last executing test programs: 6.150955831s ago: executing program 4 (id=17519): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/131, 0x83}], 0x1}, 0x60) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)='?', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000120) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0x9d) socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.144682671s ago: executing program 1 (id=17520): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20040800) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000009003000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.924318296s ago: executing program 4 (id=17522): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) mkdir(0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./cgroup/../file0\x00', 0x0, 0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe3, 0x0, 0x81, 0x0, 0x0, 0xc, 0x3a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000000000000001}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r3, r2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001b5a4a53491656ff7496d68ea4182ed4c2be43", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000013006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000000700)}, {&(0x7f00000007c0)="35d3e95b276782fc37cbf32bc6cf86cb8a7b8fa02a90d496a646c72c26ecb4263bbfdfeb26124897be736c3c473164ef33cd7036c49b2b02a1b9856e823819c554970832cecfdf99d1380ac80208673dd378b3b30469945af0f9e902c97b16fc4ac6190445aabbd888fc9b1f798c7fe926a8a24e9b65ce9e6a9a", 0x7a}, {&(0x7f0000001180)="f46ec54547524b13f277d674bd4dbff0ba35213ae9b0cb2b7fb631fc18b3feb02b3128dc102927a87e6b2b7abae8cd759f6a6b67f01776f9753062042fe09f2c1fda81cbf5b72e72ebcd4a58a4db1b7b95f06927890ccf590e634b1f8a9ab62d931ddb79cef83a36b3f7e94d820e47e264737265eab74896120e928c14", 0x7d}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="38000000000000001901000054d098b25e69b8d42da75d094fe0756862a870f83c788b32a4b5df1874d0bdaf700979a7d3f3000000000000b00000000000000000000000ff03000016d959d141f3c066de3cafc05027e14387bef0aee956623fcd239aa3341d6c68afd5630ac78111c95c9b2cb7f4e3a50b6cad3e72a878b4edd2adcde49a5df7eb4c55da494dcb0f95f1b12fa5f163877f88e65436a3cb7279cfa5ecf372f38b4d2a82d6398b2b8c9225b53975d53c17d656889c6856578e9a8809eccc2e77cc68c53db33ca7a6bf4329f34d7f700a84e5b0275857c86aa9f28702f1570000000000"], 0xe8}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 5.868951948s ago: executing program 1 (id=17523): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000a00800007910000000000000c30f00ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 5.627025814s ago: executing program 1 (id=17527): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f94924fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x400010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x100950, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1b088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000200), 0xe}, 0x10c002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000900)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r5, 0x0, 0x100b6) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x4500, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40000000}, 0x8, 0x10, &(0x7f0000000100)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$inet(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000ac0)}, 0x4000089) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 4.734334456s ago: executing program 2 (id=17529): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0x5000000}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 4.683728677s ago: executing program 1 (id=17530): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x460, 0x9, 0x0, 0xa, 0x4, 0x10001, 0xffff, 0x0, 0x102ff, 0x0, 0x40007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x27, 0x40, 0x7, 0x0, 0x0, 0xd085, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x1f502, 0x6, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x45811) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.585070969s ago: executing program 3 (id=17531): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x4000000}, 0x48) 4.409577483s ago: executing program 2 (id=17533): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff0c2a}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001700)=@o_path={0x0, r5}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.15662255s ago: executing program 3 (id=17535): socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d030100000000009500000000000f007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) 3.72040363s ago: executing program 0 (id=17536): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x18}, 0x18) close(r0) r1 = getpid() r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x52d}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r2, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/138, 0x79}}, 0x10) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="ff2d", 0x2}], 0x1, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}], 0x20, 0x10}, 0x10044001) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)="7802f62d1de4a278ae243f726d6cb48fe6c4d46ceee0c4f22c37629a9a0942f09336e455917541bb475160cbb246aa404e6258e413981b707c366419339088589fab5e3c1d344bea4c5fe7"}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x61]}}, &(0x7f0000000900)=""/179, 0x4b, 0xb3, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x4) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r3], 0xfe33) 3.69669589s ago: executing program 2 (id=17537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000004000000000000000ac1414aa000088a8"], 0xcfa4) 3.664867552s ago: executing program 3 (id=17538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000f007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.532573014s ago: executing program 0 (id=17539): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.532283954s ago: executing program 1 (id=17540): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x8a, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) 3.521376525s ago: executing program 4 (id=17541): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) close(r3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r4, 0x8) 3.395154428s ago: executing program 3 (id=17542): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0xfc, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r1}) ioctl$TUNSETVNETHDRSZ(r5, 0x800454e0, &(0x7f0000000480)=0x70dfd79b) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000)=r6, 0x8) 3.164672854s ago: executing program 0 (id=17543): r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000003"], 0x18}, 0x6000000000000000) 3.009449247s ago: executing program 0 (id=17544): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x3}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x4c, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x1}, 0x2004, 0xc, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000180)="ab", 0x1}], 0x1, 0x0, 0x0, 0x4000000}, 0x8040) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0x11}, 0x0) close(r5) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x8, 0x7f, 0x81, 0x0, 0x2, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000062, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x44, 0x0, 0x6, 0x9, 0x4, 0x7f, 0x98bb, 0x0, 0xf3, 0x0, 0x3}, 0xffffffffffffffff, 0x110, r3, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80872a526669bd387550e5ed602c3ef9df15598ca7309c936dca998ebcbd73e82c4b958dd091d2a02bff625e467d63199c3279b5a02d5bc69c3ec7cb1500c663e24b", 0x69}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000005020000ff0000000700000000000000", @ANYRES32=0x1, @ANYBLOB="d600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000800000000000000000000008c65b39acc51b389cf942d261990bf9cf6ed409ad0ceae7386cd2c99e5c4ef922d5ab5be785bbe4b310ffe062203ed8449f2403bc355e3c76a7ba2a7da2c7ffde00573253f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r7, r2}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0xc2ba, 0x1, 0x4000000, 0x4, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b180008903040000845088fb325f003911050b038da1005725181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 2.06376924s ago: executing program 0 (id=17545): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20040800) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b720000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.716616058s ago: executing program 0 (id=17546): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x8a, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) (fail_nth: 2) 618.018265ms ago: executing program 4 (id=17547): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) syz_clone(0xa43c7506, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe4d, &(0x7f0000000040)=[{&(0x7f00000000c0)="c00e020032000b35d25a806f8c6394f90524fc6004200100010000000535a51771910f0041b080c13715e63e370248018000f01700d1bd3436", 0x33fe0}, {&(0x7f0000000100)="46cb41169116b97cec137035b856e8f8c63f512185201d7fc8e8573804ea7f310c1decda35d40c8b359c48ad0a034a41dacd1ab143ebef1fe56bd41c355f2282302b947115a8417e1d5286efbc29137c96b8ec", 0xfffffffffffffd1e}], 0x1}, 0x0) 544.756267ms ago: executing program 2 (id=17548): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x840, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x8002, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x480086, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x448, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000002500), 0xc}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000008004006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 409.47175ms ago: executing program 1 (id=17549): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x8a, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000002980), 0x12) 355.573782ms ago: executing program 3 (id=17550): socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffeffffffffffe, 0xffffffffffffffff, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)={[{0x2d, 'devices'}, {0x2d, 'memory'}, {0x2b, 'cpu'}, {0x2d, 'net_prio'}]}, 0x20) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500), 0x0, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) (async) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) (async) r5 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)={r5}) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 280.750704ms ago: executing program 4 (id=17551): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000005000000800007910000000000000c30f00ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) 236.441935ms ago: executing program 2 (id=17552): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x5, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000002180)=0x2, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00130803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) 175.249936ms ago: executing program 4 (id=17553): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x18}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6609e64b1", 0x7b}], 0x1}, 0x40840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r3}, 0x38) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1000000000000}, 0x104080, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 563.111µs ago: executing program 2 (id=17554): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xf100}, 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x2a, 0x0, &(0x7f0000000180)="6046320319a1928345e9bc03cc9b9df77521ccad02603f3c2d5b362b0f00d8105d7d72651685e8b62a3f", 0x0}, 0x50) 0s ago: executing program 3 (id=17555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0x6000000}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) kernel console output (not intermixed with test programs): atadv_slave_1: link becomes ready [ 2481.688304][ T9982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2481.720577][T15847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.767464][T15847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.781235][T15847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.823638][T15847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2481.905946][T16130] netlink: 'syz.3.15101': attribute type 4 has an invalid length. [ 2481.927091][T16130] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15101'. [ 2482.012330][ T9981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.042206][ T9981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2482.095587][ T9979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2482.137648][ T9981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2482.145634][ T9981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2482.223740][T16120] device syzkaller0 entered promiscuous mode [ 2482.237823][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2484.554338][T16139] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15105'. [ 2484.584102][T16144] netlink: 'syz.3.15107': attribute type 21 has an invalid length. [ 2485.688493][ T2590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2485.706260][ T2590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2485.715874][ T2590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2485.736763][ T2590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2485.745658][ T2590] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2485.754497][ T2590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2486.127316][T16180] chnl_net:caif_netlink_parms(): no params data found [ 2486.297576][T16201] device syzkaller0 entered promiscuous mode [ 2487.838348][ T2590] Bluetooth: hci2: command 0x0409 tx timeout [ 2488.766640][T16215] netlink: 'syz.0.15129': attribute type 2 has an invalid length. [ 2488.774768][T16215] netlink: 'syz.0.15129': attribute type 8 has an invalid length. [ 2488.783048][T16215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15129'. [ 2488.798723][T16217] netlink: 'syz.3.15130': attribute type 10 has an invalid length. [ 2488.933282][T16217] team0 (unregistering): Port device team_slave_0 removed [ 2488.987557][T16217] team0 (unregistering): Port device team_slave_1 removed [ 2489.024073][T16180] bridge0: port 1(bridge_slave_0) entered blocking state [ 2489.041392][T16180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.054710][T16180] device bridge_slave_0 entered promiscuous mode [ 2489.096197][T16180] bridge0: port 2(bridge_slave_1) entered blocking state [ 2489.124456][T16180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2489.153463][T16180] device bridge_slave_1 entered promiscuous mode [ 2489.212647][T16227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2489.227882][T16227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2489.266765][T16227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2489.275249][T16227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2489.365961][T16180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2489.390243][T16225] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.15133'. [ 2489.417661][T16180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2489.475425][T16180] team0: Port device team_slave_0 added [ 2489.493268][T16180] team0: Port device team_slave_1 added [ 2489.558475][T16180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2489.570656][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2489.607821][T16180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2489.621446][T16180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2489.629240][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2489.655552][T16180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2489.706539][T16180] device hsr_slave_0 entered promiscuous mode [ 2489.714180][T16180] device hsr_slave_1 entered promiscuous mode [ 2489.721512][T16180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2489.729498][T16180] Cannot create hsr debugfs directory [ 2489.917594][ T2590] Bluetooth: hci2: command 0x041b tx timeout [ 2489.932679][T16180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2490.070794][T16180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2490.197342][T16180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2490.319372][T16180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2490.361562][T16249] netlink: 'syz.3.15140': attribute type 21 has an invalid length. [ 2490.632258][T16180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2490.661768][T16180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2490.681952][T16180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2490.711395][T16180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2491.038607][T16180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2491.077340][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2491.090159][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2491.112236][T16180] 8021q: adding VLAN 0 to HW filter on device team0 [ 2491.141732][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2491.156812][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2491.175785][ T9981] bridge0: port 1(bridge_slave_0) entered blocking state [ 2491.183149][ T9981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2491.220260][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2491.246682][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2491.286494][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2491.334858][ T9981] bridge0: port 2(bridge_slave_1) entered blocking state [ 2491.342110][ T9981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2491.411588][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2491.489764][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2491.537740][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2491.558973][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2491.584054][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2491.642027][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2491.677205][T16291] netlink: 'syz.1.15156': attribute type 2 has an invalid length. [ 2491.689332][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2491.744496][T16291] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.15156'. [ 2491.771127][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2491.788554][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2491.814425][T16295] netlink: 'syz.3.15158': attribute type 21 has an invalid length. [ 2491.829987][T16291] tipc: Started in network mode [ 2491.835508][T16291] tipc: Node identity 9215a268, cluster identity 4711 [ 2491.862618][T16291] tipc: Node number set to 2450891368 [ 2491.886781][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2491.908089][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2491.920087][T16180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2491.997619][ T2590] Bluetooth: hci2: command 0x040f tx timeout [ 2492.675613][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2492.691959][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2492.713621][T16180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2492.796478][T16332] netlink: 'syz.0.15172': attribute type 21 has an invalid length. [ 2493.258120][T16344] device syzkaller0 entered promiscuous mode [ 2493.900957][T16367] netlink: 'syz.2.15181': attribute type 3 has an invalid length. [ 2493.914115][T16367] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15181'. [ 2494.078427][ T2590] Bluetooth: hci2: command 0x0419 tx timeout [ 2495.539820][T16358] netlink: 'syz.0.15179': attribute type 21 has an invalid length. [ 2495.552829][T16358] IPv6: NLM_F_CREATE should be specified when creating new route [ 2495.561382][T16358] IPv6: Can't replace route, no match found [ 2496.002036][T16379] netlink: 'syz.0.15185': attribute type 2 has an invalid length. [ 2496.146939][T16373] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.15182'. [ 2496.204492][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2496.234172][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2496.283382][T16385] netlink: 'syz.2.15186': attribute type 21 has an invalid length. [ 2496.324678][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2496.382021][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2496.459075][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2496.483870][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2496.521397][T16180] device veth0_vlan entered promiscuous mode [ 2496.577198][T16180] device veth1_vlan entered promiscuous mode [ 2496.716416][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2496.765623][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2496.819029][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2496.847743][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2496.866986][T16180] device veth0_macvtap entered promiscuous mode [ 2496.902770][T16180] device veth1_macvtap entered promiscuous mode [ 2496.962200][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2496.990894][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2497.036577][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2497.060943][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2497.085364][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2497.110041][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2497.139321][T16180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2497.168439][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2497.177316][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2497.212000][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2497.247056][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2497.271988][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2497.301177][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2497.330646][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2497.356724][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2497.391655][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2497.435851][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2497.497610][T16180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2497.529108][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2497.544243][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2497.583001][T16180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2497.594877][T16180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2497.606797][T16180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2497.622095][T16180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2497.635479][T16421] netlink: 'syz.0.15199': attribute type 21 has an invalid length. [ 2497.842063][ T9982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2497.855923][ T9982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2497.886018][T13675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2497.947252][ T9982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2497.964201][ T9982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2498.004402][ T9981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2498.190397][T16446] netlink: 'syz.0.15206': attribute type 22 has an invalid length. [ 2498.226528][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15206'. [ 2498.598415][T16464] netlink: 184 bytes leftover after parsing attributes in process `syz.3.15212'. [ 2498.743756][T16470] netlink: 'syz.0.15215': attribute type 21 has an invalid length. [ 2500.102431][T16515] netlink: 'syz.1.15232': attribute type 21 has an invalid length. [ 2500.998252][T16545] netlink: 'syz.3.15244': attribute type 2 has an invalid length. [ 2501.463007][T16552] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.15247'. [ 2501.541310][T16561] netlink: 'syz.0.15249': attribute type 21 has an invalid length. [ 2501.613970][T16563] netlink: 130181 bytes leftover after parsing attributes in process `syz.3.15251'. [ 2502.556972][T16596] netlink: 'syz.2.15261': attribute type 1 has an invalid length. [ 2502.642105][T16596] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.15261'. [ 2503.182745][T29302] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2503.323230][T16605] netlink: 'syz.1.15266': attribute type 21 has an invalid length. [ 2503.342428][T16603] netlink: 'syz.2.15265': attribute type 6 has an invalid length. [ 2503.782652][T16618] device syzkaller0 entered promiscuous mode [ 2503.878986][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 2503.886537][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2503.959836][T16629] bridge0: port 2(bridge_slave_1) entered blocking state [ 2503.967047][T16629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2503.974744][T16629] bridge0: port 1(bridge_slave_0) entered blocking state [ 2503.981921][T16629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2504.031129][T16629] device bridge0 entered promiscuous mode [ 2504.476333][T29302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2504.496438][T29302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2504.510029][T29302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2504.519690][T29302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2504.528822][T29302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2504.536243][T29302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2505.207594][ T2590] Bluetooth: hci0: command 0x2016 tx timeout [ 2506.640258][T29302] Bluetooth: hci1: command 0x0409 tx timeout [ 2506.801328][ T9982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2507.125637][T13662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.157299][T16660] netlink: 'syz.4.15283': attribute type 21 has an invalid length. [ 2507.221675][T13662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.333926][T13662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.409263][T16635] chnl_net:caif_netlink_parms(): no params data found [ 2507.523751][T16670] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.15285'. [ 2507.583191][T13662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2508.717621][T29302] Bluetooth: hci1: command 0x041b tx timeout [ 2510.385440][T16680] device syzkaller0 entered promiscuous mode [ 2510.798858][T29302] Bluetooth: hci1: command 0x040f tx timeout [ 2512.881169][T29302] Bluetooth: hci1: command 0x0419 tx timeout [ 2513.503132][T16711] netlink: 'syz.4.15297': attribute type 21 has an invalid length. [ 2513.518527][T16635] bridge0: port 1(bridge_slave_0) entered blocking state [ 2513.525738][T16635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2513.549385][T16635] device bridge_slave_0 entered promiscuous mode [ 2513.642530][T16635] bridge0: port 2(bridge_slave_1) entered blocking state [ 2513.667536][T16635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2513.686788][T16635] device bridge_slave_1 entered promiscuous mode [ 2513.811941][T16635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2513.847297][T16635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2513.957724][T16724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15302'. [ 2514.000829][T16635] team0: Port device team_slave_0 added [ 2514.059044][T16635] team0: Port device team_slave_1 added [ 2514.216292][T13662] tipc: Left network mode [ 2514.241815][T16635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2514.267049][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.332707][T16635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2514.575124][T16635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2514.587475][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2514.713676][T16635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2514.926417][T16635] device hsr_slave_0 entered promiscuous mode [ 2514.961938][T16635] device hsr_slave_1 entered promiscuous mode [ 2514.988199][T16635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2514.995834][T16635] Cannot create hsr debugfs directory [ 2515.107586][T16752] netlink: 'syz.3.15311': attribute type 21 has an invalid length. [ 2515.341176][T16758] device syzkaller0 entered promiscuous mode [ 2520.147947][T16776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15316'. [ 2520.412468][T16801] netlink: 'syz.3.15322': attribute type 21 has an invalid length. [ 2521.234664][T16831] netlink: 'syz.3.15331': attribute type 10 has an invalid length. [ 2521.276223][T16831] device macvlan0 entered promiscuous mode [ 2521.343509][T16838] netlink: 'syz.4.15332': attribute type 3 has an invalid length. [ 2521.365174][T16838] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15332'. [ 2521.461461][T16831] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2521.685857][T16836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15333'. [ 2521.726284][T16840] netlink: 'syz.4.15332': attribute type 39 has an invalid length. [ 2521.983567][T16840] device hsr_slave_1 left promiscuous mode [ 2522.110740][T16849] can: request_module (can-proto-0) failed. [ 2522.277007][T16828] device syzkaller0 entered promiscuous mode [ 2524.689007][T16862] netlink: 'syz.2.15337': attribute type 21 has an invalid length. [ 2524.700291][T16869] netlink: 'syz.4.15341': attribute type 10 has an invalid length. [ 2524.715743][T16869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2524.760395][T16869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2524.783696][T16869] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2524.895473][T13662] device hsr_slave_0 left promiscuous mode [ 2524.908273][T13662] device hsr_slave_1 left promiscuous mode [ 2524.924052][T13662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2524.941917][T13662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2524.959803][T13662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2524.976091][T13662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2525.047322][T13662] device veth1_macvtap left promiscuous mode [ 2525.054129][T13662] device veth0_macvtap left promiscuous mode [ 2525.061580][T13662] device veth1_vlan left promiscuous mode [ 2525.067615][T13662] device veth0_vlan left promiscuous mode [ 2526.051661][T13662] team0 (unregistering): Port device team_slave_1 removed [ 2526.098245][T13662] team0 (unregistering): Port device team_slave_0 removed [ 2526.142854][T13662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2526.188082][T13662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2526.525434][T13662] bond0 (unregistering): Released all slaves [ 2526.583160][T16876] netlink: 'syz.4.15344': attribute type 10 has an invalid length. [ 2526.595543][T16876] device macvlan0 entered promiscuous mode [ 2526.616557][T16876] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2526.643045][T16882] netlink: 'syz.0.15347': attribute type 10 has an invalid length. [ 2526.691042][T16882] team0: Port device wlan1 added [ 2526.792500][T16635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2526.832883][T16635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2526.890616][T16635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2526.920731][T16635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2526.984793][T16898] netlink: 'syz.0.15352': attribute type 21 has an invalid length. [ 2527.086379][T16903] netlink: 763 bytes leftover after parsing attributes in process `syz.4.15353'. [ 2527.320829][T16635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2527.375002][T16635] 8021q: adding VLAN 0 to HW filter on device team0 [ 2527.415950][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2527.448372][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2527.496346][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2527.567808][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2527.617115][T13678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2527.624345][T13678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2527.652477][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2527.700841][T16920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15358'. [ 2527.864183][T16635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2527.952132][T16635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2527.976406][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2528.007957][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2528.038536][T13678] bridge0: port 2(bridge_slave_1) entered blocking state [ 2528.045774][T13678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2528.112650][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2528.143664][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2528.190703][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2528.208882][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2528.218465][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2528.235521][T16934] netlink: 'syz.4.15360': attribute type 3 has an invalid length. [ 2528.255815][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2528.280183][T16934] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15360'. [ 2528.296842][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2528.319271][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2528.340756][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2528.354402][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2528.366558][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2528.376805][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2528.386839][T16931] netlink: 'syz.0.15361': attribute type 10 has an invalid length. [ 2528.420510][T16931] device macvlan0 entered promiscuous mode [ 2528.492930][T16931] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2528.800000][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.806428][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.990268][T16966] netlink: 'syz.0.15366': attribute type 3 has an invalid length. [ 2529.020895][T16965] netlink: 'syz.2.15368': attribute type 21 has an invalid length. [ 2529.034335][T16966] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15366'. [ 2529.229663][T16961] netlink: 'syz.0.15366': attribute type 39 has an invalid length. [ 2529.534795][T16961] device hsr_slave_1 left promiscuous mode [ 2529.547587][T16979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15372'. [ 2529.687783][T16979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15372'. [ 2529.697129][T16984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15374'. [ 2529.737195][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2529.755733][T13678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2529.806350][T16635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2529.892600][ T9979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2529.933633][ T9979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2529.999087][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2530.008444][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2530.032445][T16635] device veth0_vlan entered promiscuous mode [ 2530.068509][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2530.108202][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2530.125086][T16994] netlink: 'syz.3.15385': attribute type 21 has an invalid length. [ 2530.184688][T16635] device veth1_vlan entered promiscuous mode [ 2530.308962][T16998] netlink: 'syz.2.15375': attribute type 3 has an invalid length. [ 2530.320177][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2530.335692][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2530.350865][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2530.362959][T16998] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15375'. [ 2530.374732][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2530.396576][T16635] device veth0_macvtap entered promiscuous mode [ 2530.426976][T16635] device veth1_macvtap entered promiscuous mode [ 2530.479168][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.497461][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.512317][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2530.523780][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.540566][T16635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2530.551833][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.564856][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.581201][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.591888][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.602164][T16635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2530.615689][T16635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2530.640580][T16635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2530.662335][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2530.695984][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2530.720150][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2530.741202][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2530.766591][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2530.816373][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2530.850980][T16635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.882565][T16635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.906892][T16635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.930911][T16635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2530.971310][T17008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15387'. [ 2531.010606][T17014] device macvlan0 entered promiscuous mode [ 2531.176273][T17014] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2531.388703][ T9578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2531.396576][ T9578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2531.449141][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2531.502293][T13674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2531.520815][T13674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2531.544648][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2531.869096][T17045] validate_nla: 1 callbacks suppressed [ 2531.869193][T17045] netlink: 'syz.2.15390': attribute type 21 has an invalid length. [ 2531.958914][T17052] netlink: 'syz.4.15392': attribute type 29 has an invalid length. [ 2531.989546][T17052] netlink: 'syz.4.15392': attribute type 29 has an invalid length. [ 2532.045351][T17056] netlink: 'syz.4.15392': attribute type 29 has an invalid length. [ 2532.313385][T17043] netlink: 'syz.0.15389': attribute type 3 has an invalid length. [ 2532.326460][T17043] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15389'. [ 2534.225916][T17113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15409'. [ 2534.797560][T17138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15417'. [ 2534.811083][T17140] netlink: 'syz.3.15410': attribute type 3 has an invalid length. [ 2534.847530][T17140] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15410'. [ 2535.647431][T17176] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15428'. [ 2535.695428][T17175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15429'. [ 2536.270024][T17196] netlink: 'syz.1.15435': attribute type 3 has an invalid length. [ 2536.360933][T17196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15435'. [ 2536.828902][T29302] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2536.836990][T29302] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 2536.848942][T29302] CPU: 0 PID: 29302 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2536.856703][T29302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2536.866838][T29302] Workqueue: hci0 hci_rx_work [ 2536.871710][T29302] Call Trace: [ 2536.875087][T29302] [ 2536.878088][T29302] dump_stack_lvl+0x188/0x24e [ 2536.882870][T29302] ? show_regs_print_info+0x12/0x12 [ 2536.888164][T29302] ? load_image+0x410/0x410 [ 2536.892794][T29302] sysfs_create_dir_ns+0x26a/0x290 [ 2536.897994][T29302] ? __lock_acquire+0x7c40/0x7c40 [ 2536.903099][T29302] ? sysfs_warn_dup+0xa0/0xa0 [ 2536.907882][T29302] ? do_raw_spin_unlock+0x11d/0x230 [ 2536.913169][T29302] kobject_add_internal+0x617/0xca0 [ 2536.918498][T29302] kobject_add+0x160/0x230 [ 2536.923012][T29302] ? kobject_init+0x1c0/0x1c0 [ 2536.927782][T29302] ? __raw_spin_lock_init+0x41/0x100 [ 2536.933148][T29302] ? klist_children_get+0x50/0x50 [ 2536.938282][T29302] ? get_device_parent+0x121/0x3e0 [ 2536.943493][T29302] device_add+0x470/0x1050 [ 2536.948023][T29302] hci_conn_add_sysfs+0xd1/0x1e0 [ 2536.953135][T29302] le_conn_complete_evt+0xfac/0x15c0 [ 2536.958502][T29302] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2536.964807][T29302] ? bt_info+0x180/0x180 [ 2536.969103][T29302] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2536.974799][T29302] ? mutex_unlock+0x10/0x10 [ 2536.979360][T29302] ? skb_pull_data+0xec/0x1f0 [ 2536.984097][T29302] hci_le_conn_complete_evt+0x183/0x440 [ 2536.989713][T29302] ? hci_remote_host_features_evt+0x230/0x230 [ 2536.995857][T29302] hci_event_packet+0x7b3/0x1290 [ 2537.000874][T29302] ? __lock_acquire+0x7c40/0x7c40 [ 2537.005956][T29302] ? bis_list+0x280/0x280 [ 2537.010338][T29302] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2537.016286][T29302] ? kcov_remote_start+0x4b0/0x7e0 [ 2537.021478][T29302] ? do_machine_check+0x380/0x750 [ 2537.026568][T29302] ? hci_send_to_monitor+0x9c/0x4a0 [ 2537.031832][T29302] hci_rx_work+0x3eb/0xd40 [ 2537.036304][T29302] ? _raw_spin_unlock+0x40/0x40 [ 2537.041320][T29302] ? process_one_work+0x7b4/0x1160 [ 2537.046551][T29302] process_one_work+0x8ab/0x1160 [ 2537.051589][T29302] ? worker_detach_from_pool+0x240/0x240 [ 2537.057311][T29302] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2537.062419][T29302] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2537.068031][T29302] ? wq_worker_running+0x97/0x190 [ 2537.073151][T29302] worker_thread+0xaf5/0x12a0 [ 2537.077928][T29302] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2537.083903][T29302] kthread+0x29d/0x330 [ 2537.088020][T29302] ? worker_clr_flags+0x1a0/0x1a0 [ 2537.093092][T29302] ? kthread_blkcg+0xd0/0xd0 [ 2537.097735][T29302] ret_from_fork+0x1f/0x30 [ 2537.102272][T29302] [ 2537.107808][T29302] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2537.122456][T29302] Bluetooth: hci0: failed to register connection device [ 2537.252366][T17224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15447'. [ 2537.426719][T17227] delete_channel: no stack [ 2537.545789][T17233] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15449'. [ 2537.895367][T17233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2538.022975][T17233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2538.093606][T17233] bond0 (unregistering): Released all slaves [ 2538.122965][T17236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15451'. [ 2538.145431][T17242] netlink: 'syz.0.15453': attribute type 10 has an invalid length. [ 2538.184936][T17242] team0: Port device netdevsim0 added [ 2538.681941][T17267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15464'. [ 2538.786089][T17263] delete_channel: no stack [ 2538.998061][T17276] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15467'. [ 2539.088013][ T4298] device 0 left promiscuous mode [ 2539.197640][T29302] Bluetooth: hci0: command 0x2016 tx timeout [ 2539.230878][ T4298] tipc: Left network mode [ 2539.870437][T17288] sctp: [Deprecated]: syz.1.15471 (pid 17288) Use of int in maxseg socket option. [ 2539.870437][T17288] Use struct sctp_assoc_value instead [ 2540.595932][T17312] netlink: 'syz.2.15488': attribute type 28 has an invalid length. [ 2540.645757][T17312] netlink: 'syz.2.15488': attribute type 29 has an invalid length. [ 2540.666351][T17309] delete_channel: no stack [ 2540.694326][T17312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15488'. [ 2540.753217][T17318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15480'. [ 2540.880209][T17320] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.15481'. [ 2541.663394][T17350] device syzkaller0 entered promiscuous mode [ 2541.697186][T17347] delete_channel: no stack [ 2542.022909][T29302] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 2544.083424][T29302] Bluetooth: hci2: command 0x2016 tx timeout [ 2544.286162][T17378] netlink: 'syz.1.15502': attribute type 3 has an invalid length. [ 2544.294534][T17378] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15502'. [ 2545.691666][T17360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15497'. [ 2546.129969][T17388] netlink: 'syz.3.15506': attribute type 3 has an invalid length. [ 2546.141188][T17388] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15506'. [ 2546.242425][ T2590] Bluetooth: hci0: command 0x0406 tx timeout [ 2546.357012][ T4298] device hsr_slave_0 left promiscuous mode [ 2546.369886][ T4298] device hsr_slave_1 left promiscuous mode [ 2546.441402][ T4298] device bridge_slave_1 left promiscuous mode [ 2546.449463][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2546.471644][ T4298] device bridge_slave_0 left promiscuous mode [ 2546.481194][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2546.571045][T17398] sctp: [Deprecated]: syz.2.15509 (pid 17398) Use of int in maxseg socket option. [ 2546.571045][T17398] Use struct sctp_assoc_value instead [ 2546.655808][ T4298] device veth1_macvtap left promiscuous mode [ 2546.702461][T17403] netlink: 'syz.1.15512': attribute type 4 has an invalid length. [ 2546.721255][ T4298] device veth0_macvtap left promiscuous mode [ 2546.741556][ T4298] device veth1_vlan left promiscuous mode [ 2546.749455][T17403] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15512'. [ 2546.770981][ T4298] device veth0_vlan left promiscuous mode [ 2547.579648][T17432] netlink: 'syz.2.15518': attribute type 3 has an invalid length. [ 2547.592581][T17432] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15518'. [ 2547.768604][ T4298] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2547.900585][ T4298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2547.952962][ T4298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2548.241631][ T4298] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2548.252149][ T4298] bond0 (unregistering): Released all slaves [ 2548.343667][T17400] netlink: 'syz.4.15510': attribute type 21 has an invalid length. [ 2548.520702][T17425] device syzkaller0 entered promiscuous mode [ 2551.468851][T17469] netlink: 'syz.3.15531': attribute type 21 has an invalid length. [ 2551.496274][T17470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15530'. [ 2551.694666][T17476] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.15533'. [ 2552.232476][T17491] FAULT_INJECTION: forcing a failure. [ 2552.232476][T17491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.274271][T17491] CPU: 0 PID: 17491 Comm: syz.2.15540 Not tainted syzkaller #0 [ 2552.281905][T17491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2552.292098][T17491] Call Trace: [ 2552.295420][T17491] [ 2552.298390][T17491] dump_stack_lvl+0x188/0x24e [ 2552.303133][T17491] ? show_regs_print_info+0x12/0x12 [ 2552.308479][T17491] ? load_image+0x410/0x410 [ 2552.313040][T17491] ? __lock_acquire+0x7c40/0x7c40 [ 2552.318126][T17491] should_fail_ex+0x390/0x4c0 [ 2552.322861][T17491] strncpy_from_user+0x32/0x340 [ 2552.327768][T17491] bpf_prog_load+0x200/0x1530 [ 2552.332516][T17491] ? map_freeze+0x390/0x390 [ 2552.337072][T17491] ? __might_fault+0xa6/0x120 [ 2552.341806][T17491] ? __might_fault+0xa6/0x120 [ 2552.346530][T17491] ? __might_fault+0xc2/0x120 [ 2552.351273][T17491] ? __might_fault+0xa6/0x120 [ 2552.356011][T17491] ? bpf_lsm_bpf+0x5/0x10 [ 2552.360398][T17491] ? security_bpf+0x7a/0xa0 [ 2552.364965][T17491] __sys_bpf+0x5b8/0x780 [ 2552.369271][T17491] ? bpf_link_show_fdinfo+0x380/0x380 [ 2552.374716][T17491] ? lock_chain_count+0x20/0x20 [ 2552.379632][T17491] __x64_sys_bpf+0x78/0x90 [ 2552.384102][T17491] do_syscall_64+0x4c/0xa0 [ 2552.388583][T17491] ? clear_bhb_loop+0x60/0xb0 [ 2552.393311][T17491] ? clear_bhb_loop+0x60/0xb0 [ 2552.398047][T17491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2552.403994][T17491] RIP: 0033:0x7ff88259e0d9 [ 2552.408463][T17491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2552.428121][T17491] RSP: 002b:00007ff8834fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2552.436591][T17491] RAX: ffffffffffffffda RBX: 00007ff882825fa0 RCX: 00007ff88259e0d9 [ 2552.444612][T17491] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 2552.452632][T17491] RBP: 00007ff8834fd090 R08: 0000000000000000 R09: 0000000000000000 [ 2552.460646][T17491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2552.468660][T17491] R13: 00007ff882826038 R14: 00007ff882825fa0 R15: 00007ffd46b8b9b8 [ 2552.476689][T17491] [ 2552.621496][T17496] device syzkaller0 entered promiscuous mode [ 2556.791989][T17499] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15543'. [ 2556.804771][T17500] netlink: 'syz.1.15543': attribute type 22 has an invalid length. [ 2556.816877][T17511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15548'. [ 2557.437170][T17539] netlink: 'syz.2.15557': attribute type 5 has an invalid length. [ 2558.515291][T17564] device syzkaller0 entered promiscuous mode [ 2558.535348][T17566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15566'. [ 2558.721304][T17576] netlink: 'syz.1.15569': attribute type 8 has an invalid length. [ 2561.201733][T17574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15569'. [ 2562.684760][T17622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15585'. [ 2563.569068][T17653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15595'. [ 2563.717164][T17653] netlink: 'syz.4.15595': attribute type 12 has an invalid length. [ 2563.743938][T17653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15595'. [ 2564.702024][T17679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15603'. [ 2565.270276][T17697] netlink: 'syz.1.15610': attribute type 10 has an invalid length. [ 2565.323740][T17697] netlink: 55 bytes leftover after parsing attributes in process `syz.1.15610'. [ 2565.381322][T17705] netlink: 'syz.1.15610': attribute type 3 has an invalid length. [ 2565.407087][T17705] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15610'. [ 2565.522694][T17711] netlink: 'syz.0.15614': attribute type 3 has an invalid length. [ 2565.573058][T17711] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.15614'. [ 2566.717863][T29302] Bluetooth: hci3: command 0x0406 tx timeout [ 2566.983341][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15621'. [ 2567.019049][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2567.124800][T17734] device bridge_slave_0 left promiscuous mode [ 2567.134653][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2567.174353][T17736] netlink: 'syz.3.15620': attribute type 21 has an invalid length. [ 2567.183404][T17735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15621'. [ 2567.217168][T17742] netlink: 'syz.2.15623': attribute type 21 has an invalid length. [ 2567.518636][T17758] netlink: 'syz.1.15625': attribute type 10 has an invalid length. [ 2567.558396][T17758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2567.675020][T17758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2567.738815][T17754] netlink: 'syz.3.15627': attribute type 16 has an invalid length. [ 2567.788818][T17754] netlink: 'syz.3.15627': attribute type 3 has an invalid length. [ 2567.818624][T17754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15627'. [ 2568.512295][T17782] netlink: 'syz.3.15635': attribute type 21 has an invalid length. [ 2568.747856][T17798] FAULT_INJECTION: forcing a failure. [ 2568.747856][T17798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2568.847918][T17798] CPU: 0 PID: 17798 Comm: syz.0.15638 Not tainted syzkaller #0 [ 2568.855555][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2568.865661][T17798] Call Trace: [ 2568.869002][T17798] [ 2568.871982][T17798] dump_stack_lvl+0x188/0x24e [ 2568.876756][T17798] ? show_regs_print_info+0x12/0x12 [ 2568.882018][T17798] ? load_image+0x410/0x410 [ 2568.886585][T17798] ? __might_fault+0xa6/0x120 [ 2568.891319][T17798] should_fail_ex+0x390/0x4c0 [ 2568.896061][T17798] copyin+0x1b/0x120 [ 2568.900022][T17798] _copy_from_iter+0x447/0x1130 [ 2568.904939][T17798] ? copyout_mc+0x110/0x110 [ 2568.909498][T17798] ? __virt_addr_valid+0x188/0x540 [ 2568.914677][T17798] ? __virt_addr_valid+0x188/0x540 [ 2568.919839][T17798] ? __virt_addr_valid+0x467/0x540 [ 2568.925013][T17798] ? __phys_addr_symbol+0x2b/0x70 [ 2568.930119][T17798] ? __check_object_size+0x4f6/0xa70 [ 2568.935482][T17798] netlink_sendmsg+0x755/0xbd0 [ 2568.940368][T17798] ? netlink_getsockopt+0x550/0x550 [ 2568.945651][T17798] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2568.951269][T17798] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2568.956605][T17798] ? security_socket_sendmsg+0x7c/0xa0 [ 2568.962122][T17798] ? netlink_getsockopt+0x550/0x550 [ 2568.967381][T17798] ____sys_sendmsg+0x5ed/0x9a0 [ 2568.972214][T17798] ? __sys_sendmsg_sock+0x30/0x30 [ 2568.977296][T17798] ? __import_iovec+0x306/0x510 [ 2568.982214][T17798] ? import_iovec+0x6f/0xa0 [ 2568.986787][T17798] ___sys_sendmsg+0x2a2/0x360 [ 2568.991543][T17798] ? __sys_sendmsg+0x2a0/0x2a0 [ 2568.996393][T17798] ? __lock_acquire+0x7c40/0x7c40 [ 2569.001506][T17798] __se_sys_sendmsg+0x1c3/0x2b0 [ 2569.006422][T17798] ? __x64_sys_sendmsg+0x80/0x80 [ 2569.011444][T17798] ? lockdep_hardirqs_on+0x94/0x140 [ 2569.016693][T17798] do_syscall_64+0x4c/0xa0 [ 2569.021217][T17798] ? clear_bhb_loop+0x60/0xb0 [ 2569.025948][T17798] ? clear_bhb_loop+0x60/0xb0 [ 2569.030681][T17798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2569.036740][T17798] RIP: 0033:0x7f7d2979e0d9 [ 2569.041197][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2569.060854][T17798] RSP: 002b:00007f7d2a6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2569.069323][T17798] RAX: ffffffffffffffda RBX: 00007f7d29a26090 RCX: 00007f7d2979e0d9 [ 2569.077357][T17798] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2569.085376][T17798] RBP: 00007f7d2a6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2569.093483][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2569.101500][T17798] R13: 00007f7d29a26128 R14: 00007f7d29a26090 R15: 00007ffd66d99bd8 [ 2569.109547][T17798] [ 2569.492730][T17804] device syzkaller0 entered promiscuous mode [ 2569.538624][T17806] validate_nla: 2 callbacks suppressed [ 2569.538661][T17806] netlink: 'syz.1.15642': attribute type 21 has an invalid length. [ 2569.657199][T17806] netlink: 'syz.1.15642': attribute type 12 has an invalid length. [ 2569.707601][T17806] netlink: 'syz.1.15642': attribute type 13 has an invalid length. [ 2569.807584][T17806] netlink: 'syz.1.15642': attribute type 14 has an invalid length. [ 2569.857701][T17806] netlink: 'syz.1.15642': attribute type 15 has an invalid length. [ 2569.877379][T17806] netlink: 'syz.1.15642': attribute type 16 has an invalid length. [ 2569.899451][T17806] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.15642'. [ 2573.133682][T17836] netlink: 'syz.4.15648': attribute type 10 has an invalid length. [ 2573.142104][T17836] device netdevsim0 entered promiscuous mode [ 2573.151648][T17846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15650'. [ 2573.164989][T17848] netlink: 'syz.1.15650': attribute type 12 has an invalid length. [ 2573.202285][T17848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15650'. [ 2573.416088][T17854] netlink: 'syz.3.15653': attribute type 21 has an invalid length. [ 2573.481803][T17856] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.15653'. [ 2573.553776][T17859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15654'. [ 2573.884947][T17873] netlink: 'syz.3.15660': attribute type 2 has an invalid length. [ 2573.931275][T17873] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.15660'. [ 2574.385213][T17886] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15661'. [ 2574.736206][T17882] device syzkaller0 entered promiscuous mode [ 2577.336660][T17907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15670'. [ 2577.346696][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15671'. [ 2577.362639][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15671'. [ 2577.371935][T17909] netlink: 33 bytes leftover after parsing attributes in process `syz.4.15671'. [ 2577.550437][T17912] validate_nla: 4 callbacks suppressed [ 2577.550459][T17912] netlink: 'syz.2.15673': attribute type 1 has an invalid length. [ 2577.735914][T17912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2577.805809][T17912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2577.856826][T17912] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 2577.910676][T17912] bond0 (unregistering): Released all slaves [ 2578.320288][T17926] device batadv0 entered promiscuous mode [ 2578.498163][T17929] netlink: 'syz.4.15678': attribute type 21 has an invalid length. [ 2579.600183][T17954] netlink: 'syz.0.15685': attribute type 2 has an invalid length. [ 2579.628946][T17954] __nla_validate_parse: 5 callbacks suppressed [ 2579.628970][T17954] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.15685'. [ 2582.172809][T17975] netlink: 168 bytes leftover after parsing attributes in process `syz.1.15690'. [ 2582.701396][T17985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15695'. [ 2582.994557][T17980] netlink: 'syz.0.15693': attribute type 3 has an invalid length. [ 2583.022495][T17980] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15693'. [ 2584.033753][T18017] sctp: [Deprecated]: syz.4.15707 (pid 18017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2584.033753][T18017] Use struct sctp_sack_info instead [ 2584.753248][T18039] netlink: 'syz.1.15715': attribute type 3 has an invalid length. [ 2584.769040][T18039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15715'. [ 2587.159845][T18023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15710'. [ 2587.175139][T18038] netlink: 'syz.1.15715': attribute type 21 has an invalid length. [ 2587.647471][T18052] netlink: 'syz.4.15716': attribute type 3 has an invalid length. [ 2587.655368][T18052] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15716'. [ 2589.130819][T18076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15729'. [ 2589.163320][T18076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15729'. [ 2589.265657][T18080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15729'. [ 2589.331740][T18086] netlink: 'syz.0.15731': attribute type 3 has an invalid length. [ 2589.345267][T18083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15730'. [ 2589.363126][T18081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15729'. [ 2589.369686][T18086] netlink: 'syz.0.15731': attribute type 8 has an invalid length. [ 2589.385715][T18086] netlink: 'syz.0.15731': attribute type 7 has an invalid length. [ 2589.394076][T18087] netlink: 'syz.0.15731': attribute type 21 has an invalid length. [ 2589.398178][T18086] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.15731'. [ 2589.775657][T18099] netlink: 'syz.0.15746': attribute type 21 has an invalid length. [ 2589.863940][T18108] netlink: 180 bytes leftover after parsing attributes in process `syz.0.15746'. [ 2590.149432][T18113] netlink: 'syz.2.15736': attribute type 3 has an invalid length. [ 2590.194702][T18113] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15736'. [ 2590.324299][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.330870][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.527111][T18123] netlink: 'syz.4.15740': attribute type 10 has an invalid length. [ 2590.576973][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.613096][T18123] device bridge_slave_1 left promiscuous mode [ 2590.631596][T18123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2590.643010][T18130] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.15744'. [ 2590.676651][T18130] netlink: 'syz.0.15744': attribute type 3 has an invalid length. [ 2590.676672][T18123] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2590.696328][T18130] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15744'. [ 2590.768992][T18133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15745'. [ 2591.271119][T18157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2591.323904][T18157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2591.343766][T18157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2591.437872][T18157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2591.647493][T18165] netlink: 'syz.3.15752': attribute type 21 has an invalid length. [ 2591.655997][T18165] IPv6: NLM_F_CREATE should be specified when creating new route [ 2591.832159][T18169] netlink: 'syz.4.15759': attribute type 21 has an invalid length. [ 2591.947727][T18184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15763'. [ 2592.398216][ T2590] Bluetooth: hci5: command 0x0406 tx timeout [ 2593.174446][T18223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15779'. [ 2593.297545][T18228] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15780'. [ 2595.253898][T18261] validate_nla: 1 callbacks suppressed [ 2595.253938][T18261] netlink: 'syz.3.15788': attribute type 4 has an invalid length. [ 2595.272199][T18261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15788'. [ 2597.127736][T18268] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.15791'. [ 2597.139381][T18268] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.15791'. [ 2597.179008][T18268] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15791'. [ 2597.752634][T18285] netlink: 'syz.4.15798': attribute type 11 has an invalid length. [ 2597.823832][T18292] netlink: 'syz.1.15799': attribute type 21 has an invalid length. [ 2597.881415][T18300] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.15799'. [ 2598.035436][T18300] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15799'. [ 2598.144804][T18300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2598.207053][T18300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2598.374661][T18306] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15804'. [ 2601.854479][T18341] netlink: 'syz.0.15813': attribute type 1 has an invalid length. [ 2601.899153][T18341] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.15813'. [ 2602.942879][T18382] syz.1.15828[18382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2602.942992][T18382] syz.1.15828[18382] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2603.807275][T18385] netlink: 'syz.4.15829': attribute type 21 has an invalid length. [ 2603.827769][T18394] netlink: 'syz.4.15829': attribute type 10 has an invalid length. [ 2605.754938][T18394] team0: Device wg1 is of different type [ 2606.374906][T18433] device syzkaller0 entered promiscuous mode [ 2610.326158][T18464] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15853'. [ 2610.373168][T18466] netlink: 'syz.0.15854': attribute type 21 has an invalid length. [ 2611.170516][T18479] netlink: 'syz.4.15858': attribute type 9 has an invalid length. [ 2611.189563][T18479] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.15858'. [ 2611.292660][T18481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15859'. [ 2611.632174][T18489] netlink: 'syz.4.15860': attribute type 3 has an invalid length. [ 2611.834213][T18489] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15860'. [ 2612.699893][T18509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15869'. [ 2612.802986][T29302] Bluetooth: hci2: command 0x0406 tx timeout [ 2613.068356][T18514] netlink: 'syz.3.15871': attribute type 9 has an invalid length. [ 2613.076468][T18514] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.15871'. [ 2617.532441][T18549] netlink: 'syz.1.15880': attribute type 3 has an invalid length. [ 2617.757685][T18549] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15880'. [ 2618.271596][T18568] netlink: 'syz.2.15887': attribute type 9 has an invalid length. [ 2618.291156][T18568] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.15887'. [ 2618.552685][T18583] netlink: 'syz.2.15895': attribute type 21 has an invalid length. [ 2618.952394][T18594] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15897'. [ 2619.661308][T18610] netlink: 'syz.0.15900': attribute type 3 has an invalid length. [ 2619.703940][T18610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15900'. [ 2619.995098][T18617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15907'. [ 2622.023290][T18671] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.15919'. [ 2622.108313][T18675] netlink: 'syz.2.15919': attribute type 3 has an invalid length. [ 2622.179196][T18675] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15919'. [ 2623.343913][T18702] netlink: 'syz.3.15932': attribute type 3 has an invalid length. [ 2623.375413][T18702] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15932'. [ 2623.453660][T18704] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15931'. [ 2623.991328][T18722] netlink: 'syz.4.15938': attribute type 21 has an invalid length. [ 2624.041271][T18722] netlink: 100 bytes leftover after parsing attributes in process `syz.4.15938'. [ 2624.330866][T18739] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.15943'. [ 2624.727277][T18752] netlink: 'syz.1.15946': attribute type 3 has an invalid length. [ 2624.807790][T18752] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15946'. [ 2625.918383][T18785] netlink: 'syz.3.15953': attribute type 10 has an invalid length. [ 2626.225842][T18789] netlink: 'syz.2.15956': attribute type 3 has an invalid length. [ 2626.260675][T18789] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.15956'. [ 2628.157527][ T2590] Bluetooth: hci1: command 0x0406 tx timeout [ 2628.681847][T18812] netlink: 'syz.3.15960': attribute type 10 has an invalid length. [ 2628.880696][T18818] netlink: 'syz.0.15961': attribute type 3 has an invalid length. [ 2628.917842][T18818] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15961'. [ 2629.481044][T18836] syz.3.15971[18836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2630.034525][T18853] netlink: 'syz.0.15977': attribute type 3 has an invalid length. [ 2630.098277][T18853] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15977'. [ 2630.773156][T18868] netlink: 188 bytes leftover after parsing attributes in process `syz.2.15981'. [ 2630.805794][T18867] netlink: 'syz.3.15982': attribute type 21 has an invalid length. [ 2630.826093][T18867] netlink: 'syz.3.15982': attribute type 1 has an invalid length. [ 2630.855840][T18867] netlink: 144 bytes leftover after parsing attributes in process `syz.3.15982'. [ 2631.811196][T18890] device syzkaller0 entered promiscuous mode [ 2632.484551][T18907] netlink: 'syz.2.15993': attribute type 3 has an invalid length. [ 2632.589727][T18907] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15993'. [ 2632.936802][T18912] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.15995'. [ 2632.983365][T18912] netlink: zone id is out of range [ 2633.032780][T18912] netlink: zone id is out of range [ 2633.060383][T18912] netlink: zone id is out of range [ 2633.065604][T18912] netlink: zone id is out of range [ 2633.087578][T18912] netlink: zone id is out of range [ 2633.092952][T18912] netlink: zone id is out of range [ 2633.103727][T18912] netlink: zone id is out of range [ 2633.117514][T18912] netlink: zone id is out of range [ 2633.137512][T18912] netlink: zone id is out of range [ 2633.147847][T18912] netlink: zone id is out of range [ 2635.963314][T18926] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16001'. [ 2636.016482][T18926] team0: Port device team_slave_0 removed [ 2636.978333][T18951] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.16006'. [ 2639.315945][T18988] netlink: 'syz.2.16018': attribute type 3 has an invalid length. [ 2639.329696][T18988] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16018'. [ 2640.018587][T29302] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 2640.148126][T19004] netlink: 'syz.1.16026': attribute type 21 has an invalid length. [ 2640.504935][T19019] netlink: 'syz.0.16033': attribute type 10 has an invalid length. [ 2640.519998][T19019] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16033'. [ 2640.539221][T19019] device hsr0 entered promiscuous mode [ 2640.544982][T19019] bridge0: port 3(hsr0) entered blocking state [ 2640.554193][T19019] bridge0: port 3(hsr0) entered disabled state [ 2640.584429][T19019] bridge0: port 3(hsr0) entered blocking state [ 2640.590794][T19019] bridge0: port 3(hsr0) entered forwarding state [ 2641.178782][T19028] netlink: 'syz.3.16037': attribute type 3 has an invalid length. [ 2641.187648][T29302] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2641.195572][T29302] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 2641.205350][T29302] CPU: 0 PID: 29302 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2641.210108][T19028] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16037'. [ 2641.213037][T29302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2641.213104][T29302] Workqueue: hci0 hci_rx_work [ 2641.213147][T29302] Call Trace: [ 2641.213167][T29302] [ 2641.213185][T29302] dump_stack_lvl+0x188/0x24e [ 2641.213241][T29302] ? show_regs_print_info+0x12/0x12 [ 2641.253740][T29302] ? load_image+0x410/0x410 [ 2641.258378][T29302] sysfs_create_dir_ns+0x26a/0x290 [ 2641.263570][T29302] ? __lock_acquire+0x7c40/0x7c40 [ 2641.268659][T29302] ? sysfs_warn_dup+0xa0/0xa0 [ 2641.273406][T29302] ? do_raw_spin_unlock+0x11d/0x230 [ 2641.278663][T29302] kobject_add_internal+0x617/0xca0 [ 2641.283927][T29302] kobject_add+0x160/0x230 [ 2641.288405][T29302] ? kobject_init+0x1c0/0x1c0 [ 2641.293142][T29302] ? __raw_spin_lock_init+0x41/0x100 [ 2641.298477][T29302] ? klist_children_get+0x50/0x50 [ 2641.303561][T29302] ? get_device_parent+0x121/0x3e0 [ 2641.308758][T29302] device_add+0x470/0x1050 [ 2641.313284][T29302] hci_conn_add_sysfs+0xd1/0x1e0 [ 2641.318293][T29302] le_conn_complete_evt+0xfac/0x15c0 [ 2641.323653][T29302] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 2641.329963][T29302] ? bt_info+0x180/0x180 [ 2641.334280][T29302] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2641.339995][T29302] ? mutex_unlock+0x10/0x10 [ 2641.344549][T29302] ? skb_pull_data+0xec/0x1f0 [ 2641.349279][T29302] hci_le_conn_complete_evt+0x183/0x440 [ 2641.354888][T29302] ? hci_remote_host_features_evt+0x230/0x230 [ 2641.361040][T29302] hci_event_packet+0x7b3/0x1290 [ 2641.366052][T29302] ? __lock_acquire+0x7c40/0x7c40 [ 2641.371134][T29302] ? bis_list+0x280/0x280 [ 2641.375510][T29302] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2641.381464][T29302] ? kcov_remote_start+0x4b0/0x7e0 [ 2641.386622][T29302] ? do_machine_check+0x380/0x750 [ 2641.391729][T29302] ? hci_send_to_monitor+0x9c/0x4a0 [ 2641.397020][T29302] hci_rx_work+0x3eb/0xd40 [ 2641.401496][T29302] ? _raw_spin_unlock+0x40/0x40 [ 2641.406411][T29302] ? process_one_work+0x7b4/0x1160 [ 2641.411571][T29302] process_one_work+0x8ab/0x1160 [ 2641.416597][T29302] ? worker_detach_from_pool+0x240/0x240 [ 2641.422273][T29302] ? _raw_spin_lock_irq+0x86/0xf0 [ 2641.427375][T29302] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2641.432446][T29302] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2641.438050][T29302] ? wq_worker_running+0x97/0x190 [ 2641.443137][T29302] worker_thread+0xaf5/0x12a0 [ 2641.447902][T29302] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2641.453882][T29302] kthread+0x29d/0x330 [ 2641.457996][T29302] ? worker_clr_flags+0x1a0/0x1a0 [ 2641.463071][T29302] ? kthread_blkcg+0xd0/0xd0 [ 2641.467795][T29302] ret_from_fork+0x1f/0x30 [ 2641.472299][T29302] [ 2641.478302][T29302] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2641.491555][T29302] Bluetooth: hci0: failed to register connection device [ 2641.588587][T19040] sctp: [Deprecated]: syz.4.16041 (pid 19040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2641.588587][T19040] Use struct sctp_sack_info instead [ 2641.635214][T19040] netlink: 'syz.4.16041': attribute type 3 has an invalid length. [ 2641.645658][T19040] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.16041'. [ 2642.077561][T29302] Bluetooth: hci5: command 0x2016 tx timeout [ 2642.710213][T19057] netlink: 'syz.4.16047': attribute type 21 has an invalid length. [ 2643.517939][T29302] Bluetooth: hci0: command 0x2016 tx timeout [ 2643.754368][T19090] netlink: 'syz.3.16056': attribute type 3 has an invalid length. [ 2643.848783][T19090] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16056'. [ 2644.784168][T19116] netlink: 'syz.3.16068': attribute type 21 has an invalid length. [ 2644.954388][T19129] netlink: 'syz.0.16071': attribute type 10 has an invalid length. [ 2644.971933][T19129] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16071'. [ 2645.449070][T19138] device syzkaller0 entered promiscuous mode [ 2645.948955][T29302] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2646.947455][T19190] netlink: 'syz.1.16089': attribute type 3 has an invalid length. [ 2646.955356][T19190] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16089'. [ 2647.997588][T29302] Bluetooth: hci1: command 0x2016 tx timeout [ 2648.672103][T19201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16094'. [ 2649.821304][T19229] : port 1(ip6gretap0) entered blocking state [ 2649.928801][T19229] : port 1(ip6gretap0) entered disabled state [ 2649.994260][T19229] device ip6gretap0 entered promiscuous mode [ 2650.072770][T19234] device ip6gretap0 left promiscuous mode [ 2650.125232][T19234] : port 1(ip6gretap0) entered disabled state [ 2650.354783][T19240] device syzkaller0 entered promiscuous mode [ 2651.679723][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.686195][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.921997][T19259] netlink: 'syz.0.16114': attribute type 3 has an invalid length. [ 2651.937962][T19259] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16114'. [ 2654.119377][T19253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16111'. [ 2654.868702][T19286] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.16122'. [ 2655.276315][T19299] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16126'. [ 2656.128442][T19329] Q±6ã`Ò˜: renamed from lo [ 2656.419857][T19333] netlink: 'syz.3.16137': attribute type 2 has an invalid length. [ 2656.428444][T19333] netlink: 'syz.3.16137': attribute type 1 has an invalid length. [ 2656.604059][T19344] netlink: 'syz.1.16139': attribute type 3 has an invalid length. [ 2656.664977][T19344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16139'. [ 2657.142703][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2657.150498][T19360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2657.598336][T19368] netlink: 'syz.2.16148': attribute type 25 has an invalid length. [ 2657.650337][T19368] netlink: 'syz.2.16148': attribute type 3 has an invalid length. [ 2657.682653][T19373] netlink: 'syz.3.16149': attribute type 3 has an invalid length. [ 2657.756812][T19373] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16149'. [ 2658.538492][T19399] netlink: 'syz.4.16157': attribute type 3 has an invalid length. [ 2658.609493][T19399] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16157'. [ 2660.619473][T19438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16169'. [ 2660.997201][T19452] netlink: 'syz.4.16171': attribute type 3 has an invalid length. [ 2661.071356][T19452] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16171'. [ 2661.296322][T19459] netlink: 'syz.2.16174': attribute type 3 has an invalid length. [ 2661.363023][T19459] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16174'. [ 2661.378554][T19460] netlink: 'syz.1.16176': attribute type 10 has an invalid length. [ 2661.412683][T19460] netlink: 55 bytes leftover after parsing attributes in process `syz.1.16176'. [ 2662.463453][T19486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16185'. [ 2662.675902][T19500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2662.757562][T19500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2662.781343][T19500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2662.796336][T19500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2663.094995][T19517] netlink: 'syz.0.16195': attribute type 21 has an invalid length. [ 2663.106451][T19517] netlink: 100 bytes leftover after parsing attributes in process `syz.0.16195'. [ 2663.189556][T19518] netlink: 'syz.1.16192': attribute type 3 has an invalid length. [ 2663.325404][T19518] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16192'. [ 2663.466325][T19521] netlink: 'syz.0.16195': attribute type 27 has an invalid length. [ 2663.497557][T19521] netlink: 152 bytes leftover after parsing attributes in process `syz.0.16195'. [ 2663.526690][T19521] net_ratelimit: 138 callbacks suppressed [ 2663.526708][T19521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2663.876212][T19541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16204'. [ 2664.175041][T19550] netlink: 'syz.4.16208': attribute type 2 has an invalid length. [ 2664.590032][T19550] device 0 entered promiscuous mode [ 2664.736551][T19561] netlink: 'syz.3.16212': attribute type 3 has an invalid length. [ 2664.809008][T19561] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16212'. [ 2664.878540][T19566] netlink: 'syz.1.16213': attribute type 21 has an invalid length. [ 2665.434775][T19588] device syzkaller0 entered promiscuous mode [ 2665.751097][T19604] __nla_validate_parse: 1 callbacks suppressed [ 2665.751118][T19604] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.16224'. [ 2665.791747][T19604] netlink: zone id is out of range [ 2665.817410][T19604] netlink: zone id is out of range [ 2665.828916][T19604] netlink: zone id is out of range [ 2665.834164][T19604] netlink: zone id is out of range [ 2665.842148][T19604] netlink: zone id is out of range [ 2665.857034][T19604] netlink: del zone limit has 4 unknown bytes [ 2666.004461][T19610] netlink: 'syz.4.16227': attribute type 3 has an invalid length. [ 2666.053378][T19610] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16227'. [ 2668.609016][T19631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16235'. [ 2668.805220][T19633] netlink: 'syz.3.16236': attribute type 21 has an invalid length. [ 2668.836956][T19641] netlink: 'syz.3.16236': attribute type 21 has an invalid length. [ 2669.370239][T19664] netlink: 'syz.2.16244': attribute type 3 has an invalid length. [ 2669.416211][T19664] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16244'. [ 2670.000292][T19673] device sit0 entered promiscuous mode [ 2670.181792][T19669] device syzkaller0 entered promiscuous mode [ 2674.351466][T19790] netlink: 'syz.1.16287': attribute type 17 has an invalid length. [ 2675.166473][T19798] device sit0 entered promiscuous mode [ 2675.510776][T19816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16294'. [ 2675.759728][T19820] device syzkaller0 entered promiscuous mode [ 2680.948474][T19852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16309'. [ 2680.958453][T19857] netlink: 'syz.2.16308': attribute type 10 has an invalid length. [ 2681.008032][T19857] team0: Port device dummy0 added [ 2681.050015][T19862] ¥: port 1(team0) entered blocking state [ 2681.055878][T19862] ¥: port 1(team0) entered disabled state [ 2681.078972][T19862] device team0 entered promiscuous mode [ 2681.085407][T19862] device team_slave_0 entered promiscuous mode [ 2681.098477][T19862] device team_slave_1 entered promiscuous mode [ 2681.116284][T19863] device team0 left promiscuous mode [ 2681.128557][T19863] device team_slave_0 left promiscuous mode [ 2681.135731][T19863] device team_slave_1 left promiscuous mode [ 2681.157089][T19863] ¥: port 1(team0) entered disabled state [ 2682.446072][T19908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16324'. [ 2682.647988][T19911] netlink: 'syz.1.16325': attribute type 19 has an invalid length. [ 2682.658774][T19911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16325'. [ 2682.705364][T19911] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16325'. [ 2682.740358][T19911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2683.145069][T19926] netlink: 'syz.0.16329': attribute type 3 has an invalid length. [ 2683.170579][T19926] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16329'. [ 2684.004824][T19948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16338'. [ 2684.603587][T19955] netlink: 'syz.3.16341': attribute type 21 has an invalid length. [ 2684.931455][T19981] netlink: 'syz.2.16347': attribute type 3 has an invalid length. [ 2685.068645][T19981] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16347'. [ 2685.392887][T19989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16353'. [ 2686.840701][T20007] tap0: tun_chr_ioctl cmd 1074025677 [ 2686.876195][T20007] tap0: linktype set to 804 [ 2687.241480][T20022] netlink: 'syz.4.16364': attribute type 29 has an invalid length. [ 2687.280255][T20023] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.16362'. [ 2687.319003][T20022] netlink: 'syz.4.16364': attribute type 29 has an invalid length. [ 2687.356201][T20024] netlink: 'syz.3.16362': attribute type 10 has an invalid length. [ 2687.374667][T20024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16362'. [ 2687.397534][T20020] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.16362'. [ 2687.412596][T20022] netlink: 'syz.4.16364': attribute type 29 has an invalid length. [ 2687.474473][T20027] netlink: 'syz.0.16365': attribute type 3 has an invalid length. [ 2687.482959][T20027] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16365'. [ 2688.761488][T20056] netlink: 'syz.4.16374': attribute type 4 has an invalid length. [ 2688.864270][T20056] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.16374'. [ 2689.726104][T20073] netlink: 'syz.3.16379': attribute type 3 has an invalid length. [ 2689.818299][T20073] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16379'. [ 2691.986939][T20113] netlink: 'syz.0.16392': attribute type 3 has an invalid length. [ 2692.127850][T20113] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16392'. [ 2692.880145][T20130] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.16397'. [ 2693.357238][T20151] netlink: 'syz.3.16405': attribute type 2 has an invalid length. [ 2693.444549][T20151] device 0 entered promiscuous mode [ 2693.694052][T20161] netlink: 'syz.2.16407': attribute type 3 has an invalid length. [ 2693.869454][T20161] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16407'. [ 2693.921711][T20167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16410'. [ 2694.016095][T20159] netlink: 'syz.4.16406': attribute type 3 has an invalid length. [ 2694.060132][T20159] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16406'. [ 2695.578569][T20214] netlink: 'syz.2.16426': attribute type 3 has an invalid length. [ 2695.617496][T20214] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16426'. [ 2696.052687][T20215] netlink: 'syz.0.16427': attribute type 21 has an invalid length. [ 2696.062306][T20215] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16427'. [ 2696.101417][T20229] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16433'. [ 2696.706387][T20255] netlink: 'syz.2.16443': attribute type 2 has an invalid length. [ 2696.727725][T20255] netlink: 'syz.2.16443': attribute type 1 has an invalid length. [ 2696.776953][T20255] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.16443'. [ 2696.946795][T20264] netlink: 'syz.3.16446': attribute type 3 has an invalid length. [ 2696.994697][T20264] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16446'. [ 2697.568725][T20270] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16447'. [ 2697.955638][T20295] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16458'. [ 2698.101767][T20300] netlink: 'syz.0.16470': attribute type 10 has an invalid length. [ 2698.141731][T20300] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.16470'. [ 2698.246978][T20305] netlink: 'syz.4.16461': attribute type 1 has an invalid length. [ 2698.333581][T20305] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.16461'. [ 2699.274028][T20332] validate_nla: 1 callbacks suppressed [ 2699.274051][T20332] netlink: 'syz.0.16466': attribute type 3 has an invalid length. [ 2699.438693][T20332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16466'. [ 2700.199220][T20353] netlink: 'syz.0.16477': attribute type 1 has an invalid length. [ 2700.266703][T20353] netlink: 'syz.0.16477': attribute type 1 has an invalid length. [ 2700.372416][T20353] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.16477'. [ 2701.047255][T20372] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16484'. [ 2701.116519][T20372] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2701.164660][T20372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2701.868390][T20379] netlink: 'syz.4.16487': attribute type 3 has an invalid length. [ 2701.887667][T20379] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16487'. [ 2701.999440][T20393] netlink: 'syz.3.16493': attribute type 1 has an invalid length. [ 2702.058745][T20393] netlink: 'syz.3.16493': attribute type 1 has an invalid length. [ 2702.092323][T20393] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.16493'. [ 2702.309962][T20406] netlink: 'syz.1.16494': attribute type 3 has an invalid length. [ 2702.328871][T20406] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16494'. [ 2702.787008][T20423] netlink: 'syz.4.16500': attribute type 3 has an invalid length. [ 2702.857406][T20423] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16500'. [ 2703.085234][T20411] device syzkaller0 entered promiscuous mode [ 2703.120157][ T8785] syzkaller0: tun_net_xmit 48 [ 2704.193186][T20469] netlink: 'syz.3.16515': attribute type 3 has an invalid length. [ 2704.221605][T20469] __nla_validate_parse: 1 callbacks suppressed [ 2704.221625][T20469] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16515'. [ 2704.305028][T20472] netlink: 'syz.1.16516': attribute type 3 has an invalid length. [ 2704.339280][T20472] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16516'. [ 2706.120154][T20447] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16509'. [ 2706.319400][T20477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16518'. [ 2706.393629][T20481] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.16520'. [ 2707.531849][T20514] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16533'. [ 2707.679701][T20517] netlink: 'syz.2.16531': attribute type 3 has an invalid length. [ 2707.772167][T20517] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16531'. [ 2708.032767][T20522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16535'. [ 2709.141262][T20539] delete_channel: no stack [ 2709.245170][T20560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16549'. [ 2709.671932][T20570] device sit0 left promiscuous mode [ 2709.878096][T20568] device sit0 entered promiscuous mode [ 2710.536861][T20573] netlink: 'syz.1.16553': attribute type 3 has an invalid length. [ 2710.588549][T20573] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16553'. [ 2710.609334][ T2590] Bluetooth: hci0: unknown advertising packet type: 0x49 [ 2710.609427][ T2590] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2711.225936][T20615] netlink: 'syz.1.16570': attribute type 29 has an invalid length. [ 2711.237906][T20616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16569'. [ 2711.262643][T20615] netlink: 'syz.1.16570': attribute type 29 has an invalid length. [ 2711.285372][T20621] netlink: 'syz.1.16570': attribute type 29 has an invalid length. [ 2711.312715][T20615] netlink: 'syz.1.16570': attribute type 29 has an invalid length. [ 2711.333702][T20615] netlink: 'syz.1.16570': attribute type 29 has an invalid length. [ 2712.013666][T20638] netlink: 'syz.4.16576': attribute type 3 has an invalid length. [ 2712.079968][T20638] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16576'. [ 2712.245270][T20642] netlink: 'syz.1.16577': attribute type 4 has an invalid length. [ 2713.168139][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.174554][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.505082][T20688] netlink: 'syz.4.16589': attribute type 3 has an invalid length. [ 2714.565974][T20688] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16589'. [ 2714.585991][T20692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16593'. [ 2714.919924][T20706] netlink: 'syz.4.16599': attribute type 2 has an invalid length. [ 2715.351718][T20731] netlink: 180 bytes leftover after parsing attributes in process `syz.3.16607'. [ 2715.618661][T20739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16612'. [ 2715.763812][T20730] validate_nla: 1 callbacks suppressed [ 2715.764127][T20730] netlink: 'syz.1.16609': attribute type 3 has an invalid length. [ 2715.807752][T20730] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16609'. [ 2716.426288][T20765] netlink: 'syz.1.16621': attribute type 4 has an invalid length. [ 2716.442419][T20765] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16621'. [ 2716.542257][T20772] device sit0 entered promiscuous mode [ 2716.776427][T20777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16628'. [ 2717.325459][T20788] netlink: 'syz.1.16631': attribute type 3 has an invalid length. [ 2717.335537][T20788] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16631'. [ 2717.645570][T20812] netlink: 'syz.4.16639': attribute type 29 has an invalid length. [ 2717.717884][T20808] device sit0 entered promiscuous mode [ 2717.841116][T20812] netlink: 'syz.4.16639': attribute type 29 has an invalid length. [ 2717.906279][T20815] netlink: 'syz.4.16639': attribute type 29 has an invalid length. [ 2717.975690][T20818] netlink: 'syz.4.16639': attribute type 29 has an invalid length. [ 2718.060464][T20821] netlink: 'syz.4.16639': attribute type 29 has an invalid length. [ 2718.351096][T20838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16646'. [ 2719.637902][T20868] netlink: 'syz.0.16658': attribute type 29 has an invalid length. [ 2719.812708][T20866] device sit0 entered promiscuous mode [ 2719.916155][T20868] netlink: 'syz.0.16658': attribute type 29 has an invalid length. [ 2720.202145][T20888] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16663'. [ 2722.663535][T20926] device sit0 left promiscuous mode [ 2723.463635][T20939] device sit0 entered promiscuous mode [ 2724.340962][T20977] validate_nla: 3 callbacks suppressed [ 2724.340982][T20977] netlink: 'syz.1.16685': attribute type 3 has an invalid length. [ 2724.355486][T20977] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16685'. [ 2724.582913][T20985] netlink: 164 bytes leftover after parsing attributes in process `syz.0.16693'. [ 2724.678641][T20987] netlink: 'syz.2.16695': attribute type 2 has an invalid length. [ 2724.688930][T20989] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.16694'. [ 2724.707716][T20987] netlink: 10 bytes leftover after parsing attributes in process `syz.2.16695'. [ 2725.870946][T21014] netlink: 'syz.0.16704': attribute type 2 has an invalid length. [ 2725.890718][T21014] netlink: 'syz.0.16704': attribute type 4 has an invalid length. [ 2725.909302][T21014] netlink: 'syz.0.16704': attribute type 8 has an invalid length. [ 2725.960100][T21014] netlink: 'syz.0.16704': attribute type 9 has an invalid length. [ 2725.988048][T21014] netlink: 'syz.0.16704': attribute type 10 has an invalid length. [ 2726.007526][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16704'. [ 2726.353128][T21030] netlink: 164 bytes leftover after parsing attributes in process `syz.4.16709'. [ 2726.526492][T21034] netlink: 'syz.2.16708': attribute type 3 has an invalid length. [ 2726.574216][T21034] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16708'. [ 2726.911842][ T9578] tipc: Subscription rejected, illegal request [ 2727.348747][T21049] netlink: 'syz.3.16714': attribute type 21 has an invalid length. [ 2727.357081][T21049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16714'. [ 2727.770636][T21054] netlink: 'syz.4.16716': attribute type 3 has an invalid length. [ 2727.781306][T21054] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16716'. [ 2728.333195][T21076] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16722'. [ 2728.650487][T21089] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16730'. [ 2729.012563][T21094] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16728'. [ 2729.941633][T21106] validate_nla: 4 callbacks suppressed [ 2729.942440][T21106] netlink: 'syz.2.16735': attribute type 3 has an invalid length. [ 2730.034440][T21106] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16735'. [ 2730.418876][T21130] device syzkaller0 entered promiscuous mode [ 2731.743632][T21163] netlink: 'syz.3.16758': attribute type 3 has an invalid length. [ 2731.999781][T21163] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16758'. [ 2734.605520][T21196] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.16769'. [ 2734.615536][T21196] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.16769'. [ 2734.911097][T21207] netlink: 'syz.4.16770': attribute type 3 has an invalid length. [ 2734.957464][T21207] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16770'. [ 2735.554069][T21218] netlink: 'syz.1.16776': attribute type 3 has an invalid length. [ 2735.693173][T21218] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16776'. [ 2736.303633][T21230] netlink: 164 bytes leftover after parsing attributes in process `syz.1.16778'. [ 2736.359781][T21232] netlink: 'syz.4.16779': attribute type 15 has an invalid length. [ 2736.377603][T21232] netlink: 'syz.4.16779': attribute type 7 has an invalid length. [ 2736.544210][T21241] device syzkaller0 entered promiscuous mode [ 2736.755926][T21245] netlink: 'syz.4.16784': attribute type 3 has an invalid length. [ 2736.775095][T21245] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16784'. [ 2738.941926][T21263] device sit0 left promiscuous mode [ 2739.003921][T21265] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16791'. [ 2739.151207][T21272] netlink: 'syz.2.16794': attribute type 3 has an invalid length. [ 2739.169908][T21272] netlink: 'syz.2.16794': attribute type 1 has an invalid length. [ 2739.178080][T21272] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.16794'. [ 2739.192193][T21272] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.16794'. [ 2739.936818][T21302] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16804'. [ 2740.329407][T21318] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.16810'. [ 2740.781248][T21319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16809'. [ 2740.824088][T21318] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.16810'. [ 2741.121371][T21334] netlink: 'syz.1.16816': attribute type 3 has an invalid length. [ 2741.180229][T21334] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16816'. [ 2741.306876][T21341] netlink: 164 bytes leftover after parsing attributes in process `syz.3.16819'. [ 2741.368982][T21345] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.16821'. [ 2741.523047][T21353] netlink: 'syz.3.16823': attribute type 21 has an invalid length. [ 2741.548529][T21353] netlink: 'syz.3.16823': attribute type 7 has an invalid length. [ 2742.003999][T21361] netlink: 'syz.0.16826': attribute type 3 has an invalid length. [ 2743.658597][T21374] bond0: (slave macvlan0): Releasing backup interface [ 2744.152423][T21418] device syzkaller0 entered promiscuous mode [ 2744.445337][T21441] sock: sock_set_timeout: `syz.4.16851' (pid 21441) tries to set negative timeout [ 2744.464730][T21438] netlink: 'syz.3.16850': attribute type 11 has an invalid length. [ 2744.474587][T21438] __nla_validate_parse: 2 callbacks suppressed [ 2744.474607][T21438] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16850'. [ 2744.583685][T21446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2745.374284][T21461] netlink: 'syz.3.16858': attribute type 3 has an invalid length. [ 2745.391356][T21461] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16858'. [ 2745.567153][T21470] netlink: 184 bytes leftover after parsing attributes in process `syz.4.16860'. [ 2747.069676][T21474] netlink: 'syz.4.16862': attribute type 10 has an invalid length. [ 2747.079558][T21474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16862'. [ 2747.091540][T21474] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 2748.494629][T21501] netlink: 'syz.0.16872': attribute type 10 has an invalid length. [ 2748.523660][T21501] bridge0: port 3(hsr0) entered disabled state [ 2748.530770][T21501] bridge0: port 2(bridge_slave_1) entered disabled state [ 2748.538909][T21501] bridge0: port 1(bridge_slave_0) entered disabled state [ 2748.637518][T21501] bridge0: port 3(hsr0) entered blocking state [ 2748.644700][T21501] bridge0: port 3(hsr0) entered forwarding state [ 2748.654748][T21501] bridge0: port 2(bridge_slave_1) entered blocking state [ 2748.662426][T21501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2748.671014][T21501] bridge0: port 1(bridge_slave_0) entered blocking state [ 2748.680200][T21501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2748.757998][T21510] netlink: 'syz.1.16876': attribute type 3 has an invalid length. [ 2748.775389][T21510] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16876'. [ 2748.872510][T21501] team0: Port device bridge0 added [ 2748.942297][T21508] netlink: 'syz.3.16873': attribute type 3 has an invalid length. [ 2748.960614][T21508] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16873'. [ 2749.063977][T21523] device syzkaller0 entered promiscuous mode [ 2751.556985][T21538] netlink: 'syz.3.16884': attribute type 10 has an invalid length. [ 2751.565013][T21538] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16884'. [ 2751.575398][T21546] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16886'. [ 2751.732094][T21548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16888'. [ 2752.047555][T21564] netlink: 'syz.1.16891': attribute type 3 has an invalid length. [ 2752.088110][T21564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16891'. [ 2752.306928][T21573] netlink: 'syz.2.16897': attribute type 10 has an invalid length. [ 2752.320448][T21573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16897'. [ 2752.680527][T21578] device syzkaller0 entered promiscuous mode [ 2752.688462][T21583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16902'. [ 2753.319283][T21620] netlink: 'syz.1.16912': attribute type 3 has an invalid length. [ 2753.336613][T21620] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16912'. [ 2755.460505][T21626] netlink: 'syz.0.16913': attribute type 10 has an invalid length. [ 2755.470302][T21626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16913'. [ 2755.776167][T21641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16918'. [ 2756.665903][T21662] netlink: 'syz.3.16925': attribute type 3 has an invalid length. [ 2756.698609][T21662] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16925'. [ 2756.835128][T21659] netlink: 'syz.2.16924': attribute type 10 has an invalid length. [ 2756.854747][T21664] netlink: 'syz.1.16923': attribute type 3 has an invalid length. [ 2756.909269][T21664] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16923'. [ 2756.983578][T21649] netlink: 'syz.0.16922': attribute type 3 has an invalid length. [ 2757.009049][T21649] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16922'. [ 2757.164789][T21659] team0: Port device wlan1 added [ 2757.992897][T21685] netlink: 'syz.1.16931': attribute type 29 has an invalid length. [ 2758.001723][T21685] netlink: 'syz.1.16931': attribute type 29 has an invalid length. [ 2758.040222][T21685] netlink: 'syz.1.16931': attribute type 10 has an invalid length. [ 2758.122705][T21685] team0: Device wg1 is of different type [ 2759.073790][T21706] netlink: 'syz.0.16938': attribute type 3 has an invalid length. [ 2759.107470][T21706] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16938'. [ 2761.019528][T21710] netlink: 'syz.3.16939': attribute type 21 has an invalid length. [ 2761.027736][T21710] netlink: 128 bytes leftover after parsing attributes in process `syz.3.16939'. [ 2761.038281][T21710] netlink: 'syz.3.16939': attribute type 4 has an invalid length. [ 2761.046256][T21710] netlink: 'syz.3.16939': attribute type 3 has an invalid length. [ 2761.057069][T21710] netlink: 3 bytes leftover after parsing attributes in process `syz.3.16939'. [ 2761.070456][T21718] netlink: 'syz.4.16940': attribute type 10 has an invalid length. [ 2761.136088][T21718] team0: Port device wlan1 added [ 2761.539855][T21730] netlink: 'syz.3.16941': attribute type 3 has an invalid length. [ 2761.587542][T21730] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16941'. [ 2762.216913][T21752] netlink: 'syz.0.16952': attribute type 3 has an invalid length. [ 2762.230131][T21752] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16952'. [ 2762.300610][T21759] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.16954'. [ 2763.105449][T21775] device syzkaller0 entered promiscuous mode [ 2763.538170][T21793] validate_nla: 1 callbacks suppressed [ 2763.538191][T21793] netlink: 'syz.1.16966': attribute type 3 has an invalid length. [ 2763.620254][T21793] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16966'. [ 2766.004903][T21809] netlink: 'syz.4.16971': attribute type 29 has an invalid length. [ 2766.016881][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16971'. [ 2766.040822][T21809] netlink: 'syz.4.16971': attribute type 29 has an invalid length. [ 2766.057550][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16971'. [ 2766.280457][T21819] netlink: 'syz.1.16972': attribute type 3 has an invalid length. [ 2766.320276][T21819] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16972'. [ 2766.704385][T21833] device veth1_macvtap left promiscuous mode [ 2766.880602][T21834] device veth1_macvtap entered promiscuous mode [ 2766.898953][T21834] device macsec0 entered promiscuous mode [ 2766.927449][T21839] netlink: 'syz.4.16980': attribute type 3 has an invalid length. [ 2766.956795][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2766.967792][T21839] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.16980'. [ 2767.100963][T21843] netlink: 172 bytes leftover after parsing attributes in process `syz.1.16982'. [ 2767.144639][T21843] netlink: 'syz.1.16982': attribute type 10 has an invalid length. [ 2769.924995][T21855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16986'. [ 2770.338986][T21879] device syzkaller0 entered promiscuous mode [ 2770.391323][T21887] netlink: 'syz.2.16994': attribute type 3 has an invalid length. [ 2770.462593][T21887] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16994'. [ 2770.678170][T21886] netlink: 'syz.0.16995': attribute type 3 has an invalid length. [ 2770.695806][T21886] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16995'. [ 2772.816557][T21895] netlink: 144 bytes leftover after parsing attributes in process `syz.4.16998'. [ 2772.827431][T21900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17000'. [ 2773.610658][T21940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17016'. [ 2773.631795][T21943] netlink: 'syz.4.17015': attribute type 3 has an invalid length. [ 2773.677859][T21943] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17015'. [ 2773.951587][T21950] device syzkaller0 entered promiscuous mode [ 2774.560497][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.566920][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2777.218409][T21958] netlink: 'syz.1.17021': attribute type 2 has an invalid length. [ 2777.226517][T21986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17032'. [ 2777.236948][T21993] netlink: 'syz.4.17034': attribute type 3 has an invalid length. [ 2777.255397][T21993] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.17034'. [ 2777.714403][T22010] netlink: 'syz.3.17040': attribute type 4 has an invalid length. [ 2777.757804][T22010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17040'. [ 2778.413940][T22029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17047'. [ 2778.523391][T22032] netlink: 'syz.0.17048': attribute type 3 has an invalid length. [ 2778.557585][T22032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17048'. [ 2778.850268][T22043] device syzkaller0 entered promiscuous mode [ 2779.589654][T22074] netlink: 'syz.1.17063': attribute type 3 has an invalid length. [ 2779.606160][T22074] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17063'. [ 2781.389051][T22069] netlink: 'syz.4.17059': attribute type 21 has an invalid length. [ 2781.397407][T22069] IPv6: NLM_F_CREATE should be specified when creating new route [ 2781.405214][T22069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2781.412517][T22069] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.419809][T22069] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.427029][T22069] IPv6: NLM_F_CREATE should be set when creating new route [ 2781.435351][T22063] netlink: 'syz.4.17059': attribute type 21 has an invalid length. [ 2781.443814][T22063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2781.665694][T22083] netlink: 'syz.3.17066': attribute type 10 has an invalid length. [ 2781.708924][T22086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17065'. [ 2782.296333][T22111] device syzkaller0 entered promiscuous mode [ 2782.879140][T22115] netlink: 'syz.3.17078': attribute type 3 has an invalid length. [ 2782.904969][T22115] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17078'. [ 2785.347229][T22135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17084'. [ 2785.391491][T22151] device sit0 left promiscuous mode [ 2787.044577][T22178] netlink: 'syz.4.17100': attribute type 1 has an invalid length. [ 2787.058628][T22178] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.17100'. [ 2787.292214][T22195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17106'. [ 2787.398969][T22192] netlink: 'syz.3.17104': attribute type 3 has an invalid length. [ 2787.408019][T22192] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17104'. [ 2787.543973][T22201] device syzkaller0 entered promiscuous mode [ 2787.823848][T22221] netlink: 'syz.1.17113': attribute type 2 has an invalid length. [ 2787.847488][T22221] netlink: 'syz.1.17113': attribute type 2 has an invalid length. [ 2787.867494][T22221] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.17113'. [ 2788.546134][T22239] netlink: 'syz.4.17122': attribute type 3 has an invalid length. [ 2788.575299][T22239] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17122'. [ 2790.522310][T22231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17120'. [ 2791.067338][T22262] netlink: 'syz.0.17129': attribute type 27 has an invalid length. [ 2791.075649][T22262] netlink: 164 bytes leftover after parsing attributes in process `syz.0.17129'. [ 2791.952015][T22279] netlink: 'syz.4.17137': attribute type 3 has an invalid length. [ 2791.983718][T22279] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17137'. [ 2793.919255][T22282] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2793.937358][T22282] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2793.947152][T22282] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2793.990841][T22283] device syzkaller0 entered promiscuous mode [ 2795.329721][T22332] netlink: 'syz.0.17152': attribute type 3 has an invalid length. [ 2795.347571][T22332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17152'. [ 2796.673655][T22290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17138'. [ 2796.683293][T22297] netlink: 168 bytes leftover after parsing attributes in process `syz.1.17139'. [ 2796.704566][T22304] netlink: 'syz.1.17139': attribute type 39 has an invalid length. [ 2796.806734][T22304] device hsr_slave_1 left promiscuous mode [ 2797.428897][T22359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17165'. [ 2797.546160][T22361] device syzkaller0 entered promiscuous mode [ 2797.701313][T22368] netlink: 'syz.0.17168': attribute type 3 has an invalid length. [ 2797.718526][T22368] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17168'. [ 2801.300087][T22383] netlink: 'syz.4.17171': attribute type 1 has an invalid length. [ 2801.423333][T22405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17181'. [ 2802.044123][T22441] netlink: 'syz.0.17193': attribute type 3 has an invalid length. [ 2802.137978][T22441] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17193'. [ 2802.240268][T22440] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17195'. [ 2802.435013][T22455] netlink: 'syz.4.17199': attribute type 3 has an invalid length. [ 2802.445805][T22456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17198'. [ 2802.457644][T22455] netlink: 'syz.4.17199': attribute type 181 has an invalid length. [ 2802.584183][T22453] device syzkaller0 entered promiscuous mode [ 2803.651467][T22478] netlink: 'syz.4.17208': attribute type 3 has an invalid length. [ 2803.660681][T22478] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17208'. [ 2805.807347][T22491] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.17212'. [ 2805.925901][T22495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17213'. [ 2806.581058][T22531] netlink: 'syz.4.17225': attribute type 3 has an invalid length. [ 2806.604864][T22531] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17225'. [ 2806.787030][T22535] device syzkaller0 entered promiscuous mode [ 2808.155750][T22562] netlink: 'syz.0.17239': attribute type 3 has an invalid length. [ 2808.178089][T22562] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17239'. [ 2810.794335][T22542] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17229'. [ 2810.806922][T22576] device veth1_macvtap left promiscuous mode [ 2810.823697][T22581] device veth1_macvtap entered promiscuous mode [ 2810.835114][T22581] device macsec0 entered promiscuous mode [ 2810.842571][T22581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2810.900442][ T9979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2811.093962][T22599] device syzkaller0 entered promiscuous mode [ 2811.255815][T22606] netlink: 'syz.2.17250': attribute type 3 has an invalid length. [ 2811.316112][T22606] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17250'. [ 2811.587405][T22618] netlink: 'syz.1.17258': attribute type 10 has an invalid length. [ 2811.604912][T22618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17258'. [ 2811.738976][T22624] netlink: 'syz.2.17261': attribute type 3 has an invalid length. [ 2811.747229][T22624] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17261'. [ 2811.875305][T22628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17272'. [ 2811.921051][T22627] device veth1_macvtap left promiscuous mode [ 2812.053160][T22636] device veth1_macvtap entered promiscuous mode [ 2812.097441][T22636] device macsec0 entered promiscuous mode [ 2812.260754][T22644] netlink: 'syz.2.17267': attribute type 2 has an invalid length. [ 2812.690535][T22660] netlink: 'syz.3.17270': attribute type 3 has an invalid length. [ 2812.757388][T22660] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17270'. [ 2812.811178][T22659] device syzkaller0 entered promiscuous mode [ 2812.825468][T22663] netlink: 'syz.0.17274': attribute type 3 has an invalid length. [ 2812.841336][T22663] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17274'. [ 2815.467806][T22707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17287'. [ 2815.670456][T22713] netlink: 'syz.3.17288': attribute type 3 has an invalid length. [ 2815.697678][T22713] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17288'. [ 2816.834206][T22732] netlink: 'syz.0.17296': attribute type 3 has an invalid length. [ 2816.873854][T22732] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17296'. [ 2817.188317][T22742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17299'. [ 2817.211231][T22742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17299'. [ 2817.223935][T22742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17299'. [ 2817.265837][T22742] netlink: 'syz.2.17299': attribute type 21 has an invalid length. [ 2817.288886][T22742] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17299'. [ 2817.315889][T22742] netlink: 'syz.2.17299': attribute type 4 has an invalid length. [ 2817.328675][T22742] netlink: 'syz.2.17299': attribute type 5 has an invalid length. [ 2817.371270][T22742] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17299'. [ 2817.696147][T22761] device syzkaller0 entered promiscuous mode [ 2817.795722][T22767] netlink: 'syz.3.17305': attribute type 3 has an invalid length. [ 2817.856591][T22767] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17305'. [ 2818.235119][T22777] netlink: 'syz.2.17312': attribute type 3 has an invalid length. [ 2818.254982][T22777] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17312'. [ 2820.292469][T22774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17310'. [ 2820.463520][T22787] netlink: 'syz.4.17313': attribute type 3 has an invalid length. [ 2820.473473][T22787] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.17313'. [ 2820.527853][T22788] device veth1_macvtap left promiscuous mode [ 2820.630778][T22787] device veth1_macvtap entered promiscuous mode [ 2820.652416][T22787] device macsec0 entered promiscuous mode [ 2821.434118][T22825] netlink: 'syz.2.17327': attribute type 3 has an invalid length. [ 2821.442457][T22823] bridge0: port 1(bridge_slave_0) entered disabled state [ 2821.485300][T22818] netlink: 'syz.1.17326': attribute type 3 has an invalid length. [ 2821.585443][T22823] device bridge_slave_0 left promiscuous mode [ 2821.614392][T22823] bridge0: port 1(bridge_slave_0) entered disabled state [ 2822.015048][T22841] __nla_validate_parse: 3 callbacks suppressed [ 2822.015089][T22841] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17333'. [ 2822.089606][T22846] netlink: 'syz.2.17334': attribute type 13 has an invalid length. [ 2822.116034][T22846] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.17334'. [ 2822.231954][T22847] device syzkaller0 entered promiscuous mode [ 2822.704533][T22873] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.17345'. [ 2822.771446][T22871] netlink: 'syz.3.17344': attribute type 3 has an invalid length. [ 2822.787418][T22871] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17344'. [ 2824.578532][T22873] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2824.599530][T22873] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2824.619542][T22873] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2824.841243][T22885] netlink: 'syz.1.17349': attribute type 29 has an invalid length. [ 2824.949352][T22885] netlink: 'syz.1.17349': attribute type 29 has an invalid length. [ 2824.987926][T22887] netlink: 'syz.1.17349': attribute type 29 has an invalid length. [ 2825.004235][T22879] netlink: 'syz.4.17346': attribute type 3 has an invalid length. [ 2825.008689][T22889] netlink: 'syz.1.17349': attribute type 10 has an invalid length. [ 2825.045830][T22889] team0: Device vxcan1 is of different type [ 2825.053093][T22879] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17346'. [ 2825.493474][T22915] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17358'. [ 2825.502818][T22914] netlink: 'syz.0.17357': attribute type 3 has an invalid length. [ 2825.502846][T22914] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17357'. [ 2828.527129][T22928] netlink: 'syz.4.17366': attribute type 10 has an invalid length. [ 2828.558201][T22928] netlink: 156 bytes leftover after parsing attributes in process `syz.4.17366'. [ 2828.833982][T22941] device syzkaller0 entered promiscuous mode [ 2829.102380][T22940] netlink: 'syz.2.17368': attribute type 3 has an invalid length. [ 2829.111732][T22940] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17368'. [ 2829.183418][T22958] netlink: 'syz.4.17373': attribute type 3 has an invalid length. [ 2829.191961][T22958] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17373'. [ 2829.275473][T22961] netlink: 'syz.0.17374': attribute type 2 has an invalid length. [ 2829.288710][T22961] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17374'. [ 2831.391108][T22974] netlink: 'syz.0.17378': attribute type 1 has an invalid length. [ 2831.732374][T22984] netlink: 'syz.3.17381': attribute type 7 has an invalid length. [ 2831.779122][T22984] netlink: 'syz.3.17381': attribute type 7 has an invalid length. [ 2831.801409][T22987] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17383'. [ 2831.870246][T22988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2831.877999][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 2831.886202][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 2831.894033][T22988] IPv6: NLM_F_CREATE should be set when creating new route [ 2831.903772][T22984] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.17381'. [ 2831.971168][T22986] delete_channel: no stack [ 2832.190303][T23001] netlink: 'syz.0.17390': attribute type 3 has an invalid length. [ 2832.211986][T23001] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17390'. [ 2832.566411][T23011] netlink: 'syz.3.17394': attribute type 3 has an invalid length. [ 2832.581243][T23011] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17394'. [ 2832.595104][T23017] tap0: tun_chr_ioctl cmd 1074025677 [ 2832.627621][T23017] tap0: linktype set to 769 [ 2832.993740][T23031] netlink: 'syz.1.17402': attribute type 2 has an invalid length. [ 2833.031593][T23026] device syzkaller0 entered promiscuous mode [ 2833.132165][T23031] device 0 entered promiscuous mode [ 2833.296417][T23038] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17403'. [ 2834.185325][T23061] validate_nla: 1 callbacks suppressed [ 2834.185345][T23061] netlink: 'syz.2.17410': attribute type 3 has an invalid length. [ 2834.228468][T23061] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17410'. [ 2836.005033][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.011734][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.061689][T23046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17407'. [ 2836.718343][T23086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17420'. [ 2837.044031][T23091] netlink: 'syz.2.17422': attribute type 3 has an invalid length. [ 2837.064390][T23091] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17422'. [ 2837.650468][T23114] netlink: 'syz.0.17427': attribute type 3 has an invalid length. [ 2837.686805][T23114] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17427'. [ 2837.717481][T23112] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17430'. [ 2838.033685][T23126] device syzkaller0 entered promiscuous mode [ 2838.383697][T23138] netlink: 'syz.3.17438': attribute type 3 has an invalid length. [ 2838.395054][T23138] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17438'. [ 2839.803146][T23165] netlink: 'syz.1.17446': attribute type 3 has an invalid length. [ 2839.811258][T23165] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17446'. [ 2841.192544][T23185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17453'. [ 2841.518801][T23204] netlink: 'syz.0.17460': attribute type 3 has an invalid length. [ 2841.565999][T23204] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17460'. [ 2841.652933][T23199] netlink: 'syz.1.17459': attribute type 3 has an invalid length. [ 2841.664809][T23199] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17459'. [ 2841.899580][T23219] netlink: 'syz.0.17464': attribute type 3 has an invalid length. [ 2841.935671][T23219] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17464'. [ 2842.384092][T23226] device syzkaller0 entered promiscuous mode [ 2845.385324][T23249] netlink: 'syz.4.17477': attribute type 3 has an invalid length. [ 2845.396734][T23249] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17477'. [ 2845.501196][T23253] netlink: 'syz.1.17474': attribute type 3 has an invalid length. [ 2845.518669][T23253] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17474'. [ 2847.196058][T23239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17473'. [ 2847.206112][T23246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17476'. [ 2848.606487][T23297] netlink: 'syz.3.17493': attribute type 3 has an invalid length. [ 2848.633745][T23297] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17493'. [ 2848.684941][T23303] netlink: 'syz.4.17492': attribute type 3 has an invalid length. [ 2848.703296][T23303] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17492'. [ 2848.994318][T23312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17498'. [ 2849.117221][T23319] netlink: 184 bytes leftover after parsing attributes in process `syz.1.17502'. [ 2849.224337][T23314] device syzkaller0 entered promiscuous mode [ 2849.732593][T23337] netlink: 'syz.2.17508': attribute type 3 has an invalid length. [ 2849.744317][T23337] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17508'. [ 2850.125869][T23347] netlink: 'syz.3.17511': attribute type 3 has an invalid length. [ 2850.134928][T23347] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17511'. [ 2852.063954][T23362] FAULT_INJECTION: forcing a failure. [ 2852.063954][T23362] name failslab, interval 1, probability 0, space 0, times 0 [ 2852.110087][T23365] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.17515'. [ 2852.124519][T23362] CPU: 1 PID: 23362 Comm: syz.2.17514 Not tainted syzkaller #0 [ 2852.132233][T23362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2852.142360][T23362] Call Trace: [ 2852.145679][T23362] [ 2852.148655][T23362] dump_stack_lvl+0x188/0x24e [ 2852.153398][T23362] ? show_regs_print_info+0x12/0x12 [ 2852.158654][T23362] ? load_image+0x410/0x410 [ 2852.163209][T23362] ? __might_sleep+0xd0/0xd0 [ 2852.167843][T23362] ? __lock_acquire+0x7c40/0x7c40 [ 2852.172926][T23362] ? aa_file_perm+0x3ea/0xf00 [ 2852.177671][T23362] should_fail_ex+0x390/0x4c0 [ 2852.182409][T23362] should_failslab+0x5/0x20 [ 2852.186968][T23362] slab_pre_alloc_hook+0x59/0x300 [ 2852.192057][T23362] ? kernfs_fop_write_iter+0x154/0x520 [ 2852.197572][T23362] __kmem_cache_alloc_node+0x4f/0x270 [ 2852.203016][T23362] ? kernfs_fop_write_iter+0x154/0x520 [ 2852.208520][T23362] __kmalloc+0xa3/0x240 [ 2852.212732][T23362] kernfs_fop_write_iter+0x154/0x520 [ 2852.218073][T23362] vfs_write+0x482/0x9a0 [ 2852.222384][T23362] ? file_end_write+0x250/0x250 [ 2852.227298][T23362] ? __fget_files+0x3fc/0x460 [ 2852.232039][T23362] ? __fdget_pos+0x2ae/0x360 [ 2852.236680][T23362] ? ksys_write+0x70/0x260 [ 2852.241163][T23362] ksys_write+0x14d/0x260 [ 2852.245555][T23362] ? __ia32_sys_read+0x80/0x80 [ 2852.250380][T23362] ? lockdep_hardirqs_on+0x94/0x140 [ 2852.255632][T23362] do_syscall_64+0x4c/0xa0 [ 2852.260108][T23362] ? clear_bhb_loop+0x60/0xb0 [ 2852.264834][T23362] ? clear_bhb_loop+0x60/0xb0 [ 2852.269578][T23362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2852.275530][T23362] RIP: 0033:0x7ff88259e0d9 [ 2852.279994][T23362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2852.299657][T23362] RSP: 002b:00007ff8834dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2852.308132][T23362] RAX: ffffffffffffffda RBX: 00007ff882826090 RCX: 00007ff88259e0d9 [ 2852.316164][T23362] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000006 [ 2852.324212][T23362] RBP: 00007ff8834dc090 R08: 0000000000000000 R09: 0000000000000000 [ 2852.332237][T23362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2852.340266][T23362] R13: 00007ff882826128 R14: 00007ff882826090 R15: 00007ffd46b8b9b8 [ 2852.348318][T23362] [ 2852.998670][T23387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17524'. [ 2853.273006][T23394] netlink: 'syz.1.17527': attribute type 3 has an invalid length. [ 2853.393097][T23396] netlink: 'syz.0.17525': attribute type 3 has an invalid length. [ 2853.551700][T23394] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17527'. [ 2853.597364][T23396] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.17525'. [ 2853.675087][T23389] can: request_module (can-proto-0) failed. [ 2853.838665][T23397] netlink: 'syz.3.17526': attribute type 3 has an invalid length. [ 2853.862169][T23397] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17526'. [ 2854.913703][T23423] netlink: 'syz.0.17536': attribute type 3 has an invalid length. [ 2855.256297][T23427] device syzkaller0 entered promiscuous mode [ 2855.531162][T23433] netlink: 'syz.4.17541': attribute type 3 has an invalid length. [ 2855.563378][T23433] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.17541'. [ 2855.616202][T23445] netlink: 'syz.3.17542': attribute type 3 has an invalid length. [ 2855.624553][T23445] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17542'. [ 2857.030937][T23455] FAULT_INJECTION: forcing a failure. [ 2857.030937][T23455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2857.044661][T23455] CPU: 1 PID: 23455 Comm: syz.0.17546 Not tainted syzkaller #0 [ 2857.052262][T23455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2857.062345][T23455] Call Trace: [ 2857.065676][T23455] [ 2857.068630][T23455] dump_stack_lvl+0x188/0x24e [ 2857.073375][T23455] ? show_regs_print_info+0x12/0x12 [ 2857.078612][T23455] ? load_image+0x410/0x410 [ 2857.083134][T23455] ? __lock_acquire+0x7c40/0x7c40 [ 2857.088199][T23455] should_fail_ex+0x390/0x4c0 [ 2857.092925][T23455] _copy_from_iter+0x1c0/0x1130 [ 2857.097806][T23455] ? copyout_mc+0x110/0x110 [ 2857.102342][T23455] ? __virt_addr_valid+0x188/0x540 [ 2857.107492][T23455] ? __virt_addr_valid+0x188/0x540 [ 2857.112647][T23455] ? __virt_addr_valid+0x467/0x540 [ 2857.117796][T23455] ? __phys_addr_symbol+0x2b/0x70 [ 2857.122872][T23455] ? __check_object_size+0x4f6/0xa70 [ 2857.128195][T23455] kernfs_fop_write_iter+0x19a/0x520 [ 2857.133510][T23455] vfs_write+0x482/0x9a0 [ 2857.137795][T23455] ? file_end_write+0x250/0x250 [ 2857.142684][T23455] ? __fget_files+0x3fc/0x460 [ 2857.147420][T23455] ? __fdget_pos+0x2ae/0x360 [ 2857.152043][T23455] ? ksys_write+0x70/0x260 [ 2857.156511][T23455] ksys_write+0x14d/0x260 [ 2857.160885][T23455] ? __ia32_sys_read+0x80/0x80 [ 2857.165683][T23455] ? lockdep_hardirqs_on+0x94/0x140 [ 2857.170905][T23455] do_syscall_64+0x4c/0xa0 [ 2857.175356][T23455] ? clear_bhb_loop+0x60/0xb0 [ 2857.180081][T23455] ? clear_bhb_loop+0x60/0xb0 [ 2857.184808][T23455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2857.190843][T23455] RIP: 0033:0x7f7d2979e0d9 [ 2857.195297][T23455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2857.214943][T23455] RSP: 002b:00007f7d2a6b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2857.223385][T23455] RAX: ffffffffffffffda RBX: 00007f7d29a26090 RCX: 00007f7d2979e0d9 [ 2857.231377][T23455] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000006 [ 2857.239366][T23455] RBP: 00007f7d2a6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 2857.247359][T23455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2857.255388][T23455] R13: 00007f7d29a26128 R14: 00007f7d29a26090 R15: 00007ffd66d99bd8 [ 2857.263398][T23455] [ 2858.119162][T23458] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.17547'. [ 2858.151655][T23458] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.17547'. [ 2858.519928][T23474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17552'. [ 2858.649736][ C0] [ 2858.649746][ C0] ================================ [ 2858.649752][ C0] WARNING: inconsistent lock state [ 2858.649774][ C0] syzkaller #0 Not tainted [ 2858.649784][ C0] -------------------------------- [ 2858.649790][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 2858.649799][ C0] syz.4.17553/23480 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2858.649819][ C0] ffff888059294a18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 2858.649875][ C0] {INITIAL USE} state was registered at: [ 2858.649882][ C0] lock_acquire+0x1bb/0x4a0 [ 2858.649910][ C0] _raw_spin_lock+0x2a/0x40 [ 2858.649931][ C0] htab_lock_bucket+0x179/0x2f0 [ 2858.649952][ C0] htab_map_update_elem+0x21f/0xb20 [ 2858.649975][ C0] bpf_map_update_value+0x59d/0x670 [ 2858.649998][ C0] generic_map_update_batch+0x52e/0x7f0 [ 2858.650021][ C0] bpf_map_do_batch+0x475/0x5f0 [ 2858.650046][ C0] __sys_bpf+0x6f7/0x780 [ 2858.650070][ C0] __x64_sys_bpf+0x78/0x90 [ 2858.650093][ C0] do_syscall_64+0x4c/0xa0 [ 2858.650118][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2858.650156][ C0] irq event stamp: 1316 [ 2858.650164][ C0] hardirqs last enabled at (1315): [] exc_debug+0xf0/0x130 [ 2858.650197][ C0] hardirqs last disabled at (1316): [] exc_debug+0x6e/0x130 [ 2858.650229][ C0] softirqs last enabled at (1276): [] bpf_prog_load+0x111d/0x1530 [ 2858.650261][ C0] softirqs last disabled at (1274): [] bpf_ksym_add+0x28/0x330 [ 2858.650296][ C0] [ 2858.650296][ C0] other info that might help us debug this: [ 2858.650302][ C0] Possible unsafe locking scenario: [ 2858.650302][ C0] [ 2858.650307][ C0] CPU0 [ 2858.650311][ C0] ---- [ 2858.650314][ C0] lock(&htab->lockdep_key); [ 2858.650328][ C0] [ 2858.650332][ C0] lock(&htab->lockdep_key); [ 2858.650344][ C0] [ 2858.650344][ C0] *** DEADLOCK *** [ 2858.650344][ C0] [ 2858.650349][ C0] no locks held by syz.4.17553/23480. [ 2858.650357][ C0] [ 2858.650357][ C0] stack backtrace: [ 2858.650364][ C0] CPU: 0 PID: 23480 Comm: syz.4.17553 Not tainted syzkaller #0 [ 2858.650383][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2858.650394][ C0] Call Trace: [ 2858.650401][ C0] <#DB> [ 2858.650481][ C0] dump_stack_lvl+0x188/0x24e [ 2858.650512][ C0] ? show_regs_print_info+0x12/0x12 [ 2858.650545][ C0] ? print_usage_bug+0x42a/0x690 [ 2858.650572][ C0] ? verify_lock_unused+0x15/0x140 [ 2858.650602][ C0] lock_acquire+0x2df/0x4a0 [ 2858.650631][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 2858.650655][ C0] ? read_lock_is_recursive+0x10/0x10 [ 2858.650683][ C0] ? look_up_lock_class+0x75/0x140 [ 2858.650706][ C0] ? rcu_is_watching+0x11/0xa0 [ 2858.650738][ C0] _raw_spin_lock+0x2a/0x40 [ 2858.650758][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 2858.650780][ C0] htab_lock_bucket+0x179/0x2f0 [ 2858.650805][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 2858.650829][ C0] ? look_up_lock_class+0x75/0x140 [ 2858.650850][ C0] ? verify_lock_unused+0x15/0x140 [ 2858.650878][ C0] ? htab_map_hash+0x301/0x6d0 [ 2858.650902][ C0] htab_map_delete_elem+0x197/0x5c0 [ 2858.650927][ C0] ? htab_map_update_elem+0xb20/0xb20 [ 2858.650950][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 2858.650979][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 2858.650999][ C0] bpf_overflow_handler+0x50b/0x790 [ 2858.651023][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 2858.651044][ C0] ? perf_swevent_overflow+0x230/0x230 [ 2858.651064][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 2858.651098][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 2858.651129][ C0] __perf_event_overflow+0x457/0x630 [ 2858.651170][ C0] perf_swevent_overflow+0x19b/0x230 [ 2858.651195][ C0] perf_swevent_event+0x458/0x570 [ 2858.651226][ C0] ? perf_tp_event+0xc10/0xc10 [ 2858.651256][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2858.651290][ C0] perf_bp_event+0x311/0x3f0 [ 2858.651323][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 2858.651350][ C0] ? perf_trace_lock+0xf8/0x390 [ 2858.651387][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2858.651413][ C0] ? read_lock_is_recursive+0x10/0x10 [ 2858.651445][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 2858.651477][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 2858.651500][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2858.651525][ C0] notify_die+0x141/0x1a0 [ 2858.651549][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 2858.651579][ C0] notify_debug+0x20/0x30 [ 2858.651603][ C0] exc_debug+0xd9/0x130 [ 2858.651632][ C0] asm_exc_debug+0x1a/0x40 [ 2858.651657][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 2858.651686][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 2858.651703][ C0] RSP: 0018:ffffc90004e17d48 EFLAGS: 00050202 [ 2858.651720][ C0] RAX: ffffffff8415c301 RBX: 0000000000000050 RCX: 000000000000000e [ 2858.651734][ C0] RDX: 0000000000000050 RSI: 0000200000000302 RDI: ffffc90004e17e02 [ 2858.651747][ C0] RBP: 0000000000000000 R08: ffffc90004e17e0f R09: 1ffff920009c2fc1 [ 2858.651761][ C0] R10: dffffc0000000000 R11: fffff520009c2fc2 R12: 00007fffffffefb0 [ 2858.651774][ C0] R13: 0000000000000050 R14: ffffc90004e17dc0 R15: 00002000000002c0 [ 2858.651793][ C0] ? _copy_from_user+0x21/0x170 [ 2858.651819][ C0] [ 2858.651825][ C0] [ 2858.651831][ C0] _copy_from_user+0xf4/0x170 [ 2858.651853][ C0] __sys_bpf+0x2ea/0x780 [ 2858.651882][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 2858.651919][ C0] ? lock_chain_count+0x20/0x20 [ 2858.651952][ C0] __x64_sys_bpf+0x78/0x90 [ 2858.651978][ C0] do_syscall_64+0x4c/0xa0 [ 2858.652004][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2858.652029][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2858.652056][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2858.652081][ C0] RIP: 0033:0x7f44bd99e0d9 [ 2858.652097][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2858.652114][ C0] RSP: 002b:00007f44be78c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2858.652133][ C0] RAX: ffffffffffffffda RBX: 00007f44bdc26090 RCX: 00007f44bd99e0d9 [ 2858.652157][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 2858.652171][ C0] RBP: 00007f44bda35024 R08: 0000000000000000 R09: 0000000000000000 [ 2858.652183][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2858.652195][ C0] R13: 00007f44bdc26128 R14: 00007f44bdc26090 R15: 00007fffb071e9b8 [ 2858.652219][ C0] [ 2859.423961][T23483] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17553'. [ 2859.465791][T23490] netlink: 'syz.3.17557': attribute type 3 has an invalid length. [ 2859.484341][T23490] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17557'.