last executing test programs: 6.264489347s ago: executing program 1 (id=2758): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000100000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8921, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x11, 0x3, 0x0) close(r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_merged\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000a00)=r1, 0x4) 5.720906125s ago: executing program 4 (id=2763): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000047) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000640000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 5.465889698s ago: executing program 1 (id=2764): r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80086601, 0x0) write$cgroup_pid(r0, &(0x7f0000000380), 0x12) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.402138629s ago: executing program 0 (id=2769): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.98568233s ago: executing program 1 (id=2770): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0xb, 0x1, 0x6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="180000007800910600"], 0xfe33) recvmsg(r1, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3.984925921s ago: executing program 3 (id=2772): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x4}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)}, 0x10000) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b10", @ANYRES32, @ANYRES8=r0], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) 3.98467479s ago: executing program 4 (id=2773): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(r1, 0x0, 0x10021) 3.984115021s ago: executing program 0 (id=2780): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.372128124s ago: executing program 3 (id=2774): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(r1, 0x0, 0x10021) 2.369396264s ago: executing program 0 (id=2785): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r2, r0}, 0xc) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.346653965s ago: executing program 4 (id=2775): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3, 0x1, 0x79, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r4, 0x58, &(0x7f0000001500)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={r5}, 0xc) 2.345663305s ago: executing program 2 (id=2776): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(r1, 0x0, 0x10021) 2.299880945s ago: executing program 1 (id=2777): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x2}, 0x10, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r5) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x10) 2.099132918s ago: executing program 3 (id=2778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000100000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8921, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x11, 0x3, 0x0) close(r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_merged\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000a00)=r1, 0x4) 2.026638619s ago: executing program 2 (id=2779): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x29, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x8df00, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.99446846s ago: executing program 1 (id=2781): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1700000000000000000000000a6524eca198fe730000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300008cb30000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000003a0ea60f00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)="7700000018007f1437", 0x9}, {&(0x7f0000000140)="78cabf2dfb73fc0a00250080f2dc0689258f2e1800b8f9e6aaeb1ae2f6c8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f346b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb0e031713a0ffb0f5fe4ca08fd3c67e8f319b8f3a9bb2fa7d5ee75", 0x6e}], 0x2}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) 1.633003035s ago: executing program 0 (id=2782): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffdfffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff7) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000047) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000640000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) 1.632698265s ago: executing program 4 (id=2783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.450339298s ago: executing program 2 (id=2784): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000}, 0x50) 1.155871852s ago: executing program 3 (id=2786): socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x53, 0x2, 0xf9, 0x0, 0x400, 0x5090, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x37f, 0x4, @perf_config_ext={0x10001, 0x2}, 0x100006, 0x7fa8, 0x2, 0x0, 0x1, 0x6408, 0x8000, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 944.520085ms ago: executing program 4 (id=2787): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(r1, 0x0, 0x10021) 604.494211ms ago: executing program 3 (id=2788): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 591.823081ms ago: executing program 2 (id=2798): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0xd1}, 0x2f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 272.662906ms ago: executing program 4 (id=2789): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000c8513b1478e022d277004a000000186200000800"/40], &(0x7f0000000040)='GPL\x00', 0x1, 0xd6, &(0x7f00000001c0)=""/214, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0x0, 0xfffffffa, 0x92}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x309d3241, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x156, 0xfdb7}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) socket$kcm(0x10, 0x2, 0x0) 271.971346ms ago: executing program 0 (id=2790): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, 0x0, 0xfdef) recvmsg(r1, 0x0, 0x10021) 240.007606ms ago: executing program 2 (id=2791): gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(r1, 0x0, 0x10021) 143.145457ms ago: executing program 1 (id=2792): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 139.400637ms ago: executing program 3 (id=2793): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 44.561319ms ago: executing program 0 (id=2794): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=2795): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x800, 0x7fff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x28, 0x7, 0x2, 0x2, 0x0, 0x9, 0x8000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x2e06, 0x4}, 0x10000, 0x5, 0x82, 0x9, 0xbc, 0xffffffff, 0x2, 0x0, 0x8, 0x0, 0x800}, 0xffffffffffffffff, 0xc, r1, 0xf) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) kernel console output (not intermixed with test programs): 3] ? __import_iovec+0x315/0x500 [ 197.502582][ T5573] ? import_iovec+0x6f/0xa0 [ 197.507234][ T5573] ___sys_sendmsg+0x21c/0x290 [ 197.512073][ T5573] ? __sys_sendmsg+0x270/0x270 [ 197.516959][ T5573] ? __fdget+0x17c/0x200 [ 197.521270][ T5573] __se_sys_sendmsg+0x19e/0x270 [ 197.526720][ T5573] ? perf_trace_preemptirq_template+0x287/0x330 [ 197.533237][ T5573] ? __x64_sys_sendmsg+0x80/0x80 [ 197.538263][ T5573] ? lockdep_hardirqs_on+0x94/0x140 [ 197.543512][ T5573] do_syscall_64+0x4c/0xa0 [ 197.548603][ T5573] ? clear_bhb_loop+0x60/0xb0 [ 197.553345][ T5573] ? clear_bhb_loop+0x60/0xb0 [ 197.558777][ T5573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.565042][ T5573] RIP: 0033:0x7facb538e929 [ 197.569888][ T5573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.591296][ T5573] RSP: 002b:00007facb51ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.599811][ T5573] RAX: ffffffffffffffda RBX: 00007facb55b6080 RCX: 00007facb538e929 [ 197.607888][ T5573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 197.616436][ T5573] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 197.624814][ T5573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.632849][ T5573] R13: 0000000000000000 R14: 00007facb55b6080 R15: 00007ffc43fcce88 [ 197.641078][ T5573] [ 197.855935][ T4264] Bluetooth: hci4: unexpected event 0x48 length: 15 > 3 [ 197.855972][ T4264] Bluetooth: hci4: wrong event for mode 0 [ 198.447947][ T5582] device pim6reg1 entered promiscuous mode [ 199.101993][ T5604] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.479'. [ 199.242367][ T5604] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 199.261270][ T5604] CPU: 0 PID: 5604 Comm: syz.0.479 Not tainted 6.1.141-syzkaller #0 [ 199.269368][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.279469][ T5604] Call Trace: [ 199.282783][ T5604] [ 199.285916][ T5604] dump_stack_lvl+0x168/0x22e [ 199.290676][ T5604] ? show_regs_print_info+0x12/0x12 [ 199.295928][ T5604] ? load_image+0x3b0/0x3b0 [ 199.300743][ T5604] sysfs_warn_dup+0x8a/0xa0 [ 199.305507][ T5604] sysfs_do_create_link_sd+0xc0/0x110 [ 199.310932][ T5604] device_add+0x7ed/0xfb0 [ 199.315401][ T5604] wiphy_register+0x1e68/0x2bd0 [ 199.320659][ T5604] ? cfg80211_event_work+0x40/0x40 [ 199.325802][ T5604] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 199.331987][ T5604] ? rtnl_unlock+0x5/0x10 [ 199.337773][ T5604] ieee80211_register_hw+0x2c29/0x38c0 [ 199.343739][ T5604] ? ieee80211_register_hw+0xef1/0x38c0 [ 199.349506][ T5604] ? ieee80211_register_hw+0xef1/0x38c0 [ 199.355133][ T5604] ? ieee80211_tasklet_handler+0x20/0x20 [ 199.361010][ T5604] ? memset+0x1e/0x40 [ 199.365467][ T5604] ? __hrtimer_init+0x186/0x270 [ 199.370364][ T5604] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 199.376218][ T5604] hwsim_new_radio_nl+0xafa/0xce0 [ 199.381278][ T5604] genl_family_rcv_msg_doit+0x22e/0x320 [ 199.386946][ T5604] ? end_current_label_crit_section+0x170/0x170 [ 199.393703][ T5604] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 199.399916][ T5604] ? bpf_lsm_capable+0x5/0x10 [ 199.404630][ T5604] ? security_capable+0x85/0xb0 [ 199.409525][ T5604] genl_rcv_msg+0x5f2/0x780 [ 199.414522][ T5604] ? genl_bind+0x350/0x350 [ 199.418977][ T5604] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 199.425699][ T5604] ? lock_acquire+0x20f/0x490 [ 199.430416][ T5604] netlink_rcv_skb+0x1de/0x420 [ 199.435220][ T5604] ? genl_bind+0x350/0x350 [ 199.439922][ T5604] ? netlink_ack+0x1100/0x1100 [ 199.444725][ T5604] ? down_read+0x1a8/0x2d0 [ 199.449174][ T5604] genl_rcv+0x24/0x40 [ 199.453276][ T5604] netlink_unicast+0x74c/0x8c0 [ 199.458091][ T5604] netlink_sendmsg+0x89e/0xbc0 [ 199.463025][ T5604] ? netlink_getsockopt+0x540/0x540 [ 199.468262][ T5604] ? aa_sock_msg_perm+0x94/0x150 [ 199.473240][ T5604] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 199.478570][ T5604] ? security_socket_sendmsg+0x7c/0xa0 [ 199.484144][ T5604] ? netlink_getsockopt+0x540/0x540 [ 199.489373][ T5604] ____sys_sendmsg+0x59b/0x970 [ 199.494184][ T5604] ? __sys_sendmsg_sock+0x30/0x30 [ 199.499235][ T5604] ? __import_iovec+0x315/0x500 [ 199.504117][ T5604] ? import_iovec+0x6f/0xa0 [ 199.508645][ T5604] ___sys_sendmsg+0x21c/0x290 [ 199.513360][ T5604] ? __sys_sendmsg+0x270/0x270 [ 199.518192][ T5604] ? __fdget+0x17c/0x200 [ 199.522499][ T5604] __se_sys_sendmsg+0x19e/0x270 [ 199.527414][ T5604] ? __x64_sys_sendmsg+0x80/0x80 [ 199.532404][ T5604] ? syscall_enter_from_user_mode+0x2a/0x80 [ 199.538325][ T5604] do_syscall_64+0x4c/0xa0 [ 199.542771][ T5604] ? clear_bhb_loop+0x60/0xb0 [ 199.548250][ T5604] ? clear_bhb_loop+0x60/0xb0 [ 199.553379][ T5604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.559331][ T5604] RIP: 0033:0x7facb538e929 [ 199.563774][ T5604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.583679][ T5604] RSP: 002b:00007facb610f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.592122][ T5604] RAX: ffffffffffffffda RBX: 00007facb55b5fa0 RCX: 00007facb538e929 [ 199.600292][ T5604] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 199.608292][ T5604] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 199.616379][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.624563][ T5604] R13: 0000000000000000 R14: 00007facb55b5fa0 R15: 00007ffc43fcce88 [ 199.632664][ T5604] [ 200.050721][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.057560][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.797402][ T5623] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 200.872800][ T5624] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.486'. [ 201.078826][ T5617] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 201.200157][ T5617] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.227030][ T5625] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 201.255751][ T5625] device macvlan0 entered promiscuous mode [ 201.324964][ T5625] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 201.356857][ T5624] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 201.385789][ T5624] CPU: 1 PID: 5624 Comm: syz.0.486 Not tainted 6.1.141-syzkaller #0 [ 201.394687][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.404970][ T5624] Call Trace: [ 201.408285][ T5624] [ 201.411255][ T5624] dump_stack_lvl+0x168/0x22e [ 201.416082][ T5624] ? show_regs_print_info+0x12/0x12 [ 201.421342][ T5624] ? load_image+0x3b0/0x3b0 [ 201.425919][ T5624] sysfs_warn_dup+0x8a/0xa0 [ 201.430482][ T5624] sysfs_do_create_link_sd+0xc0/0x110 [ 201.436037][ T5624] device_add+0x7ed/0xfb0 [ 201.440441][ T5624] wiphy_register+0x1e68/0x2bd0 [ 201.445383][ T5624] ? cfg80211_event_work+0x40/0x40 [ 201.450731][ T5624] ? minstrel_ht_alloc+0x894/0xa20 [ 201.457823][ T5624] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 201.464308][ T5624] ieee80211_register_hw+0x2c29/0x38c0 [ 201.470188][ T5624] ? ieee80211_register_hw+0xef1/0x38c0 [ 201.475806][ T5624] ? ieee80211_register_hw+0xef1/0x38c0 [ 201.481424][ T5624] ? ieee80211_tasklet_handler+0x20/0x20 [ 201.487223][ T5624] ? memset+0x1e/0x40 [ 201.491428][ T5624] ? __hrtimer_init+0x186/0x270 [ 201.496332][ T5624] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 201.502217][ T5624] hwsim_new_radio_nl+0xafa/0xce0 [ 201.507315][ T5624] genl_family_rcv_msg_doit+0x22e/0x320 [ 201.512916][ T5624] ? end_current_label_crit_section+0x170/0x170 [ 201.519214][ T5624] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 201.525164][ T5624] ? bpf_lsm_capable+0x5/0x10 [ 201.529906][ T5624] ? security_capable+0x85/0xb0 [ 201.534825][ T5624] genl_rcv_msg+0x5f2/0x780 [ 201.539392][ T5624] ? genl_bind+0x350/0x350 [ 201.543866][ T5624] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 201.550268][ T5624] netlink_rcv_skb+0x1de/0x420 [ 201.555099][ T5624] ? genl_bind+0x350/0x350 [ 201.559575][ T5624] ? netlink_ack+0x1100/0x1100 [ 201.564415][ T5624] ? down_read+0x1a8/0x2d0 [ 201.568897][ T5624] genl_rcv+0x24/0x40 [ 201.573038][ T5624] netlink_unicast+0x74c/0x8c0 [ 201.577880][ T5624] netlink_sendmsg+0x89e/0xbc0 [ 201.582810][ T5624] ? netlink_getsockopt+0x540/0x540 [ 201.588076][ T5624] ? aa_sock_msg_perm+0x94/0x150 [ 201.593626][ T5624] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.599053][ T5624] ? security_socket_sendmsg+0x7c/0xa0 [ 201.604576][ T5624] ? netlink_getsockopt+0x540/0x540 [ 201.609833][ T5624] ____sys_sendmsg+0x59b/0x970 [ 201.614668][ T5624] ? __sys_sendmsg_sock+0x30/0x30 [ 201.619751][ T5624] ? __import_iovec+0x315/0x500 [ 201.624667][ T5624] ? import_iovec+0x6f/0xa0 [ 201.629223][ T5624] ___sys_sendmsg+0x21c/0x290 [ 201.633959][ T5624] ? __sys_sendmsg+0x270/0x270 [ 201.638822][ T5624] ? __fdget+0x17c/0x200 [ 201.643120][ T5624] __se_sys_sendmsg+0x19e/0x270 [ 201.648021][ T5624] ? perf_trace_preemptirq_template+0x287/0x330 [ 201.654316][ T5624] ? __x64_sys_sendmsg+0x80/0x80 [ 201.659335][ T5624] ? lockdep_hardirqs_on+0x94/0x140 [ 201.664586][ T5624] do_syscall_64+0x4c/0xa0 [ 201.669053][ T5624] ? clear_bhb_loop+0x60/0xb0 [ 201.673884][ T5624] ? clear_bhb_loop+0x60/0xb0 [ 201.678620][ T5624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.684589][ T5624] RIP: 0033:0x7facb538e929 [ 201.689168][ T5624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.708832][ T5624] RSP: 002b:00007facb51ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.717395][ T5624] RAX: ffffffffffffffda RBX: 00007facb55b6080 RCX: 00007facb538e929 [ 201.725503][ T5624] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 201.733520][ T5624] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 201.741622][ T5624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.749641][ T5624] R13: 0000000000000000 R14: 00007facb55b6080 R15: 00007ffc43fcce88 [ 201.757689][ T5624] [ 202.395376][ T5640] syz.3.482 uses obsolete (PF_INET,SOCK_PACKET) [ 203.062336][ T5650] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.496'. [ 203.133260][ T5650] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 203.166880][ T5650] CPU: 0 PID: 5650 Comm: syz.0.496 Not tainted 6.1.141-syzkaller #0 [ 203.174956][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.185157][ T5650] Call Trace: [ 203.188481][ T5650] [ 203.191454][ T5650] dump_stack_lvl+0x168/0x22e [ 203.196200][ T5650] ? show_regs_print_info+0x12/0x12 [ 203.201462][ T5650] ? load_image+0x3b0/0x3b0 [ 203.206040][ T5650] sysfs_warn_dup+0x8a/0xa0 [ 203.210605][ T5650] sysfs_do_create_link_sd+0xc0/0x110 [ 203.216038][ T5650] device_add+0x7ed/0xfb0 [ 203.220440][ T5650] wiphy_register+0x1e68/0x2bd0 [ 203.225377][ T5650] ? cfg80211_event_work+0x40/0x40 [ 203.230551][ T5650] ? minstrel_ht_alloc+0x894/0xa20 [ 203.235727][ T5650] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 203.241857][ T5650] ieee80211_register_hw+0x2c29/0x38c0 [ 203.247919][ T5650] ? ieee80211_register_hw+0xef1/0x38c0 [ 203.253654][ T5650] ? ieee80211_register_hw+0xef1/0x38c0 [ 203.259708][ T5650] ? ieee80211_tasklet_handler+0x20/0x20 [ 203.265509][ T5650] ? memset+0x1e/0x40 [ 203.269554][ T5650] ? __hrtimer_init+0x186/0x270 [ 203.274464][ T5650] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 203.280279][ T5650] hwsim_new_radio_nl+0xafa/0xce0 [ 203.285383][ T5650] genl_family_rcv_msg_doit+0x22e/0x320 [ 203.290990][ T5650] ? end_current_label_crit_section+0x170/0x170 [ 203.297306][ T5650] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 203.303444][ T5650] ? bpf_lsm_capable+0x5/0x10 [ 203.308210][ T5650] ? security_capable+0x85/0xb0 [ 203.313146][ T5650] genl_rcv_msg+0x5f2/0x780 [ 203.317712][ T5650] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 203.324023][ T5650] ? genl_bind+0x350/0x350 [ 203.328489][ T5650] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 203.334888][ T5650] ? netlink_rcv_skb+0x1bd/0x420 [ 203.340075][ T5650] netlink_rcv_skb+0x1de/0x420 [ 203.344972][ T5650] ? genl_bind+0x350/0x350 [ 203.349714][ T5650] ? netlink_ack+0x1100/0x1100 [ 203.354980][ T5650] ? down_read+0x1a8/0x2d0 [ 203.359469][ T5650] genl_rcv+0x24/0x40 [ 203.363507][ T5650] netlink_unicast+0x74c/0x8c0 [ 203.368350][ T5650] netlink_sendmsg+0x89e/0xbc0 [ 203.373191][ T5650] ? netlink_getsockopt+0x540/0x540 [ 203.378463][ T5650] ? aa_sock_msg_perm+0x94/0x150 [ 203.383474][ T5650] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 203.388828][ T5650] ? security_socket_sendmsg+0x7c/0xa0 [ 203.394353][ T5650] ? netlink_getsockopt+0x540/0x540 [ 203.399625][ T5650] ____sys_sendmsg+0x59b/0x970 [ 203.404470][ T5650] ? __sys_sendmsg_sock+0x30/0x30 [ 203.409563][ T5650] ? __import_iovec+0x315/0x500 [ 203.414498][ T5650] ? import_iovec+0x6f/0xa0 [ 203.419080][ T5650] ___sys_sendmsg+0x21c/0x290 [ 203.423842][ T5650] ? __sys_sendmsg+0x270/0x270 [ 203.428730][ T5650] ? __fdget+0x17c/0x200 [ 203.433228][ T5650] __se_sys_sendmsg+0x19e/0x270 [ 203.438161][ T5650] ? __x64_sys_sendmsg+0x80/0x80 [ 203.443203][ T5650] ? syscall_enter_from_user_mode+0x2a/0x80 [ 203.449176][ T5650] do_syscall_64+0x4c/0xa0 [ 203.453668][ T5650] ? clear_bhb_loop+0x60/0xb0 [ 203.458406][ T5650] ? clear_bhb_loop+0x60/0xb0 [ 203.463143][ T5650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.469104][ T5650] RIP: 0033:0x7facb538e929 [ 203.473667][ T5650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.493501][ T5650] RSP: 002b:00007facb610f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.501978][ T5650] RAX: ffffffffffffffda RBX: 00007facb55b5fa0 RCX: 00007facb538e929 [ 203.510102][ T5650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 203.518219][ T5650] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 203.526247][ T5650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.534357][ T5650] R13: 0000000000000000 R14: 00007facb55b5fa0 R15: 00007ffc43fcce88 [ 203.542407][ T5650] [ 205.149405][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 206.047272][ T4264] Bluetooth: hci2: unexpected event 0x01 length: 15 > 1 [ 207.425477][ T5707] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.505'. [ 207.827178][ T5707] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 207.981145][ T5707] CPU: 1 PID: 5707 Comm: syz.0.505 Not tainted 6.1.141-syzkaller #0 [ 207.989215][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.999759][ T5707] Call Trace: [ 208.003080][ T5707] [ 208.006052][ T5707] dump_stack_lvl+0x168/0x22e [ 208.010797][ T5707] ? show_regs_print_info+0x12/0x12 [ 208.016150][ T5707] ? load_image+0x3b0/0x3b0 [ 208.020815][ T5707] sysfs_warn_dup+0x8a/0xa0 [ 208.025645][ T5707] sysfs_do_create_link_sd+0xc0/0x110 [ 208.031107][ T5707] device_add+0x7ed/0xfb0 [ 208.035511][ T5707] wiphy_register+0x1e68/0x2bd0 [ 208.040444][ T5707] ? cfg80211_event_work+0x40/0x40 [ 208.045631][ T5707] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 208.051849][ T5707] ? ieee80211_register_hw+0x2b7b/0x38c0 [ 208.057565][ T5707] ieee80211_register_hw+0x2c29/0x38c0 [ 208.063094][ T5707] ? ieee80211_register_hw+0xef1/0x38c0 [ 208.068698][ T5707] ? ieee80211_register_hw+0xef1/0x38c0 [ 208.074321][ T5707] ? ieee80211_tasklet_handler+0x20/0x20 [ 208.080028][ T5707] ? memset+0x1e/0x40 [ 208.084072][ T5707] ? __hrtimer_init+0x186/0x270 [ 208.088971][ T5707] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 208.094761][ T5707] hwsim_new_radio_nl+0xafa/0xce0 [ 208.099855][ T5707] genl_family_rcv_msg_doit+0x22e/0x320 [ 208.105500][ T5707] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 208.111750][ T5707] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 208.117826][ T5707] ? bpf_lsm_capable+0x5/0x10 [ 208.122568][ T5707] ? security_capable+0x85/0xb0 [ 208.127490][ T5707] genl_rcv_msg+0x5f2/0x780 [ 208.132055][ T5707] ? genl_bind+0x350/0x350 [ 208.136520][ T5707] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 208.142919][ T5707] netlink_rcv_skb+0x1de/0x420 [ 208.147759][ T5707] ? genl_bind+0x350/0x350 [ 208.152241][ T5707] ? netlink_ack+0x1100/0x1100 [ 208.157062][ T5707] ? lockdep_hardirqs_on+0x94/0x140 [ 208.162317][ T5707] ? down_read+0x1a8/0x2d0 [ 208.166784][ T5707] genl_rcv+0x24/0x40 [ 208.170808][ T5707] netlink_unicast+0x74c/0x8c0 [ 208.175640][ T5707] netlink_sendmsg+0x89e/0xbc0 [ 208.181000][ T5707] ? netlink_getsockopt+0x540/0x540 [ 208.186363][ T5707] ? aa_sock_msg_perm+0x94/0x150 [ 208.191356][ T5707] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 208.196702][ T5707] ? security_socket_sendmsg+0x7c/0xa0 [ 208.202219][ T5707] ? netlink_getsockopt+0x540/0x540 [ 208.207487][ T5707] ____sys_sendmsg+0x59b/0x970 [ 208.212333][ T5707] ? __sys_sendmsg_sock+0x30/0x30 [ 208.217411][ T5707] ? __import_iovec+0x315/0x500 [ 208.222317][ T5707] ? import_iovec+0x6f/0xa0 [ 208.226868][ T5707] ___sys_sendmsg+0x21c/0x290 [ 208.231694][ T5707] ? __sys_sendmsg+0x270/0x270 [ 208.236572][ T5707] ? __fdget+0x17c/0x200 [ 208.240892][ T5707] __se_sys_sendmsg+0x19e/0x270 [ 208.245809][ T5707] ? __x64_sys_sendmsg+0x80/0x80 [ 208.250841][ T5707] ? syscall_enter_from_user_mode+0x2a/0x80 [ 208.256814][ T5707] do_syscall_64+0x4c/0xa0 [ 208.261293][ T5707] ? clear_bhb_loop+0x60/0xb0 [ 208.266038][ T5707] ? clear_bhb_loop+0x60/0xb0 [ 208.270851][ T5707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.276814][ T5707] RIP: 0033:0x7facb538e929 [ 208.281286][ T5707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.300947][ T5707] RSP: 002b:00007facb610f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.309503][ T5707] RAX: ffffffffffffffda RBX: 00007facb55b5fa0 RCX: 00007facb538e929 [ 208.317621][ T5707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 208.325642][ T5707] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 208.333760][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.341782][ T5707] R13: 0000000000000000 R14: 00007facb55b5fa0 R15: 00007ffc43fcce88 [ 208.350103][ T5707] [ 211.239118][ T5754] device syzkaller0 entered promiscuous mode [ 211.587865][ T5759] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.526'. [ 211.728332][ T4264] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 213.673509][ T5770] device veth1_macvtap left promiscuous mode [ 213.712927][ T5774] device veth1_macvtap entered promiscuous mode [ 213.731420][ T5774] device macsec0 entered promiscuous mode [ 213.811372][ T4264] Bluetooth: hci4: command 0x2016 tx timeout [ 213.846706][ T5765] device syzkaller0 entered promiscuous mode [ 213.886031][ T5759] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 213.898884][ T5759] CPU: 1 PID: 5759 Comm: syz.0.526 Not tainted 6.1.141-syzkaller #0 [ 213.906955][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.917065][ T5759] Call Trace: [ 213.920393][ T5759] [ 213.923380][ T5759] dump_stack_lvl+0x168/0x22e [ 213.928131][ T5759] ? show_regs_print_info+0x12/0x12 [ 213.933393][ T5759] ? load_image+0x3b0/0x3b0 [ 213.938026][ T5759] sysfs_warn_dup+0x8a/0xa0 [ 213.942685][ T5759] sysfs_do_create_link_sd+0xc0/0x110 [ 213.948100][ T5759] device_add+0x7ed/0xfb0 [ 213.952472][ T5759] wiphy_register+0x1e68/0x2bd0 [ 213.957402][ T5759] ? cfg80211_event_work+0x40/0x40 [ 213.962546][ T5759] ? minstrel_ht_alloc+0x894/0xa20 [ 213.967698][ T5759] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 213.974018][ T5759] ieee80211_register_hw+0x2c29/0x38c0 [ 213.979525][ T5759] ? ieee80211_register_hw+0xef1/0x38c0 [ 213.985104][ T5759] ? ieee80211_register_hw+0xef1/0x38c0 [ 213.990689][ T5759] ? ieee80211_tasklet_handler+0x20/0x20 [ 213.996368][ T5759] ? memset+0x1e/0x40 [ 214.000387][ T5759] ? __hrtimer_init+0x186/0x270 [ 214.005267][ T5759] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 214.011064][ T5759] hwsim_new_radio_nl+0xafa/0xce0 [ 214.016137][ T5759] genl_family_rcv_msg_doit+0x22e/0x320 [ 214.021717][ T5759] ? end_current_label_crit_section+0x170/0x170 [ 214.028000][ T5759] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 214.033922][ T5759] ? bpf_lsm_capable+0x5/0x10 [ 214.038627][ T5759] ? security_capable+0x85/0xb0 [ 214.043510][ T5759] genl_rcv_msg+0x5f2/0x780 [ 214.048044][ T5759] ? genl_bind+0x350/0x350 [ 214.052477][ T5759] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 214.058843][ T5759] netlink_rcv_skb+0x1de/0x420 [ 214.063681][ T5759] ? genl_bind+0x350/0x350 [ 214.068123][ T5759] ? netlink_ack+0x1100/0x1100 [ 214.072927][ T5759] ? down_read+0x1a8/0x2d0 [ 214.077390][ T5759] genl_rcv+0x24/0x40 [ 214.081460][ T5759] netlink_unicast+0x74c/0x8c0 [ 214.086428][ T5759] netlink_sendmsg+0x89e/0xbc0 [ 214.091240][ T5759] ? netlink_getsockopt+0x540/0x540 [ 214.096757][ T5759] ? aa_sock_msg_perm+0x94/0x150 [ 214.101821][ T5759] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.107166][ T5759] ? security_socket_sendmsg+0x7c/0xa0 [ 214.112667][ T5759] ? netlink_getsockopt+0x540/0x540 [ 214.118097][ T5759] ____sys_sendmsg+0x59b/0x970 [ 214.123005][ T5759] ? __sys_sendmsg_sock+0x30/0x30 [ 214.128148][ T5759] ? __import_iovec+0x315/0x500 [ 214.133048][ T5759] ? import_iovec+0x6f/0xa0 [ 214.137697][ T5759] ___sys_sendmsg+0x21c/0x290 [ 214.142466][ T5759] ? __sys_sendmsg+0x270/0x270 [ 214.147303][ T5759] ? __fdget+0x17c/0x200 [ 214.151768][ T5759] __se_sys_sendmsg+0x19e/0x270 [ 214.156745][ T5759] ? __x64_sys_sendmsg+0x80/0x80 [ 214.161911][ T5759] ? syscall_enter_from_user_mode+0x2a/0x80 [ 214.167833][ T5759] do_syscall_64+0x4c/0xa0 [ 214.172277][ T5759] ? clear_bhb_loop+0x60/0xb0 [ 214.176983][ T5759] ? clear_bhb_loop+0x60/0xb0 [ 214.181880][ T5759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.187825][ T5759] RIP: 0033:0x7facb538e929 [ 214.192270][ T5759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.212432][ T5759] RSP: 002b:00007facb610f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.221229][ T5759] RAX: ffffffffffffffda RBX: 00007facb55b5fa0 RCX: 00007facb538e929 [ 214.229262][ T5759] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 214.237355][ T5759] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 214.245362][ T5759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.253416][ T5759] R13: 0000000000000000 R14: 00007facb55b5fa0 R15: 00007ffc43fcce88 [ 214.261532][ T5759] [ 217.411038][ T4253] Bluetooth: hci0: command 0x0406 tx timeout [ 217.417950][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 217.424334][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 217.430402][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 217.434820][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 218.533907][ T5826] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 218.578746][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.589607][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.759399][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.768687][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.778007][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.786097][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.930579][ T5834] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.550'. [ 219.025701][ T5826] team0: Port device bridge0 added [ 219.149331][ T5834] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 219.221108][ T5826] syz.0.547 (5826) used greatest stack depth: 19584 bytes left [ 221.455108][ T5880] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.569'. [ 221.514119][ T5880] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 221.569577][ T5880] CPU: 1 PID: 5880 Comm: syz.2.569 Not tainted 6.1.141-syzkaller #0 [ 221.577645][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.587753][ T5880] Call Trace: [ 221.591051][ T5880] [ 221.594001][ T5880] dump_stack_lvl+0x168/0x22e [ 221.598710][ T5880] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 221.605019][ T5880] ? show_regs_print_info+0x12/0x12 [ 221.610342][ T5880] ? load_image+0x3b0/0x3b0 [ 221.615060][ T5880] sysfs_warn_dup+0x8a/0xa0 [ 221.619602][ T5880] sysfs_do_create_link_sd+0xc0/0x110 [ 221.625085][ T5880] device_add+0x7ed/0xfb0 [ 221.629456][ T5880] wiphy_register+0x1e68/0x2bd0 [ 221.634364][ T5880] ? cfg80211_event_work+0x40/0x40 [ 221.639513][ T5880] ? minstrel_ht_alloc+0x894/0xa20 [ 221.644671][ T5880] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 221.650773][ T5880] ieee80211_register_hw+0x2c29/0x38c0 [ 221.656275][ T5880] ? ieee80211_register_hw+0xef1/0x38c0 [ 221.661865][ T5880] ? ieee80211_register_hw+0xef1/0x38c0 [ 221.667503][ T5880] ? ieee80211_tasklet_handler+0x20/0x20 [ 221.673216][ T5880] ? memset+0x1e/0x40 [ 221.677222][ T5880] ? __hrtimer_init+0x186/0x270 [ 221.682104][ T5880] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 221.687976][ T5880] hwsim_new_radio_nl+0xafa/0xce0 [ 221.693031][ T5880] genl_family_rcv_msg_doit+0x22e/0x320 [ 221.698606][ T5880] ? end_current_label_crit_section+0x170/0x170 [ 221.704879][ T5880] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 221.710808][ T5880] ? bpf_lsm_capable+0x5/0x10 [ 221.715512][ T5880] ? security_capable+0x85/0xb0 [ 221.720571][ T5880] genl_rcv_msg+0x5f2/0x780 [ 221.725105][ T5880] ? genl_bind+0x350/0x350 [ 221.729544][ T5880] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 221.735907][ T5880] netlink_rcv_skb+0x1de/0x420 [ 221.740706][ T5880] ? genl_bind+0x350/0x350 [ 221.745152][ T5880] ? netlink_ack+0x1100/0x1100 [ 221.750299][ T5880] ? down_read+0x1a8/0x2d0 [ 221.755118][ T5880] genl_rcv+0x24/0x40 [ 221.759208][ T5880] netlink_unicast+0x74c/0x8c0 [ 221.764036][ T5880] netlink_sendmsg+0x89e/0xbc0 [ 221.768827][ T5880] ? lockdep_hardirqs_on+0x94/0x140 [ 221.774052][ T5880] ? netlink_getsockopt+0x540/0x540 [ 221.779376][ T5880] ? bpf_lsm_socket_accept+0x10/0x10 [ 221.784691][ T5880] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 221.790005][ T5880] ? security_socket_sendmsg+0x7c/0xa0 [ 221.795507][ T5880] ? netlink_getsockopt+0x540/0x540 [ 221.800745][ T5880] ____sys_sendmsg+0x59b/0x970 [ 221.805558][ T5880] ? __sys_sendmsg_sock+0x30/0x30 [ 221.810642][ T5880] ? __import_iovec+0x315/0x500 [ 221.815565][ T5880] ? import_iovec+0x6f/0xa0 [ 221.820099][ T5880] ___sys_sendmsg+0x21c/0x290 [ 221.824830][ T5880] ? __sys_sendmsg+0x270/0x270 [ 221.829670][ T5880] ? __fdget+0x17c/0x200 [ 221.833946][ T5880] __se_sys_sendmsg+0x19e/0x270 [ 221.838827][ T5880] ? __x64_sys_sendmsg+0x80/0x80 [ 221.843836][ T5880] ? syscall_enter_from_user_mode+0x2a/0x80 [ 221.850036][ T5880] do_syscall_64+0x4c/0xa0 [ 221.854498][ T5880] ? clear_bhb_loop+0x60/0xb0 [ 221.859229][ T5880] ? clear_bhb_loop+0x60/0xb0 [ 221.863933][ T5880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.869873][ T5880] RIP: 0033:0x7fb5bd78e929 [ 221.874313][ T5880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.894155][ T5880] RSP: 002b:00007fb5be593038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.902606][ T5880] RAX: ffffffffffffffda RBX: 00007fb5bd9b5fa0 RCX: 00007fb5bd78e929 [ 221.910646][ T5880] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 221.918657][ T5880] RBP: 00007fb5bd810b39 R08: 0000000000000000 R09: 0000000000000000 [ 221.926680][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.934681][ T5880] R13: 0000000000000000 R14: 00007fb5bd9b5fa0 R15: 00007ffd9f7fca18 [ 221.942714][ T5880] [ 223.583015][ T4262] Bluetooth: hci0: unexpected event 0x01 length: 15 > 1 [ 227.310959][ T5945] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 227.392820][ T5951] netlink: 'syz.1.591': attribute type 10 has an invalid length. [ 227.401871][ T5951] device macvlan0 entered promiscuous mode [ 227.425667][ T5951] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 230.908339][ T5976] device pim6reg1 entered promiscuous mode [ 231.430396][ T4262] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 231.744313][ T5986] syz.0.616 (5986) used greatest stack depth: 18976 bytes left [ 231.768782][ T5997] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 232.049238][ T5997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 232.070920][ T6000] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 232.101868][ T6000] device macvlan0 entered promiscuous mode [ 232.152510][ T6000] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 233.510914][ T4262] Bluetooth: hci1: command 0x2016 tx timeout [ 233.716090][ T6026] device pim6reg1 entered promiscuous mode [ 236.968588][ T6074] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 237.257203][ T6078] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 237.391369][ T6078] device macvlan0 entered promiscuous mode [ 237.457438][ T6078] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 238.304268][ T6093] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 238.366195][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.375015][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.542171][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.549635][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.558722][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.565966][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.713194][ T6093] team0: Port device bridge0 added [ 240.663791][ T6134] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 240.863974][ T6137] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 240.975996][ T6137] device macvlan0 entered promiscuous mode [ 241.069833][ T6137] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 242.033873][ T6155] netlink: 'syz.4.667': attribute type 10 has an invalid length. [ 242.057485][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.070363][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.369126][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.379628][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.394157][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.404579][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.982815][ T6155] team0: Port device bridge0 added [ 243.012191][ T6157] device ipvlan1 entered promiscuous mode [ 243.785394][ T6169] device syzkaller0 entered promiscuous mode [ 249.285415][ T6193] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 249.315211][ T6193] team0: Port device geneve1 added [ 249.713048][ T6209] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 250.411666][ T6209] device veth0_vlan left promiscuous mode [ 250.518623][ T6209] device veth0_vlan entered promiscuous mode [ 250.589034][ T6209] team0: Device veth0_vlan failed to register rx_handler [ 250.975600][ T6221] device syzkaller0 entered promiscuous mode [ 254.318630][ T6242] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 254.326710][ T6242] netlink: 128 bytes leftover after parsing attributes in process `syz.2.697'. [ 254.339731][ T6242] netlink: 'syz.2.697': attribute type 4 has an invalid length. [ 254.347963][ T6247] netlink: 'syz.3.698': attribute type 25 has an invalid length. [ 257.677659][ T6301] device ipvlan1 entered promiscuous mode [ 258.959784][ T6322] syzkaller0: create flow: hash 803941728 index 1 [ 259.142331][ T4305] syzkaller0: tun_net_xmit 76 [ 259.151922][ T4305] syzkaller0: tun_net_xmit 48 [ 259.171049][ T4300] syzkaller0: tun_net_xmit 76 [ 259.633534][ T4305] syzkaller0: tun_net_xmit 76 [ 260.211005][ T26] syzkaller0: tun_net_xmit 76 [ 260.218950][ T6323] syzkaller0: delete flow: hash 803941728 index 1 [ 261.427421][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.434128][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.259364][ T6339] netlink: 'syz.1.740': attribute type 21 has an invalid length. [ 263.267323][ T6339] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 263.276575][ T6361] device ipvlan1 entered promiscuous mode [ 265.202500][ T6403] netlink: 'syz.3.764': attribute type 21 has an invalid length. [ 265.259125][ T6403] netlink: 128 bytes leftover after parsing attributes in process `syz.3.764'. [ 265.276255][ T6403] netlink: 'syz.3.764': attribute type 4 has an invalid length. [ 265.378030][ T6406] netlink: 'syz.2.754': attribute type 21 has an invalid length. [ 265.401289][ T6406] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 265.515332][ T6410] netlink: 'syz.1.755': attribute type 29 has an invalid length. [ 265.551201][ T6410] netlink: 'syz.1.755': attribute type 29 has an invalid length. [ 265.591424][ T6413] netlink: 'syz.1.755': attribute type 29 has an invalid length. [ 265.617344][ T6410] netlink: 'syz.1.755': attribute type 29 has an invalid length. [ 268.405226][ T6475] validate_nla: 4 callbacks suppressed [ 268.405248][ T6475] netlink: 'syz.0.773': attribute type 21 has an invalid length. [ 268.536184][ T6475] netlink: 128 bytes leftover after parsing attributes in process `syz.0.773'. [ 268.631103][ T6475] netlink: 'syz.0.773': attribute type 4 has an invalid length. [ 268.807268][ T6480] netlink: 'syz.4.780': attribute type 25 has an invalid length. [ 269.490981][ T4315] wlan1: Trigger new scan to find an IBSS to join [ 269.672416][ T6496] netlink: 'syz.2.796': attribute type 25 has an invalid length. [ 271.490689][ T6528] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 271.535194][ T4307] syzkaller0: tun_net_xmit 76 [ 271.540156][ T4307] syzkaller0: tun_net_xmit 48 [ 271.561284][ T6528] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 271.561425][ T14] syzkaller0: tun_net_xmit 76 [ 271.610407][ T6529] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 271.632560][ T6518] syzkaller0: create flow: hash 803941728 index 1 [ 271.701039][ T6528] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 271.971264][ T6517] syzkaller0: delete flow: hash 803941728 index 1 [ 274.461091][ T4315] wlan1: Trigger new scan to find an IBSS to join [ 274.846649][ T6537] netlink: 'syz.0.801': attribute type 25 has an invalid length. [ 274.855753][ T6541] netlink: 'syz.4.804': attribute type 21 has an invalid length. [ 274.864643][ T6541] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 275.950689][ T4315] wlan1: Creating new IBSS network, BSSID ce:e2:a9:b8:eb:90 [ 277.171161][ T6598] netlink: 'syz.1.824': attribute type 25 has an invalid length. [ 277.201101][ T6597] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 277.289360][ T6597] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.826'. [ 277.740613][ T6607] sock: sock_set_timeout: `syz.1.830' (pid 6607) tries to set negative timeout [ 280.350997][ T6636] netlink: 'syz.1.841': attribute type 25 has an invalid length. [ 282.450552][ T6689] netlink: 'syz.1.859': attribute type 1 has an invalid length. [ 282.461208][ T6689] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.859'. [ 282.693822][ T6693] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 282.758950][ T6693] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.874'. [ 286.566353][ T6755] netlink: 'syz.4.889': attribute type 10 has an invalid length. [ 286.610659][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.620320][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.905478][ T6755] team0: Port device bridge0 removed [ 287.026165][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.035199][ T6755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.045558][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.055097][ T6755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.167786][ T6755] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 290.063371][ T6810] device syzkaller0 entered promiscuous mode [ 296.207040][ T6886] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 296.263219][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.274618][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.544034][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.553155][ T6886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.562721][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.570408][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.667485][ T6886] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.872767][ T4318] syzkaller0: tun_net_xmit 76 [ 298.877769][ T4318] syzkaller0: tun_net_xmit 48 [ 298.919833][ T4307] syzkaller0: tun_net_xmit 76 [ 298.925194][ T6928] netlink: 'syz.1.960': attribute type 21 has an invalid length. [ 298.965560][ T6928] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 298.985408][ T6930] syzkaller0: create flow: hash 803941728 index 1 [ 299.251897][ T4307] syzkaller0: tun_net_xmit 76 [ 299.892092][ T4307] syzkaller0: tun_net_xmit 76 [ 300.125496][ T6947] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 300.151246][ T4304] syzkaller0: tun_net_xmit 76 [ 300.180420][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.190043][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.298563][ T6947] team0: Port device bridge0 removed [ 300.325720][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.334475][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.346066][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.354798][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.458268][ T6947] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 300.477471][ T6932] syzkaller0: delete flow: hash 803941728 index 1 [ 303.475975][ T6987] netlink: 'syz.1.976': attribute type 10 has an invalid length. [ 303.625865][ T4266] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 304.288702][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.296712][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.333062][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.340298][ T6987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.347916][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.355146][ T6987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.445659][ T6987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.160964][ T4304] syzkaller0: tun_net_xmit 76 [ 305.165902][ T4304] syzkaller0: tun_net_xmit 48 [ 305.253736][ T26] syzkaller0: tun_net_xmit 76 [ 305.372233][ T7013] syzkaller0: create flow: hash 803941728 index 1 [ 305.611172][ T4304] syzkaller0: tun_net_xmit 76 [ 305.653580][ T4266] Bluetooth: hci4: command 0x2016 tx timeout [ 305.796146][ T7010] syzkaller0: delete flow: hash 803941728 index 1 [ 305.975805][ T75] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.837476][ T7090] netlink: 'syz.4.1002': attribute type 21 has an invalid length. [ 309.872602][ T7090] netlink: 'syz.4.1002': attribute type 1 has an invalid length. [ 311.323241][ T4266] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 314.076175][ T7155] netlink: 'syz.4.1027': attribute type 21 has an invalid length. [ 314.188306][ T7155] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 314.258988][ T4266] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 314.413588][ T4262] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 314.778120][ T4262] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 316.049771][ T7196] netlink: 'syz.3.1043': attribute type 21 has an invalid length. [ 316.111483][ T7196] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 316.211768][ T4262] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 316.290947][ T4262] Bluetooth: hci3: command 0x2016 tx timeout [ 316.360869][ T4266] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 316.368520][ T4266] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 316.657943][ T4266] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 316.700063][ T4266] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 317.398846][ T7226] device syzkaller0 entered promiscuous mode [ 318.293715][ T4266] Bluetooth: hci1: command 0x2016 tx timeout [ 318.320102][ T7248] sctp: [Deprecated]: syz.2.1064 (pid 7248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.320102][ T7248] Use struct sctp_sack_info instead [ 318.595065][ T4262] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 320.394476][ T7259] netlink: 'syz.4.1068': attribute type 10 has an invalid length. [ 320.414544][ T7259] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1068'. [ 322.872094][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.878525][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.551569][ T7304] netlink: 14564 bytes leftover after parsing attributes in process `syz.4.1079'. [ 325.121961][ T4262] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 328.895918][ T4262] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6 [ 331.795981][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.814341][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.824892][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.835675][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.845849][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.856621][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.866768][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.877529][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.828182][ T7426] Â: renamed from pim6reg1 [ 337.070612][ T4315] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.328921][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.395817][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.435721][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.460866][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.472032][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.483323][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.494202][ T7481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.505671][ T7481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.531477][ T7474] netlink: 'syz.0.1156': attribute type 10 has an invalid length. [ 338.551011][ T7474] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1156'. [ 339.092549][ T7490] netlink: 14564 bytes leftover after parsing attributes in process `syz.3.1152'. [ 343.141258][ T7538] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1167'. [ 345.886696][ T7581] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 345.911078][ T7581] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1184'. [ 349.307597][ T7634] netlink: 'syz.1.1203': attribute type 10 has an invalid length. [ 349.326670][ T7634] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1203'. [ 349.759630][ T7641] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1205'. [ 350.350631][ T7657] netlink: 'syz.1.1223': attribute type 9 has an invalid length. [ 350.426165][ T7657] netlink: 69652 bytes leftover after parsing attributes in process `syz.1.1223'. [ 352.054132][ T7680] netlink: 14564 bytes leftover after parsing attributes in process `syz.1.1220'. [ 353.655871][ T7687] netlink: 'syz.0.1233': attribute type 10 has an invalid length. [ 353.863747][ T7687] team0: Port device geneve1 added [ 353.890012][ T7689] netlink: 'syz.3.1221': attribute type 10 has an invalid length. [ 353.923066][ T7689] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1221'. [ 354.655741][ T7709] delete_channel: no stack [ 354.701368][ T7709] delete_channel: no stack [ 355.076299][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.120908][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.156933][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.194304][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.222021][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.234451][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.245343][ T7715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.258445][ T7715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.437726][ T7726] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1240'. [ 355.456582][ T7729] netlink: 'syz.3.1241': attribute type 10 has an invalid length. [ 355.563820][ T7726] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 355.585578][ T7726] CPU: 0 PID: 7726 Comm: syz.1.1240 Not tainted 6.1.141-syzkaller #0 [ 355.593742][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.603865][ T7726] Call Trace: [ 355.607184][ T7726] [ 355.610151][ T7726] dump_stack_lvl+0x168/0x22e [ 355.614897][ T7726] ? show_regs_print_info+0x12/0x12 [ 355.620160][ T7726] ? load_image+0x3b0/0x3b0 [ 355.624742][ T7726] sysfs_warn_dup+0x8a/0xa0 [ 355.629330][ T7726] sysfs_do_create_link_sd+0xc0/0x110 [ 355.634732][ T7726] device_add+0x7ed/0xfb0 [ 355.639113][ T7726] wiphy_register+0x1e68/0x2bd0 [ 355.644052][ T7726] ? cfg80211_event_work+0x40/0x40 [ 355.649185][ T7726] ? minstrel_ht_alloc+0x894/0xa20 [ 355.654343][ T7726] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 355.660459][ T7726] ieee80211_register_hw+0x2c29/0x38c0 [ 355.665969][ T7726] ? ieee80211_register_hw+0xef1/0x38c0 [ 355.671563][ T7726] ? ieee80211_register_hw+0xef1/0x38c0 [ 355.677157][ T7726] ? ieee80211_tasklet_handler+0x20/0x20 [ 355.682819][ T7726] ? memset+0x1e/0x40 [ 355.686863][ T7726] ? __hrtimer_init+0x186/0x270 [ 355.691757][ T7726] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 355.697563][ T7726] hwsim_new_radio_nl+0xafa/0xce0 [ 355.702626][ T7726] genl_family_rcv_msg_doit+0x22e/0x320 [ 355.708190][ T7726] ? end_current_label_crit_section+0x170/0x170 [ 355.714460][ T7726] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 355.720389][ T7726] ? bpf_lsm_capable+0x5/0x10 [ 355.725106][ T7726] ? security_capable+0x85/0xb0 [ 355.730013][ T7726] genl_rcv_msg+0x5f2/0x780 [ 355.734633][ T7726] ? genl_bind+0x350/0x350 [ 355.739064][ T7726] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 355.745456][ T7726] netlink_rcv_skb+0x1de/0x420 [ 355.750271][ T7726] ? genl_bind+0x350/0x350 [ 355.754719][ T7726] ? netlink_ack+0x1100/0x1100 [ 355.759537][ T7726] ? down_read+0x1a8/0x2d0 [ 355.764004][ T7726] genl_rcv+0x24/0x40 [ 355.768020][ T7726] netlink_unicast+0x74c/0x8c0 [ 355.772822][ T7726] netlink_sendmsg+0x89e/0xbc0 [ 355.777643][ T7726] ? netlink_getsockopt+0x540/0x540 [ 355.782872][ T7726] ? aa_sock_msg_perm+0x94/0x150 [ 355.787830][ T7726] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 355.793133][ T7726] ? security_socket_sendmsg+0x7c/0xa0 [ 355.798607][ T7726] ? netlink_getsockopt+0x540/0x540 [ 355.803835][ T7726] ____sys_sendmsg+0x59b/0x970 [ 355.808654][ T7726] ? __sys_sendmsg_sock+0x30/0x30 [ 355.813702][ T7726] ? __import_iovec+0x315/0x500 [ 355.818582][ T7726] ? import_iovec+0x6f/0xa0 [ 355.823103][ T7726] ___sys_sendmsg+0x21c/0x290 [ 355.827806][ T7726] ? __sys_sendmsg+0x270/0x270 [ 355.832659][ T7726] ? ktime_get_real_ts64+0x420/0x420 [ 355.837980][ T7726] ? __fdget+0x17c/0x200 [ 355.842249][ T7726] __se_sys_sendmsg+0x19e/0x270 [ 355.847123][ T7726] ? ct_nmi_exit+0x145/0x1c0 [ 355.851774][ T7726] ? __x64_sys_sendmsg+0x80/0x80 [ 355.856769][ T7726] ? lockdep_hardirqs_on+0x94/0x140 [ 355.862001][ T7726] do_syscall_64+0x4c/0xa0 [ 355.866462][ T7726] ? clear_bhb_loop+0x60/0xb0 [ 355.871176][ T7726] ? clear_bhb_loop+0x60/0xb0 [ 355.875878][ T7726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.881856][ T7726] RIP: 0033:0x7f0668b8e929 [ 355.886317][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.905956][ T7726] RSP: 002b:00007f0669954038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.914505][ T7726] RAX: ffffffffffffffda RBX: 00007f0668db5fa0 RCX: 00007f0668b8e929 [ 355.922537][ T7726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 355.930523][ T7726] RBP: 00007f0668c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 355.938523][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.946523][ T7726] R13: 0000000000000000 R14: 00007f0668db5fa0 R15: 00007fff49a618b8 [ 355.954874][ T7726] [ 355.977386][ T7734] netlink: 14564 bytes leftover after parsing attributes in process `syz.0.1239'. [ 355.987938][ T7733] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 356.053352][ T7733] team0: Port device geneve1 added [ 356.398761][ T7743] delete_channel: no stack [ 356.411503][ T7743] delete_channel: no stack [ 356.611092][ T7745] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 356.648150][ T7745] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1248'. [ 357.726487][ T7767] netlink: 'syz.3.1265': attribute type 10 has an invalid length. [ 357.743920][ T7767] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1265'. [ 358.400502][ T7773] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 358.439285][ T7773] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1267'. [ 358.515433][ T7776] netlink: 14564 bytes leftover after parsing attributes in process `syz.2.1256'. [ 359.685571][ T7789] netlink: 'syz.2.1259': attribute type 9 has an invalid length. [ 359.708887][ T7789] netlink: 69652 bytes leftover after parsing attributes in process `syz.2.1259'. [ 361.219823][ T7798] netlink: 'syz.4.1260': attribute type 10 has an invalid length. [ 361.257993][ T7804] delete_channel: no stack [ 361.295732][ T7804] delete_channel: no stack [ 361.316742][ T7802] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1263'. [ 361.415254][ T7802] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 361.434991][ T7802] CPU: 0 PID: 7802 Comm: syz.0.1263 Not tainted 6.1.141-syzkaller #0 [ 361.443154][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.453256][ T7802] Call Trace: [ 361.456576][ T7802] [ 361.459536][ T7802] dump_stack_lvl+0x168/0x22e [ 361.464276][ T7802] ? show_regs_print_info+0x12/0x12 [ 361.469532][ T7802] ? load_image+0x3b0/0x3b0 [ 361.474652][ T7802] sysfs_warn_dup+0x8a/0xa0 [ 361.479220][ T7802] sysfs_do_create_link_sd+0xc0/0x110 [ 361.484841][ T7802] device_add+0x7ed/0xfb0 [ 361.489235][ T7802] wiphy_register+0x1e68/0x2bd0 [ 361.494168][ T7802] ? cfg80211_event_work+0x40/0x40 [ 361.499355][ T7802] ? minstrel_ht_alloc+0x894/0xa20 [ 361.504527][ T7802] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 361.510652][ T7802] ieee80211_register_hw+0x2c29/0x38c0 [ 361.516190][ T7802] ? ieee80211_register_hw+0xef1/0x38c0 [ 361.521802][ T7802] ? ieee80211_register_hw+0xef1/0x38c0 [ 361.527418][ T7802] ? ieee80211_tasklet_handler+0x20/0x20 [ 361.533127][ T7802] ? memset+0x1e/0x40 [ 361.537157][ T7802] ? __hrtimer_init+0x186/0x270 [ 361.542079][ T7802] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 361.547888][ T7802] hwsim_new_radio_nl+0xafa/0xce0 [ 361.552979][ T7802] genl_family_rcv_msg_doit+0x22e/0x320 [ 361.558581][ T7802] ? end_current_label_crit_section+0x170/0x170 [ 361.564883][ T7802] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 361.570838][ T7802] ? bpf_lsm_capable+0x5/0x10 [ 361.575566][ T7802] ? security_capable+0x85/0xb0 [ 361.580481][ T7802] genl_rcv_msg+0x5f2/0x780 [ 361.585045][ T7802] ? genl_bind+0x350/0x350 [ 361.589594][ T7802] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 361.596001][ T7802] netlink_rcv_skb+0x1de/0x420 [ 361.600830][ T7802] ? genl_bind+0x350/0x350 [ 361.605307][ T7802] ? netlink_ack+0x1100/0x1100 [ 361.610159][ T7802] ? down_read+0x1a8/0x2d0 [ 361.614661][ T7802] genl_rcv+0x24/0x40 [ 361.618716][ T7802] netlink_unicast+0x74c/0x8c0 [ 361.623561][ T7802] netlink_sendmsg+0x89e/0xbc0 [ 361.628394][ T7802] ? netlink_getsockopt+0x540/0x540 [ 361.633664][ T7802] ? aa_sock_msg_perm+0x94/0x150 [ 361.638656][ T7802] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.643990][ T7802] ? security_socket_sendmsg+0x7c/0xa0 [ 361.649494][ T7802] ? netlink_getsockopt+0x540/0x540 [ 361.654753][ T7802] ____sys_sendmsg+0x59b/0x970 [ 361.659591][ T7802] ? __sys_sendmsg_sock+0x30/0x30 [ 361.664769][ T7802] ? __import_iovec+0x315/0x500 [ 361.669685][ T7802] ? import_iovec+0x6f/0xa0 [ 361.674248][ T7802] ___sys_sendmsg+0x21c/0x290 [ 361.679001][ T7802] ? __sys_sendmsg+0x270/0x270 [ 361.683878][ T7802] ? __fdget+0x17c/0x200 [ 361.688186][ T7802] __se_sys_sendmsg+0x19e/0x270 [ 361.693097][ T7802] ? ct_nmi_exit+0x145/0x1c0 [ 361.697747][ T7802] ? __x64_sys_sendmsg+0x80/0x80 [ 361.702765][ T7802] ? lockdep_hardirqs_on+0x94/0x140 [ 361.708008][ T7802] do_syscall_64+0x4c/0xa0 [ 361.712475][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 361.717184][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 361.721890][ T7802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.727821][ T7802] RIP: 0033:0x7facb538e929 [ 361.732261][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.751897][ T7802] RSP: 002b:00007facb610f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.760335][ T7802] RAX: ffffffffffffffda RBX: 00007facb55b5fa0 RCX: 00007facb538e929 [ 361.768326][ T7802] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 361.776360][ T7802] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 361.784368][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.792407][ T7802] R13: 0000000000000000 R14: 00007facb55b5fa0 R15: 00007ffc43fcce88 [ 361.800432][ T7802] [ 361.892363][ T4262] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 361.900244][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 361.910306][ T4262] CPU: 0 PID: 4262 Comm: kworker/u5:4 Not tainted 6.1.141-syzkaller #0 [ 361.918605][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.928718][ T4262] Workqueue: hci3 hci_rx_work [ 361.933450][ T4262] Call Trace: [ 361.936750][ T4262] [ 361.939736][ T4262] dump_stack_lvl+0x168/0x22e [ 361.944458][ T4262] ? show_regs_print_info+0x12/0x12 [ 361.949689][ T4262] ? load_image+0x3b0/0x3b0 [ 361.954230][ T4262] sysfs_create_dir_ns+0x252/0x280 [ 361.959377][ T4262] ? hci_rx_work+0x3eb/0xd40 [ 361.963995][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 361.968711][ T4262] ? do_raw_spin_unlock+0x11d/0x230 [ 361.973949][ T4262] kobject_add_internal+0x6b8/0xc80 [ 361.979201][ T4262] kobject_add+0x152/0x210 [ 361.983658][ T4262] ? kobject_init+0x1d0/0x1d0 [ 361.988379][ T4262] ? klist_children_get+0x50/0x50 [ 361.993452][ T4262] ? get_device_parent+0x121/0x3f0 [ 361.998620][ T4262] device_add+0x483/0xfb0 [ 362.002977][ T4262] ? kmem_cache_free+0xf7/0x290 [ 362.007861][ T4262] hci_conn_add_sysfs+0xd1/0x1e0 [ 362.012825][ T4262] le_conn_complete_evt+0xd1d/0x1320 [ 362.018146][ T4262] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 362.024415][ T4262] ? bt_info+0x150/0x150 [ 362.028685][ T4262] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 362.034364][ T4262] ? skb_pull_data+0xf7/0x200 [ 362.039078][ T4262] hci_le_conn_complete_evt+0x183/0x440 [ 362.044653][ T4262] ? hci_remote_host_features_evt+0x270/0x270 [ 362.050755][ T4262] hci_event_packet+0x791/0x1210 [ 362.055731][ T4262] ? bis_list+0x280/0x280 [ 362.060083][ T4262] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 362.066008][ T4262] ? kcov_remote_start+0x4c7/0x7e0 [ 362.071141][ T4262] ? lec_tx_timeout+0xc0/0x1c0 [ 362.075928][ T4262] ? hci_send_to_monitor+0x9c/0x4a0 [ 362.081155][ T4262] hci_rx_work+0x3eb/0xd40 [ 362.085631][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 362.090767][ T4262] ? process_one_work+0x7a1/0x1160 [ 362.095926][ T4262] process_one_work+0x898/0x1160 [ 362.100909][ T4262] ? worker_detach_from_pool+0x240/0x240 [ 362.106564][ T4262] ? _raw_spin_lock_irq+0x7a/0xe0 [ 362.111638][ T4262] ? _raw_spin_lock_irq+0xab/0xe0 [ 362.116712][ T4262] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 362.122125][ T4262] ? kthread_data+0x4b/0xc0 [ 362.126667][ T4262] worker_thread+0xaa2/0x1250 [ 362.131395][ T4262] kthread+0x29d/0x330 [ 362.135932][ T4262] ? worker_clr_flags+0x1a0/0x1a0 [ 362.140976][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 362.145595][ T4262] ret_from_fork+0x1f/0x30 [ 362.150074][ T4262] [ 362.155363][ T4262] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 362.168574][ T4262] Bluetooth: hci3: failed to register connection device [ 363.440465][ T7839] netlink: 'syz.0.1279': attribute type 9 has an invalid length. [ 363.473905][ T7834] netlink: 'syz.1.1280': attribute type 10 has an invalid length. [ 363.503022][ T7839] netlink: 69652 bytes leftover after parsing attributes in process `syz.0.1279'. [ 363.522263][ T7834] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1280'. [ 363.735019][ T7844] delete_channel: no stack [ 363.740530][ T7844] delete_channel: no stack [ 364.007153][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.049868][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.071592][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.083359][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.093752][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.104471][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.114999][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.126062][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.144099][ T7847] delete_channel: no stack [ 364.408306][ T7852] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 364.451336][ T7856] device syzkaller0 entered promiscuous mode [ 364.560214][ T7859] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1289'. [ 364.661547][ T7859] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 364.669723][ T7859] CPU: 0 PID: 7859 Comm: syz.4.1289 Not tainted 6.1.141-syzkaller #0 [ 364.678193][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.688296][ T7859] Call Trace: [ 364.691616][ T7859] [ 364.694591][ T7859] dump_stack_lvl+0x168/0x22e [ 364.699327][ T7859] ? show_regs_print_info+0x12/0x12 [ 364.704587][ T7859] ? load_image+0x3b0/0x3b0 [ 364.709152][ T7859] sysfs_warn_dup+0x8a/0xa0 [ 364.713710][ T7859] sysfs_do_create_link_sd+0xc0/0x110 [ 364.719187][ T7859] device_add+0x7ed/0xfb0 [ 364.723583][ T7859] wiphy_register+0x1e68/0x2bd0 [ 364.728504][ T7859] ? cfg80211_event_work+0x40/0x40 [ 364.733665][ T7859] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 364.739889][ T7859] ? ieee80211_register_hw+0x2a6a/0x38c0 [ 364.745585][ T7859] ieee80211_register_hw+0x2c29/0x38c0 [ 364.751116][ T7859] ? ieee80211_register_hw+0xef1/0x38c0 [ 364.756716][ T7859] ? ieee80211_register_hw+0xef1/0x38c0 [ 364.762333][ T7859] ? ieee80211_tasklet_handler+0x20/0x20 [ 364.768042][ T7859] ? memset+0x1e/0x40 [ 364.772070][ T7859] ? __hrtimer_init+0x186/0x270 [ 364.776974][ T7859] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 364.782764][ T7859] hwsim_new_radio_nl+0xafa/0xce0 [ 364.787857][ T7859] genl_family_rcv_msg_doit+0x22e/0x320 [ 364.793447][ T7859] ? end_current_label_crit_section+0x170/0x170 [ 364.799762][ T7859] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 364.805712][ T7859] ? bpf_lsm_capable+0x5/0x10 [ 364.810443][ T7859] ? security_capable+0x85/0xb0 [ 364.815351][ T7859] genl_rcv_msg+0x5f2/0x780 [ 364.819908][ T7859] ? genl_bind+0x350/0x350 [ 364.824373][ T7859] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 364.830765][ T7859] ? lock_acquire+0x20f/0x490 [ 364.835522][ T7859] netlink_rcv_skb+0x1de/0x420 [ 364.840352][ T7859] ? genl_bind+0x350/0x350 [ 364.844820][ T7859] ? netlink_ack+0x1100/0x1100 [ 364.849659][ T7859] ? down_read+0x1a8/0x2d0 [ 364.854147][ T7859] genl_rcv+0x24/0x40 [ 364.858189][ T7859] netlink_unicast+0x74c/0x8c0 [ 364.863027][ T7859] netlink_sendmsg+0x89e/0xbc0 [ 364.867858][ T7859] ? netlink_getsockopt+0x540/0x540 [ 364.873120][ T7859] ? aa_sock_msg_perm+0x94/0x150 [ 364.878474][ T7859] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 364.883814][ T7859] ? security_socket_sendmsg+0x7c/0xa0 [ 364.889320][ T7859] ? netlink_getsockopt+0x540/0x540 [ 364.894585][ T7859] ____sys_sendmsg+0x59b/0x970 [ 364.899412][ T7859] ? __sys_sendmsg_sock+0x30/0x30 [ 364.904479][ T7859] ? __import_iovec+0x315/0x500 [ 364.909374][ T7859] ? import_iovec+0x6f/0xa0 [ 364.913933][ T7859] ___sys_sendmsg+0x21c/0x290 [ 364.918662][ T7859] ? __sys_sendmsg+0x270/0x270 [ 364.923499][ T7859] ? ktime_get_real_ts64+0x420/0x420 [ 364.928851][ T7859] ? __fdget+0x17c/0x200 [ 364.933152][ T7859] __se_sys_sendmsg+0x19e/0x270 [ 364.938052][ T7859] ? __x64_sys_sendmsg+0x80/0x80 [ 364.943072][ T7859] ? lockdep_hardirqs_on+0x94/0x140 [ 364.948312][ T7859] do_syscall_64+0x4c/0xa0 [ 364.952767][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 364.957482][ T7859] ? clear_bhb_loop+0x60/0xb0 [ 364.962236][ T7859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.968271][ T7859] RIP: 0033:0x7fd5f7b8e929 [ 364.972719][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.992371][ T7859] RSP: 002b:00007fd5f8a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.000847][ T7859] RAX: ffffffffffffffda RBX: 00007fd5f7db5fa0 RCX: 00007fd5f7b8e929 [ 365.008855][ T7859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 365.016868][ T7859] RBP: 00007fd5f7c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 365.024877][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.032883][ T7859] R13: 0000000000000000 R14: 00007fd5f7db5fa0 R15: 00007ffd062afcd8 [ 365.040910][ T7859] [ 366.054891][ T7879] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 366.100897][ T7879] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1296'. [ 366.608532][ T7887] delete_channel: no stack [ 366.631997][ T7887] delete_channel: no stack [ 366.869626][ T7891] netlink: 'syz.0.1309': attribute type 10 has an invalid length. [ 366.920807][ T7891] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1309'. [ 367.009830][ T7893] delete_channel: no stack [ 367.019970][ T7893] delete_channel: no stack [ 367.298391][ T7899] netlink: 'syz.2.1302': attribute type 10 has an invalid length. [ 367.348975][ T7901] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1304'. [ 367.473510][ T7899] team0: Port device geneve1 added [ 367.522496][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.535880][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.554310][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.590526][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.639408][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.702727][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.782836][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.857328][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.891369][ T7901] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 367.900321][ T7901] CPU: 0 PID: 7901 Comm: syz.3.1304 Not tainted 6.1.141-syzkaller #0 [ 367.908447][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.918548][ T7901] Call Trace: [ 367.922038][ T7901] [ 367.924999][ T7901] dump_stack_lvl+0x168/0x22e [ 367.929911][ T7901] ? show_regs_print_info+0x12/0x12 [ 367.935158][ T7901] ? load_image+0x3b0/0x3b0 [ 367.939715][ T7901] sysfs_warn_dup+0x8a/0xa0 [ 367.944286][ T7901] sysfs_do_create_link_sd+0xc0/0x110 [ 367.949729][ T7901] device_add+0x7ed/0xfb0 [ 367.954131][ T7901] wiphy_register+0x1e68/0x2bd0 [ 367.959082][ T7901] ? cfg80211_event_work+0x40/0x40 [ 367.964275][ T7901] ? minstrel_ht_alloc+0x894/0xa20 [ 367.969443][ T7901] ? strcmp+0x24/0xb0 [ 367.973500][ T7901] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 367.979675][ T7901] ieee80211_register_hw+0x2c29/0x38c0 [ 367.985213][ T7901] ? ieee80211_register_hw+0xef1/0x38c0 [ 367.990818][ T7901] ? ieee80211_register_hw+0xef1/0x38c0 [ 367.996521][ T7901] ? ieee80211_tasklet_handler+0x20/0x20 [ 368.002226][ T7901] ? __hrtimer_init+0xbb/0x270 [ 368.007044][ T7901] ? __hrtimer_init+0x186/0x270 [ 368.012036][ T7901] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 368.017831][ T7901] hwsim_new_radio_nl+0xafa/0xce0 [ 368.022945][ T7901] genl_family_rcv_msg_doit+0x22e/0x320 [ 368.028550][ T7901] ? end_current_label_crit_section+0x170/0x170 [ 368.034861][ T7901] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 368.040814][ T7901] ? bpf_lsm_capable+0x5/0x10 [ 368.045900][ T7901] ? security_capable+0x85/0xb0 [ 368.050801][ T7901] genl_rcv_msg+0x5f2/0x780 [ 368.055361][ T7901] ? genl_bind+0x350/0x350 [ 368.059821][ T7901] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 368.066245][ T7901] netlink_rcv_skb+0x1de/0x420 [ 368.071421][ T7901] ? genl_bind+0x350/0x350 [ 368.075886][ T7901] ? netlink_ack+0x1100/0x1100 [ 368.080770][ T7901] ? down_read+0x1a8/0x2d0 [ 368.085260][ T7901] genl_rcv+0x24/0x40 [ 368.089291][ T7901] netlink_unicast+0x74c/0x8c0 [ 368.094125][ T7901] netlink_sendmsg+0x89e/0xbc0 [ 368.098958][ T7901] ? netlink_getsockopt+0x540/0x540 [ 368.104218][ T7901] ? aa_sock_msg_perm+0x94/0x150 [ 368.109233][ T7901] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 368.114585][ T7901] ? security_socket_sendmsg+0x7c/0xa0 [ 368.120107][ T7901] ? netlink_getsockopt+0x540/0x540 [ 368.125375][ T7901] ____sys_sendmsg+0x59b/0x970 [ 368.130210][ T7901] ? __sys_sendmsg_sock+0x30/0x30 [ 368.135308][ T7901] ? import_iovec+0x6f/0xa0 [ 368.139871][ T7901] ___sys_sendmsg+0x21c/0x290 [ 368.144616][ T7901] ? __sys_sendmsg+0x270/0x270 [ 368.149462][ T7901] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 368.155258][ T7901] ? __fdget+0x17c/0x200 [ 368.159569][ T7901] __se_sys_sendmsg+0x19e/0x270 [ 368.164494][ T7901] ? __x64_sys_sendmsg+0x80/0x80 [ 368.169583][ T7901] ? lockdep_hardirqs_on+0x94/0x140 [ 368.174858][ T7901] ? __x64_sys_sendmsg+0x34/0x80 [ 368.179870][ T7901] do_syscall_64+0x4c/0xa0 [ 368.184354][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 368.189076][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 368.193845][ T7901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.199815][ T7901] RIP: 0033:0x7f8abeb8e929 [ 368.204273][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.223933][ T7901] RSP: 002b:00007f8abfa8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.232403][ T7901] RAX: ffffffffffffffda RBX: 00007f8abedb5fa0 RCX: 00007f8abeb8e929 [ 368.240419][ T7901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 368.248447][ T7901] RBP: 00007f8abec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.256458][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.264465][ T7901] R13: 0000000000000000 R14: 00007f8abedb5fa0 R15: 00007ffee1048b08 [ 368.272491][ T7901] [ 368.289557][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.347193][ T7904] delete_channel: no stack [ 369.385615][ T4334] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.934961][ T7933] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1308'. [ 369.953997][ T7933] device bond_slave_0 entered promiscuous mode [ 369.960721][ T7933] device bond_slave_1 entered promiscuous mode [ 369.966979][ T7933] device wlan1 entered promiscuous mode [ 369.974023][ T7933] device bridge0 entered promiscuous mode [ 371.406489][ T7972] delete_channel: no stack [ 371.459936][ T7972] delete_channel: no stack [ 373.254950][ T7999] delete_channel: no stack [ 373.673397][ T8013] delete_channel: no stack [ 373.705875][ T8013] delete_channel: no stack [ 376.369076][ T8032] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1335'. [ 376.399070][ T8032] netlink: zone id is out of range [ 376.495046][ T8032] netlink: zone id is out of range [ 376.572383][ T8032] netlink: get zone limit has 8 unknown bytes [ 377.415723][ T8044] delete_channel: no stack [ 379.832839][ T4262] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 381.260341][ T8088] device syzkaller0 entered promiscuous mode [ 381.594769][ T8091] delete_channel: no stack [ 384.299997][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.306436][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.982325][ T4262] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 384.990207][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 385.000658][ T4262] CPU: 0 PID: 4262 Comm: kworker/u5:4 Not tainted 6.1.141-syzkaller #0 [ 385.008969][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.019081][ T4262] Workqueue: hci1 hci_rx_work [ 385.023811][ T4262] Call Trace: [ 385.027126][ T4262] [ 385.030100][ T4262] dump_stack_lvl+0x168/0x22e [ 385.034848][ T4262] ? show_regs_print_info+0x12/0x12 [ 385.040106][ T4262] ? load_image+0x3b0/0x3b0 [ 385.044668][ T4262] sysfs_create_dir_ns+0x252/0x280 [ 385.049849][ T4262] ? hci_rx_work+0x3eb/0xd40 [ 385.054494][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 385.059229][ T4262] ? do_raw_spin_unlock+0x11d/0x230 [ 385.064499][ T4262] kobject_add_internal+0x6b8/0xc80 [ 385.069750][ T4262] kobject_add+0x152/0x210 [ 385.074225][ T4262] ? kobject_init+0x1d0/0x1d0 [ 385.078954][ T4262] ? klist_children_get+0x50/0x50 [ 385.084029][ T4262] ? get_device_parent+0x121/0x3f0 [ 385.089173][ T4262] device_add+0x483/0xfb0 [ 385.093539][ T4262] ? kmem_cache_free+0xf7/0x290 [ 385.098426][ T4262] hci_conn_add_sysfs+0xd1/0x1e0 [ 385.103393][ T4262] le_conn_complete_evt+0xd1d/0x1320 [ 385.108718][ T4262] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 385.114999][ T4262] ? bt_info+0x150/0x150 [ 385.119278][ T4262] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 385.124952][ T4262] ? skb_pull_data+0xf7/0x200 [ 385.129702][ T4262] hci_le_conn_complete_evt+0x183/0x440 [ 385.135296][ T4262] ? hci_remote_host_features_evt+0x270/0x270 [ 385.141419][ T4262] hci_event_packet+0x791/0x1210 [ 385.146397][ T4262] ? bis_list+0x280/0x280 [ 385.150775][ T4262] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 385.156706][ T4262] ? kcov_remote_start+0x4c7/0x7e0 [ 385.161855][ T4262] ? lec_tx_timeout+0xc0/0x1c0 [ 385.166649][ T4262] ? hci_send_to_monitor+0x9c/0x4a0 [ 385.171884][ T4262] hci_rx_work+0x3eb/0xd40 [ 385.176326][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 385.181220][ T4262] ? process_one_work+0x7a1/0x1160 [ 385.186381][ T4262] process_one_work+0x898/0x1160 [ 385.191371][ T4262] ? worker_detach_from_pool+0x240/0x240 [ 385.197034][ T4262] ? _raw_spin_lock_irq+0x7a/0xe0 [ 385.202095][ T4262] ? _raw_spin_lock_irq+0xab/0xe0 [ 385.207146][ T4262] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 385.212551][ T4262] ? kthread_data+0x4b/0xc0 [ 385.217100][ T4262] worker_thread+0xaa2/0x1250 [ 385.221828][ T4262] kthread+0x29d/0x330 [ 385.225971][ T4262] ? worker_clr_flags+0x1a0/0x1a0 [ 385.231020][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 385.235641][ T4262] ret_from_fork+0x1f/0x30 [ 385.240100][ T4262] [ 385.246713][ T4262] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 385.260122][ T4262] Bluetooth: hci1: failed to register connection device [ 385.710503][ T8125] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1371'. [ 385.751947][ T8125] device bond_slave_0 entered promiscuous mode [ 385.762914][ T8125] device bond_slave_1 entered promiscuous mode [ 385.773930][ T8125] device bridge0 entered promiscuous mode [ 388.446841][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.455280][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.910962][ T4262] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 389.431640][ T8172] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1387'. [ 389.481764][ T8172] device bond_slave_0 entered promiscuous mode [ 389.488067][ T8172] device bond_slave_1 entered promiscuous mode [ 389.494442][ T8172] device bridge0 entered promiscuous mode [ 389.548503][ T8174] netlink: 'syz.0.1389': attribute type 10 has an invalid length. [ 389.558543][ T8174] bridge0: port 3(macsec0) entered blocking state [ 389.601209][ T8174] bridge0: port 3(macsec0) entered disabled state [ 389.622400][ T8174] device macsec0 entered promiscuous mode [ 389.669066][ T8174] bridge0: port 3(macsec0) entered blocking state [ 389.675735][ T8174] bridge0: port 3(macsec0) entered forwarding state [ 389.833402][ T8176] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 390.200628][ T8184] netlink: 'syz.4.1395': attribute type 3 has an invalid length. [ 390.209763][ T8184] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1395'. [ 390.423734][ T4262] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 391.688525][ T8211] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1403'. [ 391.780783][ T8211] device bond_slave_0 entered promiscuous mode [ 391.787120][ T8211] device bond_slave_1 entered promiscuous mode [ 392.426456][ T8227] netlink: 'syz.2.1412': attribute type 10 has an invalid length. [ 392.661341][ T8232] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1414'. [ 392.701252][ T8232] netlink: zone id is out of range [ 392.716315][ T8232] netlink: zone id is out of range [ 392.730644][ T8232] netlink: get zone limit has 8 unknown bytes [ 392.791319][ T8237] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 393.815700][ T8251] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1419'. [ 393.867129][ T8251] device bond_slave_0 entered promiscuous mode [ 393.873557][ T8251] device bond_slave_1 entered promiscuous mode [ 393.881046][ T8251] device bridge0 entered promiscuous mode [ 395.807211][ T8292] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 395.833042][ T8292] bridge0: port 3(macsec0) entered blocking state [ 395.850187][ T8292] bridge0: port 3(macsec0) entered disabled state [ 395.867986][ T8292] device macsec0 entered promiscuous mode [ 395.881815][ T8292] bridge0: port 3(macsec0) entered blocking state [ 395.888504][ T8292] bridge0: port 3(macsec0) entered forwarding state [ 396.329330][ T8304] netlink: 'syz.2.1435': attribute type 3 has an invalid length. [ 396.368919][ T8304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1435'. [ 397.067752][ T8323] netlink: 'syz.1.1442': attribute type 10 has an invalid length. [ 397.100929][ T8323] device veth1_macvtap left promiscuous mode [ 397.333787][ T8326] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 398.358623][ T8351] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 398.368542][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.388430][ T8353] netlink: 'syz.4.1449': attribute type 2 has an invalid length. [ 398.408397][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.447477][ T8351] device batadv_slave_0 entered promiscuous mode [ 398.480368][ T8351] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 398.515110][ T8352] netlink: 'syz.3.1447': attribute type 10 has an invalid length. [ 398.528987][ T8357] netlink: 'syz.1.1451': attribute type 3 has an invalid length. [ 398.541445][ T8352] bridge0: port 3(macsec0) entered blocking state [ 398.559145][ T8352] bridge0: port 3(macsec0) entered disabled state [ 398.579297][ T8357] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1451'. [ 398.590593][ T8352] device macsec0 entered promiscuous mode [ 399.169293][ T8353] device 0 entered promiscuous mode [ 399.791014][ T8370] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1456'. [ 400.268982][ T8374] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 400.386302][ T8374] device veth1_macvtap left promiscuous mode [ 400.693430][ T8374] device macsec0 left promiscuous mode [ 400.714196][ T8374] bridge0: port 3(macsec0) entered disabled state [ 401.162628][ T8384] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1469'. [ 401.931766][ T4315] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 402.608095][ T8420] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 402.641901][ T8420] bridge0: port 3(macsec0) entered disabled state [ 402.694200][ T8420] device macsec0 left promiscuous mode [ 402.798184][ T8420] bridge0: port 3(macsec0) entered disabled state [ 402.871086][ T8429] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1477'. [ 405.187152][ T8467] netlink: 'syz.3.1488': attribute type 3 has an invalid length. [ 405.197701][ T8467] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1488'. [ 406.984756][ T8485] netlink: 'syz.4.1492': attribute type 10 has an invalid length. [ 407.052199][ T8485] bridge0: port 3(macsec0) entered disabled state [ 407.109142][ T8485] device macsec0 left promiscuous mode [ 407.131565][ T8485] bridge0: port 3(macsec0) entered disabled state [ 407.187361][ T8487] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 407.214497][ T8487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.303043][ T8487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.411985][ T8487] device batadv_slave_0 entered promiscuous mode [ 407.452597][ T8487] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 407.493531][ T8488] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1493'. [ 408.272328][ T8506] netlink: 'syz.1.1516': attribute type 10 has an invalid length. [ 408.327922][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.535567][ T8506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.692042][ T8506] device batadv_slave_0 entered promiscuous mode [ 408.763232][ T8506] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 409.938606][ T8524] netlink: 'syz.4.1522': attribute type 10 has an invalid length. [ 409.947193][ T8524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.963558][ T8524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.995641][ T8524] device batadv_slave_0 entered promiscuous mode [ 410.012890][ T8524] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 410.506679][ T8518] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 410.729544][ T8518] device syzkaller0 entered promiscuous mode [ 413.182465][ T8549] device syzkaller0 entered promiscuous mode [ 413.328359][ T4262] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 416.601986][ T8583] netlink: 'syz.0.1527': attribute type 10 has an invalid length. [ 416.695748][ T8583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.786283][ T8583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.866303][ T8583] device batadv_slave_0 entered promiscuous mode [ 416.873870][ T8583] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 418.487614][ T8600] netlink: 'syz.0.1547': attribute type 10 has an invalid length. [ 418.745969][ T4262] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 419.425450][ T4262] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 421.153173][ T8644] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.254021][ T8644] device syzkaller0 entered promiscuous mode [ 421.545258][ T4262] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 423.774079][ T8670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1563'. [ 424.194741][ T4262] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 425.087875][ T4262] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 425.758751][ T8699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.974693][ T8699] device syzkaller0 entered promiscuous mode [ 426.014820][ T8704] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 428.212396][ T4262] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 428.221669][ T4262] Bluetooth: hci3: Injecting HCI hardware error event [ 428.230407][ T4266] Bluetooth: hci3: hardware error 0x00 [ 428.306047][ T4262] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 428.393623][ T4262] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 429.375117][ T8737] netlink: 'syz.1.1592': attribute type 29 has an invalid length. [ 429.646151][ T8737] netlink: 'syz.1.1592': attribute type 29 has an invalid length. [ 429.910274][ T8754] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 429.978225][ T8754] device syzkaller0 entered promiscuous mode [ 430.292741][ T4266] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 432.249735][ T8770] device syzkaller0 entered promiscuous mode [ 432.260303][ T4266] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 432.451008][ T4266] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 432.477770][ T4266] Bluetooth: hci2: Injecting HCI hardware error event [ 432.486881][ T4262] Bluetooth: hci2: hardware error 0x00 [ 434.206698][ T8780] device syzkaller0 entered promiscuous mode [ 434.543067][ T4262] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 436.295363][ T4262] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 436.305138][ T4262] Bluetooth: hci1: Injecting HCI hardware error event [ 436.313797][ T4266] Bluetooth: hci1: hardware error 0x00 [ 438.451116][ T4266] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 438.703587][ T8818] netlink: 'syz.2.1617': attribute type 39 has an invalid length. [ 438.742467][ T8818] device veth0_macvtap left promiscuous mode [ 441.994485][ T8860] device syzkaller0 entered promiscuous mode [ 445.733584][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.740011][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.037908][ T8904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1647'. [ 446.255529][ T4266] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 446.590750][ T8917] device syzkaller0 entered promiscuous mode [ 449.426811][ T8929] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 449.595014][ T8933] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 449.739987][ T8933] team0: Device hsr_slave_0 failed to register rx_handler [ 450.291916][ T4266] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 450.301317][ T4266] Bluetooth: hci0: Injecting HCI hardware error event [ 450.309768][ T4266] Bluetooth: hci0: hardware error 0x00 [ 450.523645][ T8950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1662'. [ 452.381855][ T4266] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 452.513828][ T8975] netlink: 'syz.1.1668': attribute type 10 has an invalid length. [ 453.047190][ T8985] netlink: 'syz.1.1672': attribute type 10 has an invalid length. [ 453.344745][ T8985] team0: Device hsr_slave_0 failed to register rx_handler [ 453.623470][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1676'. [ 453.643195][ T8996] netlink: 'syz.4.1688': attribute type 11 has an invalid length. [ 453.665774][ T8996] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1688'. [ 453.707068][ T8995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.138494][ T9022] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 455.250390][ T9022] device syzkaller0 entered promiscuous mode [ 459.003465][ T9039] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 459.045098][ T9039] team0: Device hsr_slave_0 failed to register rx_handler [ 459.217896][ T9046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1694'. [ 459.749665][ T9059] netlink: 'syz.3.1699': attribute type 11 has an invalid length. [ 459.820930][ T9059] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1699'. [ 459.883616][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.909078][ T9061] delete_channel: no stack [ 460.192993][ T9067] netlink: 'syz.0.1716': attribute type 11 has an invalid length. [ 460.222495][ T9067] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1716'. [ 460.308757][ T9066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.591391][ T9082] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 461.697188][ T9082] device syzkaller0 entered promiscuous mode [ 465.065766][ T9086] netlink: 'syz.2.1713': attribute type 10 has an invalid length. [ 465.147195][ T9086] team0: Device hsr_slave_0 failed to register rx_handler [ 465.212807][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1712'. [ 465.918347][ T9119] netlink: 'syz.4.1722': attribute type 10 has an invalid length. [ 466.097750][ T9125] device syzkaller0 entered promiscuous mode [ 466.736122][ T9134] device bridge_slave_0 left promiscuous mode [ 466.742570][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.708285][ T9154] netlink: 'syz.0.1732': attribute type 10 has an invalid length. [ 467.830954][ T9154] team0: Device hsr_slave_0 failed to register rx_handler [ 468.052709][ T9165] netlink: 'syz.2.1740': attribute type 10 has an invalid length. [ 468.373706][ T9169] device syzkaller0 entered promiscuous mode [ 468.683899][ T9175] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 468.768730][ T9175] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 468.793216][ T9178] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 468.943469][ T9178] netlink: 'syz.2.1746': attribute type 29 has an invalid length. [ 469.095647][ T9184] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1750'. [ 469.115340][ T9184] openvswitch: netlink: Message has 48126 unknown bytes. [ 470.391678][ T9207] device syzkaller0 entered promiscuous mode [ 470.635428][ T9210] device pim6reg1 entered promiscuous mode [ 471.518241][ T9224] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 471.810213][ T9224] device syzkaller0 entered promiscuous mode [ 472.298674][ T9246] netlink: 'syz.3.1774': attribute type 29 has an invalid length. [ 475.858591][ T9246] netlink: 'syz.3.1774': attribute type 29 has an invalid length. [ 475.869997][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.978052][ T9251] device bridge_slave_0 left promiscuous mode [ 475.995267][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.543839][ T9268] device syzkaller0 entered promiscuous mode [ 476.818684][ T9276] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.1784'. [ 476.847321][ T9276] openvswitch: netlink: Message has 48126 unknown bytes. [ 479.050354][ T9278] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 479.298509][ T9295] delete_channel: no stack [ 479.399101][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.557562][ T9302] device bridge_slave_0 left promiscuous mode [ 479.567356][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.704525][ T9297] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.807277][ T9310] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 479.856230][ T9297] device syzkaller0 entered promiscuous mode [ 479.900918][ T9310] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 479.916051][ T9311] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 481.805904][ T9311] netlink: 'syz.0.1791': attribute type 29 has an invalid length. [ 482.013558][ T9320] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1797'. [ 482.034325][ T9320] openvswitch: netlink: Message has 48126 unknown bytes. [ 483.290964][ T9340] delete_channel: no stack [ 484.858562][ T9356] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 485.000249][ T9356] device syzkaller0 entered promiscuous mode [ 491.157915][ T9428] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 491.219998][ T9428] device syzkaller0 entered promiscuous mode [ 497.773267][ T9485] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1861'. [ 498.238686][ T9492] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 498.455560][ T9492] device syzkaller0 entered promiscuous mode [ 502.067526][ T9506] netlink: 'syz.4.1869': attribute type 10 has an invalid length. [ 502.078943][ T9506] device macvlan0 left promiscuous mode [ 502.103537][ T9506] bond0: (slave macvlan0): Releasing backup interface [ 502.136611][ T9506] team0: Port device macvlan0 added [ 503.456739][ T4266] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 504.683540][ T9555] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1889'. [ 504.943839][ T9561] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 505.085829][ T9561] device syzkaller0 entered promiscuous mode [ 507.176323][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.183205][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.730073][ T9608] netlink: 'syz.0.1907': attribute type 10 has an invalid length. [ 508.782537][ T9608] device macvlan0 left promiscuous mode [ 508.887772][ T9608] bond0: (slave macvlan0): Releasing backup interface [ 509.023887][ T9608] team0: Port device macvlan0 added [ 509.815708][ T9623] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1914'. [ 510.141997][ T9633] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1919'. [ 510.642325][ T9648] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 510.702400][ T9648] device macvlan0 left promiscuous mode [ 510.863376][ T9648] bond0: (slave macvlan0): Releasing backup interface [ 511.046177][ T9648] team0: Port device macvlan0 added [ 511.831824][ T9664] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1930'. [ 513.268274][ T9691] netlink: 'syz.2.1940': attribute type 10 has an invalid length. [ 513.323679][ T9691] device macvlan0 left promiscuous mode [ 513.329789][ T9693] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1942'. [ 513.452825][ T9691] bond0: (slave macvlan0): Releasing backup interface [ 513.556338][ T9691] team0: Port device macvlan0 added [ 513.574250][ T9693] netlink: 'syz.0.1942': attribute type 21 has an invalid length. [ 513.607544][ T9693] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1942'. [ 513.699377][ T9703] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1945'. [ 518.140498][ T9795] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1983'. [ 518.689983][ T9816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1991'. [ 518.717928][ T9815] syz.1.1990[9815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.718119][ T9815] syz.1.1990[9815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.313316][ T9824] device syzkaller0 entered promiscuous mode [ 519.599182][ T9837] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1997'. [ 521.737429][ T9837] netlink: 'syz.2.1997': attribute type 21 has an invalid length. [ 521.753710][ T9837] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1997'. [ 522.977084][ T9865] syz.0.2006[9865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.977260][ T9865] syz.0.2006[9865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.022059][ T9870] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2012'. [ 523.111614][ T9872] netlink: 'syz.3.2012': attribute type 21 has an invalid length. [ 523.119549][ T9872] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2012'. [ 526.692091][ T9940] netlink: 'syz.1.2033': attribute type 10 has an invalid length. [ 526.712998][ T9940] device macvlan0 left promiscuous mode [ 526.802124][ T9940] bond0: (slave macvlan0): Releasing backup interface [ 526.839704][ T9946] syz.2.2038[9946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.839972][ T9946] syz.2.2038[9946] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.885508][ T9940] team0: Port device macvlan0 added [ 528.860315][ T9988] syz.4.2054[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.860492][ T9988] syz.4.2054[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.134011][T10003] device syzkaller0 entered promiscuous mode [ 530.286914][T10012] delete_channel: no stack [ 530.292948][T10012] delete_channel: no stack [ 532.939082][T10027] bond0: (slave wlan1): Error: Slave device does not support XDP [ 533.243552][T10037] netlink: 'syz.2.2073': attribute type 2 has an invalid length. [ 533.373538][T10037] device 0 entered promiscuous mode [ 533.940216][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.948397][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.299957][T10062] device syzkaller0 entered promiscuous mode [ 535.429746][T10090] netlink: 'syz.0.2090': attribute type 2 has an invalid length. [ 537.129357][T10090] device 0 entered promiscuous mode [ 537.338919][T10093] netlink: 'syz.4.2092': attribute type 10 has an invalid length. [ 538.199756][T10104] netlink: 'syz.0.2098': attribute type 2 has an invalid length. [ 538.264603][T10105] netlink: 'syz.0.2098': attribute type 2 has an invalid length. [ 539.671715][T10128] netlink: 'syz.3.2107': attribute type 2 has an invalid length. [ 539.936704][T10128] device 0 entered promiscuous mode [ 540.294787][T10140] netlink: 'syz.0.2110': attribute type 10 has an invalid length. [ 541.071887][T10150] delete_channel: no stack [ 541.101181][T10150] delete_channel: no stack [ 541.396457][T10150] device syzkaller0 entered promiscuous mode [ 543.989022][T10176] netlink: 'syz.1.2123': attribute type 2 has an invalid length. [ 544.270511][T10176] device 0 entered promiscuous mode [ 544.841670][T10189] device batadv0 entered promiscuous mode [ 545.470189][T10193] netlink: 'syz.0.2130': attribute type 29 has an invalid length. [ 545.567797][T10193] netlink: 'syz.0.2130': attribute type 29 has an invalid length. [ 545.662159][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.672117][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.859318][T10204] delete_channel: no stack [ 545.862953][T10205] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2136'. [ 545.873845][T10204] delete_channel: no stack [ 546.104247][T10204] device syzkaller0 entered promiscuous mode [ 546.410548][T10211] netlink: 'syz.4.2138': attribute type 10 has an invalid length. [ 546.426938][T10211] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2138'. [ 546.448117][T10211] device bond0 entered promiscuous mode [ 546.456562][T10211] device wlan1 entered promiscuous mode [ 546.475398][T10211] bridge0: port 3(bond0) entered blocking state [ 546.488511][T10211] bridge0: port 3(bond0) entered disabled state [ 546.514292][T10212] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2138'. [ 546.728475][T10216] netlink: 'syz.4.2139': attribute type 2 has an invalid length. [ 548.682248][T10216] device 0 entered promiscuous mode [ 550.588006][T10249] netlink: 'syz.0.2154': attribute type 2 has an invalid length. [ 550.737557][T10249] device 1 entered promiscuous mode [ 550.928706][T10253] delete_channel: no stack [ 550.943314][T10253] delete_channel: no stack [ 551.586393][T10253] device syzkaller0 entered promiscuous mode [ 552.098803][T10264] netlink: 'syz.1.2170': attribute type 29 has an invalid length. [ 553.811065][T10266] device batadv0 entered promiscuous mode [ 553.846706][T10264] netlink: 'syz.1.2170': attribute type 29 has an invalid length. [ 553.999482][T10271] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 554.011078][T10271] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2160'. [ 554.030469][T10271] device bond0 entered promiscuous mode [ 554.043278][T10271] device wlan1 entered promiscuous mode [ 554.068550][T10271] bridge0: port 3(bond0) entered blocking state [ 554.082353][T10271] bridge0: port 3(bond0) entered disabled state [ 554.154819][T10272] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2160'. [ 556.757420][T10311] netlink: 'syz.0.2177': attribute type 10 has an invalid length. [ 556.773641][T10311] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2177'. [ 556.804393][T10311] device bond0 entered promiscuous mode [ 556.830708][T10311] device wlan1 entered promiscuous mode [ 556.861352][T10311] bridge0: port 1(bond0) entered blocking state [ 556.868767][T10311] bridge0: port 1(bond0) entered disabled state [ 556.938332][T10319] delete_channel: no stack [ 557.019702][T10319] delete_channel: no stack [ 557.235430][T10318] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2177'. [ 558.429469][T10316] device syzkaller0 entered promiscuous mode [ 558.630899][T10313] netlink: 'syz.4.2176': attribute type 29 has an invalid length. [ 558.797738][T10313] netlink: 'syz.4.2176': attribute type 29 has an invalid length. [ 561.168922][T10348] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2187'. [ 563.856805][T10374] netlink: 'syz.3.2193': attribute type 29 has an invalid length. [ 563.943719][T10374] netlink: 'syz.3.2193': attribute type 29 has an invalid length. [ 564.184824][T10384] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 564.261893][T10384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.565632][T10406] netlink: 'syz.4.2209': attribute type 10 has an invalid length. [ 565.600887][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2209'. [ 565.800505][T10412] netlink: 'syz.2.2210': attribute type 21 has an invalid length. [ 566.555024][T10432] netlink: 'syz.2.2215': attribute type 29 has an invalid length. [ 566.574866][T10432] netlink: 'syz.2.2215': attribute type 29 has an invalid length. [ 567.400479][T10452] netlink: 'syz.1.2225': attribute type 27 has an invalid length. [ 567.431416][T10452] netlink: 'syz.1.2225': attribute type 3 has an invalid length. [ 567.527853][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2225'. [ 568.770251][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.777150][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.062132][T10451] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 569.080843][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2224'. [ 570.146984][T10479] netlink: 'syz.0.2236': attribute type 10 has an invalid length. [ 570.497902][T10490] netlink: 'syz.4.2238': attribute type 27 has an invalid length. [ 570.574907][T10490] netlink: 'syz.4.2238': attribute type 3 has an invalid length. [ 570.593612][T10490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2238'. [ 571.319414][T10503] netlink: 'syz.4.2244': attribute type 21 has an invalid length. [ 572.841108][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 572.925250][T10530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.722453][T10548] netlink: 'syz.2.2259': attribute type 8 has an invalid length. [ 573.781167][T10548] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2259'. [ 574.326525][T10565] sctp: [Deprecated]: syz.0.2266 (pid 10565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.326525][T10565] Use struct sctp_sack_info instead [ 574.326570][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 575.131357][T10568] syz.2.2277 (10568) used greatest stack depth: 17056 bytes left [ 575.263769][T10578] netlink: 'syz.4.2270': attribute type 29 has an invalid length. [ 575.297074][T10578] netlink: 'syz.4.2270': attribute type 29 has an invalid length. [ 575.604284][T10585] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 575.677937][T10585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.625589][T10625] netlink: 'syz.3.2284': attribute type 10 has an invalid length. [ 577.678248][T10625] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.784607][T10625] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.821721][T10625] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.871051][T10625] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.596817][T10644] sctp: [Deprecated]: syz.3.2290 (pid 10644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.596817][T10644] Use struct sctp_sack_info instead [ 579.087961][T10653] netlink: 'syz.0.2292': attribute type 27 has an invalid length. [ 579.194903][T10653] netlink: 'syz.0.2292': attribute type 3 has an invalid length. [ 579.216626][T10650] netlink: 'syz.1.2293': attribute type 8 has an invalid length. [ 579.236431][T10653] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2292'. [ 579.250512][T10650] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2293'. [ 579.995518][T10661] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 580.020856][T10659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 580.029731][T10659] IPv6: NLM_F_CREATE should be set when creating new route [ 580.041742][T10659] IPv6: NLM_F_CREATE should be set when creating new route [ 580.053953][T10659] IPv6: NLM_F_CREATE should be set when creating new route [ 580.182808][T10668] netlink: 'syz.0.2302': attribute type 39 has an invalid length. [ 580.223313][T10668] device veth0_macvtap left promiscuous mode [ 580.565381][T10681] netlink: 'syz.1.2303': attribute type 10 has an invalid length. [ 581.641316][T10696] netlink: 'syz.2.2307': attribute type 29 has an invalid length. [ 581.679371][T10696] netlink: 'syz.2.2307': attribute type 29 has an invalid length. [ 581.816786][T10701] netlink: 'syz.3.2311': attribute type 27 has an invalid length. [ 581.850952][T10701] netlink: 'syz.3.2311': attribute type 3 has an invalid length. [ 581.859637][T10701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2311'. [ 582.033585][T10693] netlink: 'syz.0.2309': attribute type 8 has an invalid length. [ 582.052365][T10693] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2309'. [ 582.214496][T10706] sctp: [Deprecated]: syz.1.2315 (pid 10706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 582.214496][T10706] Use struct sctp_sack_info instead [ 583.164733][T10721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.745763][T10739] netlink: 'syz.2.2324': attribute type 27 has an invalid length. [ 584.781950][T10739] netlink: 'syz.2.2324': attribute type 3 has an invalid length. [ 584.789761][T10739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2324'. [ 585.374178][T10752] netlink: 'syz.1.2340': attribute type 29 has an invalid length. [ 585.484137][T10752] netlink: 'syz.1.2340': attribute type 29 has an invalid length. [ 585.535769][T10756] sctp: [Deprecated]: syz.2.2329 (pid 10756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.535769][T10756] Use struct sctp_sack_info instead [ 587.256446][T10775] netlink: 'syz.4.2338': attribute type 39 has an invalid length. [ 587.300146][T10775] device veth0_macvtap left promiscuous mode [ 590.109735][T10799] netlink: 'syz.2.2347': attribute type 29 has an invalid length. [ 590.174158][T10799] netlink: 'syz.2.2347': attribute type 29 has an invalid length. [ 591.121483][T10824] device syzkaller0 entered promiscuous mode [ 591.665596][T10829] netlink: 'syz.2.2353': attribute type 39 has an invalid length. [ 591.937925][T10834] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 592.640047][T10847] netlink: 'syz.2.2365': attribute type 21 has an invalid length. [ 592.822411][T10847] netlink: 'syz.2.2365': attribute type 6 has an invalid length. [ 592.933231][T10847] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2365'. [ 593.629588][T10854] netlink: 'syz.4.2367': attribute type 29 has an invalid length. [ 593.676928][T10854] netlink: 'syz.4.2367': attribute type 29 has an invalid length. [ 594.357898][T10867] device syzkaller0 entered promiscuous mode [ 594.386754][T10872] netlink: 'syz.3.2372': attribute type 39 has an invalid length. [ 594.402605][T10872] device veth0_macvtap left promiscuous mode [ 595.734612][T10883] netlink: 'syz.3.2376': attribute type 21 has an invalid length. [ 596.083981][T10891] device syzkaller0 entered promiscuous mode [ 596.917340][T10905] netlink: 'syz.4.2384': attribute type 29 has an invalid length. [ 599.858031][T10905] netlink: 'syz.4.2384': attribute type 29 has an invalid length. [ 599.901419][T10930] device syzkaller0 entered promiscuous mode [ 600.790877][T10938] netlink: 'syz.0.2391': attribute type 21 has an invalid length. [ 601.398320][T10962] netlink: 'syz.4.2399': attribute type 10 has an invalid length. [ 602.445029][T10962] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.457604][T10962] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.474300][T10962] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.490251][T10962] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.562936][T10969] netlink: 'syz.2.2402': attribute type 29 has an invalid length. [ 602.631073][T10969] netlink: 'syz.2.2402': attribute type 29 has an invalid length. [ 603.424080][T10980] device syzkaller0 entered promiscuous mode [ 605.906525][T10987] netlink: 'syz.1.2408': attribute type 21 has an invalid length. [ 605.928680][T10993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.935999][T10993] IPv6: NLM_F_CREATE should be set when creating new route [ 605.943431][T10993] IPv6: NLM_F_CREATE should be set when creating new route [ 605.950771][T10993] IPv6: NLM_F_CREATE should be set when creating new route [ 605.969654][T11003] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 605.979231][T11003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 606.045311][T11003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 606.399689][T11011] netlink: 'syz.1.2426': attribute type 21 has an invalid length. [ 606.554187][T11013] netlink: 'syz.2.2416': attribute type 10 has an invalid length. [ 606.689094][T11013] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.820077][T11013] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.899077][T11013] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.941637][T11013] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.125103][T11045] netlink: 'syz.2.2427': attribute type 21 has an invalid length. [ 609.523524][T11047] netlink: 'syz.3.2428': attribute type 21 has an invalid length. [ 609.642741][T11049] netlink: 'syz.2.2429': attribute type 21 has an invalid length. [ 609.933601][T11060] netlink: 'syz.2.2433': attribute type 21 has an invalid length. [ 609.959595][T11056] netlink: 'syz.0.2432': attribute type 21 has an invalid length. [ 610.745732][T11059] device syzkaller0 entered promiscuous mode [ 610.805970][T11066] netlink: 'syz.1.2438': attribute type 9 has an invalid length. [ 610.835905][T11066] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2438'. [ 610.859536][T11071] netlink: 'syz.3.2441': attribute type 10 has an invalid length. [ 613.080751][T11084] validate_nla: 1 callbacks suppressed [ 613.080798][T11084] netlink: 'syz.1.2445': attribute type 21 has an invalid length. [ 613.292177][T11090] netlink: 'syz.0.2457': attribute type 21 has an invalid length. [ 613.321329][T11089] netlink: 'syz.2.2447': attribute type 21 has an invalid length. [ 613.350079][T11095] netlink: 'syz.4.2449': attribute type 21 has an invalid length. [ 613.621453][T11100] netlink: 'syz.0.2450': attribute type 21 has an invalid length. [ 613.726959][T11099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 613.735524][T11099] IPv6: NLM_F_CREATE should be set when creating new route [ 613.744439][T11099] IPv6: NLM_F_CREATE should be set when creating new route [ 613.753522][T11099] IPv6: NLM_F_CREATE should be set when creating new route [ 615.032444][T11112] netlink: 'syz.0.2455': attribute type 9 has an invalid length. [ 615.040511][T11112] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2455'. [ 615.922192][T11122] netlink: 'syz.3.2458': attribute type 21 has an invalid length. [ 616.633142][T11133] device syzkaller0 entered promiscuous mode [ 616.786443][T11141] netlink: 'syz.0.2466': attribute type 21 has an invalid length. [ 616.915348][T11143] netlink: 'syz.4.2465': attribute type 21 has an invalid length. [ 617.253302][T11149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 617.260792][T11149] IPv6: NLM_F_CREATE should be set when creating new route [ 617.270396][T11149] IPv6: NLM_F_CREATE should be set when creating new route [ 617.279712][T11149] IPv6: NLM_F_CREATE should be set when creating new route [ 619.171416][T11165] device syzkaller0 entered promiscuous mode [ 621.881556][T11180] netlink: 'syz.2.2480': attribute type 21 has an invalid length. [ 621.902138][T11186] device syzkaller0 entered promiscuous mode [ 622.294973][T11199] netlink: 'syz.4.2487': attribute type 10 has an invalid length. [ 622.423431][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2487'. [ 622.452595][T11199] device team0 entered promiscuous mode [ 622.458971][T11199] device team_slave_0 entered promiscuous mode [ 622.507617][T11199] device team_slave_1 entered promiscuous mode [ 622.537056][T11199] device geneve1 entered promiscuous mode [ 622.544878][T11199] device macvlan0 entered promiscuous mode [ 622.582834][T11199] bridge0: port 3(team0) entered blocking state [ 622.594087][T11199] bridge0: port 3(team0) entered disabled state [ 623.128782][T11228] netlink: 'syz.2.2498': attribute type 21 has an invalid length. [ 624.320818][T11241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.328537][T11241] IPv6: NLM_F_CREATE should be set when creating new route [ 624.340542][T11241] IPv6: NLM_F_CREATE should be set when creating new route [ 624.350557][T11241] IPv6: NLM_F_CREATE should be set when creating new route [ 624.464575][T11248] device syzkaller0 entered promiscuous mode [ 625.524628][T11279] netlink: 'syz.1.2518': attribute type 21 has an invalid length. [ 626.879601][T11292] device syzkaller0 entered promiscuous mode [ 626.989600][T11302] netlink: 'syz.2.2525': attribute type 21 has an invalid length. [ 630.064026][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.070466][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.527791][T11321] netlink: 'syz.0.2533': attribute type 21 has an invalid length. [ 631.852394][T11335] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 631.872986][T11335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2539'. [ 631.899400][T11335] device team0 entered promiscuous mode [ 631.969969][T11335] device team_slave_0 entered promiscuous mode [ 631.993730][T11335] device team_slave_1 entered promiscuous mode [ 632.009639][T11335] device macvlan0 entered promiscuous mode [ 632.058612][T11335] bridge0: port 1(team0) entered blocking state [ 632.075192][T11335] bridge0: port 1(team0) entered disabled state [ 632.131169][T11335] bridge0: port 1(team0) entered blocking state [ 632.138487][T11335] bridge0: port 1(team0) entered forwarding state [ 632.254255][T11338] netlink: 'syz.3.2540': attribute type 21 has an invalid length. [ 632.283074][T11342] netlink: 'syz.4.2541': attribute type 21 has an invalid length. [ 632.557243][T11347] netlink: 'syz.0.2542': attribute type 15 has an invalid length. [ 632.637512][T11347] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2542'. [ 633.150299][T11358] netlink: 'syz.3.2546': attribute type 21 has an invalid length. [ 635.560266][T11379] netlink: 'syz.1.2562': attribute type 21 has an invalid length. [ 636.446325][T11392] netlink: 'syz.2.2554': attribute type 21 has an invalid length. [ 636.476672][T11393] netlink: 'syz.4.2555': attribute type 21 has an invalid length. [ 637.175541][T11400] netlink: 'syz.3.2558': attribute type 21 has an invalid length. [ 637.224236][T11403] netlink: 'syz.2.2559': attribute type 21 has an invalid length. [ 637.244360][T11405] netlink: 'syz.4.2560': attribute type 21 has an invalid length. [ 637.804716][T11414] netlink: 'syz.2.2563': attribute type 21 has an invalid length. [ 638.275399][T11419] netlink: 'syz.3.2566': attribute type 21 has an invalid length. [ 639.400831][T11428] netlink: 'syz.0.2578': attribute type 21 has an invalid length. [ 640.087789][T11436] netlink: 'syz.0.2571': attribute type 21 has an invalid length. [ 640.177770][T11438] netlink: 'syz.2.2572': attribute type 21 has an invalid length. [ 640.858201][T11447] netlink: 'syz.2.2575': attribute type 21 has an invalid length. [ 641.538895][T11456] netlink: 'syz.0.2576': attribute type 21 has an invalid length. [ 641.621144][T11458] netlink: 'syz.2.2579': attribute type 21 has an invalid length. [ 641.640814][T11455] netlink: 'syz.1.2577': attribute type 21 has an invalid length. [ 642.497648][T11470] netlink: 'syz.3.2582': attribute type 21 has an invalid length. [ 642.831133][T11473] netlink: 'syz.1.2583': attribute type 15 has an invalid length. [ 642.860125][T11473] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2583'. [ 642.954084][T11475] netlink: 'syz.2.2594': attribute type 21 has an invalid length. [ 643.811930][T11491] netlink: 'syz.3.2587': attribute type 21 has an invalid length. [ 643.996052][T11495] netlink: 'syz.0.2589': attribute type 21 has an invalid length. [ 644.316793][T11503] netlink: 'syz.2.2591': attribute type 21 has an invalid length. [ 644.353038][T11502] netlink: 'syz.3.2592': attribute type 21 has an invalid length. [ 644.609615][T11505] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 644.683959][T11505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2593'. [ 644.762167][T11505] device team0 entered promiscuous mode [ 644.796662][T11505] device team_slave_0 entered promiscuous mode [ 644.805341][T11505] device team_slave_1 entered promiscuous mode [ 644.814100][T11505] device bridge0 entered promiscuous mode [ 644.832130][T11505] device geneve1 entered promiscuous mode [ 644.839322][T11505] device macvlan0 entered promiscuous mode [ 644.860450][T11505] bridge0: port 4(team0) entered blocking state [ 644.873136][T11505] bridge0: port 4(team0) entered disabled state [ 644.933914][T11505] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.967744][T11509] netlink: 'syz.1.2604': attribute type 21 has an invalid length. [ 645.290049][T11521] netlink: 'syz.3.2598': attribute type 21 has an invalid length. [ 645.380515][T11524] netlink: 'syz.2.2600': attribute type 21 has an invalid length. [ 647.876965][T11548] validate_nla: 1 callbacks suppressed [ 647.877008][T11548] netlink: 'syz.1.2616': attribute type 21 has an invalid length. [ 648.414701][T11558] netlink: 'syz.1.2607': attribute type 21 has an invalid length. [ 648.863428][T11567] netlink: 'syz.1.2611': attribute type 21 has an invalid length. [ 649.163893][T11577] netlink: 'syz.1.2614': attribute type 21 has an invalid length. [ 650.058724][T11586] netlink: 'syz.2.2615': attribute type 15 has an invalid length. [ 650.127150][T11586] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2615'. [ 650.324712][T11592] netlink: 'syz.0.2620': attribute type 21 has an invalid length. [ 650.816270][T11600] netlink: 'syz.0.2623': attribute type 21 has an invalid length. [ 651.002799][T11604] netlink: 'syz.4.2636': attribute type 15 has an invalid length. [ 651.030284][T11604] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2636'. [ 651.304541][T11607] netlink: 'syz.2.2627': attribute type 21 has an invalid length. [ 651.446473][T11613] netlink: 'syz.1.2631': attribute type 21 has an invalid length. [ 651.477788][T11615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2630'. [ 651.526421][T11615] device team0 entered promiscuous mode [ 651.559568][T11615] device team_slave_0 entered promiscuous mode [ 651.577626][T11615] device team_slave_1 entered promiscuous mode [ 651.598828][T11615] device geneve1 entered promiscuous mode [ 651.648719][T11615] device macvlan0 entered promiscuous mode [ 651.660251][T11615] bridge0: port 1(team0) entered blocking state [ 651.683306][T11615] bridge0: port 1(team0) entered disabled state [ 653.402972][T11663] validate_nla: 5 callbacks suppressed [ 653.403009][T11663] netlink: 'syz.0.2650': attribute type 21 has an invalid length. [ 653.526450][T11666] netlink: 'syz.4.2652': attribute type 21 has an invalid length. [ 653.819231][T11669] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 653.848505][T11669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2653'. [ 653.899494][T11669] device team0 entered promiscuous mode [ 653.930070][T11669] device team_slave_0 entered promiscuous mode [ 653.961269][T11669] device team_slave_1 entered promiscuous mode [ 653.992561][T11669] device geneve1 entered promiscuous mode [ 654.036377][T11669] device macvlan0 entered promiscuous mode [ 654.086220][T11669] bridge0: port 1(team0) entered blocking state [ 654.104534][T11669] bridge0: port 1(team0) entered disabled state [ 654.153182][T11669] bridge0: port 1(team0) entered blocking state [ 654.159880][T11669] bridge0: port 1(team0) entered forwarding state [ 654.225829][T11678] netlink: 'syz.3.2658': attribute type 21 has an invalid length. [ 654.794692][T11692] netlink: 'syz.1.2664': attribute type 21 has an invalid length. [ 655.026613][T11698] netlink: 'syz.0.2665': attribute type 21 has an invalid length. [ 655.069311][T11690] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2663'. [ 656.172501][T11721] netlink: 'syz.2.2674': attribute type 21 has an invalid length. [ 656.386646][T11725] netlink: 'syz.1.2676': attribute type 21 has an invalid length. [ 656.805056][T11738] netlink: 'syz.1.2681': attribute type 21 has an invalid length. [ 658.914761][T11771] netlink: 'syz.0.2692': attribute type 21 has an invalid length. [ 659.197886][T11779] netlink: 'syz.1.2695': attribute type 21 has an invalid length. [ 659.794266][T11789] netlink: 'syz.2.2698': attribute type 10 has an invalid length. [ 659.832803][T11789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2698'. [ 659.864640][T11789] bridge0: port 4(team0) entered blocking state [ 659.896492][T11789] bridge0: port 4(team0) entered disabled state [ 659.986514][T11789] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 660.514838][T11806] netlink: 'syz.0.2707': attribute type 21 has an invalid length. [ 661.016325][T11814] netlink: 'syz.4.2710': attribute type 21 has an invalid length. [ 661.048038][T11816] netlink: 'syz.0.2719': attribute type 21 has an invalid length. [ 663.111721][T11839] netlink: 'syz.0.2718': attribute type 39 has an invalid length. [ 663.244710][T11845] netlink: 'syz.4.2722': attribute type 21 has an invalid length. [ 663.500257][T11849] netlink: 'syz.1.2725': attribute type 21 has an invalid length. [ 663.649138][T11853] netlink: 'syz.3.2723': attribute type 21 has an invalid length. [ 663.790067][T11844] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2721'. [ 664.184888][T11866] netlink: 'syz.0.2736': attribute type 21 has an invalid length. [ 665.391372][T11882] netlink: 'syz.2.2732': attribute type 21 has an invalid length. [ 666.041801][T11892] netlink: 'syz.4.2737': attribute type 21 has an invalid length. [ 666.075612][T11894] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 666.099640][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2738'. [ 666.826068][T11904] netlink: 'syz.2.2749': attribute type 21 has an invalid length. [ 667.380390][T11910] netlink: 'syz.2.2742': attribute type 21 has an invalid length. [ 668.110439][T11916] netlink: 'syz.3.2743': attribute type 21 has an invalid length. [ 669.292267][T11929] netlink: 'syz.2.2750': attribute type 21 has an invalid length. [ 669.445907][T11933] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 669.539668][T11938] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 669.613042][T11938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2751'. [ 669.992713][T11947] netlink: 'syz.2.2766': attribute type 21 has an invalid length. [ 670.026487][T11948] netlink: 'syz.0.2765': attribute type 21 has an invalid length. [ 671.028947][T11972] netlink: 'syz.3.2762': attribute type 21 has an invalid length. [ 671.384497][T11981] netlink: 'syz.2.2767': attribute type 10 has an invalid length. [ 671.473115][T11981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2767'. [ 671.552678][T11981] bridge0: port 4(team0) entered blocking state [ 671.571315][T11981] bridge0: port 4(team0) entered disabled state [ 671.642614][T11981] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 672.917882][T11995] netlink: 'syz.3.2772': attribute type 4 has an invalid length. [ 672.967016][T11995] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2772'. [ 675.150468][T12016] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2781'. [ 676.225408][T12036] netlink: 'syz.2.2798': attribute type 21 has an invalid length. [ 676.850188][T12055] netlink: 'syz.2.2795': attribute type 10 has an invalid length. [ 676.867222][T12055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2795'. [ 676.894349][T12055] bridge0: port 4(team0) entered blocking state [ 676.912502][T12055] bridge0: port 4(team0) entered disabled state [ 677.661489][T12054] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 677.669381][T12054] #PF: supervisor instruction fetch in kernel mode [ 677.675910][T12054] #PF: error_code(0x0010) - not-present page [ 677.681930][T12054] PGD 4b9fb067 P4D 4b9fb067 PUD 0 [ 677.687081][T12054] Oops: 0010 [#1] PREEMPT SMP KASAN [ 677.692389][T12054] CPU: 1 PID: 12054 Comm: syz.0.2794 Not tainted 6.1.141-syzkaller #0 [ 677.700556][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.710634][T12054] RIP: 0010:0x0 [ 677.714119][T12054] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 677.721496][T12054] RSP: 0018:ffffc90003c8f398 EFLAGS: 00010246 [ 677.727577][T12054] RAX: 1ffffffff16f23e7 RBX: 000000000000000f RCX: 0000000000000000 [ 677.735572][T12054] RDX: ffffc90003c8f440 RSI: 0000000000000001 RDI: ffff88805a3f0000 [ 677.743572][T12054] RBP: ffffc90003c8f4b0 R08: dffffc0000000000 R09: ffffed100b47e008 [ 677.751566][T12054] R10: ffffed100b47e008 R11: 1ffff1100b47e007 R12: ffffe8ffffd46b98 [ 677.759595][T12054] R13: ffffffff8b791f38 R14: 0000000000000000 R15: ffff88805a3f0000 [ 677.767676][T12054] FS: 00007facb51de6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 677.776658][T12054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.783275][T12054] CR2: ffffffffffffffd6 CR3: 0000000056b35000 CR4: 00000000003506e0 [ 677.791266][T12054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 677.799252][T12054] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 677.807237][T12054] Call Trace: [ 677.810523][T12054] [ 677.813466][T12054] bond_xdp_xmit+0x309/0x520 [ 677.818091][T12054] ? bond_xdp_xmit+0x93/0x520 [ 677.822795][T12054] ? bond_xdp+0x840/0x840 [ 677.827148][T12054] ? page_pool_put_defragged_page+0x5ca/0x8c0 [ 677.833237][T12054] bq_xmit_all+0xc99/0x10d0 [ 677.837777][T12054] ? __next_zones_zonelist+0x99/0x120 [ 677.843171][T12054] ? rcu_is_watching+0x11/0xa0 [ 677.847962][T12054] ? __alloc_pages+0x287/0x4e0 [ 677.852739][T12054] ? __dev_flush+0x1b0/0x1b0 [ 677.857353][T12054] ? zone_statistics+0x170/0x170 [ 677.862311][T12054] ? __alloc_pages_bulk+0x49a/0x920 [ 677.867556][T12054] ? rcu_is_watching+0x11/0xa0 [ 677.872353][T12054] bq_enqueue+0x337/0x3d0 [ 677.876711][T12054] dev_map_enqueue+0x1b4/0x340 [ 677.881499][T12054] xdp_do_redirect_frame+0x30c/0x650 [ 677.886806][T12054] bpf_test_run_xdp_live+0x9dd/0x1970 [ 677.892205][T12054] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 677.897773][T12054] ? xdp_convert_md_to_buff+0x330/0x330 [ 677.903354][T12054] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 677.909633][T12054] ? bpf_test_init+0x134/0x150 [ 677.914424][T12054] ? xdp_convert_md_to_buff+0x5b/0x330 [ 677.919903][T12054] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 677.925220][T12054] ? dev_put+0x80/0x80 [ 677.929316][T12054] ? dev_put+0x80/0x80 [ 677.933402][T12054] bpf_prog_test_run+0x31e/0x390 [ 677.938370][T12054] __sys_bpf+0x593/0x6d0 [ 677.942637][T12054] ? bpf_link_show_fdinfo+0x310/0x310 [ 677.948038][T12054] ? lock_chain_count+0x20/0x20 [ 677.952997][T12054] __x64_sys_bpf+0x78/0x90 [ 677.957430][T12054] do_syscall_64+0x4c/0xa0 [ 677.961876][T12054] ? clear_bhb_loop+0x60/0xb0 [ 677.966568][T12054] ? clear_bhb_loop+0x60/0xb0 [ 677.971270][T12054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.977194][T12054] RIP: 0033:0x7facb538e929 [ 677.981632][T12054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.001348][T12054] RSP: 002b:00007facb51de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.009891][T12054] RAX: ffffffffffffffda RBX: 00007facb55b6160 RCX: 00007facb538e929 [ 678.017884][T12054] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 678.025875][T12054] RBP: 00007facb5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 678.033887][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.041893][T12054] R13: 0000000000000000 R14: 00007facb55b6160 R15: 00007ffc43fcce88 [ 678.049924][T12054] [ 678.052980][T12054] Modules linked in: [ 678.056902][T12054] CR2: 0000000000000000 [ 678.061101][T12054] ---[ end trace 0000000000000000 ]--- [ 678.066576][T12054] RIP: 0010:0x0 [ 678.070063][T12054] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 678.077443][T12054] RSP: 0018:ffffc90003c8f398 EFLAGS: 00010246 [ 678.083530][T12054] RAX: 1ffffffff16f23e7 RBX: 000000000000000f RCX: 0000000000000000 [ 678.091553][T12054] RDX: ffffc90003c8f440 RSI: 0000000000000001 RDI: ffff88805a3f0000 [ 678.099592][T12054] RBP: ffffc90003c8f4b0 R08: dffffc0000000000 R09: ffffed100b47e008 [ 678.107587][T12054] R10: ffffed100b47e008 R11: 1ffff1100b47e007 R12: ffffe8ffffd46b98 [ 678.115697][T12054] R13: ffffffff8b791f38 R14: 0000000000000000 R15: ffff88805a3f0000 [ 678.123722][T12054] FS: 00007facb51de6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 678.132672][T12054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.139271][T12054] CR2: ffffffffffffffd6 CR3: 0000000056b35000 CR4: 00000000003506e0 [ 678.147293][T12054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 678.155281][T12054] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 678.163272][T12054] Kernel panic - not syncing: Fatal exception in interrupt [ 678.170775][T12054] Kernel Offset: disabled [ 678.175111][T12054] Rebooting in 86400 seconds..