last executing test programs: 4.760698921s ago: executing program 2 (id=13557): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd63, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1622}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffd3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.845231532s ago: executing program 2 (id=13565): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x4048800) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0xfffffffc}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x93, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4800, 0x0, 0x0, 0x5, 0x200000, 0x4, 0x0, 0x0, 0x80009}, 0x0, 0x8, r0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913aa4"], 0x82d7) 2.791184202s ago: executing program 2 (id=13577): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x21, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 2.409879193s ago: executing program 1 (id=13585): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 2.386341925s ago: executing program 3 (id=13586): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x38) socketpair(0x22, 0x800, 0x7fff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000140)='cpu.max.burst\x00', 0x2, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006300000000000000bf91000000000000b7020000000000008500000085000000b70000000000000094ffffec00000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[], 0x50) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-'], 0x5) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.019821276s ago: executing program 3 (id=13589): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.912250721s ago: executing program 1 (id=13590): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 1.694182844s ago: executing program 2 (id=13593): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000072dfff000000000020000000000000008400000008000000eeb4fe8ba15e3999ef000000"], 0x38}, 0x41) 1.648334216s ago: executing program 3 (id=13594): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x21, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x31}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 1.607655229s ago: executing program 0 (id=13595): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000440)=0xffffffff00000001, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./cgroup/../file0\x00', r3}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.525967853s ago: executing program 1 (id=13596): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffea6) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x6000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000180)=r2, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000081) 1.525612703s ago: executing program 2 (id=13597): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 7'], 0xa) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0xd, 0x8, 0x5, 0x8, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6fb}, @func={0x85, 0x0, 0x1, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @exit, @alu={0x3, 0x0, 0x2, 0x0, 0xb, 0xffffffffffffffc4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @tail_call, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x62a2}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2160) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, 0x0, 0x4000080) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.4028758s ago: executing program 4 (id=13598): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe0800000000000000000000850000002c00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x10000) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x55) 1.335241144s ago: executing program 1 (id=13599): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r1) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}, 0x40010120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1.068078129s ago: executing program 4 (id=13600): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 995.304003ms ago: executing program 0 (id=13601): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8a, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1d}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff000000000300000000000000000000000300000001000000000000000000000200000000000000000000001002"], 0x0, 0x56}, 0x20) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100004b8d195e869795c08a2243f8ffffffb702000008000000b70300000000000085005dcc1f485caec57b2b33b00367095b270000b0000478a02c994d72eb07229500fc6d50e15abfa04c0000000000001481618329b29c432be0d2116032527c25f923a7287c32a481c960a7af0d73c0fb33598e19400309e363d4f809bc220656046739a8be5509b6027f8425516d84dc95af955066c8082de9d5716fb056291bb51982668e16aa97969e01c4c3c0a6011d31b3e177bcdeedf2f313207c594b2531b3d02cdb402c9456f5b7941dbab754"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', r0}, 0x94) sendmsg$kcm(r2, &(0x7f0000001200)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0xffff2950, @dev={0xfe, 0x80, '\x00', 0x35}, 0xf47}, 0x80, 0x0, 0x0, &(0x7f0000000f80)=[{0xf0, 0x3a, 0x10000, "f9bba955ac868539eaa213634ac6d58c12e75d7dc9b352137786a8e58b55b8900948b0c04e4ff13309ec07fa479847720ce44af4e0e4d2687538a4a3c47012bd2ce9f85c30dfbcb66f6867d2f39f79202281bf9b494a73c15a4e7827d8cf0f64071731f33f7b02e7c59461a3bb7687b7ae01ec99a4ae7931ecab1d9e41366af9ec087169c25312bc0ec8c42e1946d5a879942ff40d24ed1847793af23d90a68c56f84e842f3a26fb06612aca20def7830ec2f318e3f456dc2c1fc3e0b40f6565a6e59846438f30694bf6b00e3158d147168f37d0dc8bb8bf9791d1c092aa7734"}, {0x60, 0x1, 0xfffffa13, "baa1002ce05c1452ee25bbcb1f7e41fbcc30c698f73cdfd39a8a6b9a0fd8d4a7bdcadb8c112c59bd85b41cf54017f34d1114e383c50390239a1b7d2c1a4dee9dbe85213c72186fe5bea10d5a"}, {0x30, 0x88, 0x9b, "443fe45b631aee674de35d44115e8d34af34824d649f52c98c0c309a"}, {0x58, 0x112, 0x800, "b91303a2c03e7168bd3bde643d0d3f9078ee82657720e7f2fe0562944d846a0d5e3ab51b956e242e20735bb53a0575241b875bb3db097a6854e248f53f3a5f9b506d69"}, {0x28, 0x116, 0x9, "0e305a2b162ae82763c6e2c192cc8cb3b19fe755"}, {0x30, 0x113, 0xddd, "03319915309ab62dd67a28bab508a622f946cd4f4e99f89703"}, {0x48, 0x84, 0x7fffffff, "803d50ad0859ed3793871fbae6c8bc4d3937477916ddb1c58ec09d2f4456dd62f98b2b1b76e6b278fb0a0ec7b51fad14527e06"}], 0x278}, 0x8041) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) 933.939447ms ago: executing program 1 (id=13602): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x4048800) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0xfffffffc}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x93, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4800, 0x0, 0x0, 0x5, 0x200000, 0x4, 0x0, 0x0, 0x80009}, 0x0, 0x8, r0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913aa4"], 0x82d7) 877.26321ms ago: executing program 2 (id=13603): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x21, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 744.414057ms ago: executing program 3 (id=13604): r0 = getpid() r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x39, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) 702.77602ms ago: executing program 0 (id=13605): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) 686.950891ms ago: executing program 4 (id=13606): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f088a8", 0x0, 0x90d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 588.452866ms ago: executing program 3 (id=13607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000110000001815000000000000", @ANYBLOB], 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) close(r0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a0000000400"], 0x50) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000072dfff000000000020000000000000008400000008000000eeb4fe8ba15e3999ef000000"], 0x38}, 0x41) 587.515216ms ago: executing program 0 (id=13608): r0 = perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x8, 0x8, 0x5, 0x0, 0x1, 0x6048, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x800, 0x3c, 0x1, 0x8, 0x100, 0x4, 0x400, 0x0, 0x1ff, 0x0, 0xf}, 0x0, 0x10, r0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x80000001, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8008) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80000) 387.537108ms ago: executing program 0 (id=13609): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 377.946658ms ago: executing program 3 (id=13610): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}, 0x40010120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x3e8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 337.21444ms ago: executing program 4 (id=13611): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000440)=0xffffffff00000001, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./cgroup/../file0\x00', r3}, 0x18) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x30400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x44, 0x3, 0x1, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 178.689599ms ago: executing program 4 (id=13612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x22) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 3.842509ms ago: executing program 1 (id=13613): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100208, 0xca, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fe0800000000000000000000850000002c00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x80}, 0x10000) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x55) 2.287729ms ago: executing program 0 (id=13623): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000000", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 0s ago: executing program 4 (id=13624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x4048800) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty, 0xfffffffc}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x93, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4800, 0x0, 0x0, 0x5, 0x200000, 0x4, 0x0, 0x0, 0x80009}, 0x0, 0x8, r0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a00913aa4"], 0x82d7) kernel console output (not intermixed with test programs): gth. [ 1490.652899][T27183] netlink: 'syz.0.9398': attribute type 29 has an invalid length. [ 1490.685571][T27183] netlink: 'syz.0.9398': attribute type 29 has an invalid length. [ 1491.825673][T27220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9400'. [ 1491.912464][T24495] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1491.935260][T27227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1491.978693][T27227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1491.996959][T27227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1492.032902][T27229] netlink: 'syz.2.9405': attribute type 29 has an invalid length. [ 1492.058238][T27227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1492.066626][T27229] netlink: 'syz.2.9405': attribute type 29 has an invalid length. [ 1492.078655][T27227] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1492.104137][T27229] netlink: 'syz.2.9405': attribute type 29 has an invalid length. [ 1492.134264][T27226] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1492.163190][T27229] netlink: 'syz.2.9405': attribute type 29 has an invalid length. [ 1492.175658][T27226] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1492.188460][T27226] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1493.495268][T27258] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9415'. [ 1494.933938][T27283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1496.239315][T27300] tun0: tun_chr_ioctl cmd 1074025694 [ 1496.644413][T27311] validate_nla: 8 callbacks suppressed [ 1496.644457][T27311] netlink: 'syz.3.9435': attribute type 21 has an invalid length. [ 1496.678902][T27311] netlink: 'syz.3.9435': attribute type 1 has an invalid length. [ 1496.699154][T27312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9447'. [ 1497.121972][T27328] netlink: 'syz.4.9444': attribute type 29 has an invalid length. [ 1497.139130][T27328] netlink: 'syz.4.9444': attribute type 29 has an invalid length. [ 1497.224255][T27328] netlink: 'syz.4.9444': attribute type 29 has an invalid length. [ 1497.241830][T27328] netlink: 'syz.4.9444': attribute type 29 has an invalid length. [ 1497.263434][T27328] netlink: 'syz.4.9444': attribute type 29 has an invalid length. [ 1497.395855][T27331] netlink: 'syz.3.9457': attribute type 29 has an invalid length. [ 1497.443637][T27331] netlink: 'syz.3.9457': attribute type 29 has an invalid length. [ 1497.476604][T27331] netlink: 'syz.3.9457': attribute type 29 has an invalid length. [ 1498.071914][T27341] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1498.617115][T27351] tun0: tun_chr_ioctl cmd 1074025694 [ 1502.133430][T24497] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1502.268679][T27379] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1503.196820][T27395] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.9467'. [ 1504.532778][T27414] validate_nla: 5 callbacks suppressed [ 1504.532811][T27414] netlink: 'syz.0.9472': attribute type 21 has an invalid length. [ 1504.569191][T27414] netlink: 'syz.0.9472': attribute type 1 has an invalid length. [ 1505.001115][T27424] netlink: 'syz.0.9481': attribute type 29 has an invalid length. [ 1505.045208][T27424] netlink: 'syz.0.9481': attribute type 29 has an invalid length. [ 1505.199773][T27424] netlink: 'syz.0.9481': attribute type 29 has an invalid length. [ 1505.284503][T27427] netlink: 'syz.0.9481': attribute type 29 has an invalid length. [ 1505.379261][T27428] netlink: 'syz.0.9481': attribute type 29 has an invalid length. [ 1506.809481][T27454] netlink: 'syz.3.9492': attribute type 21 has an invalid length. [ 1506.818092][T27454] netlink: 'syz.3.9492': attribute type 1 has an invalid length. [ 1507.376981][T27464] netlink: 'syz.0.9497': attribute type 29 has an invalid length. [ 1507.623185][T27476] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.9502'. [ 1508.260134][T27504] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1508.285135][T27504] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1508.293180][T27504] CPU: 1 PID: 27504 Comm: syz.3.9514 Not tainted syzkaller #0 [ 1508.300703][T27504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1508.310816][T27504] Call Trace: [ 1508.314151][T27504] [ 1508.317140][T27504] dump_stack_lvl+0x188/0x24e [ 1508.321904][T27504] ? show_regs_print_info+0x12/0x12 [ 1508.327173][T27504] ? load_image+0x400/0x400 [ 1508.331768][T27504] sysfs_warn_dup+0x8a/0xa0 [ 1508.336306][T27504] sysfs_do_create_link_sd+0xc0/0x110 [ 1508.341718][T27504] device_add+0x7ed/0xfb0 [ 1508.346116][T27504] wiphy_register+0x1d9f/0x2ac0 [ 1508.351062][T27504] ? cfg80211_event_work+0x40/0x40 [ 1508.356203][T27504] ? minstrel_ht_alloc+0x894/0xa20 [ 1508.361366][T27504] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1508.367488][T27504] ieee80211_register_hw+0x2d00/0x39f0 [ 1508.373010][T27504] ? ieee80211_register_hw+0xea1/0x39f0 [ 1508.378579][T27504] ? ieee80211_register_hw+0xea1/0x39f0 [ 1508.384183][T27504] ? ieee80211_tasklet_handler+0x20/0x20 [ 1508.389872][T27504] ? memset+0x1e/0x40 [ 1508.393872][T27504] ? __hrtimer_init+0x186/0x270 [ 1508.398758][T27504] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1508.404566][T27504] hwsim_new_radio_nl+0xafa/0xce0 [ 1508.409666][T27504] genl_family_rcv_msg_doit+0x22a/0x330 [ 1508.415263][T27504] ? end_current_label_crit_section+0x170/0x170 [ 1508.421561][T27504] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1508.427534][T27504] ? bpf_lsm_capable+0x5/0x10 [ 1508.432241][T27504] ? security_capable+0x85/0xb0 [ 1508.437140][T27504] genl_rcv_msg+0x604/0x790 [ 1508.441712][T27504] ? genl_bind+0x360/0x360 [ 1508.446158][T27504] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1508.452569][T27504] netlink_rcv_skb+0x1fb/0x450 [ 1508.457362][T27504] ? genl_bind+0x360/0x360 [ 1508.461813][T27504] ? netlink_ack+0x1170/0x1170 [ 1508.466640][T27504] ? down_read+0x1a8/0x2d0 [ 1508.471094][T27504] genl_rcv+0x24/0x40 [ 1508.475104][T27504] netlink_unicast+0x74d/0x8d0 [ 1508.479933][T27504] netlink_sendmsg+0x8ad/0xbd0 [ 1508.484766][T27504] ? netlink_getsockopt+0x550/0x550 [ 1508.489998][T27504] ? aa_sock_msg_perm+0x94/0x150 [ 1508.494966][T27504] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1508.500265][T27504] ? security_socket_sendmsg+0x7c/0xa0 [ 1508.505757][T27504] ? netlink_getsockopt+0x550/0x550 [ 1508.511065][T27504] ____sys_sendmsg+0x5be/0x970 [ 1508.515888][T27504] ? __sys_sendmsg_sock+0x30/0x30 [ 1508.520935][T27504] ? __import_iovec+0x315/0x500 [ 1508.525836][T27504] ? import_iovec+0x6f/0xa0 [ 1508.530374][T27504] ___sys_sendmsg+0x2a2/0x360 [ 1508.535078][T27504] ? try_to_wake_up+0x6ae/0x1080 [ 1508.540054][T27504] ? __sys_sendmsg+0x290/0x290 [ 1508.545036][T27504] __se_sys_sendmsg+0x1bb/0x2a0 [ 1508.549938][T27504] ? __x64_sys_sendmsg+0x80/0x80 [ 1508.554973][T27504] ? lockdep_hardirqs_on+0x94/0x140 [ 1508.560225][T27504] do_syscall_64+0x4c/0xa0 [ 1508.564673][T27504] ? clear_bhb_loop+0x60/0xb0 [ 1508.569371][T27504] ? clear_bhb_loop+0x60/0xb0 [ 1508.574078][T27504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1508.579991][T27504] RIP: 0033:0x7fe96f39acb9 [ 1508.584427][T27504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.604051][T27504] RSP: 002b:00007fe9702e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1508.612515][T27504] RAX: ffffffffffffffda RBX: 00007fe96f615fa0 RCX: 00007fe96f39acb9 [ 1508.620528][T27504] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1508.628525][T27504] RBP: 00007fe96f408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1508.636514][T27504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.644504][T27504] R13: 00007fe96f616038 R14: 00007fe96f615fa0 R15: 00007ffff7b852f8 [ 1508.652549][T27504] [ 1509.094250][T27513] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.9518'. [ 1509.652113][T27549] validate_nla: 18 callbacks suppressed [ 1509.652129][T27549] netlink: 'syz.4.9542': attribute type 29 has an invalid length. [ 1509.657926][T27545] netlink: 'syz.3.9533': attribute type 21 has an invalid length. [ 1509.658095][T27545] netlink: 'syz.3.9533': attribute type 1 has an invalid length. [ 1509.708166][T27549] netlink: 'syz.4.9542': attribute type 29 has an invalid length. [ 1509.784456][T27549] netlink: 'syz.4.9542': attribute type 29 has an invalid length. [ 1509.836320][T27549] netlink: 'syz.4.9542': attribute type 29 has an invalid length. [ 1509.885969][T27551] netlink: 'syz.4.9542': attribute type 29 has an invalid length. [ 1510.062158][T27560] netlink: 'syz.3.9548': attribute type 29 has an invalid length. [ 1510.079309][T27560] netlink: 'syz.3.9548': attribute type 29 has an invalid length. [ 1510.103111][T27560] netlink: 'syz.3.9548': attribute type 29 has an invalid length. [ 1510.310901][T27566] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.9537'. [ 1510.576832][T27580] device syzkaller0 left promiscuous mode [ 1510.968316][T24164] syzkaller0 selects TX queue 2, but real number of TX queues is 2 [ 1514.522347][T27648] device syzkaller0 left promiscuous mode [ 1514.693686][T27656] validate_nla: 17 callbacks suppressed [ 1514.693729][T27656] netlink: 'syz.3.9579': attribute type 10 has an invalid length. [ 1514.762220][T27656] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1514.782989][T27660] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9579'. [ 1514.854880][T27661] netlink: 'syz.2.9580': attribute type 41 has an invalid length. [ 1514.884851][T27661] netlink: 'syz.2.9580': attribute type 41 has an invalid length. [ 1514.981632][T27666] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1515.015023][T27666] netlink: 'syz.4.9585': attribute type 7 has an invalid length. [ 1515.024398][T27666] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1515.216786][T27675] netlink: 'syz.2.9587': attribute type 10 has an invalid length. [ 1515.236910][T27675] device veth1_vlan left promiscuous mode [ 1515.345588][T27688] netlink: 'syz.3.9592': attribute type 21 has an invalid length. [ 1515.368758][T27688] netlink: 'syz.3.9592': attribute type 1 has an invalid length. [ 1515.897164][T27706] netlink: 'syz.1.9598': attribute type 41 has an invalid length. [ 1515.926187][T27706] netlink: 'syz.1.9598': attribute type 41 has an invalid length. [ 1515.975923][T27710] netlink: 'syz.0.9600': attribute type 10 has an invalid length. [ 1517.198577][T24161] syzkaller0: tun_net_xmit 76 [ 1517.214256][T27742] syzkaller0: create flow: hash 4054119297 index 2 [ 1517.588293][T24164] syzkaller0: tun_net_xmit 76 [ 1520.156540][T27742] syzkaller0: delete flow: hash 4054119297 index 2 [ 1520.266507][T27757] device syzkaller0 entered promiscuous mode [ 1520.301295][T27759] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9623'. [ 1520.421476][T27768] validate_nla: 9 callbacks suppressed [ 1520.421491][T27768] netlink: 'syz.3.9626': attribute type 29 has an invalid length. [ 1520.435789][T27768] netlink: 'syz.3.9626': attribute type 29 has an invalid length. [ 1520.503683][T27772] netlink: 'syz.3.9626': attribute type 29 has an invalid length. [ 1520.518709][T27768] netlink: 'syz.3.9626': attribute type 29 has an invalid length. [ 1520.529205][T27768] netlink: 'syz.3.9626': attribute type 29 has an invalid length. [ 1520.991051][T27790] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.9631'. [ 1521.107587][T27793] netlink: 'syz.1.9634': attribute type 41 has an invalid length. [ 1521.117195][T27793] netlink: 'syz.1.9634': attribute type 41 has an invalid length. [ 1521.468892][T27807] netlink: 'syz.4.9639': attribute type 10 has an invalid length. [ 1521.563485][T27812] netlink: 'syz.2.9641': attribute type 10 has an invalid length. [ 1522.034254][T27829] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.9647'. [ 1522.060657][T27829] netlink: 'syz.0.9647': attribute type 7 has an invalid length. [ 1522.077659][T27829] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.9647'. [ 1523.122981][T27853] device veth1_vlan left promiscuous mode [ 1523.350766][T27863] bond0: (slave netdevsim0): Releasing backup interface [ 1525.950402][ T14] syzkaller0: tun_net_xmit 76 [ 1525.967251][T27928] syzkaller0: create flow: hash 4213602959 index 1 [ 1526.131094][T27926] syzkaller0: delete flow: hash 4213602959 index 1 [ 1526.304368][T27936] validate_nla: 3 callbacks suppressed [ 1526.304401][T27936] netlink: 'syz.4.9690': attribute type 10 has an invalid length. [ 1526.801761][T27951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1527.263675][T27958] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.9711'. [ 1527.291354][T27958] netlink: 'syz.1.9711': attribute type 7 has an invalid length. [ 1527.320193][T27958] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.9711'. [ 1527.659614][T27973] device syzkaller0 left promiscuous mode [ 1527.905034][T27980] netlink: 'syz.3.9712': attribute type 3 has an invalid length. [ 1527.937113][T27980] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9712'. [ 1527.967017][T27983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9712'. [ 1528.064688][T27983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.905220][T28009] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.9720'. [ 1530.779851][T28051] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.9738'. [ 1530.933416][T28053] sock: sock_set_timeout: `syz.0.9739' (pid 28053) tries to set negative timeout [ 1532.273401][T28082] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9748'. [ 1532.359778][T28085] netlink: 'syz.2.9758': attribute type 10 has an invalid length. [ 1532.383862][T28085] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1532.406711][T28085] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9758'. [ 1535.706024][T28094] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1539.074111][T28111] sock: sock_set_timeout: `syz.3.9771' (pid 28111) tries to set negative timeout [ 1540.045082][T28138] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.9769'. [ 1543.044451][T28146] device sit0 entered promiscuous mode [ 1543.657494][T28178] netlink: 'syz.2.9793': attribute type 29 has an invalid length. [ 1543.689461][T28178] netlink: 'syz.2.9793': attribute type 29 has an invalid length. [ 1543.720863][T28177] delete_channel: no stack [ 1545.111358][T28222] netlink: 'syz.4.9799': attribute type 29 has an invalid length. [ 1545.199331][T28222] netlink: 'syz.4.9799': attribute type 29 has an invalid length. [ 1545.279057][T28218] delete_channel: no stack [ 1545.899958][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.906545][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.767313][T28255] device sit0 entered promiscuous mode [ 1553.588117][T28305] device sit0 entered promiscuous mode [ 1553.874727][T28313] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.9835'. [ 1553.912022][T28317] netlink: 'syz.2.9835': attribute type 7 has an invalid length. [ 1553.948500][T28317] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.9835'. [ 1553.991853][T28321] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1555.501450][T28364] device syzkaller0 entered promiscuous mode [ 1555.572009][T28367] netlink: 'syz.1.9855': attribute type 29 has an invalid length. [ 1555.598599][T28367] netlink: 'syz.1.9855': attribute type 29 has an invalid length. [ 1555.646803][T28366] delete_channel: no stack [ 1556.357992][T28396] device sit0 entered promiscuous mode [ 1556.642928][T28412] device sit0 left promiscuous mode [ 1556.691404][T28409] device sit0 entered promiscuous mode [ 1556.925167][T28420] netlink: 'syz.3.9872': attribute type 29 has an invalid length. [ 1556.968779][T28420] netlink: 'syz.3.9872': attribute type 29 has an invalid length. [ 1556.984506][T28415] delete_channel: no stack [ 1556.989313][T28422] device syzkaller0 entered promiscuous mode [ 1560.682794][T28460] netlink: 'syz.0.9888': attribute type 29 has an invalid length. [ 1560.700085][T28460] netlink: 'syz.0.9888': attribute type 29 has an invalid length. [ 1560.715733][T28459] delete_channel: no stack [ 1560.937294][T28469] device wlan0 left promiscuous mode [ 1560.969834][T28469] device wlan0 entered promiscuous mode [ 1565.070568][T28504] device sit0 left promiscuous mode [ 1565.124580][T28501] netlink: 'syz.4.9906': attribute type 29 has an invalid length. [ 1565.196980][T28501] netlink: 'syz.4.9906': attribute type 29 has an invalid length. [ 1565.229552][T28500] delete_channel: no stack [ 1565.305162][T28499] device sit0 entered promiscuous mode [ 1565.519943][T28512] netlink: 'syz.0.9918': attribute type 29 has an invalid length. [ 1565.580885][T28512] netlink: 'syz.0.9918': attribute type 29 has an invalid length. [ 1565.620036][T28511] delete_channel: no stack [ 1569.302962][T28543] device sit0 left promiscuous mode [ 1569.396114][T28548] tipc: Started in network mode [ 1569.407971][T28548] tipc: Node identity 9215a268, cluster identity 4711 [ 1569.416521][T28548] tipc: Node number set to 2450891368 [ 1569.427547][T28549] device sit0 entered promiscuous mode [ 1569.824006][T28559] netlink: 'syz.1.9925': attribute type 2 has an invalid length. [ 1569.833590][T28559] netlink: 'syz.1.9925': attribute type 2 has an invalid length. [ 1572.474858][T28583] netlink: 'syz.2.9941': attribute type 29 has an invalid length. [ 1572.508759][T28583] netlink: 'syz.2.9941': attribute type 29 has an invalid length. [ 1572.532959][T28590] netlink: 'syz.2.9941': attribute type 29 has an invalid length. [ 1572.560671][T28580] netlink: 'syz.2.9941': attribute type 29 has an invalid length. [ 1572.586307][T28580] netlink: 'syz.2.9941': attribute type 29 has an invalid length. [ 1572.596436][T28580] netlink: 'syz.2.9941': attribute type 29 has an invalid length. [ 1572.859646][T28604] netlink: 'syz.4.9938': attribute type 10 has an invalid length. [ 1572.891617][T28605] device sit0 entered promiscuous mode [ 1573.203619][T28611] netlink: 'syz.4.9939': attribute type 2 has an invalid length. [ 1573.454301][T11723] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 1575.941732][T28621] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.9944'. [ 1575.979335][T28621] validate_nla: 1 callbacks suppressed [ 1575.979368][T28621] netlink: 'syz.4.9944': attribute type 7 has an invalid length. [ 1576.094751][T28621] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.9944'. [ 1579.134496][T28640] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9954'. [ 1579.152361][T28637] netlink: 'syz.0.9950': attribute type 29 has an invalid length. [ 1579.169431][T28637] netlink: 'syz.0.9950': attribute type 29 has an invalid length. [ 1579.181653][T28644] netlink: 'syz.0.9950': attribute type 29 has an invalid length. [ 1579.220319][T28637] netlink: 'syz.0.9950': attribute type 29 has an invalid length. [ 1579.270673][T28637] netlink: 'syz.0.9950': attribute type 29 has an invalid length. [ 1579.283479][T28646] netlink: 'syz.3.9955': attribute type 2 has an invalid length. [ 1579.293997][T28646] netlink: 'syz.3.9955': attribute type 2 has an invalid length. [ 1579.304662][T28637] netlink: 'syz.0.9950': attribute type 29 has an invalid length. [ 1579.976460][T11723] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 1580.900098][T28666] device sit0 left promiscuous mode [ 1580.965062][T28668] device sit0 entered promiscuous mode [ 1581.183488][T11723] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17 [ 1584.374905][T28694] netlink: 'syz.4.9971': attribute type 11 has an invalid length. [ 1584.404553][T28694] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9971'. [ 1584.435282][T28694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.654765][T28701] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1584.665108][T28701] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1584.679435][T28701] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1584.736433][T28701] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1584.759265][T28701] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1584.815727][T28701] netlink: 'syz.4.9974': attribute type 29 has an invalid length. [ 1584.834706][T11723] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17 [ 1585.949480][T28729] netlink: 'syz.3.9999': attribute type 10 has an invalid length. [ 1587.117342][T28751] netlink: 'syz.3.9998': attribute type 29 has an invalid length. [ 1587.126839][T28751] netlink: 'syz.3.9998': attribute type 29 has an invalid length. [ 1587.141524][T28751] netlink: 'syz.3.9998': attribute type 29 has an invalid length. [ 1587.424761][T28759] device wlan0 left promiscuous mode [ 1587.456608][T28764] device wlan0 entered promiscuous mode [ 1591.226978][T28803] device wlan0 left promiscuous mode [ 1591.269961][T28803] device wlan0 entered promiscuous mode [ 1594.175060][T28835] validate_nla: 3 callbacks suppressed [ 1594.175130][T28835] netlink: 'syz.4.10035': attribute type 10 has an invalid length. [ 1594.320954][T28840] device wlan0 left promiscuous mode [ 1594.373167][T28848] device wlan0 entered promiscuous mode [ 1594.410479][T28842] device syzkaller0 left promiscuous mode [ 1595.043020][T28861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10046'. [ 1595.286415][T28868] device syzkaller0 entered promiscuous mode [ 1595.670126][T28879] device wg2 entered promiscuous mode [ 1596.094252][T28893] device wlan0 left promiscuous mode [ 1596.140374][T28895] device wlan0 entered promiscuous mode [ 1596.772850][T28905] netlink: 16030 bytes leftover after parsing attributes in process `syz.4.10061'. [ 1597.012337][T28911] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.10063'. [ 1597.049877][T28911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10063'. [ 1597.192282][T28915] netlink: 'syz.1.10064': attribute type 10 has an invalid length. [ 1597.359935][T28926] device wlan0 left promiscuous mode [ 1597.384778][T28926] device wlan0 entered promiscuous mode [ 1597.829126][T28938] netlink: 'syz.0.10076': attribute type 10 has an invalid length. [ 1597.837581][T28938] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10076'. [ 1598.702849][T28962] device wlan0 left promiscuous mode [ 1598.725632][T28962] device wlan0 entered promiscuous mode [ 1598.932253][T28965] device wlan0 left promiscuous mode [ 1598.992587][T28968] device wlan0 entered promiscuous mode [ 1599.418283][T28984] device syzkaller0 left promiscuous mode [ 1600.179031][T29007] netlink: 'syz.0.10103': attribute type 10 has an invalid length. [ 1600.204267][T29011] netlink: 'syz.3.10106': attribute type 1 has an invalid length. [ 1600.214502][T29011] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10106'. [ 1602.797207][T29056] device syzkaller0 left promiscuous mode [ 1603.066233][T29068] device sit0 left promiscuous mode [ 1603.260862][T29070] netlink: 'syz.2.10128': attribute type 10 has an invalid length. [ 1604.164938][T29091] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1604.392231][T29096] netlink: 'syz.1.10134': attribute type 10 has an invalid length. [ 1604.406906][T29098] netlink: 'syz.4.10137': attribute type 1 has an invalid length. [ 1604.415801][T29098] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10137'. [ 1604.422383][T29096] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10134'. [ 1604.781029][T29112] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.10143'. [ 1604.820458][T29112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10143'. [ 1604.900034][T29119] device syzkaller0 left promiscuous mode [ 1605.267495][T29129] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1605.550054][T29131] device wg2 entered promiscuous mode [ 1605.693695][T29138] netlink: 'syz.4.10151': attribute type 10 has an invalid length. [ 1605.718990][T29138] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10151'. [ 1606.032057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1606.259636][T29150] device syzkaller0 entered promiscuous mode [ 1606.393297][T29157] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1606.405763][T29157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1606.829943][T29170] netlink: 'syz.3.10165': attribute type 10 has an invalid length. [ 1606.838377][T29170] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10165'. [ 1607.357770][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.364174][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.504296][T29186] device sit0 left promiscuous mode [ 1607.683805][T29190] device syzkaller0 entered promiscuous mode [ 1608.474248][T29213] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.10176'. [ 1608.485788][T29213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10176'. [ 1608.878850][T29228] netlink: 'syz.2.10179': attribute type 10 has an invalid length. [ 1608.886813][T29228] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1609.492523][T29240] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10189'. [ 1609.579292][T29240] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1609.612126][T29240] CPU: 1 PID: 29240 Comm: syz.2.10189 Not tainted syzkaller #0 [ 1609.619746][T29240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1609.629825][T29240] Call Trace: [ 1609.633135][T29240] [ 1609.636093][T29240] dump_stack_lvl+0x188/0x24e [ 1609.640813][T29240] ? show_regs_print_info+0x12/0x12 [ 1609.646049][T29240] ? load_image+0x400/0x400 [ 1609.650596][T29240] sysfs_warn_dup+0x8a/0xa0 [ 1609.655136][T29240] sysfs_do_create_link_sd+0xc0/0x110 [ 1609.660559][T29240] device_add+0x7ed/0xfb0 [ 1609.664932][T29240] wiphy_register+0x1d9f/0x2ac0 [ 1609.669836][T29240] ? cfg80211_event_work+0x40/0x40 [ 1609.674982][T29240] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1609.681176][T29240] ? ieee80211_register_hw+0x2920/0x39f0 [ 1609.686847][T29240] ieee80211_register_hw+0x2d00/0x39f0 [ 1609.692339][T29240] ? lockdep_hardirqs_on+0x94/0x140 [ 1609.697582][T29240] ? ieee80211_register_hw+0xea1/0x39f0 [ 1609.703162][T29240] ? ieee80211_register_hw+0xea1/0x39f0 [ 1609.708751][T29240] ? ieee80211_tasklet_handler+0x20/0x20 [ 1609.714432][T29240] ? memset+0x1e/0x40 [ 1609.718446][T29240] ? __hrtimer_init+0x186/0x270 [ 1609.723335][T29240] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1609.729110][T29240] hwsim_new_radio_nl+0xafa/0xce0 [ 1609.734185][T29240] genl_family_rcv_msg_doit+0x22a/0x330 [ 1609.739764][T29240] ? end_current_label_crit_section+0x170/0x170 [ 1609.746034][T29240] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1609.751976][T29240] ? bpf_lsm_capable+0x5/0x10 [ 1609.756685][T29240] ? security_capable+0x85/0xb0 [ 1609.761565][T29240] genl_rcv_msg+0x604/0x790 [ 1609.766097][T29240] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1609.772397][T29240] ? genl_bind+0x360/0x360 [ 1609.777196][T29240] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1609.783576][T29240] ? kasan_check_range+0x84/0x290 [ 1609.788649][T29240] netlink_rcv_skb+0x1fb/0x450 [ 1609.793456][T29240] ? genl_bind+0x360/0x360 [ 1609.797922][T29240] ? netlink_ack+0x1170/0x1170 [ 1609.802733][T29240] ? down_read+0x1a8/0x2d0 [ 1609.807200][T29240] genl_rcv+0x24/0x40 [ 1609.811228][T29240] netlink_unicast+0x74d/0x8d0 [ 1609.816046][T29240] netlink_sendmsg+0x8ad/0xbd0 [ 1609.820870][T29240] ? netlink_getsockopt+0x550/0x550 [ 1609.826115][T29240] ? aa_sock_msg_perm+0x94/0x150 [ 1609.831088][T29240] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1609.836405][T29240] ? security_socket_sendmsg+0x7c/0xa0 [ 1609.841911][T29240] ? netlink_getsockopt+0x550/0x550 [ 1609.847152][T29240] ____sys_sendmsg+0x5be/0x970 [ 1609.851966][T29240] ? __sys_sendmsg_sock+0x30/0x30 [ 1609.857029][T29240] ? __import_iovec+0x315/0x500 [ 1609.861934][T29240] ? import_iovec+0x6f/0xa0 [ 1609.866477][T29240] ___sys_sendmsg+0x2a2/0x360 [ 1609.871208][T29240] ? __sys_sendmsg+0x290/0x290 [ 1609.876033][T29240] ? trace_call_bpf+0xbf/0x6b0 [ 1609.880896][T29240] __se_sys_sendmsg+0x1bb/0x2a0 [ 1609.885782][T29240] ? ct_nmi_exit+0x145/0x1c0 [ 1609.890402][T29240] ? __x64_sys_sendmsg+0x80/0x80 [ 1609.895390][T29240] ? lockdep_hardirqs_on+0x94/0x140 [ 1609.900640][T29240] do_syscall_64+0x4c/0xa0 [ 1609.905100][T29240] ? clear_bhb_loop+0x60/0xb0 [ 1609.909812][T29240] ? clear_bhb_loop+0x60/0xb0 [ 1609.914543][T29240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1609.920476][T29240] RIP: 0033:0x7fb501f9acb9 [ 1609.924921][T29240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.944556][T29240] RSP: 002b:00007fb502dfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1609.953000][T29240] RAX: ffffffffffffffda RBX: 00007fb502215fa0 RCX: 00007fb501f9acb9 [ 1609.961002][T29240] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1609.968999][T29240] RBP: 00007fb502008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1609.976995][T29240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.985001][T29240] R13: 00007fb502216038 R14: 00007fb502215fa0 R15: 00007ffda7e82f18 [ 1609.993015][T29240] [ 1610.035073][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1610.167846][T29251] device sit0 left promiscuous mode [ 1610.604592][T29271] device wg2 entered promiscuous mode [ 1610.843300][T29275] netlink: 'syz.1.10202': attribute type 10 has an invalid length. [ 1610.858029][T29275] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10202'. [ 1612.223507][T29318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10217'. [ 1613.335456][T29344] delete_channel: no stack [ 1613.963461][T29369] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.10247'. [ 1613.976305][T29369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10247'. [ 1614.589984][T24160] syzkaller0: tun_net_xmit 76 [ 1614.937691][T11723] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 1615.570347][T29410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10251'. [ 1616.654546][T29443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10268'. [ 1617.139132][T29451] delete_channel: no stack [ 1617.347993][ T14] syzkaller0: tun_net_xmit 76 [ 1617.578427][ T14] syzkaller0: tun_net_xmit 76 [ 1618.640323][T29487] delete_channel: no stack [ 1620.211494][T29530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10301'. [ 1620.255205][T29533] delete_channel: no stack [ 1621.021145][T29567] netlink: 'syz.2.10317': attribute type 2 has an invalid length. [ 1621.042979][T29567] netlink: 'syz.2.10317': attribute type 8 has an invalid length. [ 1621.053754][T29567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10317'. [ 1621.074943][T29567] netlink: 'syz.2.10317': attribute type 19 has an invalid length. [ 1621.112787][T29567] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10317'. [ 1621.237195][T29570] delete_channel: no stack [ 1621.412427][T11723] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 1621.921888][T29600] netlink: 'syz.1.10329': attribute type 27 has an invalid length. [ 1622.340208][T29617] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10338'. [ 1622.682972][T29624] netlink: 'syz.3.10343': attribute type 2 has an invalid length. [ 1622.693721][T29624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10343'. [ 1623.892388][T29663] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10355'. [ 1624.208980][T29663] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1624.228080][T29663] CPU: 1 PID: 29663 Comm: syz.4.10355 Not tainted syzkaller #0 [ 1624.235687][T29663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1624.245769][T29663] Call Trace: [ 1624.249065][T29663] [ 1624.251997][T29663] dump_stack_lvl+0x188/0x24e [ 1624.256707][T29663] ? show_regs_print_info+0x12/0x12 [ 1624.261922][T29663] ? load_image+0x400/0x400 [ 1624.266463][T29663] sysfs_warn_dup+0x8a/0xa0 [ 1624.270986][T29663] sysfs_do_create_link_sd+0xc0/0x110 [ 1624.276374][T29663] device_add+0x7ed/0xfb0 [ 1624.280737][T29663] wiphy_register+0x1d9f/0x2ac0 [ 1624.285623][T29663] ? cfg80211_event_work+0x40/0x40 [ 1624.290745][T29663] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1624.296920][T29663] ieee80211_register_hw+0x2d00/0x39f0 [ 1624.302394][T29663] ? ieee80211_register_hw+0xea1/0x39f0 [ 1624.307936][T29663] ? ieee80211_register_hw+0xea1/0x39f0 [ 1624.313486][T29663] ? ieee80211_tasklet_handler+0x20/0x20 [ 1624.319126][T29663] ? memset+0x1e/0x40 [ 1624.323103][T29663] ? __hrtimer_init+0x186/0x270 [ 1624.327952][T29663] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1624.333690][T29663] hwsim_new_radio_nl+0xafa/0xce0 [ 1624.338725][T29663] genl_family_rcv_msg_doit+0x22a/0x330 [ 1624.344281][T29663] ? end_current_label_crit_section+0x170/0x170 [ 1624.350520][T29663] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1624.356422][T29663] ? bpf_lsm_capable+0x5/0x10 [ 1624.361098][T29663] ? security_capable+0x85/0xb0 [ 1624.365947][T29663] genl_rcv_msg+0x604/0x790 [ 1624.370483][T29663] ? genl_bind+0x360/0x360 [ 1624.374919][T29663] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1624.381277][T29663] netlink_rcv_skb+0x1fb/0x450 [ 1624.386069][T29663] ? genl_bind+0x360/0x360 [ 1624.390517][T29663] ? netlink_ack+0x1170/0x1170 [ 1624.395307][T29663] ? down_read+0x1a8/0x2d0 [ 1624.399769][T29663] genl_rcv+0x24/0x40 [ 1624.403756][T29663] netlink_unicast+0x74d/0x8d0 [ 1624.408539][T29663] netlink_sendmsg+0x8ad/0xbd0 [ 1624.413317][T29663] ? netlink_getsockopt+0x550/0x550 [ 1624.418516][T29663] ? aa_sock_msg_perm+0x94/0x150 [ 1624.423446][T29663] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1624.428726][T29663] ? security_socket_sendmsg+0x7c/0xa0 [ 1624.434189][T29663] ? netlink_getsockopt+0x550/0x550 [ 1624.439471][T29663] ____sys_sendmsg+0x5be/0x970 [ 1624.444241][T29663] ? __sys_sendmsg_sock+0x30/0x30 [ 1624.449264][T29663] ? __import_iovec+0x315/0x500 [ 1624.454119][T29663] ? import_iovec+0x6f/0xa0 [ 1624.458620][T29663] ___sys_sendmsg+0x2a2/0x360 [ 1624.463303][T29663] ? __sys_sendmsg+0x290/0x290 [ 1624.468105][T29663] __se_sys_sendmsg+0x1bb/0x2a0 [ 1624.472963][T29663] ? ct_nmi_exit+0x145/0x1c0 [ 1624.477638][T29663] ? __x64_sys_sendmsg+0x80/0x80 [ 1624.482602][T29663] ? lockdep_hardirqs_on+0x94/0x140 [ 1624.487891][T29663] do_syscall_64+0x4c/0xa0 [ 1624.492308][T29663] ? clear_bhb_loop+0x60/0xb0 [ 1624.496981][T29663] ? clear_bhb_loop+0x60/0xb0 [ 1624.501652][T29663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.507541][T29663] RIP: 0033:0x7f04bff9acb9 [ 1624.511957][T29663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.531567][T29663] RSP: 002b:00007f04c0e11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.539987][T29663] RAX: ffffffffffffffda RBX: 00007f04c0215fa0 RCX: 00007f04bff9acb9 [ 1624.548043][T29663] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1624.556007][T29663] RBP: 00007f04c0008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1624.563993][T29663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.571980][T29663] R13: 00007f04c0216038 R14: 00007f04c0215fa0 R15: 00007ffe9d689458 [ 1624.579967][T29663] [ 1626.988930][T29684] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10359'. [ 1627.549890][T29705] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.10368'. [ 1628.301233][T29721] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10385'. [ 1628.363502][T29721] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1628.387108][T29721] CPU: 1 PID: 29721 Comm: syz.1.10385 Not tainted syzkaller #0 [ 1628.394718][T29721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1628.404788][T29721] Call Trace: [ 1628.408076][T29721] [ 1628.411024][T29721] dump_stack_lvl+0x188/0x24e [ 1628.415738][T29721] ? show_regs_print_info+0x12/0x12 [ 1628.420978][T29721] ? load_image+0x400/0x400 [ 1628.425516][T29721] sysfs_warn_dup+0x8a/0xa0 [ 1628.430054][T29721] sysfs_do_create_link_sd+0xc0/0x110 [ 1628.435472][T29721] device_add+0x7ed/0xfb0 [ 1628.439855][T29721] wiphy_register+0x1d9f/0x2ac0 [ 1628.444762][T29721] ? cfg80211_event_work+0x40/0x40 [ 1628.449912][T29721] ? minstrel_ht_alloc+0x894/0xa20 [ 1628.455079][T29721] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1628.461189][T29721] ieee80211_register_hw+0x2d00/0x39f0 [ 1628.466671][T29721] ? ieee80211_register_hw+0xea1/0x39f0 [ 1628.472219][T29721] ? ieee80211_register_hw+0xea1/0x39f0 [ 1628.477779][T29721] ? ieee80211_tasklet_handler+0x20/0x20 [ 1628.483421][T29721] ? memset+0x1e/0x40 [ 1628.487402][T29721] ? __hrtimer_init+0x186/0x270 [ 1628.492251][T29721] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1628.498000][T29721] hwsim_new_radio_nl+0xafa/0xce0 [ 1628.503043][T29721] genl_family_rcv_msg_doit+0x22a/0x330 [ 1628.508596][T29721] ? end_current_label_crit_section+0x170/0x170 [ 1628.514838][T29721] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1628.520742][T29721] ? bpf_lsm_capable+0x5/0x10 [ 1628.525417][T29721] ? security_capable+0x85/0xb0 [ 1628.530274][T29721] genl_rcv_msg+0x604/0x790 [ 1628.534783][T29721] ? lockdep_hardirqs_on+0x94/0x140 [ 1628.539983][T29721] ? genl_bind+0x360/0x360 [ 1628.544484][T29721] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1628.550826][T29721] netlink_rcv_skb+0x1fb/0x450 [ 1628.555594][T29721] ? genl_bind+0x360/0x360 [ 1628.560013][T29721] ? netlink_ack+0x1170/0x1170 [ 1628.564785][T29721] ? down_read+0x1a8/0x2d0 [ 1628.569199][T29721] genl_rcv+0x24/0x40 [ 1628.573184][T29721] netlink_unicast+0x74d/0x8d0 [ 1628.577956][T29721] netlink_sendmsg+0x8ad/0xbd0 [ 1628.582724][T29721] ? netlink_getsockopt+0x550/0x550 [ 1628.587919][T29721] ? tomoyo_socket_sendmsg+0x12/0x30 [ 1628.593229][T29721] ? aa_sock_msg_perm+0x94/0x150 [ 1628.598183][T29721] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1628.603477][T29721] ? security_socket_sendmsg+0x7c/0xa0 [ 1628.608943][T29721] ? netlink_getsockopt+0x550/0x550 [ 1628.614151][T29721] ____sys_sendmsg+0x5be/0x970 [ 1628.618927][T29721] ? __sys_sendmsg_sock+0x30/0x30 [ 1628.623954][T29721] ? __import_iovec+0x315/0x500 [ 1628.628805][T29721] ? import_iovec+0x6f/0xa0 [ 1628.633304][T29721] ___sys_sendmsg+0x2a2/0x360 [ 1628.637982][T29721] ? try_to_wake_up+0x6ae/0x1080 [ 1628.642925][T29721] ? __sys_sendmsg+0x290/0x290 [ 1628.647700][T29721] ? btf_new_fd+0x396/0x780 [ 1628.652235][T29721] __se_sys_sendmsg+0x1bb/0x2a0 [ 1628.657095][T29721] ? ct_nmi_exit+0x145/0x1c0 [ 1628.661684][T29721] ? __x64_sys_sendmsg+0x80/0x80 [ 1628.666637][T29721] ? lockdep_hardirqs_on+0x94/0x140 [ 1628.671842][T29721] do_syscall_64+0x4c/0xa0 [ 1628.676257][T29721] ? clear_bhb_loop+0x60/0xb0 [ 1628.680936][T29721] ? clear_bhb_loop+0x60/0xb0 [ 1628.685613][T29721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1628.691503][T29721] RIP: 0033:0x7f087ff9acb9 [ 1628.695912][T29721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.715513][T29721] RSP: 002b:00007f0880da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.723921][T29721] RAX: ffffffffffffffda RBX: 00007f0880215fa0 RCX: 00007f087ff9acb9 [ 1628.731886][T29721] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1628.739853][T29721] RBP: 00007f0880008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1628.747823][T29721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.755788][T29721] R13: 00007f0880216038 R14: 00007f0880215fa0 R15: 00007ffeff506b38 [ 1628.763768][T29721] [ 1628.879335][T29727] netlink: 'syz.4.10377': attribute type 2 has an invalid length. [ 1628.898040][T29727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10377'. [ 1630.122062][T29768] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10394'. [ 1630.561499][T29771] netlink: 'syz.1.10396': attribute type 2 has an invalid length. [ 1630.589419][T29771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10396'. [ 1632.057249][T29817] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10411'. [ 1632.316056][T29827] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10417'. [ 1632.353648][T29823] netlink: 'syz.2.10415': attribute type 2 has an invalid length. [ 1632.368942][T29823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10415'. [ 1632.405604][T29827] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1632.428139][T29827] CPU: 0 PID: 29827 Comm: syz.3.10417 Not tainted syzkaller #0 [ 1632.435749][T29827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1632.445825][T29827] Call Trace: [ 1632.449127][T29827] [ 1632.452082][T29827] dump_stack_lvl+0x188/0x24e [ 1632.456783][T29827] ? show_regs_print_info+0x12/0x12 [ 1632.461992][T29827] ? load_image+0x400/0x400 [ 1632.466535][T29827] sysfs_warn_dup+0x8a/0xa0 [ 1632.471068][T29827] sysfs_do_create_link_sd+0xc0/0x110 [ 1632.476476][T29827] device_add+0x7ed/0xfb0 [ 1632.480850][T29827] wiphy_register+0x1d9f/0x2ac0 [ 1632.485741][T29827] ? cfg80211_event_work+0x40/0x40 [ 1632.490891][T29827] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1632.497076][T29827] ? ieee80211_register_hw+0x2b3e/0x39f0 [ 1632.502743][T29827] ieee80211_register_hw+0x2d00/0x39f0 [ 1632.508238][T29827] ? lockdep_hardirqs_on+0x94/0x140 [ 1632.513481][T29827] ? ieee80211_register_hw+0xea1/0x39f0 [ 1632.519048][T29827] ? ieee80211_register_hw+0xea1/0x39f0 [ 1632.524609][T29827] ? ieee80211_tasklet_handler+0x20/0x20 [ 1632.530251][T29827] ? memset+0x1e/0x40 [ 1632.534230][T29827] ? __hrtimer_init+0x186/0x270 [ 1632.539080][T29827] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1632.544817][T29827] hwsim_new_radio_nl+0xafa/0xce0 [ 1632.549858][T29827] genl_family_rcv_msg_doit+0x22a/0x330 [ 1632.555408][T29827] ? end_current_label_crit_section+0x170/0x170 [ 1632.561668][T29827] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1632.567595][T29827] ? bpf_lsm_capable+0x5/0x10 [ 1632.572282][T29827] ? security_capable+0x85/0xb0 [ 1632.577138][T29827] genl_rcv_msg+0x604/0x790 [ 1632.581651][T29827] ? genl_bind+0x360/0x360 [ 1632.586065][T29827] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1632.592408][T29827] netlink_rcv_skb+0x1fb/0x450 [ 1632.597176][T29827] ? genl_bind+0x360/0x360 [ 1632.601605][T29827] ? netlink_ack+0x1170/0x1170 [ 1632.606376][T29827] ? down_read+0x1a8/0x2d0 [ 1632.610792][T29827] genl_rcv+0x24/0x40 [ 1632.614777][T29827] netlink_unicast+0x74d/0x8d0 [ 1632.619578][T29827] netlink_sendmsg+0x8ad/0xbd0 [ 1632.624350][T29827] ? netlink_getsockopt+0x550/0x550 [ 1632.629555][T29827] ? aa_sock_msg_perm+0x94/0x150 [ 1632.634486][T29827] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1632.639770][T29827] ? security_socket_sendmsg+0x7c/0xa0 [ 1632.645232][T29827] ? netlink_getsockopt+0x550/0x550 [ 1632.650432][T29827] ____sys_sendmsg+0x5be/0x970 [ 1632.655291][T29827] ? __sys_sendmsg_sock+0x30/0x30 [ 1632.660314][T29827] ? __import_iovec+0x315/0x500 [ 1632.665250][T29827] ? import_iovec+0x6f/0xa0 [ 1632.669751][T29827] ___sys_sendmsg+0x2a2/0x360 [ 1632.674434][T29827] ? __sys_sendmsg+0x290/0x290 [ 1632.679232][T29827] __se_sys_sendmsg+0x1bb/0x2a0 [ 1632.684166][T29827] ? ct_nmi_exit+0x145/0x1c0 [ 1632.688759][T29827] ? __x64_sys_sendmsg+0x80/0x80 [ 1632.693715][T29827] ? lockdep_hardirqs_on+0x94/0x140 [ 1632.698919][T29827] do_syscall_64+0x4c/0xa0 [ 1632.703335][T29827] ? clear_bhb_loop+0x60/0xb0 [ 1632.708013][T29827] ? clear_bhb_loop+0x60/0xb0 [ 1632.712691][T29827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.718579][T29827] RIP: 0033:0x7fe96f39acb9 [ 1632.722989][T29827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.742590][T29827] RSP: 002b:00007fe9702e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1632.751002][T29827] RAX: ffffffffffffffda RBX: 00007fe96f615fa0 RCX: 00007fe96f39acb9 [ 1632.758967][T29827] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1632.766930][T29827] RBP: 00007fe96f408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1632.774893][T29827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1632.782855][T29827] R13: 00007fe96f616038 R14: 00007fe96f615fa0 R15: 00007ffff7b852f8 [ 1632.790844][T29827] [ 1633.792795][T29857] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.10428'. [ 1634.063779][T29866] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.10443'. [ 1634.205852][T29868] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10432'. [ 1634.990578][T29879] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10446'. [ 1635.149869][T29887] netlink: 'syz.0.10433': attribute type 2 has an invalid length. [ 1635.192322][T29887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1635.248722][T29893] netlink: 'syz.3.10438': attribute type 2 has an invalid length. [ 1635.257693][T29893] netlink: 'syz.3.10438': attribute type 8 has an invalid length. [ 1635.266085][T29893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10438'. [ 1635.312928][T29893] netlink: 'syz.3.10438': attribute type 19 has an invalid length. [ 1635.328664][T29893] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10438'. [ 1635.873969][T29911] netlink: 'syz.3.10447': attribute type 2 has an invalid length. [ 1635.895105][T29911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10447'. [ 1636.476643][T29934] netlink: 'syz.4.10458': attribute type 2 has an invalid length. [ 1636.497007][T29934] netlink: 'syz.4.10458': attribute type 8 has an invalid length. [ 1636.523077][T29934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10458'. [ 1636.571801][T29932] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.10453'. [ 1636.598172][T29934] netlink: 'syz.4.10458': attribute type 19 has an invalid length. [ 1636.609561][T29930] netlink: 'syz.1.10456': attribute type 2 has an invalid length. [ 1637.140206][T29953] netlink: 'syz.1.10474': attribute type 2 has an invalid length. [ 1637.421587][T29961] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1637.437926][T29961] CPU: 0 PID: 29961 Comm: syz.0.10467 Not tainted syzkaller #0 [ 1637.445538][T29961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1637.455608][T29961] Call Trace: [ 1637.458886][T29961] [ 1637.461811][T29961] dump_stack_lvl+0x188/0x24e [ 1637.466486][T29961] ? show_regs_print_info+0x12/0x12 [ 1637.471688][T29961] ? load_image+0x400/0x400 [ 1637.476191][T29961] sysfs_warn_dup+0x8a/0xa0 [ 1637.480694][T29961] sysfs_do_create_link_sd+0xc0/0x110 [ 1637.486075][T29961] device_add+0x7ed/0xfb0 [ 1637.490418][T29961] wiphy_register+0x1d9f/0x2ac0 [ 1637.495293][T29961] ? cfg80211_event_work+0x40/0x40 [ 1637.500417][T29961] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1637.506577][T29961] ieee80211_register_hw+0x2d00/0x39f0 [ 1637.512059][T29961] ? ieee80211_register_hw+0xea1/0x39f0 [ 1637.517614][T29961] ? ieee80211_register_hw+0xea1/0x39f0 [ 1637.523175][T29961] ? ieee80211_tasklet_handler+0x20/0x20 [ 1637.528826][T29961] ? memset+0x1e/0x40 [ 1637.532807][T29961] ? __hrtimer_init+0x186/0x270 [ 1637.537660][T29961] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1637.543408][T29961] hwsim_new_radio_nl+0xafa/0xce0 [ 1637.548453][T29961] genl_family_rcv_msg_doit+0x22a/0x330 [ 1637.554044][T29961] ? end_current_label_crit_section+0x170/0x170 [ 1637.560311][T29961] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1637.566230][T29961] ? bpf_lsm_capable+0x5/0x10 [ 1637.570909][T29961] ? security_capable+0x85/0xb0 [ 1637.575769][T29961] genl_rcv_msg+0x604/0x790 [ 1637.580279][T29961] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1637.586448][T29961] ? genl_bind+0x360/0x360 [ 1637.590871][T29961] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1637.597218][T29961] ? lock_acquire+0x225/0x4a0 [ 1637.601916][T29961] netlink_rcv_skb+0x1fb/0x450 [ 1637.606688][T29961] ? genl_bind+0x360/0x360 [ 1637.611114][T29961] ? netlink_ack+0x1170/0x1170 [ 1637.615892][T29961] ? down_read+0x1a8/0x2d0 [ 1637.620311][T29961] genl_rcv+0x24/0x40 [ 1637.624295][T29961] netlink_unicast+0x74d/0x8d0 [ 1637.629072][T29961] netlink_sendmsg+0x8ad/0xbd0 [ 1637.633847][T29961] ? netlink_getsockopt+0x550/0x550 [ 1637.639055][T29961] ? aa_sock_msg_perm+0x94/0x150 [ 1637.643991][T29961] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1637.649275][T29961] ? security_socket_sendmsg+0x7c/0xa0 [ 1637.654745][T29961] ? netlink_getsockopt+0x550/0x550 [ 1637.659949][T29961] ____sys_sendmsg+0x5be/0x970 [ 1637.664731][T29961] ? __sys_sendmsg_sock+0x30/0x30 [ 1637.669756][T29961] ? __import_iovec+0x315/0x500 [ 1637.674640][T29961] ? import_iovec+0x6f/0xa0 [ 1637.679176][T29961] ___sys_sendmsg+0x2a2/0x360 [ 1637.683860][T29961] ? try_to_wake_up+0x6ae/0x1080 [ 1637.688806][T29961] ? __sys_sendmsg+0x290/0x290 [ 1637.693591][T29961] ? ktime_get_real_ts64+0x440/0x440 [ 1637.698894][T29961] __se_sys_sendmsg+0x1bb/0x2a0 [ 1637.703745][T29961] ? ct_nmi_exit+0x145/0x1c0 [ 1637.708337][T29961] ? __x64_sys_sendmsg+0x80/0x80 [ 1637.713310][T29961] ? lockdep_hardirqs_on+0x94/0x140 [ 1637.718519][T29961] do_syscall_64+0x4c/0xa0 [ 1637.722938][T29961] ? clear_bhb_loop+0x60/0xb0 [ 1637.727621][T29961] ? clear_bhb_loop+0x60/0xb0 [ 1637.732313][T29961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.738208][T29961] RIP: 0033:0x7fd21779acb9 [ 1637.742622][T29961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.762405][T29961] RSP: 002b:00007fd2185be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.770826][T29961] RAX: ffffffffffffffda RBX: 00007fd217a15fa0 RCX: 00007fd21779acb9 [ 1637.778818][T29961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1637.786786][T29961] RBP: 00007fd217808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1637.794764][T29961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1637.802733][T29961] R13: 00007fd217a16038 R14: 00007fd217a15fa0 R15: 00007ffe29120f08 [ 1637.810722][T29961] [ 1638.070006][T29968] bridge0: port 3(veth0_vlan) entered blocking state [ 1638.077637][T29968] bridge0: port 3(veth0_vlan) entered disabled state [ 1638.095884][T29968] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1638.435782][T29981] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1638.448902][T29981] CPU: 1 PID: 29981 Comm: syz.0.10487 Not tainted syzkaller #0 [ 1638.456505][T29981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1638.466592][T29981] Call Trace: [ 1638.469900][T29981] [ 1638.472852][T29981] dump_stack_lvl+0x188/0x24e [ 1638.477665][T29981] ? show_regs_print_info+0x12/0x12 [ 1638.482906][T29981] ? load_image+0x400/0x400 [ 1638.487459][T29981] sysfs_warn_dup+0x8a/0xa0 [ 1638.492007][T29981] sysfs_do_create_link_sd+0xc0/0x110 [ 1638.497425][T29981] device_add+0x7ed/0xfb0 [ 1638.501812][T29981] wiphy_register+0x1d9f/0x2ac0 [ 1638.506723][T29981] ? cfg80211_event_work+0x40/0x40 [ 1638.511891][T29981] ? minstrel_ht_alloc+0x894/0xa20 [ 1638.517055][T29981] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1638.523182][T29981] ieee80211_register_hw+0x2d00/0x39f0 [ 1638.528694][T29981] ? lockdep_hardirqs_on+0x94/0x140 [ 1638.533946][T29981] ? ieee80211_register_hw+0xea1/0x39f0 [ 1638.539531][T29981] ? ieee80211_register_hw+0xea1/0x39f0 [ 1638.545133][T29981] ? ieee80211_tasklet_handler+0x20/0x20 [ 1638.550827][T29981] ? memset+0x1e/0x40 [ 1638.554840][T29981] ? __hrtimer_init+0x186/0x270 [ 1638.559725][T29981] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1638.565516][T29981] hwsim_new_radio_nl+0xafa/0xce0 [ 1638.570595][T29981] genl_family_rcv_msg_doit+0x22a/0x330 [ 1638.576182][T29981] ? end_current_label_crit_section+0x170/0x170 [ 1638.582465][T29981] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1638.588413][T29981] ? bpf_lsm_capable+0x5/0x10 [ 1638.593123][T29981] ? security_capable+0x85/0xb0 [ 1638.598023][T29981] genl_rcv_msg+0x604/0x790 [ 1638.602586][T29981] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1638.608796][T29981] ? genl_bind+0x360/0x360 [ 1638.613259][T29981] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1638.619636][T29981] ? lock_acquire+0x225/0x4a0 [ 1638.624361][T29981] netlink_rcv_skb+0x1fb/0x450 [ 1638.629178][T29981] ? genl_bind+0x360/0x360 [ 1638.633645][T29981] ? netlink_ack+0x1170/0x1170 [ 1638.638470][T29981] ? down_read+0x1a8/0x2d0 [ 1638.642931][T29981] genl_rcv+0x24/0x40 [ 1638.646959][T29981] netlink_unicast+0x74d/0x8d0 [ 1638.651786][T29981] netlink_sendmsg+0x8ad/0xbd0 [ 1638.656604][T29981] ? netlink_getsockopt+0x550/0x550 [ 1638.661850][T29981] ? aa_sock_msg_perm+0x94/0x150 [ 1638.666845][T29981] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1638.672167][T29981] ? security_socket_sendmsg+0x7c/0xa0 [ 1638.677668][T29981] ? netlink_getsockopt+0x550/0x550 [ 1638.682907][T29981] ____sys_sendmsg+0x5be/0x970 [ 1638.687721][T29981] ? __sys_sendmsg_sock+0x30/0x30 [ 1638.692789][T29981] ? __import_iovec+0x315/0x500 [ 1638.697688][T29981] ? import_iovec+0x6f/0xa0 [ 1638.702247][T29981] ___sys_sendmsg+0x2a2/0x360 [ 1638.706974][T29981] ? __sys_sendmsg+0x290/0x290 [ 1638.711832][T29981] __se_sys_sendmsg+0x1bb/0x2a0 [ 1638.716712][T29981] ? ct_nmi_exit+0x145/0x1c0 [ 1638.721332][T29981] ? __x64_sys_sendmsg+0x80/0x80 [ 1638.726335][T29981] ? lockdep_hardirqs_on+0x94/0x140 [ 1638.731578][T29981] do_syscall_64+0x4c/0xa0 [ 1638.736021][T29981] ? clear_bhb_loop+0x60/0xb0 [ 1638.740723][T29981] ? clear_bhb_loop+0x60/0xb0 [ 1638.745422][T29981] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1638.751338][T29981] RIP: 0033:0x7fd21779acb9 [ 1638.755767][T29981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1638.775398][T29981] RSP: 002b:00007fd2185be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1638.783833][T29981] RAX: ffffffffffffffda RBX: 00007fd217a15fa0 RCX: 00007fd21779acb9 [ 1638.791829][T29981] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1638.799822][T29981] RBP: 00007fd217808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1638.807814][T29981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1638.815803][T29981] R13: 00007fd217a16038 R14: 00007fd217a15fa0 R15: 00007ffe29120f08 [ 1638.823815][T29981] [ 1639.307032][T29999] __nla_validate_parse: 9 callbacks suppressed [ 1639.307067][T29999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10481'. [ 1639.630493][T30019] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.10490'. [ 1639.803926][T30015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10489'. [ 1639.987449][T30029] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10494'. [ 1640.061245][T30029] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1640.089719][T30029] CPU: 0 PID: 30029 Comm: syz.0.10494 Not tainted syzkaller #0 [ 1640.097334][T30029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1640.107419][T30029] Call Trace: [ 1640.110718][T30029] [ 1640.113667][T30029] dump_stack_lvl+0x188/0x24e [ 1640.118393][T30029] ? show_regs_print_info+0x12/0x12 [ 1640.123623][T30029] ? load_image+0x400/0x400 [ 1640.128174][T30029] sysfs_warn_dup+0x8a/0xa0 [ 1640.132717][T30029] sysfs_do_create_link_sd+0xc0/0x110 [ 1640.138129][T30029] device_add+0x7ed/0xfb0 [ 1640.142508][T30029] wiphy_register+0x1d9f/0x2ac0 [ 1640.147416][T30029] ? cfg80211_event_work+0x40/0x40 [ 1640.152562][T30029] ? minstrel_ht_alloc+0x894/0xa20 [ 1640.157714][T30029] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1640.163821][T30029] ieee80211_register_hw+0x2d00/0x39f0 [ 1640.169310][T30029] ? lockdep_hardirqs_on+0x94/0x140 [ 1640.174552][T30029] ? ieee80211_register_hw+0xea1/0x39f0 [ 1640.180118][T30029] ? ieee80211_register_hw+0xea1/0x39f0 [ 1640.185685][T30029] ? ieee80211_tasklet_handler+0x20/0x20 [ 1640.191338][T30029] ? memset+0x1e/0x40 [ 1640.195316][T30029] ? __hrtimer_init+0x186/0x270 [ 1640.200607][T30029] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1640.206348][T30029] hwsim_new_radio_nl+0xafa/0xce0 [ 1640.211389][T30029] genl_family_rcv_msg_doit+0x22a/0x330 [ 1640.216940][T30029] ? end_current_label_crit_section+0x170/0x170 [ 1640.223177][T30029] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1640.229081][T30029] ? bpf_lsm_capable+0x5/0x10 [ 1640.233761][T30029] ? security_capable+0x85/0xb0 [ 1640.238615][T30029] genl_rcv_msg+0x604/0x790 [ 1640.243131][T30029] ? genl_bind+0x360/0x360 [ 1640.247548][T30029] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1640.253900][T30029] netlink_rcv_skb+0x1fb/0x450 [ 1640.258686][T30029] ? genl_bind+0x360/0x360 [ 1640.263154][T30029] ? netlink_ack+0x1170/0x1170 [ 1640.267934][T30029] ? down_read+0x1a8/0x2d0 [ 1640.272358][T30029] genl_rcv+0x24/0x40 [ 1640.276351][T30029] netlink_unicast+0x74d/0x8d0 [ 1640.281129][T30029] netlink_sendmsg+0x8ad/0xbd0 [ 1640.285898][T30029] ? lockdep_hardirqs_on+0x94/0x140 [ 1640.291107][T30029] ? netlink_getsockopt+0x550/0x550 [ 1640.296324][T30029] ? netlink_getsockopt+0x550/0x550 [ 1640.301528][T30029] ____sys_sendmsg+0x5be/0x970 [ 1640.306303][T30029] ? __sys_sendmsg_sock+0x30/0x30 [ 1640.311330][T30029] ? __import_iovec+0x315/0x500 [ 1640.316190][T30029] ? import_iovec+0x6f/0xa0 [ 1640.320688][T30029] ___sys_sendmsg+0x2a2/0x360 [ 1640.325381][T30029] ? __sys_sendmsg+0x290/0x290 [ 1640.330195][T30029] __se_sys_sendmsg+0x1bb/0x2a0 [ 1640.335062][T30029] ? __x64_sys_sendmsg+0x80/0x80 [ 1640.340030][T30029] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1640.345928][T30029] do_syscall_64+0x4c/0xa0 [ 1640.350350][T30029] ? clear_bhb_loop+0x60/0xb0 [ 1640.355030][T30029] ? clear_bhb_loop+0x60/0xb0 [ 1640.359715][T30029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1640.365612][T30029] RIP: 0033:0x7fd21779acb9 [ 1640.370043][T30029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1640.389664][T30029] RSP: 002b:00007fd2185be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1640.398084][T30029] RAX: ffffffffffffffda RBX: 00007fd217a15fa0 RCX: 00007fd21779acb9 [ 1640.406068][T30029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1640.414038][T30029] RBP: 00007fd217808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1640.422010][T30029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.430022][T30029] R13: 00007fd217a16038 R14: 00007fd217a15fa0 R15: 00007ffe29120f08 [ 1640.438012][T30029] [ 1641.445057][T30060] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10504'. [ 1641.773409][T30066] validate_nla: 9 callbacks suppressed [ 1641.773468][T30066] netlink: 'syz.4.10507': attribute type 2 has an invalid length. [ 1641.787919][T30066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10507'. [ 1641.974221][T30079] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10512'. [ 1642.557314][T30104] netlink: 'syz.3.10524': attribute type 2 has an invalid length. [ 1642.574980][T30104] netlink: 'syz.3.10524': attribute type 8 has an invalid length. [ 1642.588928][T30104] netlink: 'syz.3.10524': attribute type 9 has an invalid length. [ 1642.597092][T30104] netlink: 'syz.3.10524': attribute type 10 has an invalid length. [ 1642.608157][T30104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10524'. [ 1642.912528][T30115] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10527'. [ 1643.391180][T30125] netlink: 'syz.0.10532': attribute type 10 has an invalid length. [ 1643.500795][T30134] netlink: 'syz.4.10535': attribute type 2 has an invalid length. [ 1643.518847][T30134] netlink: 'syz.4.10535': attribute type 8 has an invalid length. [ 1643.530795][T30134] netlink: 'syz.4.10535': attribute type 9 has an invalid length. [ 1643.568422][T30134] netlink: 'syz.4.10535': attribute type 10 has an invalid length. [ 1643.577566][T30134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10535'. [ 1645.545789][T30192] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.10559'. [ 1647.858817][T30251] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.10589'. [ 1649.047398][T30277] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1650.513939][T30310] netlink: 'syz.4.10607': attribute type 10 has an invalid length. [ 1650.538015][T30310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10607'. [ 1650.555319][T30310] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1651.133625][T30336] netlink: 'syz.0.10617': attribute type 39 has an invalid length. [ 1652.601333][T30377] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10635'. [ 1653.670730][T30407] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.10646'. [ 1653.716847][T30410] device syzkaller0 entered promiscuous mode [ 1654.515713][T30438] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.10663'. [ 1655.024470][T30461] netlink: 'syz.1.10672': attribute type 39 has an invalid length. [ 1655.749715][T30483] device syzkaller0 entered promiscuous mode [ 1656.222034][T30505] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1657.442820][T30560] netlink: 'syz.0.10719': attribute type 10 has an invalid length. [ 1659.187419][T30608] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1659.949610][T30631] device syzkaller0 entered promiscuous mode [ 1664.474193][T30680] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10772'. [ 1664.840843][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10777'. [ 1666.865143][T30725] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10796'. [ 1667.913072][T30759] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10809'. [ 1668.026088][T30761] netlink: 'syz.3.10811': attribute type 3 has an invalid length. [ 1668.045862][T30761] netlink: 'syz.3.10811': attribute type 4 has an invalid length. [ 1668.078380][T30761] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.10811'. [ 1668.780285][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.786695][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.915563][T30806] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10827'. [ 1670.631195][T30811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10832'. [ 1670.665731][T30814] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1670.679116][T30814] netlink: zone id is out of range [ 1670.684280][T30814] netlink: zone id is out of range [ 1670.690229][T30814] netlink: zone id is out of range [ 1670.695521][T30814] netlink: zone id is out of range [ 1670.714450][T30814] netlink: zone id is out of range [ 1670.729103][T30814] netlink: zone id is out of range [ 1670.761699][T30819] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10831'. [ 1670.800903][T30814] netlink: zone id is out of range [ 1670.815539][T30814] netlink: zone id is out of range [ 1670.830448][T30814] netlink: zone id is out of range [ 1670.845552][T30814] netlink: zone id is out of range [ 1671.449382][T30836] netlink: 'syz.3.10841': attribute type 10 has an invalid length. [ 1672.388522][T30873] netlink: 'syz.1.10856': attribute type 10 has an invalid length. [ 1672.883723][T30896] netlink: 'syz.0.10860': attribute type 10 has an invalid length. [ 1675.973267][T30928] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.10873'. [ 1676.302222][T30935] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10877'. [ 1676.395703][T30930] netlink: 'syz.1.10876': attribute type 3 has an invalid length. [ 1676.404729][T30930] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10876'. [ 1678.019074][T30984] netlink: 'syz.0.10897': attribute type 3 has an invalid length. [ 1678.030510][T30984] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10897'. [ 1678.728722][T31001] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10910'. [ 1680.694976][T31051] device syzkaller0 entered promiscuous mode [ 1680.783390][T31057] netlink: 'syz.0.10924': attribute type 11 has an invalid length. [ 1680.818442][T31058] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10921'. [ 1680.835237][T31057] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10924'. [ 1680.930654][T31055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.816777][T31101] netlink: 'syz.2.10937': attribute type 3 has an invalid length. [ 1685.826267][T31101] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10937'. [ 1685.868627][T31106] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.10938'. [ 1685.965966][T31109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1687.094590][T31146] netlink: 'syz.2.10957': attribute type 2 has an invalid length. [ 1687.130093][T31146] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10957'. [ 1687.224547][T31152] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10959'. [ 1687.607520][T31167] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.10958'. [ 1687.622139][T31166] netlink: 'syz.4.10962': attribute type 3 has an invalid length. [ 1687.648849][T31166] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10962'. [ 1689.235942][T31202] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10977'. [ 1689.433469][T31207] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10978'. [ 1689.871192][T31218] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.10981'. [ 1691.476090][T31240] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10992'. [ 1692.901215][T31253] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.10998'. [ 1696.078384][T31294] netlink: 'syz.0.11017': attribute type 2 has an invalid length. [ 1696.086643][T31294] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11017'. [ 1697.671257][T31339] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11034'. [ 1700.483750][T31386] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11053'. [ 1702.528206][T31443] netlink: 'syz.3.11075': attribute type 10 has an invalid length. [ 1704.510005][T31497] netlink: 'syz.1.11098': attribute type 10 has an invalid length. [ 1714.069405][T31724] netlink: 'syz.2.11190': attribute type 10 has an invalid length. [ 1714.536505][T31739] netlink: 'syz.4.11196': attribute type 10 has an invalid length. [ 1714.634354][T31742] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.11197'. [ 1715.131559][T31755] netlink: 'syz.0.11201': attribute type 1 has an invalid length. [ 1715.150369][T31755] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1715.792217][T31777] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.11210'. [ 1716.274669][T31789] netlink: 'syz.1.11215': attribute type 1 has an invalid length. [ 1716.297624][T31789] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.11215'. [ 1717.120613][T31813] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.11222'. [ 1717.613400][T31828] netlink: 'syz.4.11228': attribute type 10 has an invalid length. [ 1717.929440][T31840] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.11235'. [ 1718.665235][T31860] netlink: 'syz.0.11246': attribute type 10 has an invalid length. [ 1718.931938][T31868] IPv6: Can't replace route, no match found [ 1719.002209][T31872] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.11248'. [ 1721.280852][T31905] netlink: 'syz.4.11264': attribute type 3 has an invalid length. [ 1721.294655][T31905] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11264'. [ 1721.323733][T31907] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 1721.332324][T31907] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 1721.815880][T31919] À: port 1(vlan0) entered blocking state [ 1721.823005][T31919] À: port 1(vlan0) entered disabled state [ 1721.831685][T31919] device vlan0 entered promiscuous mode [ 1722.376443][T31938] IPv6: Can't replace route, no match found [ 1722.496988][T31937] netlink: 'syz.1.11278': attribute type 3 has an invalid length. [ 1722.507403][T31937] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11278'. [ 1722.899652][T31960] À: port 1(vlan0) entered blocking state [ 1722.905503][T31960] À: port 1(vlan0) entered disabled state [ 1722.929398][T31960] device vlan0 entered promiscuous mode [ 1723.030830][T31964] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 1723.039646][T31964] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 1724.164995][T31978] netlink: 'syz.3.11294': attribute type 10 has an invalid length. [ 1724.232197][T31975] netlink: 'syz.0.11293': attribute type 3 has an invalid length. [ 1724.257944][T31975] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11293'. [ 1724.332921][T31987] IPv6: Can't replace route, no match found [ 1725.265742][T32016] netlink: 'syz.4.11308': attribute type 10 has an invalid length. [ 1726.330139][T32037] netlink: 'syz.2.11314': attribute type 3 has an invalid length. [ 1726.347995][T32037] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11314'. [ 1726.561590][T32049] IPv6: Can't replace route, no match found [ 1727.447590][T32069] netlink: 'syz.3.11332': attribute type 3 has an invalid length. [ 1727.455872][T32069] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11332'. [ 1727.634971][T32078] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1727.641841][T32078] syzkaller1: linktype set to 823 [ 1728.672163][T32096] IPv6: Can't replace route, no match found [ 1729.452348][T32119] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1729.467976][T32119] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1729.935249][T32131] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.11356'. [ 1730.220053][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.226490][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.372334][T32173] netlink: 'syz.2.11371': attribute type 5 has an invalid length. [ 1732.477626][T32208] netlink: 'syz.3.11386': attribute type 3 has an invalid length. [ 1732.489395][T32208] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11386'. [ 1732.667315][T32215] netlink: 'syz.0.11387': attribute type 5 has an invalid length. [ 1732.994988][T32219] netlink: 'syz.2.11391': attribute type 10 has an invalid length. [ 1733.048359][T32219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11391'. [ 1733.072596][T32219] device ipvlan1 entered promiscuous mode [ 1733.163045][T32219] bridge0: port 3(ipvlan1) entered blocking state [ 1733.217224][T32219] bridge0: port 3(ipvlan1) entered disabled state [ 1733.280221][T32219] net_ratelimit: 3660 callbacks suppressed [ 1733.280266][T32219] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1733.870876][T32248] netlink: 'syz.1.11401': attribute type 5 has an invalid length. [ 1734.681896][T32261] device syzkaller0 left promiscuous mode [ 1734.694599][T32261] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1734.718072][T29076] syzkaller0: tun_net_xmit 76 [ 1735.108234][T29076] syzkaller0: tun_net_xmit 76 [ 1736.134264][T32287] netlink: 'syz.4.11413': attribute type 5 has an invalid length. [ 1736.753919][T32313] netlink: 'syz.3.11425': attribute type 10 has an invalid length. [ 1736.770318][T32313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11425'. [ 1736.795798][T32313] device ipvlan1 entered promiscuous mode [ 1736.847086][T32313] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1738.036897][T32334] netlink: 'syz.3.11431': attribute type 5 has an invalid length. [ 1738.078611][T32340] netlink: 'syz.0.11442': attribute type 10 has an invalid length. [ 1738.087002][T32340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11442'. [ 1738.105488][T32340] device ipvlan1 entered promiscuous mode [ 1738.139211][T32340] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1738.797152][T32352] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1738.803993][T32352] syzkaller1: linktype set to 823 [ 1739.162791][T32374] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1740.193214][T32384] netlink: 'syz.1.11451': attribute type 10 has an invalid length. [ 1740.261832][T32384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11451'. [ 1740.292946][T32384] device ipvlan1 entered promiscuous mode [ 1740.359861][T32384] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1741.472429][T32402] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1741.488580][T32402] syzkaller1: linktype set to 823 [ 1743.282100][T32413] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.11461'. [ 1744.372445][T32429] netlink: 'syz.4.11467': attribute type 10 has an invalid length. [ 1744.382155][T32429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11467'. [ 1744.394413][T32429] device ipvlan1 entered promiscuous mode [ 1744.430174][T32429] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1745.012027][T32452] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.11475'. [ 1745.030548][T32450] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1745.042310][T32450] syzkaller1: linktype set to 823 [ 1745.063324][T32452] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 1745.071126][T32452] syzkaller0: persist enabled [ 1746.887481][T32491] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1746.897092][T32491] syzkaller1: linktype set to 823 [ 1747.118817][T32505] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.11497'. [ 1747.527997][T24162] syzkaller0: tun_net_xmit 76 [ 1747.535914][T32521] syzkaller0: tun_net_xmit 1280 [ 1747.558199][T19686] syzkaller0: tun_net_xmit 76 [ 1748.126082][T32539] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1748.133014][T32539] syzkaller1: linktype set to 823 [ 1748.749667][T32559] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.11515'. [ 1750.318853][T32588] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1750.335676][T32588] syzkaller1: linktype set to 823 [ 1750.531760][T32596] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.11531'. [ 1752.471938][T32620] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11536'. [ 1753.598505][T32635] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1753.605091][T32635] syzkaller1: linktype set to 823 [ 1755.557523][T32684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1755.570055][T32684] syzkaller1: linktype set to 823 [ 1757.798166][T21740] Bluetooth: hci0: link tx timeout [ 1757.803927][T21740] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 1757.812119][T21740] Bluetooth: hci0: link tx timeout [ 1757.817297][T21740] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:04 [ 1757.826731][T21740] Bluetooth: hci0: killing stalled connection 00:00:00:00:00:00 [ 1757.834564][T21740] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1759.427500][T32759] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.11594'. [ 1759.695874][T32767] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1759.897885][T21740] Bluetooth: hci0: command 0x0406 tx timeout [ 1760.148361][ T314] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1760.155330][ T314] syzkaller1: linktype set to 823 [ 1761.978010][T21740] Bluetooth: hci0: command 0x0406 tx timeout [ 1762.026450][ T339] netlink: 'syz.3.11610': attribute type 16 has an invalid length. [ 1762.035698][ T339] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11610'. [ 1763.199289][ T368] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1763.273048][ T372] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.11624'. [ 1763.357991][T24164] syzkaller0: tun_net_xmit 76 [ 1764.208942][ T398] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11629'. [ 1764.624109][ T414] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.11639'. [ 1765.310293][ T432] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1765.370219][ T434] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11646'. [ 1765.554498][ T442] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11648'. [ 1767.624084][ T447] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1767.810185][ T453] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1769.208913][ T492] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11667'. [ 1770.058220][ T522] device syzkaller0 entered promiscuous mode [ 1770.072508][ T522] syzkaller0: tun_net_xmit 1280 [ 1771.208046][ T553] device syzkaller0 entered promiscuous mode [ 1771.233502][ T553] syzkaller0: tun_net_xmit 1280 [ 1771.258511][T24164] syzkaller0: tun_net_xmit 76 [ 1771.315451][ T558] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11693'. [ 1772.180238][ T568] syz.3.11696 (568) used obsolete PPPIOCDETACH ioctl [ 1772.903162][ T603] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1773.815418][ T608] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.11712'. [ 1774.234938][ T628] delete_channel: no stack [ 1774.243857][ T628] delete_channel: no stack [ 1775.833284][ T657] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1776.787642][ T669] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11730'. [ 1777.000640][ T676] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.11737'. [ 1777.666271][ T697] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11746'. [ 1778.020906][ T705] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11750'. [ 1781.851480][ T746] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11765'. [ 1782.443092][ T771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11774'. [ 1783.472935][ T807] netlink: 'syz.2.11789': attribute type 9 has an invalid length. [ 1783.498476][ T807] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.11789'. [ 1786.472123][T21740] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1787.473497][ T969] netlink: 'syz.1.11847': attribute type 9 has an invalid length. [ 1787.512911][ T969] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.11847'. [ 1788.505533][ T1007] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1789.924709][T21740] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1791.659872][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.666390][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.782252][ T1124] netlink: 'syz.3.11902': attribute type 9 has an invalid length. [ 1791.791196][ T1124] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.11902'. [ 1793.455263][ T1168] netlink: 'syz.4.11915': attribute type 9 has an invalid length. [ 1793.479787][ T1168] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.11915'. [ 1794.335993][ T1199] device syzkaller0 left promiscuous mode [ 1794.348955][T29076] syzkaller0: tun_net_xmit 76 [ 1794.376389][ T1199] syzkaller0: tun_net_xmit 1280 [ 1794.388261][T29076] syzkaller0: tun_net_xmit 76 [ 1796.617983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1799.249582][ T1304] device syzkaller0 left promiscuous mode [ 1799.275151][ T1304] syzkaller0: tun_net_xmit 1280 [ 1799.288171][T29076] syzkaller0: tun_net_xmit 76 [ 1801.053173][ T1363] netlink: 'syz.4.11995': attribute type 10 has an invalid length. [ 1801.218392][ T1371] netlink: 'syz.4.11995': attribute type 29 has an invalid length. [ 1804.018884][ T1414] tap0: tun_chr_ioctl cmd 1074025675 [ 1804.031912][ T1414] tap0: persist enabled [ 1804.069836][ T1415] tap0: tun_chr_ioctl cmd 1074025675 [ 1804.075203][ T1415] tap0: persist disabled [ 1808.729304][ T1479] netlink: 'syz.3.12043': attribute type 3 has an invalid length. [ 1808.739579][ T1479] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12043'. [ 1810.393323][ T1522] netlink: 'syz.4.12063': attribute type 3 has an invalid length. [ 1810.414646][ T1522] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12063'. [ 1812.311415][ T1571] netlink: 'syz.2.12082': attribute type 3 has an invalid length. [ 1812.319756][ T1571] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12082'. [ 1813.292424][ T1581] tap0: tun_chr_ioctl cmd 1074025675 [ 1813.299420][ T1581] tap0: persist enabled [ 1813.305317][ T1581] tap0: tun_chr_ioctl cmd 1074025675 [ 1813.312789][ T1581] tap0: persist disabled [ 1813.443743][ T1590] netlink: 'syz.4.12093': attribute type 10 has an invalid length. [ 1813.592185][ T1595] netlink: 'syz.3.12096': attribute type 13 has an invalid length. [ 1813.601079][ T1595] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12096'. [ 1816.331541][ T1596] netlink: 'syz.2.12094': attribute type 1 has an invalid length. [ 1816.955080][ T1622] netlink: 'syz.0.12104': attribute type 3 has an invalid length. [ 1816.969627][ T1622] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12104'. [ 1821.976686][ T1682] netlink: 'syz.3.12130': attribute type 10 has an invalid length. [ 1823.930173][ T1698] netlink: 'syz.2.12136': attribute type 10 has an invalid length. [ 1823.991786][ T1705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1824.301229][ T1713] netlink: 'syz.4.12143': attribute type 13 has an invalid length. [ 1824.311123][ T1713] netlink: 160 bytes leftover after parsing attributes in process `syz.4.12143'. [ 1824.361063][ T1718] netlink: 'syz.1.12144': attribute type 10 has an invalid length. [ 1824.466759][ T1721] netlink: 'syz.2.12146': attribute type 10 has an invalid length. [ 1824.557099][ T1721] device vlan0 left promiscuous mode [ 1824.573837][ T1721] À: port 1(vlan0) entered disabled state [ 1824.921683][ T1730] device syzkaller0 entered promiscuous mode [ 1825.214912][ T1743] netlink: 'syz.0.12153': attribute type 10 has an invalid length. [ 1825.455090][ T1754] netlink: 'syz.2.12158': attribute type 13 has an invalid length. [ 1825.494156][ T1754] netlink: 160 bytes leftover after parsing attributes in process `syz.2.12158'. [ 1826.568296][ T1794] netlink: 'syz.1.12169': attribute type 10 has an invalid length. [ 1827.077011][ T1810] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1827.110352][ T1810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1827.478715][ T1821] netlink: 'syz.1.12176': attribute type 3 has an invalid length. [ 1827.529800][ T1821] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12176'. [ 1827.817537][ T1839] netlink: 'syz.2.12184': attribute type 10 has an invalid length. [ 1827.995843][ T1845] netlink: 'syz.3.12186': attribute type 10 has an invalid length. [ 1828.087458][ T1849] netlink: 'syz.1.12187': attribute type 10 has an invalid length. [ 1828.871936][ T1878] netlink: 'syz.4.12200': attribute type 3 has an invalid length. [ 1828.880895][ T1878] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12200'. [ 1829.732770][ T1880] netlink: 'syz.3.12204': attribute type 10 has an invalid length. [ 1829.831947][ T1889] netlink: 'syz.4.12201': attribute type 10 has an invalid length. [ 1829.920154][ T1890] netlink: 'syz.2.12213': attribute type 3 has an invalid length. [ 1829.978563][ T1890] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12213'. [ 1830.124879][ T1899] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1831.443378][ T1917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1832.114765][ T1945] device syzkaller0 entered promiscuous mode [ 1832.191576][ T1949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.200970][ T1949] device O3ãc¤±ÿÿ left promiscuous mode [ 1832.206780][ T1949] bridge0: port 1(O3ãc¤±ÿÿ) entered disabled state [ 1832.449722][ T1959] netlink: 'syz.4.12242': attribute type 10 has an invalid length. [ 1832.767341][ T1971] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1832.796835][ T1971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1833.188527][ T1985] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1833.499695][ T1995] netlink: 'syz.0.12247': attribute type 10 has an invalid length. [ 1833.568795][ T1995] device vlan0 left promiscuous mode [ 1833.575822][ T1995] À: port 1(vlan0) entered disabled state [ 1833.625992][ T2001] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.12251'. [ 1833.637121][ T2004] netlink: 'syz.2.12251': attribute type 10 has an invalid length. [ 1833.645337][ T2004] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12251'. [ 1833.866005][ T2006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1833.954392][ T2013] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 1833.977297][ T2013] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 1834.601123][ T2030] netlink: 'syz.0.12264': attribute type 10 has an invalid length. [ 1834.688558][ T2032] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1834.942232][ T2043] netlink: 'syz.2.12270': attribute type 21 has an invalid length. [ 1834.999954][ T2043] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12270'. [ 1835.547648][ T2067] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1836.904990][ T2101] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.12296'. [ 1836.922618][ T2101] netlink: 'syz.0.12296': attribute type 10 has an invalid length. [ 1836.937935][ T2101] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12296'. [ 1837.009267][ T2108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12297'. [ 1837.028407][ T2108] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12297'. [ 1837.058072][ T2103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12297'. [ 1837.333477][ T2122] netlink: 'syz.0.12304': attribute type 10 has an invalid length. [ 1837.449719][ T2120] netlink: 'syz.1.12303': attribute type 3 has an invalid length. [ 1837.493256][ T2120] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12303'. [ 1837.750989][ T2138] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.12311'. [ 1837.774169][ T2138] netlink: 'syz.4.12311': attribute type 10 has an invalid length. [ 1837.827994][ T2138] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12311'. [ 1838.218665][ T2156] netlink: 'syz.1.12320': attribute type 10 has an invalid length. [ 1838.229153][ T2157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12318'. [ 1840.177104][ T2173] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1840.650270][ T2188] netlink: 'syz.2.12331': attribute type 3 has an invalid length. [ 1840.659325][ T2188] __nla_validate_parse: 2 callbacks suppressed [ 1840.659514][ T2188] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12331'. [ 1840.731825][ T2194] delete_channel: no stack [ 1840.749280][ T2194] delete_channel: no stack [ 1840.844465][ T2200] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1840.854235][ T2200] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1841.574934][ T2224] netlink: 'syz.2.12351': attribute type 27 has an invalid length. [ 1841.669506][ T2224] bond0: (slave bond_slave_0): Releasing backup interface [ 1842.090428][ T2245] netlink: 'syz.1.12356': attribute type 21 has an invalid length. [ 1842.100492][ T2245] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12356'. [ 1842.283532][ T2252] netlink: 'syz.2.12359': attribute type 3 has an invalid length. [ 1842.299176][ T2252] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12359'. [ 1843.054846][ T2275] netlink: 'syz.3.12370': attribute type 21 has an invalid length. [ 1843.078371][ T2275] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12370'. [ 1843.933787][ T2312] netlink: 'syz.2.12386': attribute type 7 has an invalid length. [ 1843.958209][ T2312] netlink: 'syz.2.12386': attribute type 6 has an invalid length. [ 1843.970810][ T2311] netlink: 'syz.0.12384': attribute type 3 has an invalid length. [ 1843.986295][ T2311] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12384'. [ 1844.021373][ T2314] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1844.165137][ T2319] netlink: 'syz.2.12390': attribute type 1 has an invalid length. [ 1844.189379][ T2319] netlink: 'syz.2.12390': attribute type 4 has an invalid length. [ 1844.216222][ T2319] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12390'. [ 1844.788917][ T2337] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12407'. [ 1844.997207][ T2342] bond0: (slave bond_slave_0): Releasing backup interface [ 1845.161729][ T2353] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1845.271906][ T2351] device syzkaller0 entered promiscuous mode [ 1845.838968][ T2394] validate_nla: 3 callbacks suppressed [ 1845.838986][ T2394] netlink: 'syz.3.12418': attribute type 27 has an invalid length. [ 1846.014046][ T2394] bond0: (slave bond_slave_0): Releasing backup interface [ 1846.069437][ T2396] netlink: 'syz.2.12429': attribute type 10 has an invalid length. [ 1846.077668][ T2400] netlink: 'syz.0.12419': attribute type 7 has an invalid length. [ 1846.091815][ T2400] netlink: 'syz.0.12419': attribute type 6 has an invalid length. [ 1846.104028][ T2398] netlink: 'syz.4.12420': attribute type 3 has an invalid length. [ 1846.113204][ T2398] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.12420'. [ 1846.339323][ T2413] netlink: 'syz.4.12425': attribute type 1 has an invalid length. [ 1846.398939][ T2413] netlink: 'syz.4.12425': attribute type 4 has an invalid length. [ 1846.409616][ T2413] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12425'. [ 1846.822338][ T2435] netlink: 'syz.4.12435': attribute type 7 has an invalid length. [ 1846.858182][ T2435] netlink: 'syz.4.12435': attribute type 6 has an invalid length. [ 1846.883744][ T2440] netlink: 'syz.1.12436': attribute type 10 has an invalid length. [ 1847.191500][ T2465] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12445'. [ 1848.106472][ T2503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12458'. [ 1848.503512][ T2527] bond0: (slave bond_slave_0): Releasing backup interface [ 1849.420665][ T2562] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1849.432298][ T2562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12482'. [ 1849.598180][T24164] syzkaller0: tun_net_xmit 76 [ 1852.525485][ T2595] validate_nla: 4 callbacks suppressed [ 1852.525519][ T2595] netlink: 'syz.3.12490': attribute type 3 has an invalid length. [ 1852.547883][ T2595] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.12490'. [ 1853.109877][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.116536][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.261059][ T2631] netlink: 'syz.3.12504': attribute type 1 has an invalid length. [ 1853.278070][ T2631] netlink: 'syz.3.12504': attribute type 4 has an invalid length. [ 1853.288696][ T2631] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12504'. [ 1853.514103][ T2640] netlink: 'syz.2.12507': attribute type 3 has an invalid length. [ 1853.529106][ T2640] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.12507'. [ 1853.760531][ T2657] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1853.782294][ T2657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12513'. [ 1853.847525][ T2659] device wlan0 left promiscuous mode [ 1853.878609][ T2659] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 1854.098010][T24164] syzkaller0: tun_net_xmit 76 [ 1854.325138][ T2679] netlink: 'syz.3.12523': attribute type 9 has an invalid length. [ 1854.338306][ T2679] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.12523'. [ 1854.605137][ T2694] netlink: 'syz.1.12528': attribute type 3 has an invalid length. [ 1854.621573][ T2694] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1854.771837][ T2703] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1854.799792][ T2703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12530'. [ 1854.914940][ T2708] device wlan0 left promiscuous mode [ 1855.002923][ T2708] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 [ 1855.010855][ T4379] syzkaller0: tun_net_xmit 76 [ 1855.391206][ T2739] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1855.414691][ T2739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12545'. [ 1855.446287][ T2736] netlink: 'syz.0.12541': attribute type 3 has an invalid length. [ 1855.476391][ T2736] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.12541'. [ 1858.747967][ T2767] netlink: 'syz.3.12555': attribute type 10 has an invalid length. [ 1858.771215][ T2775] netlink: 'syz.4.12557': attribute type 27 has an invalid length. [ 1858.911030][ T2775] bond0: (slave bond_slave_0): Releasing backup interface [ 1859.207172][ T2801] netlink: 'syz.0.12563': attribute type 3 has an invalid length. [ 1859.234306][ T2801] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.12563'. [ 1859.800888][ T2835] netlink: 'syz.2.12571': attribute type 10 has an invalid length. [ 1861.028997][ T2883] netlink: 'syz.0.12590': attribute type 10 has an invalid length. [ 1861.364185][ T2895] netlink: 'syz.4.12596': attribute type 1 has an invalid length. [ 1861.378230][ T2895] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.12596'. [ 1862.058449][ T2925] netlink: 'syz.2.12608': attribute type 10 has an invalid length. [ 1862.732316][ T2951] netlink: 'syz.1.12616': attribute type 1 has an invalid length. [ 1862.781131][ T2951] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12616'. [ 1863.033765][ T2959] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.12623'. [ 1863.311873][ T2972] netlink: 'syz.2.12627': attribute type 17 has an invalid length. [ 1863.346389][ T2972] netlink: 'syz.2.12627': attribute type 16 has an invalid length. [ 1863.368982][ T2972] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12627'. [ 1863.682222][ T2985] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.12633'. [ 1863.963081][ T2999] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.12638'. [ 1865.732327][ T3023] validate_nla: 4 callbacks suppressed [ 1865.732347][ T3023] netlink: 'syz.4.12643': attribute type 10 has an invalid length. [ 1866.013392][ T3027] netlink: 'syz.1.12648': attribute type 10 has an invalid length. [ 1866.249376][ T3035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1866.276631][ T3035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1866.298514][ T3035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1866.306233][ T3035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1866.316942][ T3035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1866.327449][ T3035] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1866.570784][ T3044] netlink: 'syz.3.12652': attribute type 1 has an invalid length. [ 1866.576532][ T3045] netlink: 'syz.1.12664': attribute type 10 has an invalid length. [ 1866.587964][ T3044] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.12652'. [ 1867.484502][ T3077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1867.508441][ T3077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1867.570241][ T3077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1867.610043][ T3077] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1867.990135][ T3100] netlink: 'syz.0.12675': attribute type 10 has an invalid length. [ 1868.355482][ T3114] netlink: 'syz.0.12693': attribute type 10 has an invalid length. [ 1869.752722][ T3148] netlink: 'syz.0.12706': attribute type 10 has an invalid length. [ 1870.774314][ T3181] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.12710'. [ 1871.021759][T21740] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 1871.583198][ T3204] netlink: 'syz.0.12718': attribute type 10 has an invalid length. [ 1872.031722][ T3217] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.12724'. [ 1872.737529][ T3235] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1872.794325][ T3235] netlink: 'syz.2.12728': attribute type 29 has an invalid length. [ 1872.825621][ T3235] netlink: 'syz.2.12728': attribute type 29 has an invalid length. [ 1872.852682][ T3239] netlink: 'syz.2.12728': attribute type 29 has an invalid length. [ 1872.876221][ T3235] netlink: 'syz.2.12728': attribute type 29 has an invalid length. [ 1873.155995][ T3248] netlink: 'syz.2.12733': attribute type 10 has an invalid length. [ 1873.320813][ T3252] device syzkaller0 left promiscuous mode [ 1873.793295][ T3262] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.12739'. [ 1875.509788][ T3287] delete_channel: no stack [ 1875.564993][ T3292] netlink: 'syz.0.12749': attribute type 10 has an invalid length. [ 1876.213544][ T3307] netlink: 'syz.2.12754': attribute type 39 has an invalid length. [ 1876.679718][ T3320] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.12756'. [ 1877.259341][ T3340] netlink: 'syz.3.12764': attribute type 10 has an invalid length. [ 1877.964731][ T3355] netlink: 'syz.3.12779': attribute type 10 has an invalid length. [ 1879.359281][ T3392] netlink: 'syz.1.12783': attribute type 10 has an invalid length. [ 1880.680775][ T3413] netlink: 'syz.3.12786': attribute type 10 has an invalid length. [ 1880.806810][ T3415] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.12795'. [ 1880.953804][ T3417] netlink: 'syz.2.12785': attribute type 1 has an invalid length. [ 1880.992028][ T3417] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.12785'. [ 1881.272974][ T3425] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1881.517263][ T3435] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 1881.533709][ T3435] syzkaller0: persist enabled [ 1881.850735][ T3451] netlink: 'syz.3.12798': attribute type 10 has an invalid length. [ 1882.387653][ T3460] delete_channel: no stack [ 1882.815350][ T3469] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1883.106258][ T3485] netlink: 'syz.3.12812': attribute type 10 has an invalid length. [ 1883.232497][ T3486] netlink: 'syz.0.12811': attribute type 10 has an invalid length. [ 1883.330356][ T3490] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 1883.336479][ T3490] syzkaller0: persist enabled [ 1884.254971][ T3516] delete_channel: no stack [ 1884.850861][ T3524] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1884.983449][ T3538] netlink: 'syz.3.12830': attribute type 10 has an invalid length. [ 1885.508578][ T3556] net_ratelimit: 8 callbacks suppressed [ 1885.508615][ T3556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.562322][ T3556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.610513][ T3556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.650587][ T3559] delete_channel: no stack [ 1885.664307][ T3556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.717079][ T3556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.744254][ T3556] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1886.423024][ T3578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12843'. [ 1886.575966][ T3578] netlink: 'syz.3.12843': attribute type 29 has an invalid length. [ 1886.597624][ T3578] netlink: 'syz.3.12843': attribute type 29 has an invalid length. [ 1886.637997][ T3584] netlink: 'syz.3.12843': attribute type 29 has an invalid length. [ 1886.646675][ T3583] netlink: 'syz.2.12842': attribute type 10 has an invalid length. [ 1886.681284][ T3578] netlink: 'syz.3.12843': attribute type 29 has an invalid length. [ 1887.186224][ T3593] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.12845'. [ 1887.978742][ T3605] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1887.989023][ T3605] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1888.361508][ T3607] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1888.428127][ T3618] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12855'. [ 1888.437678][ T3613] netlink: 'syz.3.12854': attribute type 39 has an invalid length. [ 1888.512616][ T3618] netlink: 'syz.1.12855': attribute type 29 has an invalid length. [ 1888.658977][ T3618] netlink: 'syz.1.12855': attribute type 29 has an invalid length. [ 1888.678925][ T3623] netlink: 'syz.1.12855': attribute type 29 has an invalid length. [ 1888.687260][ T3630] netlink: 'syz.1.12855': attribute type 29 has an invalid length. [ 1888.737688][ T3625] netlink: 'syz.4.12856': attribute type 10 has an invalid length. [ 1888.803339][ T3634] netlink: 'syz.0.12860': attribute type 10 has an invalid length. [ 1891.096349][ T3667] delete_channel: no stack [ 1891.194407][ T3675] netlink: 'syz.4.12875': attribute type 10 has an invalid length. [ 1891.221922][ T3677] netlink: 'syz.2.12874': attribute type 10 has an invalid length. [ 1891.865067][ T3702] delete_channel: no stack [ 1892.107019][ T3713] netlink: 'syz.1.12891': attribute type 10 has an invalid length. [ 1892.119605][ T3709] delete_channel: no stack [ 1892.860070][ T3752] delete_channel: no stack [ 1893.803505][ T3784] delete_channel: no stack [ 1895.013134][ T3820] netlink: 'syz.0.12937': attribute type 10 has an invalid length. [ 1896.722574][ T3880] netlink: 'syz.1.12954': attribute type 39 has an invalid length. [ 1897.204934][ T3890] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 1897.211428][ T3890] syzkaller0: persist enabled [ 1897.456764][ T3900] netlink: 'syz.0.12963': attribute type 39 has an invalid length. [ 1898.029935][ T3928] netlink: 'syz.1.12973': attribute type 10 has an invalid length. [ 1898.881312][ T3947] netlink: 'syz.4.12976': attribute type 39 has an invalid length. [ 1899.108167][ T3962] netlink: 'syz.0.12983': attribute type 29 has an invalid length. [ 1901.188350][ T3961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12983'. [ 1901.208337][ T3962] netlink: 'syz.0.12983': attribute type 29 has an invalid length. [ 1901.247604][ T3966] netlink: 'syz.2.12984': attribute type 10 has an invalid length. [ 1901.540612][ T3979] netlink: 'syz.2.12992': attribute type 10 has an invalid length. [ 1902.220393][ T4001] netlink: 'syz.1.12999': attribute type 39 has an invalid length. [ 1902.326268][ T4000] device bond0 entered promiscuous mode [ 1902.335793][ T4000] device bond_slave_1 entered promiscuous mode [ 1902.354323][ T4000] device dummy0 entered promiscuous mode [ 1902.696622][ T4016] netlink: 'syz.2.13003': attribute type 10 has an invalid length. [ 1905.489069][ T4024] netlink: 'syz.4.13005': attribute type 10 has an invalid length. [ 1905.761453][ T4024] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1907.032330][ T4068] netlink: 'syz.0.13021': attribute type 10 has an invalid length. [ 1907.044751][ T4068] device netdevsim0 entered promiscuous mode [ 1907.052674][ T4068] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1907.426813][ T4089] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.13026'. [ 1907.616430][ T4098] ªªªªªª: renamed from vlan0 [ 1909.223749][ T4121] netlink: 'syz.1.13034': attribute type 10 has an invalid length. [ 1909.264424][ T4121] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1909.580066][ T4135] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1909.601550][ T4139] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.13045'. [ 1909.614903][ T4139] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.13045'. [ 1909.624482][ T4139] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13045'. [ 1909.809545][ T4150] ªªªªªª: renamed from vlan0 [ 1910.855890][ T4173] netlink: 'syz.3.13056': attribute type 10 has an invalid length. [ 1910.889410][ T4173] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1914.192747][ T4196] ªªªªªª: renamed from vlan0 [ 1914.540229][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.546583][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.146160][ T4226] netlink: 'syz.1.13076': attribute type 10 has an invalid length. [ 1915.366263][ T4237] netlink: 'syz.4.13080': attribute type 10 has an invalid length. [ 1919.062624][ T4285] netlink: 'syz.3.13092': attribute type 10 has an invalid length. [ 1920.042622][ T4318] device bond0 entered promiscuous mode [ 1920.066327][ T4318] device bond_slave_1 entered promiscuous mode [ 1920.101136][ T4318] device batadv_slave_0 entered promiscuous mode [ 1920.135883][ T4318] device netdevsim0 entered promiscuous mode [ 1923.706217][ T4367] netlink: 'syz.0.13110': attribute type 10 has an invalid length. [ 1924.322313][ T4393] netlink: 'syz.2.13117': attribute type 10 has an invalid length. [ 1927.752255][ T4408] netlink: 'syz.1.13125': attribute type 10 has an invalid length. [ 1927.930312][ T4422] netlink: 'syz.2.13128': attribute type 10 has an invalid length. [ 1928.278110][ T4426] netlink: 'syz.1.13132': attribute type 3 has an invalid length. [ 1928.318136][ T4426] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13132'. [ 1928.566196][ T4436] netlink: 'syz.0.13133': attribute type 10 has an invalid length. [ 1928.867980][ T4446] device bond0 entered promiscuous mode [ 1928.898625][ T4446] device bond_slave_1 entered promiscuous mode [ 1928.916962][ T4446] device netdevsim0 entered promiscuous mode [ 1929.280108][ T4459] device bond0 entered promiscuous mode [ 1929.286011][ T4459] device bond_slave_1 entered promiscuous mode [ 1929.318429][ T4459] device bridge_slave_1 entered promiscuous mode [ 1929.325143][ T4459] device netdevsim0 entered promiscuous mode [ 1929.551836][ T4463] netlink: 'syz.2.13146': attribute type 3 has an invalid length. [ 1929.575270][ T4463] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.13146'. [ 1929.682821][ T4473] netlink: 'syz.4.13145': attribute type 10 has an invalid length. [ 1930.111761][ T4488] netlink: 'syz.2.13151': attribute type 10 has an invalid length. [ 1930.341785][ T4492] netlink: 'syz.1.13165': attribute type 10 has an invalid length. [ 1931.182061][ T4518] device bond0 entered promiscuous mode [ 1931.215722][ T4518] device bond_slave_1 entered promiscuous mode [ 1931.255929][ T4518] device netdevsim0 entered promiscuous mode [ 1931.307672][ T4529] netlink: 'syz.4.13166': attribute type 10 has an invalid length. [ 1931.577593][ T4538] netlink: 'syz.4.13171': attribute type 10 has an invalid length. [ 1932.255236][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13179'. [ 1932.263306][ T4570] netlink: 'syz.0.13182': attribute type 10 has an invalid length. [ 1932.312947][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13179'. [ 1932.416057][ T4573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13179'. [ 1932.722686][ T4584] netlink: 'syz.0.13193': attribute type 10 has an invalid length. [ 1933.184738][ T4593] netlink: 'syz.1.13186': attribute type 10 has an invalid length. [ 1933.719735][ T4616] netlink: 'syz.4.13197': attribute type 10 has an invalid length. [ 1933.923177][ T4622] tap0: tun_chr_ioctl cmd 1074025675 [ 1933.937288][ T4622] tap0: persist enabled [ 1933.949753][ T4622] tap0: tun_chr_ioctl cmd 1074025675 [ 1933.957383][ T4622] tap0: persist disabled [ 1934.569832][ T4642] netlink: 'syz.0.13204': attribute type 10 has an invalid length. [ 1934.668713][ T4647] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13206'. [ 1934.695653][ T4647] openvswitch: netlink: Message has 6 unknown bytes. [ 1934.873758][ T4658] netlink: 'syz.1.13211': attribute type 10 has an invalid length. [ 1934.888901][ T4661] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13212'. [ 1934.919959][ T4661] device hsr_slave_0 left promiscuous mode [ 1935.574579][ T4687] netlink: 'syz.1.13220': attribute type 10 has an invalid length. [ 1936.773948][ T4723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13235'. [ 1936.807730][ T4723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13235'. [ 1936.868496][ T4727] netlink: 'syz.2.13234': attribute type 10 has an invalid length. [ 1936.934180][ T4730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13235'. [ 1937.088744][ T4737] netlink: 'syz.0.13237': attribute type 10 has an invalid length. [ 1937.731946][ T4757] tap0: tun_chr_ioctl cmd 1074025675 [ 1937.744948][ T4757] tap0: persist enabled [ 1937.755835][ T4757] tap0: tun_chr_ioctl cmd 1074025675 [ 1937.763638][ T4757] tap0: persist disabled [ 1937.902478][ T4768] netlink: 'syz.4.13249': attribute type 10 has an invalid length. [ 1937.922333][ T4768] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13249'. [ 1938.111309][ T4776] netlink: 'syz.1.13252': attribute type 10 has an invalid length. [ 1938.214402][ T4782] netlink: 'syz.4.13253': attribute type 10 has an invalid length. [ 1938.373734][ T4788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13257'. [ 1938.399510][ T4788] device hsr_slave_0 left promiscuous mode [ 1938.501803][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13258'. [ 1938.545528][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13258'. [ 1938.669717][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13258'. [ 1938.911831][ T4807] device hsr_slave_0 left promiscuous mode [ 1939.033055][ T4813] netlink: 'syz.3.13266': attribute type 10 has an invalid length. [ 1939.191521][ T4815] netlink: 'syz.4.13268': attribute type 10 has an invalid length. [ 1939.926302][ T4842] __nla_validate_parse: 3 callbacks suppressed [ 1939.926348][ T4842] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13280'. [ 1940.006041][ T4842] openvswitch: netlink: Message has 6 unknown bytes. [ 1940.277279][ T4859] validate_nla: 4 callbacks suppressed [ 1940.277319][ T4859] netlink: 'syz.1.13285': attribute type 10 has an invalid length. [ 1940.297274][ T4860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1940.367621][ T4860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1940.594556][ T4856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13283'. [ 1940.657426][ T4872] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13290'. [ 1940.684786][ T4864] tap0: tun_chr_ioctl cmd 1074025675 [ 1940.697976][ T4864] tap0: persist enabled [ 1940.718252][ T4864] tap0: tun_chr_ioctl cmd 1074025675 [ 1940.723837][ T4864] tap0: persist disabled [ 1941.076323][ T4893] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13296'. [ 1941.087148][ T4893] openvswitch: netlink: Message has 6 unknown bytes. [ 1941.141290][ T4887] tap0: tun_chr_ioctl cmd 1074025675 [ 1941.147079][ T4887] tap0: persist enabled [ 1941.154644][ T4887] tap0: tun_chr_ioctl cmd 1074025675 [ 1941.167121][ T4887] tap0: persist disabled [ 1941.454722][ T4902] netlink: 'syz.0.13300': attribute type 10 has an invalid length. [ 1941.626492][ T4913] netlink: 'syz.1.13301': attribute type 10 has an invalid length. [ 1941.658029][ T4913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13301'. [ 1941.703021][ T4913] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1941.937031][ T4919] netlink: 'syz.3.13308': attribute type 3 has an invalid length. [ 1941.952928][ T4919] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13308'. [ 1942.119613][ T4924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13311'. [ 1942.152954][ T4924] openvswitch: netlink: Message has 6 unknown bytes. [ 1942.265129][ T4929] tap0: tun_chr_ioctl cmd 1074025675 [ 1942.273150][ T4929] tap0: persist enabled [ 1942.281822][ T4929] tap0: tun_chr_ioctl cmd 1074025675 [ 1942.309975][ T4929] tap0: persist disabled [ 1942.571165][ T4939] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13324'. [ 1942.760628][ T4943] netlink: 'syz.3.13316': attribute type 10 has an invalid length. [ 1942.943220][ T4948] netlink: 'syz.0.13317': attribute type 21 has an invalid length. [ 1942.961761][ T4948] netlink: 'syz.0.13317': attribute type 5 has an invalid length. [ 1942.988099][ T4948] netlink: 'syz.0.13317': attribute type 6 has an invalid length. [ 1943.254974][ T4961] netlink: 'syz.2.13322': attribute type 10 has an invalid length. [ 1943.267479][ T4961] device dummy0 entered promiscuous mode [ 1943.284899][ T4961] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1943.324688][ T4963] netlink: 'syz.0.13323': attribute type 10 has an invalid length. [ 1943.351140][ T4963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.622543][ T5008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.655453][ T5012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1944.665660][ T5012] IPv6: NLM_F_CREATE should be set when creating new route [ 1944.673748][ T5012] IPv6: NLM_F_CREATE should be set when creating new route [ 1944.682890][ T5012] IPv6: NLM_F_CREATE should be set when creating new route [ 1945.104639][ T5026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1945.122207][ T5026] device hsr0 entered promiscuous mode [ 1945.151627][ T5026] __nla_validate_parse: 6 callbacks suppressed [ 1945.151662][ T5026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13348'. [ 1945.202560][ T5026] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1945.639633][T21740] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23 [ 1945.653749][ T5048] validate_nla: 7 callbacks suppressed [ 1945.653782][ T5048] netlink: 'syz.2.13357': attribute type 10 has an invalid length. [ 1945.684244][ T5048] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1945.846664][ T5055] netlink: 'syz.0.13359': attribute type 10 has an invalid length. [ 1945.985964][ T5058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1946.008015][ T5058] device hsr0 entered promiscuous mode [ 1946.037291][ T5061] netlink: 'syz.1.13361': attribute type 10 has an invalid length. [ 1946.048497][ T5062] netlink: 'syz.3.13363': attribute type 10 has an invalid length. [ 1946.057679][ T5062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13363'. [ 1946.072822][ T5062] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1946.680715][ T5087] netlink: 'syz.4.13370': attribute type 10 has an invalid length. [ 1950.026391][ T5111] netlink: 'syz.0.13376': attribute type 10 has an invalid length. [ 1950.089089][ T5111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13376'. [ 1950.108935][ T5111] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1950.194884][ T5115] netlink: 'syz.1.13377': attribute type 10 has an invalid length. [ 1952.386610][ T5148] netlink: 'syz.1.13388': attribute type 10 has an invalid length. [ 1952.678354][ T5158] netlink: 'syz.1.13392': attribute type 10 has an invalid length. [ 1953.056643][ T5169] netlink: 'syz.1.13406': attribute type 10 has an invalid length. [ 1953.158218][ T5175] device lo left promiscuous mode [ 1953.177472][ T5175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1953.201504][ T5177] netlink: 'syz.4.13396': attribute type 10 has an invalid length. [ 1953.217086][ T5177] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13396'. [ 1953.240352][ T5177] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1953.374018][ T5184] netlink: 'syz.3.13402': attribute type 10 has an invalid length. [ 1953.527470][ T5192] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.13404'. [ 1953.546297][ T5192] device syzkaller0 entered promiscuous mode [ 1954.544507][ T5228] netlink: 'syz.0.13415': attribute type 10 has an invalid length. [ 1957.653066][T21740] Bluetooth: hci2: unexpected event 0x18 length: 151 > 23 [ 1959.474318][ T5262] netlink: 'syz.0.13427': attribute type 10 has an invalid length. [ 1959.516524][ T5262] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1959.612134][ T5264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1959.818640][ T5275] netlink: 'syz.1.13432': attribute type 10 has an invalid length. [ 1962.960446][ T5288] netlink: 'syz.3.13436': attribute type 3 has an invalid length. [ 1962.990060][ T5288] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.13436'. [ 1963.260017][ T5301] netlink: 'syz.3.13442': attribute type 10 has an invalid length. [ 1963.269475][ T5301] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1963.432974][ T5307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1963.554500][ T5310] netlink: 'syz.3.13447': attribute type 2 has an invalid length. [ 1963.576943][ T5310] netlink: 'syz.3.13447': attribute type 1 has an invalid length. [ 1963.596174][ T5310] netlink: 'syz.3.13447': attribute type 8 has an invalid length. [ 1963.616148][ T5310] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13447'. [ 1963.656146][ T5320] netlink: 'syz.4.13449': attribute type 10 has an invalid length. [ 1963.676238][ T5320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13449'. [ 1964.226802][ T5336] netlink: 'syz.2.13457': attribute type 3 has an invalid length. [ 1964.253205][ T5336] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13457'. [ 1965.208379][ T5358] netlink: 'syz.2.13465': attribute type 10 has an invalid length. [ 1965.231483][ T5358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13465'. [ 1965.408075][T29076] syzkaller0: tun_net_xmit 76 [ 1966.826886][ T5398] netlink: 'syz.2.13480': attribute type 10 has an invalid length. [ 1966.848919][ T5398] bond0: (slave netdevsim0): Releasing backup interface [ 1966.872879][ T5398] device netdevsim0 left promiscuous mode [ 1967.044283][ T5413] netlink: 'syz.0.13485': attribute type 2 has an invalid length. [ 1967.068196][ T5413] netlink: 'syz.0.13485': attribute type 1 has an invalid length. [ 1967.083359][ T5413] netlink: 'syz.0.13485': attribute type 8 has an invalid length. [ 1967.093765][ T5413] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13485'. [ 1969.757500][ T5446] netlink: 'syz.4.13498': attribute type 2 has an invalid length. [ 1969.800621][ T5446] netlink: 'syz.4.13498': attribute type 1 has an invalid length. [ 1969.818304][ T5446] netlink: 'syz.4.13498': attribute type 8 has an invalid length. [ 1969.858282][ T5446] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13498'. [ 1969.898576][ T4379] syzkaller0: tun_net_xmit 76 [ 1969.970303][ T4379] syzkaller0: tun_net_xmit 76 [ 1970.086630][ T5458] netlink: 'syz.4.13500': attribute type 10 has an invalid length. [ 1970.116561][ T5458] bond0: (slave netdevsim0): Releasing backup interface [ 1970.141131][ T5458] device netdevsim0 left promiscuous mode [ 1972.487078][ T5478] netlink: 'syz.1.13514': attribute type 2 has an invalid length. [ 1972.506801][ T5478] netlink: 'syz.1.13514': attribute type 1 has an invalid length. [ 1972.521086][ T5478] netlink: 'syz.1.13514': attribute type 8 has an invalid length. [ 1972.530676][ T5478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13514'. [ 1972.779451][ T5497] netlink: 'syz.4.13520': attribute type 10 has an invalid length. [ 1972.807904][ T5497] netlink: 55 bytes leftover after parsing attributes in process `syz.4.13520'. [ 1972.895287][T21740] Bluetooth: hci0: unexpected event 0x30 length: 82 > 3 [ 1973.394947][ T5519] netlink: 'syz.3.13530': attribute type 10 has an invalid length. [ 1973.875102][ T5541] netlink: 'syz.0.13538': attribute type 10 has an invalid length. [ 1973.917083][ T5541] bond0: (slave netdevsim0): Releasing backup interface [ 1973.930076][ T5541] device netdevsim0 left promiscuous mode [ 1974.032075][ T5547] netlink: 'syz.2.13541': attribute type 10 has an invalid length. [ 1974.322583][ T5555] netlink: 'syz.0.13544': attribute type 10 has an invalid length. [ 1974.580036][ T5561] netlink: 'syz.0.13546': attribute type 10 has an invalid length. [ 1974.607943][ T5561] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13546'. [ 1974.625875][ T5565] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.13549'. [ 1975.115656][ T5579] netlink: 'syz.1.13555': attribute type 10 has an invalid length. [ 1975.141552][ T5579] bond0: (slave netdevsim0): Releasing backup interface [ 1975.158818][ T5579] device netdevsim0 left promiscuous mode [ 1975.508184][ T4379] syzkaller0: tun_net_xmit 76 [ 1975.979337][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.986834][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.498759][ T5618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1976.506989][ T5618] IPv6: NLM_F_CREATE should be set when creating new route [ 1976.516203][ T5618] IPv6: NLM_F_CREATE should be set when creating new route [ 1976.524767][ T5618] IPv6: NLM_F_CREATE should be set when creating new route [ 1976.740169][ T5624] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.13571'. [ 1977.485465][ T5650] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.13582'. [ 1977.704455][ T5659] validate_nla: 3 callbacks suppressed [ 1977.704569][ T5659] netlink: 'syz.3.13586': attribute type 10 has an invalid length. [ 1977.721656][ T5659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13586'. [ 1977.848847][ T5661] netlink: 'syz.1.13585': attribute type 10 has an invalid length. [ 1978.301626][ T5670] netlink: 'syz.1.13590': attribute type 10 has an invalid length. [ 1978.459603][ T5683] netlink: 'syz.2.13597': attribute type 10 has an invalid length. [ 1978.467656][ T5683] netlink: 55 bytes leftover after parsing attributes in process `syz.2.13597'. [ 1979.018269][T11723] Bluetooth: hci0: command 0x0406 tx timeout [ 1979.060898][ T5698] netlink: 'syz.4.13600': attribute type 10 has an invalid length. [ 1979.063695][ T5697] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.13601'. [ 1979.420632][ T5715] netlink: 'syz.4.13606': attribute type 10 has an invalid length. [ 1979.488856][ T4379] syzkaller0: tun_net_xmit 76 [ 1980.000465][T11723] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 1980.125905][ T5733] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1980.142665][ T5733] #PF: supervisor instruction fetch in kernel mode [ 1980.153320][ T5733] #PF: error_code(0x0010) - not-present page [ 1980.161336][ T5733] PGD 26342067 P4D 26342067 PUD 0 [ 1980.167992][ T5733] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1980.173580][ T5733] CPU: 0 PID: 5733 Comm: syz.0.13623 Not tainted syzkaller #0 [ 1980.181885][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1980.193897][ T5733] RIP: 0010:0x0 [ 1980.197697][ T5733] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1980.205506][ T5733] RSP: 0018:ffffc9000344f458 EFLAGS: 00010246 [ 1980.212628][ T5733] RAX: 1ffffffff162942f RBX: 1ffff92000689e9c RCX: 0000000000000001 [ 1980.221507][ T5733] RDX: ffffc9000344f500 RSI: 0000000000000001 RDI: ffff88802eb3c000 [ 1980.229859][ T5733] RBP: ffffc9000344f570 R08: ffff88802eb3c03f R09: 1ffff11005d67807 [ 1980.238034][ T5733] R10: dffffc0000000000 R11: ffffed1005d67808 R12: ffffe8ffffca5ee8 [ 1980.246120][ T5733] R13: ffffffff8b14a178 R14: 0000000000000000 R15: ffff88802eb3c000 [ 1980.255594][ T5733] FS: 00007fd2185be6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1980.264894][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1980.271722][ T5733] CR2: ffffffffffffffd6 CR3: 0000000078473000 CR4: 00000000003506f0 [ 1980.279857][ T5733] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1980.288117][ T5733] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1980.296379][ T5733] Call Trace: [ 1980.299662][ T5733] [ 1980.302814][ T5733] bond_xdp_xmit+0x31e/0x550 [ 1980.308286][ T5733] ? bond_xdp_xmit+0x94/0x550 [ 1980.313096][ T5733] ? bond_xdp+0x850/0x850 [ 1980.317453][ T5733] ? __next_zones_zonelist+0x99/0x120 [ 1980.323007][ T5733] bq_xmit_all+0xd3f/0x11b0 [ 1980.328204][ T5733] ? zone_statistics+0x170/0x170 [ 1980.334388][ T5733] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1980.340778][ T5733] ? __dev_flush+0x1b0/0x1b0 [ 1980.345633][ T5733] ? __alloc_pages_bulk+0x49a/0x920 [ 1980.351662][ T5733] ? xdp_test_run_init_page+0x33b/0x440 [ 1980.357723][ T5733] ? memcpy+0x3c/0x60 [ 1980.361990][ T5733] ? rcu_is_watching+0x11/0xa0 [ 1980.367247][ T5733] ? bq_enqueue+0x2ee/0x3d0 [ 1980.371859][ T5733] ? rcu_is_watching+0x11/0xa0 [ 1980.376774][ T5733] ? trace_xdp_redirect+0xb3/0x2b0 [ 1980.382642][ T5733] __dev_flush+0xbf/0x1b0 [ 1980.387634][ T5733] xdp_do_flush+0xa/0x20 [ 1980.391885][ T5733] bpf_test_run_xdp_live+0x1545/0x1a90 [ 1980.397457][ T5733] ? 0xffffffffa0004440 [ 1980.401666][ T5733] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 1980.409413][ T5733] ? xdp_convert_md_to_buff+0x330/0x330 [ 1980.416802][ T5733] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1980.423518][ T5733] ? bpf_test_init+0x119/0x140 [ 1980.428605][ T5733] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1980.436095][ T5733] bpf_prog_test_run_xdp+0x736/0xf10 [ 1980.441854][ T5733] ? lock_chain_count+0x20/0x20 [ 1980.447712][ T5733] ? dev_put+0x80/0x80 [ 1980.451986][ T5733] ? dev_put+0x80/0x80 [ 1980.456906][ T5733] bpf_prog_test_run+0x31e/0x390 [ 1980.464691][ T5733] __sys_bpf+0x62b/0x780 [ 1980.470147][ T5733] ? bpf_link_show_fdinfo+0x380/0x380 [ 1980.475840][ T5733] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1980.482912][ T5733] __x64_sys_bpf+0x78/0x90 [ 1980.488543][ T5733] do_syscall_64+0x4c/0xa0 [ 1980.493759][ T5733] ? clear_bhb_loop+0x60/0xb0 [ 1980.499699][ T5733] ? clear_bhb_loop+0x60/0xb0 [ 1980.504837][ T5733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1980.511063][ T5733] RIP: 0033:0x7fd21779acb9 [ 1980.515789][ T5733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1980.538388][ T5733] RSP: 002b:00007fd2185be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1980.547521][ T5733] RAX: ffffffffffffffda RBX: 00007fd217a15fa0 RCX: 00007fd21779acb9 [ 1980.556095][ T5733] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 1980.565792][ T5733] RBP: 00007fd217808bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1980.576004][ T5733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1980.584205][ T5733] R13: 00007fd217a16038 R14: 00007fd217a15fa0 R15: 00007ffe29120f08 [ 1980.592664][ T5733] [ 1980.596127][ T5733] Modules linked in: [ 1980.600212][ T5733] CR2: 0000000000000000 [ 1980.605941][ T5733] ---[ end trace 0000000000000000 ]--- [ 1980.612291][ T5733] RIP: 0010:0x0 [ 1980.616043][ T5733] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1980.623953][ T5733] RSP: 0018:ffffc9000344f458 EFLAGS: 00010246 [ 1980.630942][ T5733] RAX: 1ffffffff162942f RBX: 1ffff92000689e9c RCX: 0000000000000001 [ 1980.642430][ T5733] RDX: ffffc9000344f500 RSI: 0000000000000001 RDI: ffff88802eb3c000 [ 1980.651680][ T5733] RBP: ffffc9000344f570 R08: ffff88802eb3c03f R09: 1ffff11005d67807 [ 1980.661765][ T5733] R10: dffffc0000000000 R11: ffffed1005d67808 R12: ffffe8ffffca5ee8 [ 1980.670210][ T5733] R13: ffffffff8b14a178 R14: 0000000000000000 R15: ffff88802eb3c000 [ 1980.679081][ T5733] FS: 00007fd2185be6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1980.688717][ T5733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1980.696456][ T5733] CR2: ffffffffffffffd6 CR3: 0000000078473000 CR4: 00000000003506f0 [ 1980.707942][ T5733] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1980.717309][ T5733] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1980.725481][ T5733] Kernel panic - not syncing: Fatal exception in interrupt [ 1980.733365][ T5733] Kernel Offset: disabled [ 1980.738134][ T5733] Rebooting in 86400 seconds..