered promiscuous mode [ 79.399868][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.407186][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.414328][ T5783] bridge_slave_1: entered allmulticast mode [ 79.421571][ T5783] bridge_slave_1: entered promiscuous mode [ 79.471783][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.479437][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.486865][ T5776] bridge_slave_0: entered allmulticast mode [ 79.493775][ T5776] bridge_slave_0: entered promiscuous mode [ 79.504281][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.521078][ T5773] hsr_slave_0: entered promiscuous mode [ 79.527630][ T5773] hsr_slave_1: entered promiscuous mode [ 79.548957][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.559163][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.566810][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.574094][ T5776] bridge_slave_1: entered allmulticast mode [ 79.581137][ T5776] bridge_slave_1: entered promiscuous mode [ 79.590022][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.628217][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.700770][ T5783] team0: Port device team_slave_0 added [ 79.709184][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.723044][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.735793][ T5780] team0: Port device team_slave_0 added [ 79.751424][ T5783] team0: Port device team_slave_1 added [ 79.777704][ T5780] team0: Port device team_slave_1 added [ 79.823290][ T5776] team0: Port device team_slave_0 added [ 79.861771][ T5776] team0: Port device team_slave_1 added [ 79.868240][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.875352][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.901333][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.920806][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.928147][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.955338][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.989418][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.999213][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.025544][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.057702][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.065606][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.092781][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.104895][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.111869][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.138281][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.161470][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.168563][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.175447][ T5786] Bluetooth: hci0: command tx timeout [ 80.194670][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.245814][ T5786] Bluetooth: hci1: command tx timeout [ 80.255469][ T5780] hsr_slave_0: entered promiscuous mode [ 80.261874][ T5780] hsr_slave_1: entered promiscuous mode [ 80.269788][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.278262][ T5780] Cannot create hsr debugfs directory [ 80.324723][ T5786] Bluetooth: hci2: command tx timeout [ 80.330656][ T51] Bluetooth: hci3: command tx timeout [ 80.386078][ T5783] hsr_slave_0: entered promiscuous mode [ 80.394655][ T5783] hsr_slave_1: entered promiscuous mode [ 80.400944][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.409213][ T5783] Cannot create hsr debugfs directory [ 80.426009][ T5776] hsr_slave_0: entered promiscuous mode [ 80.434773][ T5776] hsr_slave_1: entered promiscuous mode [ 80.440903][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.448791][ T5776] Cannot create hsr debugfs directory [ 80.603514][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.641364][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.652522][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.705384][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.923757][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.946758][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.959274][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.970261][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.036312][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.053146][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.063146][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.076282][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.179354][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.196918][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.208161][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.220199][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.234952][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.276139][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.299130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.306601][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.331295][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.338629][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.393904][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.460909][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.508127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.515356][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.527422][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.534645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.704314][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.739205][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.787080][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.808200][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.862490][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.869833][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.883700][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.891005][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.923791][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.941536][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.948814][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.010243][ T4582] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.017486][ T4582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.093629][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.110716][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.169399][ T5773] veth0_vlan: entered promiscuous mode [ 82.194132][ T5773] veth1_vlan: entered promiscuous mode [ 82.219389][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.231813][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.245672][ T51] Bluetooth: hci0: command tx timeout [ 82.326071][ T51] Bluetooth: hci1: command tx timeout [ 82.360389][ T5773] veth0_macvtap: entered promiscuous mode [ 82.400273][ T5773] veth1_macvtap: entered promiscuous mode [ 82.406209][ T51] Bluetooth: hci2: command tx timeout [ 82.416065][ T51] Bluetooth: hci3: command tx timeout [ 82.423949][ T5776] veth0_vlan: entered promiscuous mode [ 82.513804][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.522647][ T5776] veth1_vlan: entered promiscuous mode [ 82.590736][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.612823][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.637794][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.647427][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.657286][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.666432][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.720848][ T5776] veth0_macvtap: entered promiscuous mode [ 82.763671][ T5776] veth1_macvtap: entered promiscuous mode [ 82.780221][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.792259][ T5780] veth0_vlan: entered promiscuous mode [ 82.830693][ T5780] veth1_vlan: entered promiscuous mode [ 82.853952][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.865235][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.878679][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.926484][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.938175][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.948777][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.954627][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.961253][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.983019][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.992528][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.001674][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010463][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.092672][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.102922][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.137785][ T5780] veth0_macvtap: entered promiscuous mode [ 83.171768][ T5783] veth0_vlan: entered promiscuous mode [ 83.215846][ T5780] veth1_macvtap: entered promiscuous mode [ 83.265057][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.272960][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.298155][ T5783] veth1_vlan: entered promiscuous mode [ 83.313571][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.340277][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.350988][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.362666][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.378468][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.414687][ C1] hrtimer: interrupt took 69477 ns [ 83.434193][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.453015][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.463913][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.480148][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.493255][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.512515][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.522532][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.535094][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.546871][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.562930][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.573779][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.658412][ T5783] veth0_macvtap: entered promiscuous mode [ 83.696847][ T5783] veth1_macvtap: entered promiscuous mode [ 83.868293][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.900413][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.940926][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.977707][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.029006][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.086047][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.108708][ T5836] Zero length message leads to an empty skb [ 84.130270][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.201881][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.270827][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.302074][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.313093][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.334867][ T51] Bluetooth: hci0: command tx timeout [ 84.340888][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.351831][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.364672][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.404919][ T51] Bluetooth: hci1: command tx timeout [ 84.491206][ T51] Bluetooth: hci3: command tx timeout [ 84.491276][ T5786] Bluetooth: hci2: command tx timeout [ 84.612621][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.621959][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.631452][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.640729][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.919907][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.928581][ T5840] netlink: 'syz.2.6': attribute type 33 has an invalid length. [ 84.941569][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.949949][ T5840] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6'. [ 85.426702][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.454848][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.649766][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.692408][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.884344][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.914582][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.055634][ T5850] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.119537][ T5850] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.407220][ T5786] Bluetooth: hci0: command tx timeout [ 86.485445][ T5786] Bluetooth: hci1: command tx timeout [ 86.564764][ T5786] Bluetooth: hci3: command tx timeout [ 86.567491][ T51] Bluetooth: hci2: command tx timeout [ 88.152940][ T5876] netlink: 'syz.0.15': attribute type 33 has an invalid length. [ 88.174726][ T5876] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15'. [ 88.281011][ T5881] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.17'. [ 88.936696][ T5890] netlink: 2 bytes leftover after parsing attributes in process `syz.2.19'. [ 88.985148][ T5890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.007530][ T5890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.020109][ T5890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.060916][ T5890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.083958][ T5890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.100282][ T5890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.112759][ T5890] batadv_slave_1: entered promiscuous mode [ 90.327880][ T5914] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.27'. [ 90.516038][ T5923] netlink: 'syz.3.31': attribute type 33 has an invalid length. [ 90.523781][ T5923] netlink: 152 bytes leftover after parsing attributes in process `syz.3.31'. [ 92.363576][ T27] cfg80211: failed to load regulatory.db [ 97.713026][ T5962] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 97.734483][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.743461][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.495840][ T5977] netlink: 830 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.587629][ T5984] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.629463][ T5977] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.49'. [ 98.674893][ T5984] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.49'. [ 100.091468][ T6013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.64'. [ 100.104344][ T6016] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.65'. [ 100.119557][ T6016] netlink: 'syz.1.65': attribute type 1 has an invalid length. [ 100.140402][ T6016] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.65'. [ 100.630887][ T6030] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 103.693663][ T6046] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 103.736336][ T6048] syzkaller0: entered promiscuous mode [ 103.741891][ T6048] syzkaller0: entered allmulticast mode [ 103.751387][ T6046] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 103.771159][ T6051] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 103.812292][ T6052] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 103.842065][ T6057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.849656][ T6057] IPv6: NLM_F_CREATE should be set when creating new route [ 103.857085][ T6057] IPv6: NLM_F_CREATE should be set when creating new route [ 103.864343][ T6057] IPv6: NLM_F_CREATE should be set when creating new route [ 103.879094][ T6056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.003574][ T6046] netlink: 'syz.3.76': attribute type 29 has an invalid length. [ 105.090330][ T6067] Driver unsupported XDP return value 0 on prog (id 96) dev N/A, expect packet loss! [ 110.169623][ T6074] syzkaller0: entered promiscuous mode [ 110.176450][ T6074] syzkaller0: entered allmulticast mode [ 110.300201][ T6076] netlink: 'syz.3.85': attribute type 21 has an invalid length. [ 110.569912][ T6082] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.86'. [ 112.022797][ T6079] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 112.032942][ T6079] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 112.048445][ T6081] netlink: 'syz.3.85': attribute type 11 has an invalid length. [ 112.056318][ T6081] netlink: 168 bytes leftover after parsing attributes in process `syz.3.85'. [ 112.086212][ T6082] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.86'. [ 113.186922][ T6111] netlink: 'syz.2.96': attribute type 29 has an invalid length. [ 113.365593][ T6111] netlink: 'syz.2.96': attribute type 29 has an invalid length. [ 113.559001][ T6111] netlink: 'syz.2.96': attribute type 29 has an invalid length. [ 116.424351][ T6126] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.102'. [ 116.714607][ T6122] raw_sendmsg: syz.1.99 forgot to set AF_INET. Fix it! [ 118.767593][ T6131] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 118.902443][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.910262][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.123272][ T6147] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.106'. [ 123.003829][ T6173] netlink: 'syz.0.113': attribute type 10 has an invalid length. [ 123.016534][ T6173] hsr_slave_0: left promiscuous mode [ 123.052340][ T6173] hsr_slave_1: left promiscuous mode [ 123.472391][ T6183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.116'. [ 123.825685][ T6187] warning: `syz.0.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.835892][ T6198] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.123'. [ 127.918411][ T6215] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.128'. [ 128.946411][ T6229] syz.0.133 (6229) used greatest stack depth: 20248 bytes left [ 130.432579][ T6258] netlink: 14 bytes leftover after parsing attributes in process `syz.1.144'. [ 130.443058][ T6258] netlink: get zone limit has 4 unknown bytes [ 130.527970][ T6263] netlink: 'syz.3.143': attribute type 21 has an invalid length. [ 130.742563][ T6263] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 130.775821][ T6263] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 130.835263][ T6275] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 130.873163][ T6275] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 130.918899][ T6263] netlink: 'syz.3.143': attribute type 11 has an invalid length. [ 130.977501][ T6263] netlink: 168 bytes leftover after parsing attributes in process `syz.3.143'. [ 131.087734][ T6281] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.146'. [ 134.106217][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.119673][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.141401][ T6298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.148743][ T6298] IPv6: NLM_F_CREATE should be set when creating new route [ 134.156073][ T6298] IPv6: NLM_F_CREATE should be set when creating new route [ 134.163463][ T6298] IPv6: NLM_F_CREATE should be set when creating new route [ 134.383392][ T6298] netlink: 'syz.2.155': attribute type 9 has an invalid length. [ 134.446573][ T6298] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.155'. [ 134.594692][ T6299] netlink: 'syz.2.155': attribute type 9 has an invalid length. [ 134.602416][ T6299] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.155'. [ 135.124187][ T6296] netlink: 'syz.2.155': attribute type 29 has an invalid length. [ 135.262401][ T6296] netlink: 'syz.2.155': attribute type 29 has an invalid length. [ 138.786839][ T6328] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 138.795568][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.803082][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.831835][ T6330] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.165'. [ 139.886698][ T6361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.175'. [ 141.147417][ T6398] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 141.188512][ T6398] hsr_slave_0: left promiscuous mode [ 141.310331][ T6398] hsr_slave_1: left promiscuous mode [ 141.682936][ T6407] netlink: 48 bytes leftover after parsing attributes in process `syz.2.193'. [ 142.456438][ T6425] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.200'. [ 142.717896][ T6434] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.204'. [ 146.448147][ T6462] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 146.459975][ T6462] netlink: 'syz.1.214': attribute type 4 has an invalid length. [ 146.472763][ T6462] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.214'. [ 147.275082][ T6486] syzkaller0: entered promiscuous mode [ 147.283273][ T6486] syzkaller0: entered allmulticast mode [ 152.235225][ T6508] netlink: 'syz.2.228': attribute type 21 has an invalid length. [ 152.662525][ T6516] syz.0.230 uses obsolete (PF_INET,SOCK_PACKET) [ 153.711842][ T6514] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 153.749719][ T6514] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 153.764197][ T6518] netlink: 'syz.2.228': attribute type 11 has an invalid length. [ 153.784810][ T6518] netlink: 168 bytes leftover after parsing attributes in process `syz.2.228'. [ 155.182058][ T6561] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 155.331195][ T6561] team0: Device nlmon0 is of different type [ 156.341148][ T6575] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.535487][ T6597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.255'. [ 157.879275][ T6608] netlink: 64 bytes leftover after parsing attributes in process `syz.2.260'. [ 157.901777][ T6608] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 157.908075][ T6608] dvmrp1: persist disabled [ 157.913635][ T6608] netlink: 'syz.2.260': attribute type 21 has an invalid length. [ 157.922503][ T6608] netlink: 156 bytes leftover after parsing attributes in process `syz.2.260'. [ 161.254615][ T6626] netlink: 'syz.3.266': attribute type 29 has an invalid length. [ 161.272532][ T6626] netlink: 'syz.3.266': attribute type 29 has an invalid length. [ 161.295357][ T6626] netlink: 'syz.3.266': attribute type 29 has an invalid length. [ 165.143971][ T6664] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.282'. [ 165.189061][ T6664] netlink: 'syz.0.282': attribute type 1 has an invalid length. [ 169.740855][ T6702] syzkaller0: entered promiscuous mode [ 169.773142][ T6702] syzkaller0: entered allmulticast mode [ 169.955733][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.298'. [ 172.504039][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.298'. [ 172.936380][ T6743] lo: entered promiscuous mode [ 173.260570][ T6749] netlink: 'syz.3.312': attribute type 11 has an invalid length. [ 173.268734][ T6749] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.312'. [ 178.458225][ T6774] netlink: 'syz.3.322': attribute type 10 has an invalid length. [ 178.723720][ T6781] syzkaller0: entered promiscuous mode [ 178.753796][ T6781] syzkaller0: entered allmulticast mode [ 186.656115][ T6856] netlink: 'syz.3.348': attribute type 7 has an invalid length. [ 186.664106][ T6856] netlink: 140 bytes leftover after parsing attributes in process `syz.3.348'. [ 186.692079][ T6858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.348'. [ 188.935009][ T6867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.351'. [ 190.066287][ T6897] netlink: 'syz.2.360': attribute type 9 has an invalid length. [ 190.084478][ T6897] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.360'. [ 190.244713][ T6898] netlink: 'syz.2.360': attribute type 9 has an invalid length. [ 190.252470][ T6898] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.360'. [ 190.783847][ T6905] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 191.032413][ T6907] syzkaller0: entered promiscuous mode [ 191.048233][ T6907] syzkaller0: entered allmulticast mode [ 194.742417][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.749219][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.985725][ T6944] netlink: 'syz.2.377': attribute type 29 has an invalid length. [ 195.994022][ T6944] netlink: 'syz.2.377': attribute type 29 has an invalid length. [ 196.416536][ T6947] netlink: 'syz.2.377': attribute type 29 has an invalid length. [ 196.632690][ T6950] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.380'. [ 196.650693][ T6950] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 198.851540][ T6959] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.384'. [ 201.944860][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 201.950955][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 201.957461][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 201.963497][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 202.542415][ T6981] syzkaller0: entered promiscuous mode [ 202.585979][ T6981] syzkaller0: entered allmulticast mode [ 202.623714][ T6990] netlink: 'syz.1.393': attribute type 9 has an invalid length. [ 202.678916][ T6990] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.393'. [ 210.320677][ T6992] netlink: 'syz.1.393': attribute type 9 has an invalid length. [ 210.334573][ T6992] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.393'. [ 214.624429][ T7041] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.410'. [ 215.167147][ T7060] netlink: 'syz.0.417': attribute type 9 has an invalid length. [ 215.199396][ T7060] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.417'. [ 215.371120][ T7062] netlink: 'syz.0.417': attribute type 9 has an invalid length. [ 215.423655][ T7062] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.417'. [ 216.987055][ T7089] netlink: 'syz.3.428': attribute type 21 has an invalid length. [ 217.141355][ T7089] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 217.151419][ T7089] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 217.212374][ T7092] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 217.219610][ T7092] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 217.230285][ T7093] netlink: 'syz.3.428': attribute type 11 has an invalid length. [ 217.238180][ T7093] netlink: 168 bytes leftover after parsing attributes in process `syz.3.428'. [ 217.413142][ T7100] netlink: 'syz.3.430': attribute type 9 has an invalid length. [ 217.421173][ T7100] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.430'. [ 217.473036][ T7102] netlink: 'syz.3.430': attribute type 9 has an invalid length. [ 217.483407][ T7102] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.430'. [ 218.989222][ T7132] netlink: 'syz.3.443': attribute type 29 has an invalid length. [ 219.029734][ T7132] netlink: 'syz.3.443': attribute type 29 has an invalid length. [ 219.044068][ T7132] netlink: 'syz.3.443': attribute type 29 has an invalid length. [ 219.801571][ T7160] netlink: 2 bytes leftover after parsing attributes in process `syz.1.455'. [ 219.811656][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.822917][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.844534][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.868420][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.879264][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.890590][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.901741][ T7160] batadv_slave_1: entered promiscuous mode [ 222.724007][ T7222] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 223.557235][ T7234] syzkaller0: entered promiscuous mode [ 223.563729][ T7234] syzkaller0: entered allmulticast mode [ 227.613301][ T7273] netlink: 'syz.2.494': attribute type 10 has an invalid length. [ 227.621956][ T7273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.494'. [ 227.633268][ T7273] ipvlan1: entered promiscuous mode [ 227.654557][ T7273] ipvlan1: entered allmulticast mode [ 227.660040][ T7273] veth0_vlan: entered allmulticast mode [ 227.669440][ T7273] bridge0: port 3(ipvlan1) entered blocking state [ 227.685855][ T7273] bridge0: port 3(ipvlan1) entered disabled state [ 227.715860][ T7273] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 228.868609][ T7308] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 228.890746][ T7308] netlink: 184 bytes leftover after parsing attributes in process `syz.1.509'. [ 230.435898][ T7324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.515'. [ 231.712038][ T7350] netlink: 'syz.3.523': attribute type 12 has an invalid length. [ 231.752069][ T7350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.523'. [ 232.984519][ T7379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.537'. [ 233.487784][ T7384] syzkaller0: entered promiscuous mode [ 233.505901][ T7384] syzkaller0: entered allmulticast mode [ 237.219200][ T7435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.557'. [ 237.435764][ T7444] netlink: 'syz.0.559': attribute type 15 has an invalid length. [ 237.443707][ T7444] netlink: 'syz.0.559': attribute type 7 has an invalid length. [ 237.463247][ T7444] netlink: 52 bytes leftover after parsing attributes in process `syz.0.559'. [ 237.952905][ T7453] netlink: 'syz.0.564': attribute type 10 has an invalid length. [ 238.863373][ T7474] syzkaller0: entered promiscuous mode [ 238.870336][ T7474] syzkaller0: entered allmulticast mode [ 244.618673][ T7479] syzkaller0: entered promiscuous mode [ 244.624183][ T7479] syzkaller0: entered allmulticast mode [ 246.779363][ T7535] netlink: 'syz.2.590': attribute type 49 has an invalid length. [ 246.928921][ T7535] netlink: 'syz.2.590': attribute type 5 has an invalid length. [ 246.957422][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 252.071480][ T7581] netlink: 134736 bytes leftover after parsing attributes in process `syz.3.606'. [ 252.104138][ T7581] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 252.144095][ T7581] netlink: 'syz.3.606': attribute type 6 has an invalid length. [ 252.155071][ T7581] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.606'. [ 252.224142][ T7587] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 252.615277][ T7594] : port 1(ip6gretap0) entered blocking state [ 252.628550][ T7594] : port 1(ip6gretap0) entered disabled state [ 252.657633][ T7594] ip6gretap0: entered allmulticast mode [ 252.726224][ T7594] ip6gretap0: entered promiscuous mode [ 253.440007][ T7601] netlink: 'syz.3.613': attribute type 3 has an invalid length. [ 253.459193][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.613'. [ 254.538488][ T7625] netlink: 'syz.3.621': attribute type 3 has an invalid length. [ 254.553027][ T7625] netlink: 111088 bytes leftover after parsing attributes in process `syz.3.621'. [ 254.853231][ T7630] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.624'. [ 256.172893][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.183647][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.225807][ T7646] syz.3.631[7646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.225971][ T7646] syz.3.631[7646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.814489][ T7667] netlink: 'syz.2.636': attribute type 11 has an invalid length. [ 256.834483][ T7667] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 256.842413][ T7667] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.636'. [ 256.862667][ T5786] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 256.862706][ T5786] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 257.281362][ T7675] netlink: 'syz.2.640': attribute type 21 has an invalid length. [ 259.153582][ T7676] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 259.162062][ T7676] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 259.195444][ T7677] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 259.221345][ T7677] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 259.279693][ T7678] netlink: 'syz.2.640': attribute type 11 has an invalid length. [ 259.296324][ T7678] netlink: 168 bytes leftover after parsing attributes in process `syz.2.640'. [ 259.619816][ T7692] netlink: 'syz.3.645': attribute type 3 has an invalid length. [ 259.630139][ T7689] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 259.663458][ T7692] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 259.692573][ T7692] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.645'. [ 260.373275][ T7704] syzkaller0: entered promiscuous mode [ 260.389935][ T7704] syzkaller0: entered allmulticast mode [ 266.084296][ T7721] netlink: 'syz.3.655': attribute type 12 has an invalid length. [ 266.093397][ T7725] netlink: 'syz.3.655': attribute type 11 has an invalid length. [ 266.102014][ T7733] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 266.111651][ T7733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'. [ 266.135278][ T7733] team0: entered promiscuous mode [ 266.140668][ T7733] team_slave_0: entered promiscuous mode [ 266.166507][ T7733] team_slave_1: entered promiscuous mode [ 266.173933][ T7733] team0: entered allmulticast mode [ 266.186875][ T7733] team_slave_0: entered allmulticast mode [ 266.193008][ T7733] team_slave_1: entered allmulticast mode [ 266.204779][ T7733] bridge0: port 3(team0) entered blocking state [ 266.217489][ T7733] bridge0: port 3(team0) entered disabled state [ 266.252999][ T7733] bridge0: port 3(team0) entered blocking state [ 266.259957][ T7733] bridge0: port 3(team0) entered forwarding state [ 266.816733][ T7761] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.668'. [ 267.338847][ T7770] netlink: 196 bytes leftover after parsing attributes in process `syz.0.670'. [ 272.393115][ T7811] netlink: 'syz.0.680': attribute type 153 has an invalid length. [ 272.428136][ T7811] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.680'. [ 275.432864][ T7820] netlink: 196 bytes leftover after parsing attributes in process `syz.2.685'. [ 276.614637][ T7837] netlink: 'syz.0.689': attribute type 25 has an invalid length. [ 276.660171][ T7837] netlink: 'syz.0.689': attribute type 9 has an invalid length. [ 280.444971][ T5786] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 280.445014][ T5786] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 280.613839][ T7872] netlink: 196 bytes leftover after parsing attributes in process `syz.1.700'. [ 281.644691][ T7893] -1: renamed from syzkaller0 [ 282.087737][ T7911] netlink: 'syz.1.713': attribute type 21 has an invalid length. [ 282.273402][ T7911] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 282.281220][ T7911] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 282.297724][ T7914] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 284.659333][ T7914] hsr_slave_0: left promiscuous mode [ 284.737602][ T7914] hsr_slave_1: left promiscuous mode [ 284.896356][ T7911] netlink: 'syz.1.713': attribute type 11 has an invalid length. [ 284.921512][ T7911] netlink: 168 bytes leftover after parsing attributes in process `syz.1.713'. [ 286.081610][ T7948] netlink: 'syz.3.721': attribute type 153 has an invalid length. [ 286.083638][ T7945] netlink: 'syz.0.724': attribute type 29 has an invalid length. [ 286.116635][ T7953] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.727'. [ 286.122200][ T7945] netlink: 'syz.0.724': attribute type 29 has an invalid length. [ 286.152373][ T7942] netlink: 'syz.0.724': attribute type 29 has an invalid length. [ 286.155521][ T7948] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.721'. [ 287.239194][ T7973] netlink: 196 bytes leftover after parsing attributes in process `syz.2.735'. [ 287.622801][ T7978] tap0: tun_chr_ioctl cmd 1074025681 [ 287.646620][ T7977] netlink: 148 bytes leftover after parsing attributes in process `syz.3.731'. [ 291.353451][ T8011] netlink: 196 bytes leftover after parsing attributes in process `syz.1.745'. [ 295.433351][ T8038] netlink: 'syz.0.754': attribute type 10 has an invalid length. [ 295.477757][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.485231][ T8038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.493702][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.500934][ T8038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.549555][ T8038] team0: Port device bridge0 added [ 296.205680][ T8051] netlink: 'syz.1.758': attribute type 17 has an invalid length. [ 296.213494][ T8051] netlink: 'syz.1.758': attribute type 16 has an invalid length. [ 296.245681][ T8051] netlink: 152 bytes leftover after parsing attributes in process `syz.1.758'. [ 296.824439][ T8057] netlink: 62779 bytes leftover after parsing attributes in process `syz.1.758'. [ 299.903119][ T8086] netlink: 'syz.3.769': attribute type 39 has an invalid length. [ 303.656884][ T8102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.776'. [ 303.681007][ T8102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.830101][ T8148] netlink: 'syz.2.792': attribute type 21 has an invalid length. [ 306.926914][ T8150] netlink: 128 bytes leftover after parsing attributes in process `syz.3.793'. [ 306.938681][ T8150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.980986][ T8148] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 306.991570][ T8148] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 307.029410][ T8154] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 307.036719][ T8154] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 307.093681][ T8155] netlink: 'syz.2.792': attribute type 11 has an invalid length. [ 307.104149][ T8155] netlink: 168 bytes leftover after parsing attributes in process `syz.2.792'. [ 312.054726][ T8236] syzkaller0: entered promiscuous mode [ 312.060282][ T8236] syzkaller0: entered allmulticast mode [ 317.075139][ T8255] netlink: 'syz.0.834': attribute type 13 has an invalid length. [ 317.083378][ T8255] netlink: 160 bytes leftover after parsing attributes in process `syz.0.834'. [ 317.155714][ T8255] erspan0: refused to change device tx_queue_len [ 317.162358][ T8255] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 317.345030][ T8267] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 319.178137][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.184587][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.794595][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.801944][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.169380][ T8387] syz.1.872: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 334.207488][ T8387] CPU: 0 PID: 8387 Comm: syz.1.872 Not tainted syzkaller #0 [ 334.214865][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.224969][ T8387] Call Trace: [ 334.228269][ T8387] [ 334.231221][ T8387] dump_stack_lvl+0x18c/0x250 [ 334.235938][ T8387] ? show_regs_print_info+0x20/0x20 [ 334.241160][ T8387] ? load_image+0x420/0x420 [ 334.245684][ T8387] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 334.252118][ T8387] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 334.258638][ T8387] warn_alloc+0x246/0x340 [ 334.262993][ T8387] ? stack_trace_save+0xaa/0x100 [ 334.267958][ T8387] ? zone_watermark_ok_safe+0x230/0x230 [ 334.273538][ T8387] ? kasan_set_track+0x5f/0x70 [ 334.278315][ T8387] ? kasan_set_track+0x4e/0x70 [ 334.283091][ T8387] ? __kasan_kmalloc+0x8f/0xa0 [ 334.287871][ T8387] ? xsk_init_queue+0xad/0x100 [ 334.292654][ T8387] ? xsk_setsockopt+0x4c9/0x750 [ 334.297519][ T8387] ? do_sock_setsockopt+0x175/0x1a0 [ 334.302745][ T8387] ? __x64_sys_setsockopt+0x182/0x200 [ 334.308138][ T8387] __vmalloc_node_range+0x129/0x1320 [ 334.313477][ T8387] ? free_vm_area+0x50/0x50 [ 334.318011][ T8387] vmalloc_user+0x74/0x80 [ 334.322369][ T8387] ? xskq_create+0xbf/0x170 [ 334.326895][ T8387] xskq_create+0xbf/0x170 [ 334.331249][ T8387] xsk_init_queue+0xad/0x100 [ 334.335868][ T8387] xsk_setsockopt+0x4c9/0x750 [ 334.340574][ T8387] ? xsk_poll+0x670/0x670 [ 334.344932][ T8387] ? __fget_files+0x28/0x460 [ 334.349540][ T8387] ? aa_sock_opt_perm+0x74/0x100 [ 334.354498][ T8387] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 334.360058][ T8387] ? security_socket_setsockopt+0x7e/0xa0 [ 334.365823][ T8387] ? xsk_poll+0x670/0x670 [ 334.370177][ T8387] do_sock_setsockopt+0x175/0x1a0 [ 334.375224][ T8387] ? __fdget+0x180/0x210 [ 334.379486][ T8387] __x64_sys_setsockopt+0x182/0x200 [ 334.384731][ T8387] do_syscall_64+0x55/0xb0 [ 334.389167][ T8387] ? clear_bhb_loop+0x40/0x90 [ 334.393853][ T8387] ? clear_bhb_loop+0x40/0x90 [ 334.398548][ T8387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.404465][ T8387] RIP: 0033:0x7f2fe899de59 [ 334.408916][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.428540][ T8387] RSP: 002b:00007f2fe9917028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 334.436971][ T8387] RAX: ffffffffffffffda RBX: 00007f2fe8c25fa0 RCX: 00007f2fe899de59 [ 334.444957][ T8387] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 334.452961][ T8387] RBP: 00007f2fe8a33e6f R08: 0000000000000004 R09: 0000000000000000 [ 334.460941][ T8387] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 334.468923][ T8387] R13: 00007f2fe8c26038 R14: 00007f2fe8c25fa0 R15: 00007ffdea5e1e68 [ 334.476923][ T8387] [ 334.562142][ T8387] Mem-Info: [ 334.565697][ T8387] active_anon:9637 inactive_anon:0 isolated_anon:0 [ 334.565697][ T8387] active_file:13862 inactive_file:40041 isolated_file:0 [ 334.565697][ T8387] unevictable:768 dirty:71 writeback:0 [ 334.565697][ T8387] slab_reclaimable:9728 slab_unreclaimable:92561 [ 334.565697][ T8387] mapped:24113 shmem:5524 pagetables:539 [ 334.565697][ T8387] sec_pagetables:0 bounce:0 [ 334.565697][ T8387] kernel_misc_reclaimable:0 [ 334.565697][ T8387] free:1342989 free_pcp:14011 free_cma:0 [ 334.624784][ T8387] Node 0 active_anon:35748kB inactive_anon:0kB active_file:55448kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96452kB dirty:284kB writeback:0kB shmem:17660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10448kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no [ 334.664495][ T8387] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 334.707786][ T8387] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.782296][ T8387] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 334.790807][ T8387] Node 0 DMA32 free:1490952kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29012kB inactive_anon:0kB active_file:55448kB inactive_file:159124kB unevictable:1536kB writepending:284kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:18512kB local_pcp:15560kB free_cma:0kB [ 334.859115][ T8387] lowmem_reserve[]: 0 0 0 0 0 [ 334.879058][ T8387] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.913958][ T8387] lowmem_reserve[]: 0 0 0 0 0 [ 334.935150][ T8387] Node 1 Normal free:3893488kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19364kB local_pcp:7224kB free_cma:0kB [ 334.999050][ T8387] lowmem_reserve[]: 0 0 0 0 0 [ 335.010744][ T8387] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.050360][ T8387] Node 0 DMA32: 552*4kB (UME) 583*8kB (UME) 517*16kB (UME) 1412*32kB (UME) 699*64kB (UME) 244*128kB (UME) 121*256kB (UM) 55*512kB (UME) 33*1024kB (UM) 3*2048kB (UM) 306*4096kB (M) = 1488744kB [ 335.124764][ T8387] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 335.174481][ T8387] Node 1 Normal: 168*4kB (UME) 48*8kB (UME) 35*16kB (UME) 67*32kB (UME) 15*64kB (UME) 7*128kB (UE) 1*256kB (E) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3893488kB [ 335.224554][ T8387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.264743][ T8387] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.294919][ T8387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.322741][ T8387] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.350369][ T8387] 55281 total pagecache pages [ 335.362768][ T8387] 0 pages in swap cache [ 335.374598][ T8387] Free swap = 124996kB [ 335.386436][ T8387] Total swap = 124996kB [ 335.397513][ T8387] 2097051 pages RAM [ 335.408159][ T8387] 0 pages HighMem/MovableOnly [ 335.420835][ T8387] 416953 pages reserved [ 335.433555][ T8387] 0 pages cma reserved [ 337.733827][ T8408] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 337.762753][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.806655][ T8408] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 338.472675][ T8419] syzkaller0: entered promiscuous mode [ 338.501481][ T8419] syzkaller0: entered allmulticast mode [ 342.929520][ T8444] netlink: 'syz.0.893': attribute type 21 has an invalid length. [ 348.809099][ T8514] netlink: 'syz.2.918': attribute type 21 has an invalid length. [ 348.986018][ T8514] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 348.993814][ T8514] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 349.119565][ T8517] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 349.167685][ T8517] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 349.197467][ T8521] netlink: 'syz.2.918': attribute type 11 has an invalid length. [ 349.244782][ T8521] netlink: 168 bytes leftover after parsing attributes in process `syz.2.918'. [ 353.602767][ T8562] syzkaller0: entered promiscuous mode [ 353.612872][ T8562] syzkaller0: entered allmulticast mode [ 353.644816][ T8565] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 356.248269][ T8576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.938'. [ 357.234025][ T8603] netlink: 196 bytes leftover after parsing attributes in process `syz.1.947'. [ 361.814988][ T8640] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 361.833952][ T8640] netlink: 'syz.1.959': attribute type 3 has an invalid length. [ 361.842271][ T8640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.959'. [ 364.411809][ T8672] syzkaller0: entered promiscuous mode [ 364.424216][ T8672] syzkaller0: entered allmulticast mode [ 364.797499][ T8685] netlink: 196 bytes leftover after parsing attributes in process `syz.2.973'. [ 366.473442][ T8694] netlink: 196 bytes leftover after parsing attributes in process `syz.2.977'. [ 368.455361][ T8713] netlink: 196 bytes leftover after parsing attributes in process `syz.2.982'. [ 368.490255][ T8714] netlink: 'syz.0.983': attribute type 2 has an invalid length. [ 368.498796][ T8714] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.983'. [ 372.929209][ T8756] netlink: 'syz.2.1005': attribute type 21 has an invalid length. [ 373.066821][ T8761] netlink: 196 bytes leftover after parsing attributes in process `syz.0.998'. [ 373.114205][ T8765] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 373.174143][ T8765] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 373.285719][ T8769] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 373.292770][ T8769] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 373.523148][ T8765] netlink: 'syz.2.1005': attribute type 11 has an invalid length. [ 373.576478][ T8765] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1005'. [ 377.530697][ T8806] netlink: 'syz.1.1011': attribute type 21 has an invalid length. [ 377.531448][ T8812] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1012'. [ 377.558254][ T8808] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 377.565643][ T8808] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 377.603180][ T8809] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 377.610494][ T8809] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 377.619915][ T8810] netlink: 'syz.1.1011': attribute type 11 has an invalid length. [ 377.633421][ T8810] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1011'. [ 378.864872][ T8838] netlink: 'syz.0.1023': attribute type 21 has an invalid length. [ 378.990808][ T8840] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 379.007050][ T8840] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 379.089547][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.097490][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.163936][ T8840] netlink: 'syz.0.1023': attribute type 11 has an invalid length. [ 379.204812][ T8840] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1023'. [ 379.372322][ T8846] bridge_slave_1: left allmulticast mode [ 379.388841][ T8846] bridge_slave_1: left promiscuous mode [ 379.394940][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.425486][ T8846] bridge_slave_0: left allmulticast mode [ 379.434556][ T8846] bridge_slave_0: left promiscuous mode [ 379.524810][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.962758][ T8859] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1029'. [ 379.976336][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 380.030348][ T8861] netlink: 'syz.1.1030': attribute type 49 has an invalid length. [ 380.053649][ T8861] netlink: 'syz.1.1030': attribute type 49 has an invalid length. [ 381.177650][ T8880] netlink: 'syz.3.1035': attribute type 21 has an invalid length. [ 384.152380][ T8880] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 384.183366][ T8880] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 384.224593][ T8882] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 384.243838][ T8882] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 384.268231][ T8883] netlink: 'syz.3.1035': attribute type 11 has an invalid length. [ 384.277049][ T8883] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1035'. [ 384.695972][ T8897] netlink: 'syz.0.1042': attribute type 49 has an invalid length. [ 384.735354][ T8897] netlink: 'syz.0.1042': attribute type 49 has an invalid length. [ 384.957373][ T8902] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1045'. [ 386.393380][ T8929] netlink: 'syz.3.1055': attribute type 2 has an invalid length. [ 386.415785][ T8929] netlink: 'syz.3.1055': attribute type 8 has an invalid length. [ 386.440617][ T8929] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1055'. [ 386.627211][ T8935] netlink: 'syz.3.1058': attribute type 39 has an invalid length. [ 388.683713][ T8935] macvlan0: entered promiscuous mode [ 388.703912][ T8935] macvlan0: entered allmulticast mode [ 389.128825][ T8948] netlink: 'syz.2.1061': attribute type 49 has an invalid length. [ 389.146537][ T8948] netlink: 'syz.2.1061': attribute type 49 has an invalid length. [ 389.368221][ T8953] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1064'. [ 391.343826][ T8988] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1075'. [ 398.053301][ T9027] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1090'. [ 403.982159][ T9046] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 404.436597][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1102'. [ 404.988367][ T9070] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1105'. [ 409.168650][ T9097] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 409.177978][ T9097] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1113'. [ 409.560308][ T9101] syzkaller0: entered promiscuous mode [ 409.570085][ T9101] syzkaller0: entered allmulticast mode [ 417.318481][ T9173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.641560][ T9204] netlink: 'syz.3.1148': attribute type 1 has an invalid length. [ 421.667161][ T9204] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1148'. [ 425.883026][ T9214] syzkaller0: entered promiscuous mode [ 425.888660][ T9214] syzkaller0: entered allmulticast mode [ 427.929809][ T9232] netlink: 'syz.2.1155': attribute type 7 has an invalid length. [ 427.942739][ T9247] netlink: 'syz.0.1160': attribute type 21 has an invalid length. [ 428.073240][ T9248] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 428.083894][ T9248] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 428.184657][ T9249] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 428.191963][ T9249] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 428.207098][ T9250] netlink: 'syz.0.1160': attribute type 11 has an invalid length. [ 428.225296][ T9250] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1160'. [ 428.371933][ T9254] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1162'. [ 429.590487][ T9275] netlink: 'syz.3.1169': attribute type 10 has an invalid length. [ 432.838179][ T9298] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1177'. [ 432.911845][ T9304] netlink: 'syz.1.1179': attribute type 11 has an invalid length. [ 432.930352][ T9304] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.1179'. [ 438.302391][ T9369] netlink: 'syz.3.1201': attribute type 3 has an invalid length. [ 438.330995][ T9369] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1201'. [ 440.228105][ T9401] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1211'. [ 440.430021][ T9403] netlink: 'syz.2.1212': attribute type 29 has an invalid length. [ 440.472456][ T9407] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 440.487288][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.496165][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.507196][ T9407] bridge0: port 3(team0) entered disabled state [ 440.514027][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.521518][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.547443][ T9407] team0: Device bridge0 is already an upper device of the team interface [ 440.588026][ T9403] netlink: 'syz.2.1212': attribute type 29 has an invalid length. [ 440.742220][ T9409] netlink: 'syz.2.1212': attribute type 29 has an invalid length. [ 440.807600][ T9411] netlink: 'syz.2.1212': attribute type 29 has an invalid length. [ 441.226970][ T9419] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1226'. [ 441.329044][ T9421] syz.2.1218 (9421) used greatest stack depth: 19816 bytes left [ 441.543302][ T9432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.557308][ T9432] netlink: 'syz.2.1222': attribute type 9 has an invalid length. [ 441.574411][ T9432] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1222'. [ 441.685154][ T9433] netlink: 'syz.2.1222': attribute type 9 has an invalid length. [ 441.749350][ T9433] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1222'. [ 442.367860][ T9445] netlink: 'syz.3.1227': attribute type 29 has an invalid length. [ 442.480634][ T9445] netlink: 'syz.3.1227': attribute type 29 has an invalid length. [ 444.164691][ T9468] validate_nla: 2 callbacks suppressed [ 444.164736][ T9468] netlink: 'syz.0.1235': attribute type 21 has an invalid length. [ 444.631470][ T9480] netlink: 'syz.0.1240': attribute type 29 has an invalid length. [ 445.143392][ T9475] syzkaller0: entered promiscuous mode [ 445.198903][ T9475] syzkaller0: entered allmulticast mode [ 447.585535][ T9480] netlink: 'syz.0.1240': attribute type 29 has an invalid length. [ 450.179583][ T9514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1251'. [ 450.692581][ T9524] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 450.707915][ T9524] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 450.720537][ T9526] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 450.753676][ T9524] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 451.056614][ T9528] syzkaller0: entered promiscuous mode [ 451.062181][ T9528] syzkaller0: entered allmulticast mode [ 456.394334][ T9545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1262'. [ 461.268313][ T9610] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1288'. [ 465.807958][ T9661] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1304'. [ 468.346992][ T9682] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1311'. [ 469.618909][ T9701] netlink: 'syz.2.1319': attribute type 10 has an invalid length. [ 470.222670][ T9719] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1326'. [ 471.270967][ T9737] netlink: 'syz.0.1331': attribute type 153 has an invalid length. [ 471.294442][ T9737] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1331'. [ 474.340704][ T9764] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1343'. [ 474.388883][ T9768] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 474.425494][ T9768] team0: Device bridge0 is already an upper device of the team interface [ 474.654082][ T9765] delete_channel: no stack [ 478.302826][ T9804] syzkaller0: entered promiscuous mode [ 478.309286][ T9804] syzkaller0: entered allmulticast mode [ 479.018380][ T9815] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1360'. [ 479.041200][ T9815] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 479.051370][ T9815] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 480.671946][ T9815] netlink: 'syz.2.1360': attribute type 10 has an invalid length. [ 480.680282][ T9818] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1361'. [ 480.701204][ T9818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.722286][ T9817] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1361'. [ 480.736824][ T9817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.807855][ T9822] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1362'. [ 484.267606][ T9838] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 484.435072][ T9843] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1371'. [ 484.454722][ T9843] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 484.500243][ T9843] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 484.523721][ T9848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1373'. [ 484.540800][ T9845] netlink: 'syz.1.1371': attribute type 10 has an invalid length. [ 484.561383][ T9845] bridge0: port 3(team0) entered blocking state [ 484.567915][ T9845] bridge0: port 3(team0) entered forwarding state [ 484.575496][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.582731][ T9845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.590197][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.597478][ T9845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.650742][ T9845] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 488.127256][ T9864] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1378'. [ 488.202056][ T9869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1382'. [ 488.570899][ T9877] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1385'. [ 488.582598][ T9877] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 488.609113][ T9877] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 488.727423][ T9877] netlink: 'syz.3.1385': attribute type 10 has an invalid length. [ 488.768805][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.776448][ T9877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.784088][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.791341][ T9877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.813201][ T9877] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 492.570153][ T9910] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1396'. [ 492.604384][ T9910] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 492.627551][ T9910] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 492.658069][ T9912] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1399'. [ 492.755343][ T9910] netlink: 'syz.0.1396': attribute type 10 has an invalid length. [ 492.813634][ T9910] team0: Port device bridge0 removed [ 492.876713][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.884015][ T9910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.891797][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.899073][ T9910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.945905][ T9910] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 493.518586][ T9927] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1405'. [ 496.910006][ T9957] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1415'. [ 497.287503][ T9968] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1420'. [ 497.321316][ T9968] netlink: 'syz.1.1420': attribute type 21 has an invalid length. [ 497.352673][ T9968] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1420'. [ 500.526375][T10007] FAULT_INJECTION: forcing a failure. [ 500.526375][T10007] name failslab, interval 1, probability 0, space 0, times 1 [ 500.544714][T10007] CPU: 1 PID: 10007 Comm: syz.0.1433 Not tainted syzkaller #0 [ 500.552265][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.562539][T10007] Call Trace: [ 500.565996][T10007] [ 500.569021][T10007] dump_stack_lvl+0x18c/0x250 [ 500.574093][T10007] ? show_regs_print_info+0x20/0x20 [ 500.579532][T10007] ? load_image+0x420/0x420 [ 500.584111][T10007] ? __might_sleep+0xe0/0xe0 [ 500.588792][T10007] ? __lock_acquire+0x7d80/0x7d80 [ 500.593878][T10007] should_fail_ex+0x394/0x4c0 [ 500.598798][T10007] should_failslab+0x9/0x20 [ 500.603530][T10007] slab_pre_alloc_hook+0x59/0x300 [ 500.608618][T10007] kmem_cache_alloc_node+0x5e/0x310 [ 500.613933][T10007] ? lock_chain_count+0x20/0x20 [ 500.618809][T10007] ? dup_task_struct+0x57/0x7b0 [ 500.623785][T10007] dup_task_struct+0x57/0x7b0 [ 500.628481][T10007] ? lockdep_hardirqs_on+0x98/0x150 [ 500.633712][T10007] copy_process+0x5a6/0x3df0 [ 500.638324][T10007] ? trace_event_raw_event_lock+0x240/0x240 [ 500.644264][T10007] ? perf_trace_lock+0xfc/0x3b0 [ 500.649163][T10007] ? perf_trace_lock+0xfc/0x3b0 [ 500.654060][T10007] ? __pidfd_prepare+0x140/0x140 [ 500.659062][T10007] kernel_clone+0x24b/0x8a0 [ 500.663611][T10007] ? create_io_thread+0x190/0x190 [ 500.668857][T10007] __x64_sys_clone+0x1b7/0x230 [ 500.673647][T10007] ? __fget_files+0x3fc/0x460 [ 500.678370][T10007] ? __ia32_sys_vfork+0x140/0x140 [ 500.683459][T10007] ? lock_chain_count+0x20/0x20 [ 500.688440][T10007] ? lockdep_hardirqs_on+0x98/0x150 [ 500.693684][T10007] do_syscall_64+0x55/0xb0 [ 500.698331][T10007] ? clear_bhb_loop+0x40/0x90 [ 500.703099][T10007] ? clear_bhb_loop+0x40/0x90 [ 500.707829][T10007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.713783][T10007] RIP: 0033:0x7f7358b9de59 [ 500.718250][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.737911][T10007] RSP: 002b:00007f7359a86fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 500.746356][T10007] RAX: ffffffffffffffda RBX: 00007f7358e25fa0 RCX: 00007f7358b9de59 [ 500.754362][T10007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.762361][T10007] RBP: 00007f7359a87090 R08: 0000000000000000 R09: 0000000000000000 [ 500.770358][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.778351][T10007] R13: 00007f7358e26038 R14: 00007f7358e25fa0 R15: 00007ffecf238db8 [ 500.786370][T10007] [ 501.927830][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.935727][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.129554][T10070] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 509.761923][T10070] hsr_slave_0: left promiscuous mode [ 509.800029][T10070] hsr_slave_1: left promiscuous mode [ 510.463111][T10091] netlink: 'syz.3.1463': attribute type 10 has an invalid length. [ 510.486117][T10091] veth1_vlan: entered allmulticast mode [ 510.501765][T10091] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 510.780885][T10098] syzkaller0: entered promiscuous mode [ 510.791984][T10098] syzkaller0: entered allmulticast mode [ 513.936820][T10140] netlink: 'syz.2.1477': attribute type 7 has an invalid length. [ 513.955105][T10140] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1477'. [ 515.683230][T10160] syzkaller0: entered promiscuous mode [ 515.693655][T10160] syzkaller0: entered allmulticast mode [ 516.736822][T10183] FAULT_INJECTION: forcing a failure. [ 516.736822][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 516.750202][T10183] CPU: 1 PID: 10183 Comm: syz.0.1493 Not tainted syzkaller #0 [ 516.757723][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.767801][T10183] Call Trace: [ 516.771092][T10183] [ 516.774030][T10183] dump_stack_lvl+0x18c/0x250 [ 516.778852][T10183] ? show_regs_print_info+0x20/0x20 [ 516.784112][T10183] ? load_image+0x420/0x420 [ 516.788679][T10183] ? __might_sleep+0xe0/0xe0 [ 516.793312][T10183] ? __lock_acquire+0x7d80/0x7d80 [ 516.798792][T10183] ? get_random_u64+0x170/0x8f0 [ 516.803711][T10183] should_fail_ex+0x394/0x4c0 [ 516.808438][T10183] should_failslab+0x9/0x20 [ 516.812987][T10183] slab_pre_alloc_hook+0x59/0x300 [ 516.818072][T10183] kmem_cache_alloc+0x5a/0x2c0 [ 516.822867][T10183] ? prepare_creds+0x30/0x5d0 [ 516.827603][T10183] prepare_creds+0x30/0x5d0 [ 516.832153][T10183] copy_creds+0x105/0xa70 [ 516.836510][T10183] copy_process+0x973/0x3df0 [ 516.841112][T10183] ? __might_fault+0xaa/0x120 [ 516.845829][T10183] ? get_pid_task+0x20/0x1e0 [ 516.850530][T10183] ? __pidfd_prepare+0x140/0x140 [ 516.855494][T10183] kernel_clone+0x24b/0x8a0 [ 516.860019][T10183] ? create_io_thread+0x190/0x190 [ 516.865071][T10183] __x64_sys_clone+0x1b7/0x230 [ 516.869845][T10183] ? __fget_files+0x3fc/0x460 [ 516.874548][T10183] ? __ia32_sys_vfork+0x140/0x140 [ 516.879594][T10183] ? lock_chain_count+0x20/0x20 [ 516.884466][T10183] ? lockdep_hardirqs_on+0x98/0x150 [ 516.889687][T10183] do_syscall_64+0x55/0xb0 [ 516.894124][T10183] ? clear_bhb_loop+0x40/0x90 [ 516.898814][T10183] ? clear_bhb_loop+0x40/0x90 [ 516.903501][T10183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.909436][T10183] RIP: 0033:0x7f7358b9de59 [ 516.913892][T10183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.933602][T10183] RSP: 002b:00007f7359a86fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 516.942383][T10183] RAX: ffffffffffffffda RBX: 00007f7358e25fa0 RCX: 00007f7358b9de59 [ 516.950459][T10183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.958461][T10183] RBP: 00007f7359a87090 R08: 0000000000000000 R09: 0000000000000000 [ 516.966446][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.974437][T10183] R13: 00007f7358e26038 R14: 00007f7358e25fa0 R15: 00007ffecf238db8 [ 516.982435][T10183] [ 519.540380][T10210] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 519.567349][T10210] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1503'. [ 520.228727][T10223] syzkaller0: entered promiscuous mode [ 520.250014][T10223] syzkaller0: entered allmulticast mode [ 520.698805][T10234] syzkaller0: entered promiscuous mode [ 520.704589][T10234] syzkaller0: entered allmulticast mode [ 521.206743][T10244] FAULT_INJECTION: forcing a failure. [ 521.206743][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 521.220278][T10244] CPU: 0 PID: 10244 Comm: syz.3.1515 Not tainted syzkaller #0 [ 521.227800][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.237922][T10244] Call Trace: [ 521.241209][T10244] [ 521.244154][T10244] dump_stack_lvl+0x18c/0x250 [ 521.248868][T10244] ? show_regs_print_info+0x20/0x20 [ 521.254101][T10244] ? load_image+0x420/0x420 [ 521.258710][T10244] ? __lock_acquire+0x7d80/0x7d80 [ 521.263761][T10244] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 521.270149][T10244] should_fail_ex+0x394/0x4c0 [ 521.275235][T10244] should_failslab+0x9/0x20 [ 521.279786][T10244] slab_pre_alloc_hook+0x59/0x300 [ 521.284837][T10244] ? lockdep_hardirqs_on+0x98/0x150 [ 521.290077][T10244] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 521.295975][T10244] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 521.301596][T10244] __kmem_cache_alloc_node+0x53/0x250 [ 521.307015][T10244] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 521.312665][T10244] __kmalloc+0xa7/0x240 [ 521.316849][T10244] bpf_prog_test_run_skb+0x242/0x18f0 [ 521.322273][T10244] ? __fget_files+0x28/0x460 [ 521.326892][T10244] ? __fget_files+0x3fc/0x460 [ 521.331613][T10244] ? cpu_online+0x60/0x60 [ 521.335973][T10244] bpf_prog_test_run+0x31f/0x390 [ 521.340991][T10244] __sys_bpf+0x49d/0x890 [ 521.345293][T10244] ? bpf_link_show_fdinfo+0x390/0x390 [ 521.350724][T10244] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.356939][T10244] __x64_sys_bpf+0x7c/0x90 [ 521.361401][T10244] do_syscall_64+0x55/0xb0 [ 521.365848][T10244] ? clear_bhb_loop+0x40/0x90 [ 521.370531][T10244] ? clear_bhb_loop+0x40/0x90 [ 521.375241][T10244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.381359][T10244] RIP: 0033:0x7f654f99de59 [ 521.385796][T10244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.405530][T10244] RSP: 002b:00007f65508ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.413997][T10244] RAX: ffffffffffffffda RBX: 00007f654fc25fa0 RCX: 00007f654f99de59 [ 521.421998][T10244] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 521.429986][T10244] RBP: 00007f65508ac090 R08: 0000000000000000 R09: 0000000000000000 [ 521.437988][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.445972][T10244] R13: 00007f654fc26038 R14: 00007f654fc25fa0 R15: 00007ffd9788c448 [ 521.453987][T10244] [ 526.546358][T10283] netlink: 'syz.1.1530': attribute type 39 has an invalid length. [ 527.020224][T10290] syzkaller0: entered promiscuous mode [ 527.027222][T10290] syzkaller0: entered allmulticast mode [ 531.431503][T10362] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 531.460627][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.468004][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.507803][T10362] bond0: (slave bridge0): Releasing backup interface [ 532.180284][T10392] netlink: 'syz.1.1569': attribute type 6 has an invalid length. [ 532.199152][T10392] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1569'. [ 532.615006][T10401] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1572'. [ 533.897733][T10423] FAULT_INJECTION: forcing a failure. [ 533.897733][T10423] name failslab, interval 1, probability 0, space 0, times 0 [ 533.934430][T10423] CPU: 1 PID: 10423 Comm: syz.1.1580 Not tainted syzkaller #0 [ 533.941975][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.952071][T10423] Call Trace: [ 533.955389][T10423] [ 533.958355][T10423] dump_stack_lvl+0x18c/0x250 [ 533.963090][T10423] ? show_regs_print_info+0x20/0x20 [ 533.968356][T10423] ? load_image+0x420/0x420 [ 533.972918][T10423] ? __might_sleep+0xe0/0xe0 [ 533.977564][T10423] ? __lock_acquire+0x7d80/0x7d80 [ 533.982643][T10423] should_fail_ex+0x394/0x4c0 [ 533.987378][T10423] should_failslab+0x9/0x20 [ 533.991928][T10423] slab_pre_alloc_hook+0x59/0x300 [ 533.997002][T10423] ? __lock_acquire+0x7d80/0x7d80 [ 534.002065][T10423] ? security_prepare_creds+0x4b/0x130 [ 534.007607][T10423] ? security_prepare_creds+0x4b/0x130 [ 534.013169][T10423] __kmem_cache_alloc_node+0x53/0x250 [ 534.018609][T10423] ? security_prepare_creds+0x4b/0x130 [ 534.024107][T10423] __kmalloc+0xa7/0x240 [ 534.028314][T10423] security_prepare_creds+0x4b/0x130 [ 534.033659][T10423] prepare_creds+0x427/0x5d0 [ 534.038299][T10423] copy_creds+0x105/0xa70 [ 534.042688][T10423] copy_process+0x973/0x3df0 [ 534.047326][T10423] ? __might_fault+0xaa/0x120 [ 534.052069][T10423] ? get_pid_task+0x20/0x1e0 [ 534.056712][T10423] ? __pidfd_prepare+0x140/0x140 [ 534.061695][T10423] kernel_clone+0x24b/0x8a0 [ 534.066251][T10423] ? create_io_thread+0x190/0x190 [ 534.071331][T10423] __x64_sys_clone+0x1b7/0x230 [ 534.076130][T10423] ? __fget_files+0x3fc/0x460 [ 534.080849][T10423] ? __ia32_sys_vfork+0x140/0x140 [ 534.085932][T10423] ? lock_chain_count+0x20/0x20 [ 534.090832][T10423] ? lockdep_hardirqs_on+0x98/0x150 [ 534.096084][T10423] do_syscall_64+0x55/0xb0 [ 534.100627][T10423] ? clear_bhb_loop+0x40/0x90 [ 534.105334][T10423] ? clear_bhb_loop+0x40/0x90 [ 534.110046][T10423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.115987][T10423] RIP: 0033:0x7f2fe899de59 [ 534.120441][T10423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.140176][T10423] RSP: 002b:00007f2fe9916fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 534.148816][T10423] RAX: ffffffffffffffda RBX: 00007f2fe8c25fa0 RCX: 00007f2fe899de59 [ 534.158664][T10423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.166682][T10423] RBP: 00007f2fe9917090 R08: 0000000000000000 R09: 0000000000000000 [ 534.174696][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.182702][T10423] R13: 00007f2fe8c26038 R14: 00007f2fe8c25fa0 R15: 00007ffdea5e1e68 [ 534.190752][T10423] [ 535.001549][T10439] netlink: 'syz.3.1586': attribute type 64 has an invalid length. [ 535.176916][T10441] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1589'. [ 535.604593][T10458] netlink: 'syz.3.1594': attribute type 10 has an invalid length. [ 535.621800][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1594'. [ 535.631525][T10458] team0: entered promiscuous mode [ 535.651414][T10458] team_slave_0: entered promiscuous mode [ 535.672096][T10458] team_slave_1: entered promiscuous mode [ 535.682991][T10458] team0: entered allmulticast mode [ 535.702266][T10458] team_slave_0: entered allmulticast mode [ 535.733082][T10458] team_slave_1: entered allmulticast mode [ 535.754390][T10458] bridge0: port 3(team0) entered blocking state [ 535.760831][T10458] bridge0: port 3(team0) entered disabled state [ 536.544068][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1602'. [ 536.858766][T10489] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1605'. [ 537.352259][T10497] FAULT_INJECTION: forcing a failure. [ 537.352259][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 537.404473][T10497] CPU: 0 PID: 10497 Comm: syz.2.1606 Not tainted syzkaller #0 [ 537.412124][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.422225][T10497] Call Trace: [ 537.425547][T10497] [ 537.428521][T10497] dump_stack_lvl+0x18c/0x250 [ 537.433349][T10497] ? show_regs_print_info+0x20/0x20 [ 537.438597][T10497] ? load_image+0x420/0x420 [ 537.443148][T10497] ? __lock_acquire+0x7d80/0x7d80 [ 537.448245][T10497] should_fail_ex+0x394/0x4c0 [ 537.452984][T10497] _copy_from_user+0x2f/0xe0 [ 537.457633][T10497] bpf_prog_test_run_skb+0x267/0x18f0 [ 537.463131][T10497] ? rcu_is_watching+0x15/0xb0 [ 537.467938][T10497] ? __fget_files+0x28/0x460 [ 537.472573][T10497] ? __fget_files+0x3fc/0x460 [ 537.477304][T10497] ? cpu_online+0x60/0x60 [ 537.481700][T10497] bpf_prog_test_run+0x31f/0x390 [ 537.486679][T10497] __sys_bpf+0x49d/0x890 [ 537.490971][T10497] ? bpf_link_show_fdinfo+0x390/0x390 [ 537.496406][T10497] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 537.502649][T10497] __x64_sys_bpf+0x7c/0x90 [ 537.507107][T10497] do_syscall_64+0x55/0xb0 [ 537.511654][T10497] ? clear_bhb_loop+0x40/0x90 [ 537.516368][T10497] ? clear_bhb_loop+0x40/0x90 [ 537.521078][T10497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.527043][T10497] RIP: 0033:0x7f21dab9de59 [ 537.531489][T10497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.551317][T10497] RSP: 002b:00007f21d8dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.560053][T10497] RAX: ffffffffffffffda RBX: 00007f21dae26180 RCX: 00007f21dab9de59 [ 537.568070][T10497] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 537.576285][T10497] RBP: 00007f21d8dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 537.584565][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.592594][T10497] R13: 00007f21dae26218 R14: 00007f21dae26180 R15: 00007fffdf419c58 [ 537.600634][T10497] [ 540.122044][ T5786] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 540.842688][T10519] syzkaller0: entered promiscuous mode [ 540.849624][T10519] syzkaller0: entered allmulticast mode [ 544.234841][T10589] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 544.286516][T10589] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 544.330033][T10590] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 544.370407][T10589] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 546.080892][T10623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1649'. [ 547.618940][T10647] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1662'. [ 548.245345][T10657] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 548.331256][T10657] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1665'. [ 549.315349][T10678] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1673'. [ 549.352608][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 549.692561][T10680] netlink: 'syz.1.1673': attribute type 10 has an invalid length. [ 549.720749][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1673'. [ 552.095151][T10703] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1682'. [ 552.307501][T10703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.441140][T10703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.542966][T10703] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 552.802423][T10703] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.809858][T10703] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.932766][T10703] bond0 (unregistering): Released all slaves [ 553.051074][T10725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1687'. [ 553.566272][T10733] Q6`Ҙ: renamed from lo (while UP) [ 554.319824][T10746] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 556.089547][T10791] Q6`Ҙ: renamed from lo (while UP) [ 557.058912][T10812] syzkaller0: entered promiscuous mode [ 557.078508][T10812] syzkaller0: entered allmulticast mode [ 557.118686][T10819] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1726'. [ 557.209821][T10819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.277442][T10819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.318596][T10819] bond0 (unregistering): Released all slaves [ 560.307881][T10874] netlink: 'syz.3.1748': attribute type 3 has an invalid length. [ 560.316494][T10874] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1748'. [ 561.532400][T10887] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1752'. [ 561.712735][T10894] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1752'. [ 561.997334][T10900] netlink: 'syz.1.1759': attribute type 10 has an invalid length. [ 562.346913][T10900] bridge0: port 3(team0) entered disabled state [ 562.354144][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.361516][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.384088][T10900] bond0: (slave bridge0): Releasing backup interface [ 562.577614][T10907] syzkaller0: entered promiscuous mode [ 562.584331][T10907] syzkaller0: entered allmulticast mode [ 563.372044][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.387986][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.592521][T10929] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1769'. [ 568.005015][T10909] netlink: 'syz.1.1762': attribute type 10 has an invalid length. [ 568.068627][T10923] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1767'. [ 568.411986][T10947] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1774'. [ 569.734937][T10972] delete_channel: no stack [ 571.036055][T11003] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1790'. [ 572.814036][T11026] netlink: 'syz.1.1797': attribute type 10 has an invalid length. [ 572.864945][T11030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1799'. [ 575.128245][T11081] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1820'. [ 576.000991][T11098] netlink: 'syz.1.1824': attribute type 10 has an invalid length. [ 576.029102][T11098] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1824'. [ 576.862060][T11125] netlink: 'syz.2.1834': attribute type 21 has an invalid length. [ 576.870429][T11125] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1834'. [ 577.113859][T11129] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1835'. [ 578.345466][T11164] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1850'. [ 578.363552][T11164] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 578.894939][T11184] netlink: 'syz.3.1859': attribute type 10 has an invalid length. [ 579.113147][T11189] netlink: 'syz.1.1858': attribute type 21 has an invalid length. [ 579.157270][T11189] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1858'. [ 580.892071][T11217] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1870'. [ 581.568702][T11241] syzkaller0: entered promiscuous mode [ 581.579651][T11241] syzkaller0: entered allmulticast mode [ 581.589947][T11237] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 581.606404][T11237] veth1_macvtap: left promiscuous mode [ 584.473061][T11259] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 584.971680][T11276] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1890'. [ 585.003369][T11276] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 586.436846][T11325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1906'. [ 587.233296][T11330] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1908'. [ 587.249541][T11330] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 587.697839][T11349] netlink: 'syz.1.1915': attribute type 10 has an invalid length. [ 587.751441][T11349] veth1_macvtap: left promiscuous mode [ 589.266846][T11389] netlink: 'syz.2.1930': attribute type 10 has an invalid length. [ 589.322026][T11389] veth1_macvtap: left promiscuous mode [ 591.309578][T11449] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1953'. [ 592.277279][T11470] syzkaller0: entered promiscuous mode [ 592.293648][T11470] syzkaller0: entered allmulticast mode [ 593.764911][T11490] syzkaller0: entered promiscuous mode [ 593.786247][T11490] syzkaller0: entered allmulticast mode [ 596.447936][T11502] netlink: 'syz.1.1972': attribute type 9 has an invalid length. [ 596.461783][T11502] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1972'. [ 598.090232][T11493] netlink: 'syz.2.1969': attribute type 10 has an invalid length. [ 598.098781][T11509] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1975'. [ 599.962950][T11557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1992'. [ 603.312130][T11585] netlink: 'syz.3.1999': attribute type 10 has an invalid length. [ 603.322564][T11585] macvlan1: entered allmulticast mode [ 603.367910][T11585] macvlan1: entered promiscuous mode [ 603.386378][T11585] team0: Port device macvlan1 added [ 604.036700][T11609] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2009'. [ 605.581880][T11649] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2025'. [ 607.391509][T11705] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2047'. [ 607.493599][T11710] netlink: 'syz.0.2048': attribute type 21 has an invalid length. [ 607.511630][T11710] netlink: 'syz.0.2048': attribute type 12 has an invalid length. [ 607.576187][T11710] netlink: 'syz.0.2048': attribute type 13 has an invalid length. [ 607.584103][T11710] netlink: 'syz.0.2048': attribute type 14 has an invalid length. [ 607.717481][T11710] netlink: 'syz.0.2048': attribute type 15 has an invalid length. [ 607.732236][T11710] netlink: 'syz.0.2048': attribute type 16 has an invalid length. [ 607.740860][T11710] netlink: 'syz.0.2048': attribute type 21 has an invalid length. [ 607.751121][T11710] netlink: 'syz.0.2048': attribute type 22 has an invalid length. [ 607.804130][T11710] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2048'. [ 608.284881][T11724] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2052'. [ 608.362300][T11722] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2052'. [ 608.593134][T11734] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2055'. [ 609.139527][T11752] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2063'. [ 610.026353][T11773] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2070'. [ 611.851323][T11805] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2081'. [ 612.100928][T11812] netlink: 'syz.1.2083': attribute type 10 has an invalid length. [ 613.783567][T11850] netlink: 'syz.2.2095': attribute type 10 has an invalid length. [ 614.064387][T11852] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2097'. [ 614.980233][T11868] netlink: 'syz.1.2102': attribute type 21 has an invalid length. [ 614.992058][T11868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.000144][T11868] IPv6: NLM_F_CREATE should be set when creating new route [ 615.008948][T11868] IPv6: NLM_F_CREATE should be set when creating new route [ 615.017699][T11868] IPv6: NLM_F_CREATE should be set when creating new route [ 615.342428][T11885] netlink: 'syz.1.2109': attribute type 10 has an invalid length. [ 615.775667][T11892] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2111'. [ 617.852868][T11937] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2127'. [ 619.266634][T11954] syzkaller0: entered promiscuous mode [ 619.272188][T11954] syzkaller0: entered allmulticast mode [ 622.232316][T11979] netlink: 'syz.3.2140': attribute type 10 has an invalid length. [ 622.538335][T11990] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2142'. [ 624.817513][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.823999][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.099708][T12029] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2158'. [ 626.420284][T12035] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2160'. [ 626.746436][T12043] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2164'. [ 627.493127][T12056] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 629.995021][T12064] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2170'. [ 631.493296][T12090] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2180'. [ 634.605686][T12102] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2183'. [ 634.940536][T12114] netlink: 'syz.2.2189': attribute type 10 has an invalid length. [ 635.246842][T12122] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2192'. [ 636.264082][T12130] C: renamed from team_slave_0 (while UP) [ 638.353048][T12130] netlink: 'syz.2.2195': attribute type 3 has an invalid length. [ 638.373496][T12138] netlink: 'syz.3.2197': attribute type 10 has an invalid length. [ 638.389445][T12138] team0: Device ipvlan1 failed to register rx_handler [ 640.616782][T12191] FAULT_INJECTION: forcing a failure. [ 640.616782][T12191] name failslab, interval 1, probability 0, space 0, times 0 [ 640.634482][T12191] CPU: 1 PID: 12191 Comm: syz.2.2216 Not tainted syzkaller #0 [ 640.642015][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 640.652097][T12191] Call Trace: [ 640.655398][T12191] [ 640.658382][T12191] dump_stack_lvl+0x18c/0x250 [ 640.663104][T12191] ? show_regs_print_info+0x20/0x20 [ 640.668325][T12191] ? load_image+0x420/0x420 [ 640.672852][T12191] ? __might_sleep+0xe0/0xe0 [ 640.677463][T12191] ? __lock_acquire+0x7d80/0x7d80 [ 640.682518][T12191] should_fail_ex+0x394/0x4c0 [ 640.687220][T12191] should_failslab+0x9/0x20 [ 640.691774][T12191] slab_pre_alloc_hook+0x59/0x300 [ 640.696838][T12191] kmem_cache_alloc_node+0x5e/0x310 [ 640.702053][T12191] ? __alloc_skb+0x103/0x2c0 [ 640.706748][T12191] __alloc_skb+0x103/0x2c0 [ 640.711184][T12191] alloc_skb_with_frags+0xcd/0x7a0 [ 640.716336][T12191] sock_alloc_send_pskb+0x883/0x9a0 [ 640.721563][T12191] ? sock_kzfree_s+0x50/0x50 [ 640.726184][T12191] tun_get_user+0xa2e/0x3d70 [ 640.730841][T12191] ? aa_file_perm+0x3e3/0xee0 [ 640.735541][T12191] ? rcu_read_unlock+0xa0/0xa0 [ 640.740341][T12191] ? tun_get+0x1c/0x2e0 [ 640.744512][T12191] ? __lock_acquire+0x7d80/0x7d80 [ 640.749555][T12191] ? tun_get+0x1c/0x2e0 [ 640.753728][T12191] tun_chr_write_iter+0x119/0x200 [ 640.758769][T12191] vfs_write+0x474/0x9a0 [ 640.763032][T12191] ? file_end_write+0x250/0x250 [ 640.767915][T12191] ? __fget_files+0x3fc/0x460 [ 640.772634][T12191] ? __fdget_pos+0x1d8/0x330 [ 640.777245][T12191] ? ksys_write+0x74/0x260 [ 640.781677][T12191] ksys_write+0x151/0x260 [ 640.786027][T12191] ? __ia32_sys_read+0x90/0x90 [ 640.790810][T12191] ? lockdep_hardirqs_on+0x98/0x150 [ 640.796023][T12191] do_syscall_64+0x55/0xb0 [ 640.800542][T12191] ? clear_bhb_loop+0x40/0x90 [ 640.805253][T12191] ? clear_bhb_loop+0x40/0x90 [ 640.809940][T12191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.815850][T12191] RIP: 0033:0x7f21dab9de59 [ 640.820283][T12191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.839898][T12191] RSP: 002b:00007f21db986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.848333][T12191] RAX: ffffffffffffffda RBX: 00007f21dae25fa0 RCX: 00007f21dab9de59 [ 640.856349][T12191] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 640.864334][T12191] RBP: 00007f21db986090 R08: 0000000000000000 R09: 0000000000000000 [ 640.872402][T12191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.880389][T12191] R13: 00007f21dae26038 R14: 00007f21dae25fa0 R15: 00007fffdf419c58 [ 640.888381][T12191] [ 641.210557][T12202] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 644.201975][T12202] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 645.211007][T12241] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2231'. [ 649.604680][T12282] netlink: 'syz.0.2248': attribute type 21 has an invalid length. [ 649.755183][T12282] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 649.790490][T12282] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 649.934689][T12288] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 649.958517][T12288] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 649.974486][T12291] netlink: 'syz.0.2248': attribute type 11 has an invalid length. [ 649.994375][T12291] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2248'. [ 650.283014][T12306] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2256'. [ 650.587995][T12316] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2257'. [ 650.628097][T12316] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 655.085375][T12364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2271'. [ 655.232499][T12369] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2270'. [ 655.257318][T12369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.287428][T12384] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2278'. [ 656.557044][T12390] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2280'. [ 656.837029][T12390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.809991][T12402] FAULT_INJECTION: forcing a failure. [ 658.809991][T12402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 658.828863][T12402] CPU: 1 PID: 12402 Comm: syz.0.2282 Not tainted syzkaller #0 [ 658.836396][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.846525][T12402] Call Trace: [ 658.849844][T12402] [ 658.852806][T12402] dump_stack_lvl+0x18c/0x250 [ 658.857540][T12402] ? show_regs_print_info+0x20/0x20 [ 658.862792][T12402] ? load_image+0x420/0x420 [ 658.867374][T12402] ? __lock_acquire+0x7d80/0x7d80 [ 658.872464][T12402] should_fail_ex+0x394/0x4c0 [ 658.877210][T12402] prepare_alloc_pages+0x1e1/0x5b0 [ 658.882389][T12402] __alloc_pages+0x134/0x460 [ 658.887031][T12402] ? zone_statistics+0x170/0x170 [ 658.892017][T12402] ? __build_skb_around+0x245/0x3c0 [ 658.897277][T12402] ? alloc_pages+0x4e1/0x740 [ 658.901919][T12402] alloc_skb_with_frags+0x23e/0x7a0 [ 658.907173][T12402] sock_alloc_send_pskb+0x883/0x9a0 [ 658.912438][T12402] ? sock_kzfree_s+0x50/0x50 [ 658.917084][T12402] tun_get_user+0xa2e/0x3d70 [ 658.921722][T12402] ? aa_file_perm+0x3e3/0xee0 [ 658.926438][T12402] ? rcu_read_unlock+0xa0/0xa0 [ 658.931255][T12402] ? tun_get+0x1c/0x2e0 [ 658.935450][T12402] ? __lock_acquire+0x7d80/0x7d80 [ 658.940522][T12402] ? tun_get+0x1c/0x2e0 [ 658.944726][T12402] tun_chr_write_iter+0x119/0x200 [ 658.949788][T12402] vfs_write+0x474/0x9a0 [ 658.954075][T12402] ? file_end_write+0x250/0x250 [ 658.958970][T12402] ? __fget_files+0x3fc/0x460 [ 658.963703][T12402] ? __fdget_pos+0x1d8/0x330 [ 658.968335][T12402] ? ksys_write+0x74/0x260 [ 658.972808][T12402] ksys_write+0x151/0x260 [ 658.977214][T12402] ? __ia32_sys_read+0x90/0x90 [ 658.982022][T12402] ? lockdep_hardirqs_on+0x98/0x150 [ 658.987266][T12402] do_syscall_64+0x55/0xb0 [ 658.991728][T12402] ? clear_bhb_loop+0x40/0x90 [ 658.996436][T12402] ? clear_bhb_loop+0x40/0x90 [ 659.001147][T12402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.007081][T12402] RIP: 0033:0x7f7358b9de59 [ 659.011531][T12402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.031266][T12402] RSP: 002b:00007f7359a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.039733][T12402] RAX: ffffffffffffffda RBX: 00007f7358e25fa0 RCX: 00007f7358b9de59 [ 659.047743][T12402] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 659.055760][T12402] RBP: 00007f7359a87090 R08: 0000000000000000 R09: 0000000000000000 [ 659.063770][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.071810][T12402] R13: 00007f7358e26038 R14: 00007f7358e25fa0 R15: 00007ffecf238db8 [ 659.079839][T12402] [ 659.253443][T12413] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2286'. [ 659.606311][T12424] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2291'. [ 660.177139][T12434] netlink: 'syz.0.2295': attribute type 3 has an invalid length. [ 660.216860][T12434] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2295'. [ 660.405391][T12431] syzkaller0: entered promiscuous mode [ 660.410963][T12431] syzkaller0: entered allmulticast mode [ 664.909660][T12464] syzkaller0: entered promiscuous mode [ 664.938959][T12464] syzkaller0: entered allmulticast mode [ 670.546481][T12484] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2308'. [ 671.542000][T12512] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.2319'. [ 671.792075][T12509] can: request_module (can-proto-0) failed. [ 674.699594][T12535] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2327'. [ 674.784943][T12535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.852464][T12538] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2329'. [ 675.115541][T12544] netlink: 'syz.1.2330': attribute type 3 has an invalid length. [ 675.149426][T12544] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2330'. [ 675.328092][T12550] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2340'. [ 676.398703][T12564] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2336'. [ 676.969313][T12586] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2345'. [ 677.372384][T12588] syzkaller0: entered promiscuous mode [ 677.387642][T12588] syzkaller0: entered allmulticast mode [ 679.938802][T12607] syzkaller0: entered promiscuous mode [ 679.944441][T12607] syzkaller0: entered allmulticast mode [ 681.122340][T12640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.133991][T12640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.156567][T12640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.191724][T12640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.223684][T12640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 681.236326][T12640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 682.683680][T12634] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2357'. [ 682.890136][T12647] netlink: 'syz.2.2362': attribute type 21 has an invalid length. [ 683.113275][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.260196][T12654] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 683.279761][T12654] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 683.326290][T12657] netlink: 'syz.2.2362': attribute type 11 has an invalid length. [ 683.339123][T12657] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2362'. [ 683.369293][T12640] Bluetooth: hci3: command tx timeout [ 683.435513][T12647] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 683.456061][T12647] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 683.498178][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.535852][T12639] chnl_net:caif_netlink_parms(): no params data found [ 683.756349][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.789532][T12665] netlink: 'syz.2.2364': attribute type 29 has an invalid length. [ 683.842162][T12665] netlink: 'syz.2.2364': attribute type 29 has an invalid length. [ 683.943582][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.970846][T12663] netlink: 'syz.2.2364': attribute type 29 has an invalid length. [ 684.098927][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.142401][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.163791][T12639] bridge_slave_0: entered allmulticast mode [ 684.187377][T12639] bridge_slave_0: entered promiscuous mode [ 684.211863][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.219458][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.237560][T12639] bridge_slave_1: entered allmulticast mode [ 684.250846][T12639] bridge_slave_1: entered promiscuous mode [ 684.292634][T12690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.299964][T12690] IPv6: NLM_F_CREATE should be set when creating new route [ 684.307335][T12690] IPv6: NLM_F_CREATE should be set when creating new route [ 684.314652][T12690] IPv6: NLM_F_CREATE should be set when creating new route [ 684.328845][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.367873][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.498244][T12639] team0: Port device team_slave_0 added [ 684.568010][T12639] team0: Port device team_slave_1 added [ 684.700232][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.724367][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.807021][T12705] FAULT_INJECTION: forcing a failure. [ 684.807021][T12705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.844535][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.886845][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.893854][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.928212][T12705] CPU: 1 PID: 12705 Comm: syz.1.2377 Not tainted syzkaller #0 [ 684.935794][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.945888][T12705] Call Trace: [ 684.949188][T12705] [ 684.952133][T12705] dump_stack_lvl+0x18c/0x250 [ 684.956847][T12705] ? show_regs_print_info+0x20/0x20 [ 684.962070][T12705] ? load_image+0x420/0x420 [ 684.966596][T12705] ? __might_fault+0xaa/0x120 [ 684.971287][T12705] ? __lock_acquire+0x7d80/0x7d80 [ 684.976331][T12705] should_fail_ex+0x394/0x4c0 [ 684.981025][T12705] _copy_from_user+0x2f/0xe0 [ 684.985630][T12705] __sys_bpf+0x23e/0x890 [ 684.989901][T12705] ? bpf_link_show_fdinfo+0x390/0x390 [ 684.995299][T12705] ? lock_chain_count+0x20/0x20 [ 685.000169][T12705] __x64_sys_bpf+0x7c/0x90 [ 685.004631][T12705] do_syscall_64+0x55/0xb0 [ 685.009065][T12705] ? clear_bhb_loop+0x40/0x90 [ 685.013748][T12705] ? clear_bhb_loop+0x40/0x90 [ 685.018437][T12705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 685.024347][T12705] RIP: 0033:0x7f2fe899de59 [ 685.028776][T12705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.048398][T12705] RSP: 002b:00007f2fe98f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.056827][T12705] RAX: ffffffffffffffda RBX: 00007f2fe8c26090 RCX: 00007f2fe899de59 [ 685.064811][T12705] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 685.072795][T12705] RBP: 00007f2fe98f6090 R08: 0000000000000000 R09: 0000000000000000 [ 685.080777][T12705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.088766][T12705] R13: 00007f2fe8c26128 R14: 00007f2fe8c26090 R15: 00007ffdea5e1e68 [ 685.096762][T12705] [ 685.103689][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.227221][ T13] ip6gretap0 (unregistering): left allmulticast mode [ 685.358332][ T13] ip6gretap0 (unregistering): left promiscuous mode [ 685.435064][ T13] : port 1(ip6gretap0) entered disabled state [ 685.462352][T12640] Bluetooth: hci3: command tx timeout [ 686.247334][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.263686][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.524387][T12640] Bluetooth: hci3: command tx timeout [ 689.614489][T12640] Bluetooth: hci3: command tx timeout [ 691.401906][T12741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2383'. [ 691.608406][T12735] syzkaller0: entered promiscuous mode [ 691.613956][T12735] syzkaller0: entered allmulticast mode [ 694.480374][T12639] hsr_slave_0: entered promiscuous mode [ 694.500091][T12639] hsr_slave_1: entered promiscuous mode [ 698.061342][T12800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2394'. [ 698.653689][T12816] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2397'. [ 737.231036][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 737.240340][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 737.248556][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 737.256831][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 737.265558][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 737.272916][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 737.394982][T12640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 737.404502][T12640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 737.414722][T12640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 737.430410][T12640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 737.438373][T12640] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 737.447530][T12640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.630229][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 737.644403][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 737.652563][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 737.665225][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 737.673992][ T5786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 737.681621][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 738.312277][T12899] chnl_net:caif_netlink_parms(): no params data found [ 738.503137][T12902] chnl_net:caif_netlink_parms(): no params data found [ 738.622004][T12905] chnl_net:caif_netlink_parms(): no params data found [ 738.813823][T12899] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.830132][T12899] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.838064][T12899] bridge_slave_0: entered allmulticast mode [ 738.850057][T12899] bridge_slave_0: entered promiscuous mode [ 738.892998][T12899] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.910186][T12899] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.922341][T12899] bridge_slave_1: entered allmulticast mode [ 738.936245][T12899] bridge_slave_1: entered promiscuous mode [ 739.058254][T12902] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.074308][T12902] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.081618][T12902] bridge_slave_0: entered allmulticast mode [ 739.105415][T12902] bridge_slave_0: entered promiscuous mode [ 739.166305][T12902] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.173565][T12902] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.190694][T12902] bridge_slave_1: entered allmulticast mode [ 739.198858][T12902] bridge_slave_1: entered promiscuous mode [ 739.220377][T12899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.281102][T12899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.317171][T12905] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.342615][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.350746][T12905] bridge_slave_0: entered allmulticast mode [ 739.364427][ T5786] Bluetooth: hci4: command tx timeout [ 739.372430][T12905] bridge_slave_0: entered promiscuous mode [ 739.430911][T12905] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.452619][T12905] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.842346][ T5786] Bluetooth: hci5: command tx timeout [ 748.848355][ T5786] Bluetooth: hci6: command tx timeout [ 748.854017][ T5786] Bluetooth: hci4: command tx timeout [ 748.860622][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.867259][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.959702][T12905] bridge_slave_1: entered allmulticast mode [ 748.976192][T12905] bridge_slave_1: entered promiscuous mode [ 749.065604][T12902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.098344][T12902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.140365][T12899] team0: Port device team_slave_0 added [ 749.177619][T12899] team0: Port device team_slave_1 added [ 749.655168][ T5786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 749.664823][ T5786] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 749.673484][ T5786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 749.685238][ T5786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 749.693049][ T5786] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 749.701581][ T5786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 750.895043][ T5786] Bluetooth: hci6: command tx timeout [ 750.900554][ T5786] Bluetooth: hci5: command tx timeout [ 750.909490][T12640] Bluetooth: hci4: command tx timeout [ 751.764683][ T51] Bluetooth: hci7: command tx timeout [ 752.964457][T12640] Bluetooth: hci5: command tx timeout [ 752.969925][T12640] Bluetooth: hci6: command tx timeout [ 752.984488][ T51] Bluetooth: hci4: command tx timeout [ 753.854933][T12935] Bluetooth: hci7: command tx timeout [ 755.044302][ T5786] Bluetooth: hci5: command tx timeout [ 755.049798][T12935] Bluetooth: hci6: command tx timeout [ 755.925587][T12935] Bluetooth: hci7: command tx timeout [ 758.004268][T12935] Bluetooth: hci7: command tx timeout [ 797.570091][ T5786] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 797.580024][ T5786] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 797.588422][ T5786] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 797.597135][ T5786] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 797.605097][ T5786] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 797.612440][ T5786] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 797.785005][T12935] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 797.794922][T12935] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 797.802933][T12935] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 797.812010][T12935] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 797.819836][T12935] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 797.828117][T12935] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 797.913943][ T5786] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 797.925962][ T5786] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 797.934777][ T5786] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 797.943040][ T5786] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 797.952049][ T5786] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 797.959626][ T5786] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 799.684676][T12935] Bluetooth: hci8: command tx timeout [ 799.924887][T12935] Bluetooth: hci9: command tx timeout [ 800.004735][T12935] Bluetooth: hci10: command tx timeout [ 801.764565][T12935] Bluetooth: hci8: command tx timeout [ 802.004711][T12935] Bluetooth: hci9: command tx timeout [ 802.094740][T12935] Bluetooth: hci10: command tx timeout [ 803.844606][T12935] Bluetooth: hci8: command tx timeout [ 804.084562][T12935] Bluetooth: hci9: command tx timeout [ 804.174137][T12935] Bluetooth: hci10: command tx timeout [ 804.974110][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 804.980773][ C1] rcu: 1-....: (9608 ticks this GP) idle=df8c/1/0x4000000000000000 softirq=44597/44599 fqs=1968 [ 804.992115][ C1] rcu: hardirqs softirqs csw/system [ 804.998536][ C1] rcu: number: 1489956 10 0 [ 805.004949][ C1] rcu: cputime: 16883 35605 44 ==> 52490(ms) [ 805.012772][ C1] rcu: (t=10500 jiffies g=63597 q=7763 ncpus=2) [ 805.019130][ C1] CPU: 1 PID: 12832 Comm: syz.0.2402 Not tainted syzkaller #0 [ 805.026595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.036653][ C1] RIP: 0010:fib_table_lookup+0x6e/0x1660 [ 805.042331][ C1] Code: f8 48 89 5c 24 48 48 83 c3 28 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 0c 93 c2 f8 4c 8b 33 49 8d 5e 10 48 89 d8 <48> c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 ef 92 c2 f8 48 8b 03 [ 805.061965][ C1] RSP: 0018:ffffc900001ef500 EFLAGS: 00000246 [ 805.068056][ C1] RAX: ffff8880269359c0 RBX: ffff8880269359c0 RCX: ffff8880307a5a00 [ 805.076027][ C1] RDX: 0000000000000100 RSI: ffff888079001e18 RDI: ffff888026935980 [ 805.083995][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223cea0 [ 805.091963][ C1] R10: dffffc0000000000 R11: fffffbfff223cea1 R12: dffffc0000000000 [ 805.099931][ C1] R13: ffff888026935980 R14: ffff8880269359b0 R15: dffffc0000000000 [ 805.107921][ C1] FS: 00007f7359a876c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 805.116850][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.123438][ C1] CR2: 000000110c367587 CR3: 000000007b1dc000 CR4: 00000000003506e0 [ 805.131431][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 805.139422][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 805.147405][ C1] Call Trace: [ 805.150705][ C1] [ 805.153553][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 805.158761][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.164928][ C1] ? fib_lookup+0x1ad/0x440 [ 805.169510][ C1] fib_lookup+0x1c5/0x440 [ 805.173841][ C1] ? fib_lookup+0x76/0x440 [ 805.178256][ C1] ip_route_output_key_hash_rcu+0x276/0x2350 [ 805.184260][ C1] ? ip_route_output_key_hash+0x13d/0x330 [ 805.189978][ C1] ip_route_output_key_hash+0x1f3/0x330 [ 805.195525][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.201706][ C1] ? ip_route_input_rcu+0x3120/0x3120 [ 805.207081][ C1] ? ip_route_output_flow+0x1d/0x150 [ 805.212369][ C1] ip_route_output_flow+0x2a/0x150 [ 805.217482][ C1] ? security_sk_classify_flow+0x7b/0x90 [ 805.223125][ C1] inet_sk_rebuild_header+0x9ca/0x1bb0 [ 805.228603][ C1] ? ktime_get+0x24b/0x280 [ 805.233030][ C1] ? inet_unregister_protosw+0x190/0x190 [ 805.238662][ C1] ? mark_lock+0x94/0x320 [ 805.242995][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 805.248977][ C1] __tcp_retransmit_skb+0x245/0x1410 [ 805.254283][ C1] ? tcp_write_xmit+0x66f0/0x66f0 [ 805.259329][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.265520][ C1] tcp_retransmit_skb+0x32/0x360 [ 805.270472][ C1] tcp_xmit_retransmit_queue+0x459/0xb20 [ 805.276115][ C1] tcp_ack+0x47cc/0x6630 [ 805.280367][ C1] ? tcp_ack+0x2b41/0x6630 [ 805.284796][ C1] ? tcp_rcv_established+0x1d70/0x1d70 [ 805.290266][ C1] tcp_rcv_established+0x800/0x1d70 [ 805.295464][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.301624][ C1] ? tcp_check_space+0xa80/0xa80 [ 805.306563][ C1] ? tcp_v4_do_rcv+0x63c/0xba0 [ 805.311329][ C1] tcp_v4_do_rcv+0x6d3/0xba0 [ 805.315925][ C1] tcp_v4_rcv+0x2358/0x2a60 [ 805.320453][ C1] ? tcp_filter+0x90/0x90 [ 805.324804][ C1] ? read_lock_is_recursive+0x20/0x20 [ 805.330179][ C1] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 805.335665][ C1] ? ip_local_deliver_finish+0x1c2/0x510 [ 805.341299][ C1] ip_local_deliver_finish+0x2c3/0x510 [ 805.346770][ C1] NF_HOOK+0x32d/0x3b0 [ 805.350841][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 805.355085][ C1] ? NF_HOOK+0x9f/0x3b0 [ 805.359240][ C1] ? ip_local_deliver+0x180/0x180 [ 805.364267][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 805.368508][ C1] ? xfrm4_policy_check+0x6c0/0x6c0 [ 805.373710][ C1] ? ip_local_deliver+0x10b/0x180 [ 805.378735][ C1] ip_sublist_rcv+0xa36/0xd60 [ 805.383413][ C1] ? packet_rcv+0x15b/0x1420 [ 805.388089][ C1] ? ip_list_rcv+0x440/0x440 [ 805.392677][ C1] ? __netif_receive_skb_core+0x3326/0x3ab0 [ 805.398599][ C1] ? ip_rcv_core+0xd80/0xd80 [ 805.403191][ C1] ? ip_rcv_core+0x898/0xd80 [ 805.407782][ C1] ip_list_rcv+0x3ed/0x440 [ 805.412200][ C1] ? ip_rcv_finish+0x250/0x250 [ 805.416971][ C1] ? __asan_memset+0x22/0x40 [ 805.421563][ C1] ? arp_rcv+0x2ed/0x4e0 [ 805.425803][ C1] ? ip_rcv_finish+0x250/0x250 [ 805.430567][ C1] __netif_receive_skb_list_core+0x2d9/0x770 [ 805.436550][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 805.441136][ C1] ? read_tsc+0x9/0x20 [ 805.445225][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 805.451381][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 805.457704][ C1] ? netif_receive_skb_core+0x230/0x230 [ 805.463250][ C1] ? dev_gro_receive+0x10b0/0x22a0 [ 805.468411][ C1] ? eth_type_trans+0x3ab/0x770 [ 805.473303][ C1] napi_gro_receive+0x553/0xaf0 [ 805.478189][ C1] receive_buf+0x219d/0x37a0 [ 805.482828][ C1] ? virtnet_poll_tx+0x530/0x530 [ 805.487771][ C1] virtnet_poll+0x60e/0x11e0 [ 805.492387][ C1] ? refill_work+0x220/0x220 [ 805.496982][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.503141][ C1] ? __napi_poll+0x21/0x460 [ 805.507646][ C1] __napi_poll+0xbb/0x460 [ 805.511979][ C1] net_rx_action+0x65f/0xcc0 [ 805.516574][ C1] ? net_tx_action+0x950/0x950 [ 805.521356][ C1] ? detach_timer+0x2b0/0x2b0 [ 805.526053][ C1] ? lock_chain_count+0x20/0x20 [ 805.530908][ C1] handle_softirqs+0x27d/0x820 [ 805.535673][ C1] ? read_tsc+0x9/0x20 [ 805.539739][ C1] ? ktime_get+0x24b/0x280 [ 805.544175][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 805.548965][ C1] ? do_softirq+0x1a0/0x1a0 [ 805.553467][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 805.558685][ C1] __irq_exit_rcu+0xd3/0x190 [ 805.563291][ C1] ? irq_exit_rcu+0x20/0x20 [ 805.567803][ C1] irq_exit_rcu+0x9/0x20 [ 805.572039][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 805.577690][ C1] [ 805.580618][ C1] [ 805.583549][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.589560][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 805.595390][ C1] Code: 2e 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 43 32 38 09 e8 8e 0a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 805.614999][ C1] RSP: 0018:ffffc900042f7760 EFLAGS: 00000286 [ 805.621067][ C1] RAX: 4bc5c42933462f00 RBX: 0000000000000000 RCX: 4bc5c42933462f00 [ 805.629035][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 805.637026][ C1] RBP: ffffc900042f77b0 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 805.645038][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: ffff8880307a5a00 [ 805.653047][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 805.661062][ C1] __schedule+0x15b6/0x4660 [ 805.665644][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 805.672861][ C1] ? lock_chain_count+0x20/0x20 [ 805.677717][ C1] ? asan.module_dtor+0x20/0x20 [ 805.682569][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.688727][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 805.693932][ C1] ? preempt_schedule+0xc0/0xd0 [ 805.698786][ C1] preempt_schedule_common+0x82/0xc0 [ 805.704070][ C1] preempt_schedule+0xc0/0xd0 [ 805.708746][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 805.714398][ C1] ? event_function+0x300/0x300 [ 805.719267][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 805.725013][ C1] preempt_schedule_thunk+0x1a/0x30 [ 805.730227][ C1] ? smp_call_function_single+0x488/0x5a0 [ 805.735947][ C1] smp_call_function_single+0x48d/0x5a0 [ 805.741490][ C1] ? event_function+0x300/0x300 [ 805.746339][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 805.752485][ C1] ? event_function+0x300/0x300 [ 805.757340][ C1] perf_install_in_context+0x5bb/0x920 [ 805.762798][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 805.767910][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 805.773895][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 805.779095][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 805.784294][ C1] ? perf_event__header_size+0x165/0x220 [ 805.789924][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 805.795650][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 805.801287][ C1] ? lock_chain_count+0x20/0x20 [ 805.806138][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 805.811334][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 805.816969][ C1] do_syscall_64+0x55/0xb0 [ 805.821405][ C1] ? clear_bhb_loop+0x40/0x90 [ 805.826079][ C1] ? clear_bhb_loop+0x40/0x90 [ 805.830776][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 805.836692][ C1] RIP: 0033:0x7f7358b9de59 [ 805.841111][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.860715][ C1] RSP: 002b:00007f7359a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 805.869128][ C1] RAX: ffffffffffffffda RBX: 00007f7358e25fa0 RCX: 00007f7358b9de59 [ 805.877116][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 805.885088][ C1] RBP: 00007f7358c33e6f R08: 000000000000000a R09: 0000000000000000 [ 805.893058][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 805.901026][ C1] R13: 00007f7358e26038 R14: 00007f7358e25fa0 R15: 00007ffecf238db8 [ 805.909004][ C1] [ 805.986713][T12935] Bluetooth: hci8: command tx timeout [ 806.084630][T12935] Bluetooth: hci3: command 0x0406 tx timeout [ 806.164557][T12935] Bluetooth: hci9: command tx timeout [ 806.244587][T12935] Bluetooth: hci10: command tx timeout [ 809.140496][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.147073][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.541039][T12640] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 810.550237][T12640] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 810.559204][T12640] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 810.567843][T12640] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 810.576144][T12640] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 810.583753][T12640] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2