last executing test programs: 19m54.852217969s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff80850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x11, 0xe, 0x0, &(0x7f00000009c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m54.24296576s ago: executing program 3 (id=11): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 19m54.132160123s ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 19m53.958009656s ago: executing program 3 (id=13): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 19m53.513027704s ago: executing program 3 (id=17): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 19m53.493162784s ago: executing program 2 (id=18): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 19m52.15527045s ago: executing program 3 (id=26): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) 19m51.772723688s ago: executing program 32 (id=26): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20) 19m51.744707428s ago: executing program 2 (id=30): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 19m51.66258156s ago: executing program 33 (id=30): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m27.66613869s ago: executing program 6 (id=6185): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) syz_clone(0x100d500, &(0x7f0000000000)="2377a6fc716cfb83f50f2647afb0fba29b27f50f10f3afb545ba72b0ff0959f1354d1fbffe87af4798c8feae9ba568b1a1e3250230675ba8a3db461d35b2cb559b1569946e41d77d2a3cb3f73da58ed9e531701b3a73dae177ccd7e1b64c8434c59859ccb0fbfa1511ec0f6a20df88cf6401d6bce3357ba8fc2f946eefda7e1fbdde49308f6b0fd65cc898fa0390c7728066b38ca4e1314e54b8ea177b6cd952d732f69f5b308acb88218583b0e65fbb26ae59c1aa3dcf5cf1a0f368082f542e75e1b4c8d40f4d5f", 0xc8, 0x0, 0x0, &(0x7f0000000200)="7293f2bb2895d2f03e743f1f0b6d5028f1dacac03b7d6f53a0fb427964134d9bcf7526f231db7e82f70cbdedebb97d17dc897303ccff33383df6b80da281f534da986b21f659be257b464d930891948666f18d44232b957a48cd96eba041c416c3310a37c9e41d") 1m24.662134198s ago: executing program 6 (id=6186): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r2, &(0x7f00000038c0)={&(0x7f00000026c0)=@generic, 0x80, 0x0}, 0x0) 1m24.307755565s ago: executing program 6 (id=6190): socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = socket$kcm(0xa, 0x6, 0x0) recvmsg(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) 1m23.355810283s ago: executing program 6 (id=6195): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5841e6f2b566fa60}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xb7, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x9, &(0x7f0000000000)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @fallback=0x28, r3, 0x8, &(0x7f0000000640)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x8, 0x6}, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 1m21.057521537s ago: executing program 6 (id=6212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/user\x00') ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {0x35}, {}, {}, {0x6}]}) 1m20.721848033s ago: executing program 6 (id=6213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1m5.670518511s ago: executing program 34 (id=6213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 9.997773057s ago: executing program 4 (id=6532): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6d5b1e23}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.935203568s ago: executing program 5 (id=6537): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5841e6f2b566fa60}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xb7, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x9, &(0x7f0000000000)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @fallback=0x28, r3, 0x8, &(0x7f0000000640)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xc, 0x8, 0x6}, 0x10, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 8.916988158s ago: executing program 4 (id=6538): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x38180000, 0xfffffff7, 0x0, 0x1000, r0, 0x2, '\x00', r1, r3, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 8.547570556s ago: executing program 0 (id=6540): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x4, r2}, 0x10) 8.258198361s ago: executing program 4 (id=6542): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x18, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7.487549426s ago: executing program 0 (id=6545): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x53}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) 7.403131188s ago: executing program 4 (id=6546): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) recvmsg(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) 7.317688279s ago: executing program 7 (id=6548): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0xc0045878, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 7.29091486s ago: executing program 5 (id=6549): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1000, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', r1}, 0x18) mkdir(&(0x7f00000003c0)='./cgroup\x00', 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) 6.932634556s ago: executing program 0 (id=6550): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x674}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000009000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 3.881054015s ago: executing program 7 (id=6554): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x10000, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000900000000000000fdffffff850000003600000018010000756c6c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x38180000, 0xfffffff7, 0x0, 0x1000, r0, 0x2, '\x00', r1, r3, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.880876785s ago: executing program 5 (id=6556): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xc6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.866501045s ago: executing program 0 (id=6557): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x1a, 0x20, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000180000000000000003000085266db5e414f61e9659f1f5566085466a6b8d0fc98bd77670b47067401ed96f38cbf0e54d3baf30d5c5367cc07ea66077673e653473bcbc6d0165691391a1f5c6", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000d960300ffff00001837000004000000000000000000000041540001fcffffffb7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.059377301s ago: executing program 1 (id=6558): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.842258845s ago: executing program 5 (id=6559): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x18, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.422941283s ago: executing program 7 (id=6560): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1f, &(0x7f0000000200), 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000000000000, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.650383487s ago: executing program 0 (id=6561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="97cafebcb71250cb5d687d010e088fee0f13fd7ddde44c52cc8a5ee41e78", 0x1e}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r1], 0x48}, 0x0) 1.290577134s ago: executing program 0 (id=6562): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0x7, 0x3, 0xa, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0xffffffff7fffffff, 0x2}, 0x100608, 0x0, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) mkdir(0x0, 0x1b2) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 1.290174764s ago: executing program 1 (id=6563): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1800}, 0x48) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func, @map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x23) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) 1.289845684s ago: executing program 5 (id=6564): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x674}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000009000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) 1.274123775s ago: executing program 7 (id=6572): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x1f, &(0x7f0000000200), 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000000000000, 0x4}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.253692045s ago: executing program 4 (id=6565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100000, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000580), 0xffffffff, r2}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) 1.063359609s ago: executing program 1 (id=6566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 877.533502ms ago: executing program 7 (id=6567): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 691.390276ms ago: executing program 1 (id=6568): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x53}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x1d}, 0x1}}, 0x80, 0x0}, 0x0) 305.353813ms ago: executing program 1 (id=6569): socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x74000000}, 0x10) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0x8, 0x0, 0x0) 90.797237ms ago: executing program 4 (id=6570): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xc6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 66.854048ms ago: executing program 1 (id=6571): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x10029d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.034509ms ago: executing program 7 (id=6573): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x18, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 5 (id=6574): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r3, r2, 0x4, r2}, 0x10) kernel console output (not intermixed with test programs): ing attributes in process `syz.0.1360'. [ 340.061420][ T7906] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1351'. [ 340.332987][ T7912] netlink: 'syz.1.1353': attribute type 2 has an invalid length. [ 340.431726][ T7912] device 0 entered promiscuous mode [ 341.206629][ T7927] netlink: 'syz.4.1372': attribute type 2 has an invalid length. [ 341.537343][ T7927] device 1 entered promiscuous mode [ 343.753670][ T7968] netlink: 'syz.1.1380': attribute type 2 has an invalid length. [ 343.837920][ T7968] device 1 entered promiscuous mode [ 344.077679][ T4281] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 344.489643][ T7984] __nla_validate_parse: 9 callbacks suppressed [ 344.489680][ T7984] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1387'. [ 344.795250][ C0] net_ratelimit: 510 callbacks suppressed [ 344.795487][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.826548][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.915786][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.937276][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.956709][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 344.976452][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 345.001834][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 345.023809][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 345.048540][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 345.065897][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.799173][ C1] net_ratelimit: 283 callbacks suppressed [ 349.799250][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.825764][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.834895][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.844546][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.854150][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.863360][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.872615][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.882499][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.891799][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 349.901109][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 354.637409][ T8075] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.1420'. [ 354.653982][ T8078] device sit0 entered promiscuous mode [ 356.527932][ T8122] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1442'. [ 356.581145][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.596031][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.610160][ T8119] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.620451][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.630757][ T8119] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.641316][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.656499][ T8119] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1441'. [ 356.689963][ T8123] device veth0_vlan left promiscuous mode [ 356.715168][ T8123] device veth0_vlan entered promiscuous mode [ 356.754920][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.771411][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.797669][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 357.469200][ T8139] device sit0 entered promiscuous mode [ 357.918005][ T8158] netlink: 'syz.5.1453': attribute type 25 has an invalid length. [ 360.162938][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.186091][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.195128][ T8165] netlink: 33 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.206229][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.216463][ T8165] netlink: 33 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.225501][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.235702][ T8165] netlink: 33 bytes leftover after parsing attributes in process `syz.6.1456'. [ 360.618716][ T8174] device veth0_vlan left promiscuous mode [ 360.625312][ T8174] device veth0_vlan entered promiscuous mode [ 360.688315][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.708371][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.750250][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.164205][ T8192] device sit0 entered promiscuous mode [ 361.379155][ T8200] netlink: 'syz.0.1470': attribute type 25 has an invalid length. [ 361.552543][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1471'. [ 361.599556][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'. [ 361.645081][ T8205] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1471'. [ 363.575054][ T8224] device veth0_vlan left promiscuous mode [ 363.596944][ T8224] device veth0_vlan entered promiscuous mode [ 364.277633][ T8242] device sit0 entered promiscuous mode [ 366.915493][ T8273] device veth0_vlan left promiscuous mode [ 366.933637][ T8273] device veth0_vlan entered promiscuous mode [ 366.958838][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.987584][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.049142][ T5969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.231400][ T8286] __nla_validate_parse: 13 callbacks suppressed [ 367.231438][ T8286] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1503'. [ 367.398364][ T8289] device sit0 entered promiscuous mode [ 367.487082][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.522139][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.534390][ T8297] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.550707][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.573815][ T8297] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.584070][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.626021][ T8297] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1507'. [ 367.946256][ T8303] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1519'. [ 371.456676][ T8344] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1525'. [ 373.115558][ T8367] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1533'. [ 374.274571][ T4281] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 374.475427][ T8407] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1548'. [ 378.761087][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.767504][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.852331][ T8494] netlink: 'syz.4.1569': attribute type 25 has an invalid length. [ 379.207313][ T4279] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 380.355856][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 380.764776][ T8527] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.1600'. [ 381.172894][ T8536] netlink: 'syz.6.1592': attribute type 3 has an invalid length. [ 381.231744][ T8536] netlink: 'syz.6.1592': attribute type 1 has an invalid length. [ 381.344735][ T8536] netlink: 198452 bytes leftover after parsing attributes in process `syz.6.1592'. [ 381.814733][ T8549] netlink: 'syz.6.1597': attribute type 1 has an invalid length. [ 381.921715][ T8549] netlink: 'syz.6.1597': attribute type 4 has an invalid length. [ 382.009382][ T8549] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1597'. [ 382.778993][ T8571] netlink: 'syz.1.1614': attribute type 11 has an invalid length. [ 382.831807][ T8571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1614'. [ 382.966931][ T8562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.344239][ T8575] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.1608'. [ 383.950749][ T8579] netlink: 'syz.0.1610': attribute type 3 has an invalid length. [ 383.965923][ T8579] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 384.021700][ T8579] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.1610'. [ 384.272172][ T8587] netlink: 'syz.5.1615': attribute type 1 has an invalid length. [ 384.351292][ T8587] netlink: 'syz.5.1615': attribute type 4 has an invalid length. [ 384.419969][ T8587] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1615'. [ 384.894918][ T8602] netlink: 2639 bytes leftover after parsing attributes in process `syz.6.1622'. [ 385.316684][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 385.816261][ T8613] netlink: 'syz.6.1625': attribute type 11 has an invalid length. [ 385.863069][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1625'. [ 385.930588][ T8617] netlink: 'syz.1.1627': attribute type 3 has an invalid length. [ 385.956301][ T8617] netlink: 'syz.1.1627': attribute type 1 has an invalid length. [ 385.956631][ T8611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.974931][ T8617] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.1627'. [ 386.760172][ T8634] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 386.824824][ T8634] netlink: 'syz.1.1632': attribute type 4 has an invalid length. [ 386.870825][ T8634] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1632'. [ 388.210498][ T8660] netlink: 'syz.5.1640': attribute type 11 has an invalid length. [ 388.386471][ T8660] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1640'. [ 388.453839][ T8656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.938702][ T8675] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 388.953430][ T8675] netlink: 'syz.0.1649': attribute type 4 has an invalid length. [ 388.973292][ T8675] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1649'. [ 390.238648][ T8716] netlink: 'syz.0.1661': attribute type 11 has an invalid length. [ 390.352685][ T8716] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1661'. [ 390.385530][ T8711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.921049][ T8727] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1670'. [ 391.729075][ T8744] device syzkaller0 entered promiscuous mode [ 394.921110][ T8778] netlink: 'syz.5.1690': attribute type 6 has an invalid length. [ 394.929375][ T8778] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1690'. [ 396.001386][ T8808] device syzkaller0 entered promiscuous mode [ 398.246103][ T8821] device syzkaller0 entered promiscuous mode [ 400.258330][ T8836] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1712'. [ 400.437125][ T4281] Bluetooth: hci2: unexpected subevent 0x01 length: 128 > 18 [ 403.008306][ T8875] delete_channel: no stack [ 403.032960][ T8875] delete_channel: no stack [ 403.543884][ T8890] net_ratelimit: 217 callbacks suppressed [ 403.543903][ T8890] bond_slave_1: mtu less than device minimum [ 406.031681][ T8911] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1742'. [ 406.702885][ T8933] bond_slave_1: mtu less than device minimum [ 410.127731][ T8965] bond_slave_1: mtu less than device minimum [ 410.426745][ T8981] netlink: 'syz.6.1770': attribute type 2 has an invalid length. [ 411.108871][ T4281] Bluetooth: Frame is too long (len 13, expected len 4) [ 411.251519][ T9005] device syzkaller0 entered promiscuous mode [ 411.329055][ T4281] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 411.336888][ T4281] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 411.636446][ T4281] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 415.805864][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 416.054977][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 416.343054][ T4279] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 416.399161][ T9063] delete_channel: no stack [ 416.407168][ T9063] delete_channel: no stack [ 418.572742][ T9061] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1800'. [ 418.814248][ T9089] netlink: 'syz.0.1825': attribute type 2 has an invalid length. [ 418.969521][ T4279] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 419.872849][ T9095] delete_channel: no stack [ 419.879080][ T9095] delete_channel: no stack [ 420.990514][ T4279] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 421.018041][ T4279] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 421.201698][ T9116] device syzkaller0 entered promiscuous mode [ 421.954117][ T9140] netlink: 'syz.5.1836': attribute type 3 has an invalid length. [ 421.976233][ T9140] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1836'. [ 423.310653][ T4279] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 426.214962][ T4279] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 426.353007][ T9167] netlink: 'syz.1.1846': attribute type 9 has an invalid length. [ 426.376800][ T9167] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1846'. [ 427.012536][ T4279] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 428.080072][ T9215] netlink: 'syz.5.1868': attribute type 9 has an invalid length. [ 428.116221][ T9215] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.1868'. [ 428.478988][ T4279] Bluetooth: Frame is too long (len 13, expected len 4) [ 428.819074][ T9233] delete_channel: no stack [ 430.292179][ T9197] device syzkaller0 entered promiscuous mode [ 430.668570][ T9254] netlink: 'syz.6.1883': attribute type 9 has an invalid length. [ 430.705240][ T9254] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.1883'. [ 437.152847][ T4279] Bluetooth: Frame is too long (len 13, expected len 4) [ 438.343801][ T9373] netlink: 'syz.4.1928': attribute type 13 has an invalid length. [ 438.423932][ T9373] device macvtap0 entered promiscuous mode [ 438.512131][ T9373] macvtap0: refused to change device tx_queue_len [ 438.912211][ T4279] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 439.072748][ T9386] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1934'. [ 439.133416][ T9391] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1943'. [ 439.761525][ T9409] device veth1_macvtap entered promiscuous mode [ 439.787038][ T9409] device macsec0 entered promiscuous mode [ 439.794874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.076051][ T9412] delete_channel: no stack [ 440.159989][ T4279] Bluetooth: Frame is too long (len 13, expected len 4) [ 440.207974][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.214455][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.272615][ T9417] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.1949'. [ 440.954555][ T9428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1952'. [ 441.311165][ T9443] device veth1_macvtap entered promiscuous mode [ 441.344546][ T9443] device macsec0 entered promiscuous mode [ 441.354247][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.298856][ T4279] Bluetooth: hci3: ISO packet for unknown connection handle 3478 [ 444.275963][ T9543] netlink: 'syz.0.2006': attribute type 13 has an invalid length. [ 444.363503][ T9543] device macvtap0 entered promiscuous mode [ 444.393822][ T9543] macvtap0: refused to change device tx_queue_len [ 444.728479][ T9556] netlink: 'syz.4.2015': attribute type 21 has an invalid length. [ 444.788999][ T9556] netlink: 'syz.4.2015': attribute type 12 has an invalid length. [ 444.815859][ T9556] netlink: 'syz.4.2015': attribute type 13 has an invalid length. [ 444.842482][ T9556] netlink: 'syz.4.2015': attribute type 14 has an invalid length. [ 444.875089][ T9556] netlink: 'syz.4.2015': attribute type 15 has an invalid length. [ 444.900606][ T9556] netlink: 'syz.4.2015': attribute type 16 has an invalid length. [ 444.936891][ T9556] netlink: 12914 bytes leftover after parsing attributes in process `syz.4.2015'. [ 449.130905][ T9585] device wg2 entered promiscuous mode [ 449.664439][ T9636] netlink: 'syz.6.2049': attribute type 21 has an invalid length. [ 449.693404][ T9636] netlink: 'syz.6.2049': attribute type 12 has an invalid length. [ 449.731985][ T9636] netlink: 'syz.6.2049': attribute type 13 has an invalid length. [ 449.766095][ T9636] netlink: 'syz.6.2049': attribute type 14 has an invalid length. [ 449.774055][ T9636] netlink: 'syz.6.2049': attribute type 15 has an invalid length. [ 449.791485][ T9636] netlink: 'syz.6.2049': attribute type 16 has an invalid length. [ 449.822706][ T9636] netlink: 12914 bytes leftover after parsing attributes in process `syz.6.2049'. [ 450.888755][ T9669] netlink: 'syz.5.2066': attribute type 21 has an invalid length. [ 450.905146][ T9669] netlink: 'syz.5.2066': attribute type 12 has an invalid length. [ 450.924456][ T9669] netlink: 'syz.5.2066': attribute type 13 has an invalid length. [ 450.956780][ T9669] netlink: 'syz.5.2066': attribute type 14 has an invalid length. [ 450.979744][ T9669] netlink: 12914 bytes leftover after parsing attributes in process `syz.5.2066'. [ 452.385872][ T9715] device bridge_slave_1 left promiscuous mode [ 452.424742][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.678071][ T9715] device bridge_slave_0 left promiscuous mode [ 452.726305][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.782258][ T9784] device bridge_slave_1 left promiscuous mode [ 458.788584][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.800079][ T9784] device bridge_slave_0 left promiscuous mode [ 458.806741][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.549748][ T9825] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 459.557455][ T9825] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 461.037439][ T9840] device syzkaller0 entered promiscuous mode [ 464.926937][ T4279] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 466.493338][ T9845] device syzkaller0 entered promiscuous mode [ 469.380318][ T9859] device bridge_slave_1 left promiscuous mode [ 469.386692][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.395021][ T9859] device bridge_slave_0 left promiscuous mode [ 469.401950][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.503948][ T9917] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2169'. [ 471.426179][ T9950] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.2184'. [ 471.572341][ T9952] device bridge_slave_1 left promiscuous mode [ 471.606313][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.712067][ T9952] device bridge_slave_0 left promiscuous mode [ 471.748923][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.071499][ T9960] syz.1.2187[9960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.071725][ T9960] syz.1.2187[9960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.822650][ T9988] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2199'. [ 475.326120][ T9979] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2197'. [ 475.491531][ T9998] syz.6.2203[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.491692][ T9998] syz.6.2203[9998] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.624943][T10029] syz.4.2220[10029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.666034][T10029] syz.4.2220[10029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.970308][T10046] syz.4.2223[10046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.991287][T10046] syz.4.2223[10046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.537519][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 482.665032][T10095] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2246'. [ 487.298684][ T4279] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 487.306523][ T4279] Bluetooth: hci3: Invalid handle: 0x0f00 > 0x0eff [ 487.463006][T10209] netlink: 128244 bytes leftover after parsing attributes in process `syz.1.2292'. [ 487.501187][T10209] netlink: zone id is out of range [ 487.521505][T10209] netlink: zone id is out of range [ 487.528844][T10209] netlink: zone id is out of range [ 487.536149][T10209] netlink: zone id is out of range [ 487.553446][T10209] netlink: zone id is out of range [ 487.570956][T10209] netlink: zone id is out of range [ 487.582531][T10209] netlink: zone id is out of range [ 487.610626][T10209] netlink: zone id is out of range [ 487.644514][T10209] netlink: zone id is out of range [ 487.654188][T10209] netlink: zone id is out of range [ 488.900077][T10236] delete_channel: no stack [ 493.344076][T10320] netlink: 128244 bytes leftover after parsing attributes in process `syz.0.2342'. [ 493.416649][T10320] net_ratelimit: 39 callbacks suppressed [ 493.416726][T10320] netlink: zone id is out of range [ 493.482898][T10320] netlink: zone id is out of range [ 493.515952][T10320] netlink: zone id is out of range [ 493.549106][T10320] netlink: zone id is out of range [ 493.598586][T10320] netlink: zone id is out of range [ 493.628555][T10320] netlink: zone id is out of range [ 493.658231][T10320] netlink: zone id is out of range [ 493.689385][ T4279] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 493.697219][ T4279] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 493.704792][T10320] netlink: zone id is out of range [ 493.729587][T10320] netlink: zone id is out of range [ 493.745707][T10320] netlink: zone id is out of range [ 496.245503][ T4279] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 496.253368][ T4279] Bluetooth: hci1: Invalid handle: 0x0f00 > 0x0eff [ 496.350975][T10352] device syzkaller0 entered promiscuous mode [ 496.850976][T10364] netlink: 128244 bytes leftover after parsing attributes in process `syz.6.2361'. [ 499.748103][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 499.756140][ T4279] Bluetooth: hci2: Invalid handle: 0x0f00 > 0x0eff [ 501.406438][T10421] device syzkaller0 entered promiscuous mode [ 501.628462][ T4279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 501.639372][ T4279] Bluetooth: hci0: Invalid handle: 0x0f00 > 0x0eff [ 501.648278][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.655372][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.337883][T10432] device syzkaller0 entered promiscuous mode [ 503.590247][ T4279] Bluetooth: hci1: unknown advertising packet type: 0xff [ 503.590289][ T4279] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 508.481668][ T4279] Bluetooth: hci0: unknown advertising packet type: 0xff [ 508.489362][ T4279] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 508.737771][ T4279] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 510.812068][T10506] validate_nla: 2 callbacks suppressed [ 510.812084][T10506] netlink: 'syz.5.2418': attribute type 10 has an invalid length. [ 510.836619][T10506] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2418'. [ 510.856185][T10506] device batadv0 entered promiscuous mode [ 510.862894][T10506] net_ratelimit: 88 callbacks suppressed [ 510.862907][T10506] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 512.020959][T10522] device syzkaller0 entered promiscuous mode [ 512.468698][ T4279] Bluetooth: hci3: unknown advertising packet type: 0xff [ 512.468736][ T4279] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 519.323779][T10613] netlink: 'syz.4.2460': attribute type 6 has an invalid length. [ 519.456791][T10613] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2460'. [ 521.852927][T10648] netlink: 'syz.5.2472': attribute type 6 has an invalid length. [ 521.904459][T10648] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.2472'. [ 524.608489][T10690] netlink: 'syz.6.2487': attribute type 6 has an invalid length. [ 524.695370][T10690] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.2487'. [ 524.738336][T10693] device syzkaller0 entered promiscuous mode [ 527.038634][T10739] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2509'. [ 527.069951][T10739] device hsr_slave_0 left promiscuous mode [ 527.120795][T10739] device hsr_slave_1 left promiscuous mode [ 528.349344][T10765] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 530.401994][T10802] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2538'. [ 530.852168][T10802] device hsr_slave_0 left promiscuous mode [ 530.861283][T10802] device hsr_slave_1 left promiscuous mode [ 534.318830][T10838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.359034][T10836] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2553'. [ 534.376480][T10836] device hsr_slave_0 left promiscuous mode [ 534.384068][T10836] device hsr_slave_1 left promiscuous mode [ 534.613681][T10846] netlink: 'syz.1.2558': attribute type 21 has an invalid length. [ 534.737395][T10849] netlink: 'syz.1.2558': attribute type 39 has an invalid length. [ 534.746934][T10849] device veth0_macvtap left promiscuous mode [ 535.017068][ T4279] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 535.548337][T10872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.685259][T10876] netlink: 'syz.1.2571': attribute type 33 has an invalid length. [ 535.706340][T10876] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2571'. [ 536.588312][T10888] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2574'. [ 536.598021][T10888] device hsr_slave_0 left promiscuous mode [ 536.605246][T10888] device hsr_slave_1 left promiscuous mode [ 536.862328][T10894] netlink: 'syz.4.2577': attribute type 21 has an invalid length. [ 536.882961][T10894] netlink: 'syz.4.2577': attribute type 39 has an invalid length. [ 536.927798][T10894] device veth0_macvtap left promiscuous mode [ 536.963049][ T4279] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 537.341128][T10907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.406259][ T4279] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 539.689883][T10932] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2589'. [ 539.786877][T10932] device hsr_slave_0 left promiscuous mode [ 539.811282][T10932] device hsr_slave_1 left promiscuous mode [ 539.941803][T10939] netlink: 'syz.6.2594': attribute type 21 has an invalid length. [ 539.956838][T10940] netlink: 'syz.6.2594': attribute type 39 has an invalid length. [ 539.993054][T10940] device veth0_macvtap left promiscuous mode [ 540.350460][T10944] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 540.376102][T10944] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2597'. [ 540.665455][T10953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.219692][T11008] netlink: 'syz.5.2625': attribute type 21 has an invalid length. [ 544.232000][T11008] netlink: 'syz.5.2625': attribute type 39 has an invalid length. [ 544.245685][T11008] device veth0_macvtap left promiscuous mode [ 544.528544][T11014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.042427][T11049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.990150][T11103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.362103][T11113] netlink: 'syz.5.2672': attribute type 10 has an invalid length. [ 551.404725][T11113] team0: Port device geneve1 added [ 551.972048][T11128] netlink: 'syz.5.2677': attribute type 9 has an invalid length. [ 552.020522][T11128] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.2677'. [ 553.101905][T11138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.934388][T11252] device syzkaller0 entered promiscuous mode [ 563.084634][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.094801][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.367288][T11269] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.418702][ T4279] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 567.285014][T11350] netlink: 'syz.5.2765': attribute type 10 has an invalid length. [ 567.667236][T11356] syz.1.2769[11356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.667387][T11356] syz.1.2769[11356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.870185][T11356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.922107][T11356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.947492][T11356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.996005][T11356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.302261][T11364] Â: renamed from pim6reg1 [ 577.251751][T11506] delete_channel: no stack [ 578.083743][T11527] netlink: 'syz.4.2840': attribute type 3 has an invalid length. [ 578.192515][T11527] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.2840'. [ 580.211293][T11562] netlink: 'syz.5.2854': attribute type 10 has an invalid length. [ 580.229761][T11562] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2854'. [ 581.969590][T11562] team0: Port device geneve0 added [ 590.385150][ T4279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 590.392804][ T4279] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 592.572452][T11724] -1: renamed from syzkaller0 [ 594.348543][T11677] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 594.356254][T11677] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 595.496807][T11765] netlink: 'syz.4.2938': attribute type 10 has an invalid length. [ 595.588977][T11765] team0: Port device macvlan1 added [ 596.332909][T11799] netlink: 'syz.5.2949': attribute type 29 has an invalid length. [ 598.147439][T11793] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.155291][T11793] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2948'. [ 598.195223][T11799] netlink: 'syz.5.2949': attribute type 29 has an invalid length. [ 599.935167][ T3638] udevd[3638]: worker [4430] terminated by signal 33 (Unknown signal 33) [ 599.974819][ T3638] udevd[3638]: worker [4430] failed while handling '/devices/virtual/block/loop1' [ 600.845491][T11860] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2972'. [ 600.892914][T11860] netlink: zone id is out of range [ 601.164796][T11874] netlink: 'syz.0.2978': attribute type 7 has an invalid length. [ 603.386393][T11887] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2982'. [ 603.862460][T11900] syz.0.2988[11900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.862582][T11900] syz.0.2988[11900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.950671][T11911] syz.4.2992 (11911) used greatest stack depth: 19232 bytes left [ 607.483411][T11932] netlink: 'syz.1.3003': attribute type 3 has an invalid length. [ 607.500919][T11932] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3003'. [ 607.636970][T11936] __sock_release: fasync list not empty! [ 611.172583][T11991] device syzkaller0 entered promiscuous mode [ 611.317477][T12000] netlink: 'syz.5.3027': attribute type 3 has an invalid length. [ 611.332673][T12000] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3027'. [ 614.352376][ T4281] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 616.088250][T12029] netlink: 'syz.5.3036': attribute type 10 has an invalid length. [ 616.284425][T12029] device veth0_vlan left promiscuous mode [ 616.402947][T12029] device veth0_vlan entered promiscuous mode [ 616.505198][T12029] team0: Device veth0_vlan failed to register rx_handler [ 616.749206][T12035] netlink: 'syz.6.3040': attribute type 10 has an invalid length. [ 616.762163][T12029] syz.5.3036 (12029) used greatest stack depth: 18504 bytes left [ 617.922565][ T4281] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 618.344406][T12085] device pim6reg1 entered promiscuous mode [ 622.570827][T12121] device syzkaller0 entered promiscuous mode [ 624.037792][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 624.518075][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.524428][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.572061][T12158] device syzkaller0 entered promiscuous mode [ 625.107394][ T4281] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 626.727949][T12168] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3092'. [ 631.434097][T12232] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 631.767143][T12244] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.3121'. [ 631.894884][T12246] netlink: 'syz.1.3123': attribute type 11 has an invalid length. [ 631.906120][T12246] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3123'. [ 631.924600][T12244] netlink: 'syz.6.3121': attribute type 2 has an invalid length. [ 631.947674][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.968351][T12289] device syzkaller0 entered promiscuous mode [ 636.145417][ T4281] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 640.846079][T12327] À: port 1(vlan0) entered blocking state [ 640.852050][T12327] À: port 1(vlan0) entered disabled state [ 640.878428][T12327] device vlan0 entered promiscuous mode [ 640.906324][T12330] À: port 1(vlan0) entered blocking state [ 640.912242][T12330] À: port 1(vlan0) entered forwarding state [ 641.779355][T12357] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3158'. [ 643.956577][T12398] syz.6.3175[12398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.956744][T12398] syz.6.3175[12398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.607489][T12404] syz.1.3176 (12404) used obsolete PPPIOCDETACH ioctl [ 646.189076][T12427] -: renamed from syzkaller0 [ 646.270934][T12429] device syzkaller0 entered promiscuous mode [ 646.383077][T12435] device syzkaller0 entered promiscuous mode [ 647.251302][ T4281] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 647.259119][ T4281] Bluetooth: hci0: Invalid handle: 0x85b0 > 0x0eff [ 647.613062][ T4281] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 651.090120][T12475] device syzkaller0 entered promiscuous mode [ 651.413830][T12493] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3211'. [ 651.424178][T12493] netlink: zone id is out of range [ 651.436661][T12493] netlink: zone id is out of range [ 651.442389][T12493] netlink: zone id is out of range [ 651.454108][T12493] netlink: zone id is out of range [ 651.461799][T12493] netlink: zone id is out of range [ 651.472474][T12493] netlink: zone id is out of range [ 651.480118][T12493] netlink: zone id is out of range [ 651.495810][T12493] netlink: zone id is out of range [ 651.501535][T12493] netlink: zone id is out of range [ 651.507550][T12493] netlink: zone id is out of range [ 653.537778][T12502] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 660.021375][T12573] device syzkaller0 entered promiscuous mode [ 660.435862][T12576] syz.0.3244 (12576) used greatest stack depth: 18176 bytes left [ 661.030327][ T4281] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 661.092091][T12584] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 661.127280][T12587] netlink: 'syz.0.3248': attribute type 41 has an invalid length. [ 661.244400][T12596] netlink: 'syz.1.3252': attribute type 10 has an invalid length. [ 661.264852][T12596] team0: Port device wlan1 added [ 665.076681][ T5970] wlan1: Trigger new scan to find an IBSS to join [ 666.975756][ T4281] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 668.460225][T12687] netlink: 'syz.4.3288': attribute type 1 has an invalid length. [ 668.499985][T12687] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3288'. [ 668.604867][ T4281] Bluetooth: hci0: Malformed LE Event: 0x0b [ 669.075944][ T5970] wlan1: Trigger new scan to find an IBSS to join [ 669.090308][ T4281] Bluetooth: hci4: unexpected event 0x33 length: 82 > 10 [ 669.335515][T12707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.355768][T12707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.364551][T12707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.380323][T12707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.832810][T12718] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3301'. [ 669.896705][T12718] device caif0 entered promiscuous mode [ 670.038748][ T4351] wlan1: Creating new IBSS network, BSSID 6a:48:01:e9:bd:f8 [ 670.782234][T12735] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3307'. [ 671.123223][T12748] netlink: 'syz.1.3312': attribute type 1 has an invalid length. [ 671.134894][T12748] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3312'. [ 671.449578][T12758] syz.1.3318[12758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 671.449696][T12758] syz.1.3318[12758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 678.146821][ T4281] Bluetooth: hci1: unknown advertising packet type: 0xff [ 680.095296][T12918] sctp: [Deprecated]: syz.6.3380 (pid 12918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.095296][T12918] Use struct sctp_sack_info instead [ 680.289870][T12922] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.481894][T12924] net_ratelimit: 153 callbacks suppressed [ 680.481971][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.626909][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.637105][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.646523][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.656521][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.666379][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.675881][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.685779][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.695086][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 680.705076][T12924] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 683.252881][ T4281] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 683.263066][ T4281] Bluetooth: hci0: Injecting HCI hardware error event [ 683.273757][ T4281] Bluetooth: hci0: hardware error 0x00 [ 683.346134][T12930] device sit0 left promiscuous mode [ 683.414552][T12931] device sit0 entered promiscuous mode [ 684.365986][T11677] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 684.403145][T12958] netlink: 'syz.1.3396': attribute type 21 has an invalid length. [ 684.419609][T12958] netlink: 'syz.1.3396': attribute type 6 has an invalid length. [ 684.430688][T12958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3396'. [ 685.153878][T12975] netlink: 'syz.1.3403': attribute type 10 has an invalid length. [ 685.298351][T12981] device syzkaller0 entered promiscuous mode [ 685.395706][ T4281] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 685.767814][T12997] netlink: 'syz.4.3414': attribute type 33 has an invalid length. [ 685.792214][T12997] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3414'. [ 685.972098][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.978658][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.259299][T13015] device syzkaller0 entered promiscuous mode [ 688.815095][T13035] netlink: 'syz.6.3429': attribute type 33 has an invalid length. [ 688.823522][T13035] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3429'. [ 690.745511][ T4281] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 690.863440][T13085] netlink: 'syz.4.3451': attribute type 21 has an invalid length. [ 690.887645][T13085] netlink: 'syz.4.3451': attribute type 6 has an invalid length. [ 690.905876][T13085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3451'. [ 695.372991][ T4281] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 695.909608][ T4281] Bluetooth: hci4: unknown advertising packet type: 0xff [ 700.049909][ T5977] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 701.235012][T13265] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3522'. [ 701.997966][T13281] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 702.006710][T13281] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3529'. [ 702.973759][ T4281] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 704.668547][T13343] netlink: 'syz.4.3555': attribute type 10 has an invalid length. [ 704.819262][T13343] team0: Port device geneve1 added [ 705.201920][T13361] netlink: 'syz.6.3559': attribute type 9 has an invalid length. [ 705.223747][T13361] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3559'. [ 712.495252][T13455] device syzkaller0 entered promiscuous mode [ 714.606105][ T4281] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 715.916643][T13502] netlink: 'syz.6.3617': attribute type 10 has an invalid length. [ 715.949472][T13504] syz.5.3618[13504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 715.949597][T13504] syz.5.3618[13504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.229235][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.248998][T13504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.258682][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.268127][T13504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.651776][T13515] Â: renamed from pim6reg1 [ 721.730560][T13596] netlink: 'syz.6.3665': attribute type 3 has an invalid length. [ 721.739522][T13596] netlink: 114680 bytes leftover after parsing attributes in process `syz.6.3665'. [ 721.871898][T13614] delete_channel: no stack [ 728.508050][ T4281] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 728.515546][ T4281] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 730.981077][ T5970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.643623][T13760] netlink: 'syz.6.3721': attribute type 10 has an invalid length. [ 731.697650][T13760] team0: Port device macvlan1 added [ 731.719335][T12956] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 732.689128][T13785] -1: renamed from syzkaller0 [ 733.797254][ T4281] Bluetooth: hci1: command 0x2016 tx timeout [ 734.134881][T13817] netlink: 'syz.6.3745': attribute type 7 has an invalid length. [ 736.317391][T13833] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3750'. [ 736.422423][T13837] syz.1.3751[13837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 736.422532][T13837] syz.1.3751[13837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 736.916783][T13850] __sock_release: fasync list not empty! [ 738.510355][T13874] netlink: 'syz.1.3767': attribute type 9 has an invalid length. [ 738.536699][T13874] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3767'. [ 742.824511][T13948] netlink: 'syz.0.3799': attribute type 9 has an invalid length. [ 742.834153][T13948] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3799'. [ 744.885900][ T4281] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 745.804175][T13985] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 747.398408][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.404894][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.414927][T14004] netlink: 'syz.6.3821': attribute type 11 has an invalid length. [ 747.465913][T14004] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3821'. [ 747.532533][T14003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.096613][T14040] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.3833'. [ 749.151055][T14040] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 750.367124][T14065] -: renamed from syzkaller0 [ 751.438445][ T4281] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 751.446441][ T4281] Bluetooth: hci2: Invalid handle: 0x85b0 > 0x0eff [ 752.333175][T14109] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3862'. [ 752.423367][T14109] net_ratelimit: 2167 callbacks suppressed [ 752.423410][T14109] netlink: zone id is out of range [ 752.541502][T14109] netlink: zone id is out of range [ 752.583048][T14109] netlink: zone id is out of range [ 752.589179][T14109] netlink: zone id is out of range [ 752.594809][T14109] netlink: zone id is out of range [ 752.601434][T14109] netlink: zone id is out of range [ 752.607703][T14109] netlink: zone id is out of range [ 752.613220][T14109] netlink: zone id is out of range [ 752.620591][T14109] netlink: zone id is out of range [ 752.627341][T14109] netlink: zone id is out of range [ 752.893751][T14111] device syzkaller0 entered promiscuous mode [ 752.930045][T14119] syz.4.3867[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 752.930171][T14119] syz.4.3867[14119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 752.969503][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.989324][T14119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.998822][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.006717][T14119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.673635][ T4281] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 757.275796][T14162] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 757.842958][T14182] netlink: 'syz.1.3902': attribute type 1 has an invalid length. [ 757.856915][T14182] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3902'. [ 760.035964][ T56] wlan1: Trigger new scan to find an IBSS to join [ 761.899346][ T4351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.121999][ T5977] wlan1: Trigger new scan to find an IBSS to join [ 763.195030][ T5967] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 764.965657][ T5977] wlan1: Creating new IBSS network, BSSID d2:c2:49:85:99:2a [ 769.904442][T14303] netlink: 'syz.6.3941': attribute type 1 has an invalid length. [ 769.923677][T14303] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.3941'. [ 772.105371][T14332] netlink: 'syz.0.3946': attribute type 1 has an invalid length. [ 772.160185][T14332] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3946'. [ 772.543458][T14351] device syzkaller0 entered promiscuous mode [ 772.653539][ T4281] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 774.924789][T14374] netlink: 'syz.5.3962': attribute type 1 has an invalid length. [ 774.945750][T14374] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.3962'. [ 776.521949][T14399] device syzkaller0 entered promiscuous mode [ 776.959679][T14412] netlink: 'syz.1.3979': attribute type 1 has an invalid length. [ 776.988703][T14412] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3979'. [ 782.614583][T14450] netlink: 'syz.0.4005': attribute type 10 has an invalid length. [ 782.629251][T14450] team0: Port device geneve1 added [ 782.903738][T14478] device syzkaller0 entered promiscuous mode [ 788.044113][T14555] delete_channel: no stack [ 789.390090][T14591] netlink: 'syz.1.4044': attribute type 3 has an invalid length. [ 789.428543][T14591] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.4044'. [ 795.017663][ T5967] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.314881][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 797.231139][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 805.766576][ T4281] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 805.774159][ T4281] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 808.904150][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.910667][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.300964][ T4281] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 809.308566][ T4281] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 826.003020][ T4351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.128661][T15146] -1: renamed from syzkaller0 [ 828.667576][ T5967] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 834.182949][ T4281] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 836.196317][ T4281] Bluetooth: hci3: command 0x2016 tx timeout [ 842.110161][T15411] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4389'. [ 842.128683][T15411] net_ratelimit: 153 callbacks suppressed [ 842.128815][T15411] netlink: zone id is out of range [ 847.628064][T15474] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.4408'. [ 847.707320][T15474] netlink: zone id is out of range [ 851.472893][T15505] netlink: 'syz.0.4427': attribute type 3 has an invalid length. [ 851.493788][T15505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4427'. [ 851.860920][T15509] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4429'. [ 851.873967][T15509] netlink: zone id is out of range [ 854.589367][T15542] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4441'. [ 854.612098][T15542] netlink: zone id is out of range [ 854.639903][T15548] netlink: 'syz.5.4443': attribute type 3 has an invalid length. [ 854.651686][T15548] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4443'. [ 855.460197][T15581] netlink: 'syz.6.4457': attribute type 3 has an invalid length. [ 855.470370][T15581] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4457'. [ 856.927082][ T5984] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 857.849032][ T56] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.493442][T15589] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4459'. [ 858.508973][T15589] netlink: zone id is out of range [ 859.625271][T15625] netlink: 'syz.4.4471': attribute type 3 has an invalid length. [ 859.645775][T15625] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4471'. [ 859.708123][ T5984] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 867.761106][ T4281] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 870.282933][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.289601][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.100617][ T4281] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 874.096292][T15766] netlink: 'syz.4.4524': attribute type 10 has an invalid length. [ 874.412103][T15766] À: port 1(vlan0) entered disabled state [ 874.538300][T15766] À: port 1(vlan0) entered blocking state [ 874.545196][T15766] À: port 1(vlan0) entered forwarding state [ 874.614271][T15766] team0: Device veth0_vlan failed to register rx_handler [ 874.813527][T15766] À: port 1(vlan0) entered disabled state [ 875.390481][T15784] netlink: 'syz.5.4530': attribute type 10 has an invalid length. [ 876.602610][T15818] netlink: 'syz.6.4541': attribute type 10 has an invalid length. [ 876.797834][T15818] device veth0_vlan left promiscuous mode [ 876.892923][T15818] device veth0_vlan entered promiscuous mode [ 877.021840][T15818] team0: Device veth0_vlan failed to register rx_handler [ 877.549224][T15828] netlink: 'syz.4.4548': attribute type 10 has an invalid length. [ 877.683268][T15828] bridge0: port 3(netdevsim0) entered blocking state [ 877.735719][T15828] bridge0: port 3(netdevsim0) entered disabled state [ 877.774407][T15828] device netdevsim0 entered promiscuous mode [ 878.103767][T15839] netlink: 'syz.0.4563': attribute type 10 has an invalid length. [ 878.150455][T15839] device veth0_vlan left promiscuous mode [ 878.160235][T15839] device veth0_vlan entered promiscuous mode [ 878.178111][T15839] team0: Device veth0_vlan failed to register rx_handler [ 880.882837][T15872] netlink: 'syz.0.4566': attribute type 10 has an invalid length. [ 880.892142][ T4281] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 882.230813][T15892] netlink: 'syz.1.4570': attribute type 10 has an invalid length. [ 882.902134][T15892] device veth0_vlan left promiscuous mode [ 882.988140][T15892] device veth0_vlan entered promiscuous mode [ 883.026149][T15892] team0: Device veth0_vlan failed to register rx_handler [ 884.368572][T15912] netlink: 'syz.1.4583': attribute type 10 has an invalid length. [ 885.912585][T15947] netlink: 'syz.6.4598': attribute type 10 has an invalid length. [ 886.006440][T15947] device veth0_vlan left promiscuous mode [ 886.055531][T15947] device veth0_vlan entered promiscuous mode [ 886.229375][T15947] team0: Device veth0_vlan failed to register rx_handler [ 886.768647][T15963] device pim6reg1 entered promiscuous mode [ 888.352630][T15996] netlink: 'syz.1.4617': attribute type 10 has an invalid length. [ 888.368158][T15996] device veth0_vlan left promiscuous mode [ 888.383760][T15996] device veth0_vlan entered promiscuous mode [ 888.438723][T15996] team0: Device veth0_vlan failed to register rx_handler [ 889.308342][ T5977] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 889.355937][T16012] netlink: 'syz.5.4632': attribute type 10 has an invalid length. [ 889.379466][T16012] device veth0_vlan left promiscuous mode [ 889.403164][T16012] device veth0_vlan entered promiscuous mode [ 889.440283][T16012] team0: Device veth0_vlan failed to register rx_handler [ 889.621936][T16008] device pim6reg1 entered promiscuous mode [ 890.726151][ T4351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 892.180058][T16051] netlink: 'syz.0.4639': attribute type 10 has an invalid length. [ 892.192231][T16051] device veth0_vlan left promiscuous mode [ 892.209303][T16051] device veth0_vlan entered promiscuous mode [ 892.271550][T16051] team0: Device veth0_vlan failed to register rx_handler [ 893.360959][T16067] device syzkaller0 entered promiscuous mode [ 897.225424][T12956] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 897.235003][T16107] netlink: 'syz.6.4657': attribute type 10 has an invalid length. [ 897.300543][T16107] device veth0_vlan left promiscuous mode [ 897.362768][T16107] device veth0_vlan entered promiscuous mode [ 897.432663][T16107] team0: Device veth0_vlan failed to register rx_handler [ 897.996176][T16121] device syzkaller0 entered promiscuous mode [ 898.443109][ T4281] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 899.235664][T12956] Bluetooth: hci3: command 0x0419 tx timeout [ 900.521431][T12956] Bluetooth: hci1: command 0x0419 tx timeout [ 901.315894][T12956] Bluetooth: hci3: command 0x0406 tx timeout [ 901.337047][T16157] netlink: 'syz.1.4675': attribute type 10 has an invalid length. [ 901.398151][T16157] device veth0_vlan left promiscuous mode [ 901.446466][T16157] device veth0_vlan entered promiscuous mode [ 901.523951][T16157] team0: Device veth0_vlan failed to register rx_handler [ 902.054872][T16164] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4679'. [ 902.280423][ T4281] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 902.596106][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 902.630434][T16167] device syzkaller0 entered promiscuous mode [ 905.798181][T16221] netlink: 'syz.1.4693': attribute type 10 has an invalid length. [ 905.806526][T16221] device veth0_vlan left promiscuous mode [ 905.814007][T16221] device veth0_vlan entered promiscuous mode [ 905.824027][T16221] team0: Device veth0_vlan failed to register rx_handler [ 905.900180][T16205] device syzkaller0 entered promiscuous mode [ 907.855344][T12956] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 908.226027][T16234] device syzkaller0 entered promiscuous mode [ 908.764353][T16230] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4696'. [ 908.940813][T16245] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4701'. [ 912.247421][T16248] netlink: 'syz.1.4701': attribute type 2 has an invalid length. [ 912.423358][T16276] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.4723'. [ 912.473590][T16281] device syzkaller0 entered promiscuous mode [ 912.483730][T16276] netlink: 'syz.5.4723': attribute type 2 has an invalid length. [ 912.601513][T16279] device syzkaller0 entered promiscuous mode [ 915.324687][T12956] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 916.458232][T16296] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4717'. [ 917.719399][T12956] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 921.810847][T16369] device syzkaller0 entered promiscuous mode [ 925.925222][T16404] device syzkaller0 entered promiscuous mode [ 930.530349][T16466] syz.0.4779[16466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.530521][T16466] syz.0.4779[16466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.705159][T16460] device syzkaller0 entered promiscuous mode [ 931.830235][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.837630][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.699691][T16510] syz.5.4796[16510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 935.699852][T16510] syz.5.4796[16510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.810303][T16544] device syzkaller0 entered promiscuous mode [ 941.585012][T16586] device syzkaller0 entered promiscuous mode [ 946.559621][T12956] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 949.446704][T12956] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 950.731137][T16721] device syzkaller0 entered promiscuous mode [ 957.792791][T16797] device syzkaller0 entered promiscuous mode [ 963.362142][T16867] device syzkaller0 entered promiscuous mode [ 965.710636][T16900] netlink: 'syz.5.4932': attribute type 10 has an invalid length. [ 965.784571][T16900] team0: Port device macvlan1 added [ 966.009739][T16906] device syzkaller0 entered promiscuous mode [ 966.138965][T16912] netlink: 'syz.5.4924': attribute type 41 has an invalid length. [ 969.797461][T16942] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 974.691941][T16966] netlink: 'syz.0.4937': attribute type 10 has an invalid length. [ 974.711173][T16966] team0: Port device macvlan1 added [ 975.618446][T16987] -: renamed from syzkaller0 [ 976.001903][T16998] netlink: 'syz.5.4964': attribute type 11 has an invalid length. [ 976.024666][T16998] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4964'. [ 976.063623][T16996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 977.348048][T17030] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4966'. [ 977.407922][T17030] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 979.020918][T17051] netlink: 'syz.0.4973': attribute type 11 has an invalid length. [ 979.060214][T17051] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4973'. [ 979.099771][T17050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.137555][T17090] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 981.481419][T17116] netlink: 'syz.4.5000': attribute type 11 has an invalid length. [ 981.535929][T17116] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5000'. [ 981.620480][T17113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.906971][T17182] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5029'. [ 986.466387][T17197] __sock_release: fasync list not empty! [ 991.946072][T17265] netlink: 'syz.4.5075': attribute type 11 has an invalid length. [ 991.997447][T17265] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5075'. [ 992.097296][T17263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.159751][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.166154][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.252430][T12956] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1002.265787][T12956] Bluetooth: hci4: Invalid handle: 0x85b0 > 0x0eff [ 1006.636491][T17446] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5131'. [ 1006.663867][T17446] netlink: zone id is out of range [ 1006.725971][T17446] netlink: zone id is out of range [ 1006.836252][T17446] netlink: zone id is out of range [ 1006.843098][T17446] netlink: zone id is out of range [ 1006.876060][T17446] netlink: zone id is out of range [ 1006.904876][T17446] netlink: zone id is out of range [ 1006.930517][T17446] netlink: zone id is out of range [ 1006.960817][T17446] netlink: zone id is out of range [ 1006.992184][T17446] netlink: zone id is out of range [ 1007.028096][T17446] netlink: zone id is out of range [ 1007.284095][T17454] device syzkaller0 entered promiscuous mode [ 1010.377426][T17478] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1013.917889][T17506] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5152'. [ 1013.971237][T17506] net_ratelimit: 153 callbacks suppressed [ 1013.971256][T17506] netlink: zone id is out of range [ 1014.000408][T17506] netlink: zone id is out of range [ 1014.031307][T17506] netlink: zone id is out of range [ 1014.052267][T17506] netlink: zone id is out of range [ 1014.078464][T17506] netlink: zone id is out of range [ 1014.099095][T17506] netlink: zone id is out of range [ 1014.118983][T17506] netlink: zone id is out of range [ 1014.139668][T17506] netlink: zone id is out of range [ 1014.162039][T17506] netlink: zone id is out of range [ 1014.181007][T17506] netlink: zone id is out of range [ 1015.283410][T17520] device syzkaller0 entered promiscuous mode [ 1023.736263][T17572] netlink: 'syz.4.5180': attribute type 7 has an invalid length. [ 1028.396582][T17630] netlink: 'syz.5.5193': attribute type 7 has an invalid length. [ 1028.539104][T17634] device syzkaller0 entered promiscuous mode [ 1033.931232][T17681] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1040.973321][T17762] device syzkaller0 entered promiscuous mode [ 1046.068282][T17813] device syzkaller0 entered promiscuous mode [ 1046.390522][T17820] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1046.557205][T17824] netlink: 'syz.4.5260': attribute type 41 has an invalid length. [ 1047.921745][T17853] device syzkaller0 entered promiscuous mode [ 1048.391945][T17864] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1048.996713][ T5967] wlan1: Trigger new scan to find an IBSS to join [ 1050.558237][T17888] netlink: 'syz.1.5280': attribute type 41 has an invalid length. [ 1054.036096][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1054.056232][T17944] netlink: 'syz.6.5298': attribute type 41 has an invalid length. [ 1054.599197][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.605844][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.897517][ T5970] wlan1: Creating new IBSS network, BSSID 8a:74:39:c9:40:ee [ 1055.918625][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1057.142625][T17411] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1061.190195][T17411] Bluetooth: hci1: Malformed LE Event: 0x0b [ 1061.225773][T17411] Bluetooth: hci3: unexpected event 0x33 length: 82 > 10 [ 1063.090132][T17411] Bluetooth: hci2: Malformed LE Event: 0x0b [ 1063.693339][T18093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5368'. [ 1064.328328][T18093] device caif0 entered promiscuous mode [ 1066.515676][T17411] Bluetooth: hci1: unexpected event 0x33 length: 82 > 10 [ 1066.698799][T18148] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1067.391046][T18148] device caif0 entered promiscuous mode [ 1068.423506][T17411] Bluetooth: hci2: unexpected event 0x33 length: 82 > 10 [ 1069.663916][T18197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5393'. [ 1069.805906][T18197] device caif0 entered promiscuous mode [ 1070.410265][T18199] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1071.958688][T18237] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5410'. [ 1071.997372][T18237] device caif0 entered promiscuous mode [ 1072.368145][T18251] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 1072.633952][T18259] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 1072.948682][T18260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1072.957781][T18260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.974399][T18260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.001883][T18260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.543311][T18275] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5427'. [ 1073.972052][T18284] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1074.381222][T18294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5443'. [ 1074.578884][T18304] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 1075.087404][T18316] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 1076.042398][T18339] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5450'. [ 1076.352141][T18349] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5469'. [ 1076.470340][T18356] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 1078.163687][T18400] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5476'. [ 1079.431035][T18437] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5495'. [ 1079.712283][T18448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5511'. [ 1080.118400][T18459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1081.376237][T18496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5522'. [ 1082.512064][T18534] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5539'. [ 1084.451953][T18578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5555'. [ 1085.998720][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1086.437418][T17411] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1086.446060][T17411] Bluetooth: hci3: Injecting HCI hardware error event [ 1086.454351][ T4281] Bluetooth: hci3: hardware error 0x00 [ 1086.579576][T18616] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5572'. [ 1086.787358][T18622] sctp: [Deprecated]: syz.0.5575 (pid 18622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1086.787358][T18622] Use struct sctp_sack_info instead [ 1088.002709][T18650] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5587'. [ 1088.088443][T18652] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.435703][T17411] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1088.444386][T17411] Bluetooth: hci2: Injecting HCI hardware error event [ 1088.454358][T17411] Bluetooth: hci2: hardware error 0x00 [ 1088.509087][T18663] sctp: [Deprecated]: syz.5.5594 (pid 18663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1088.509087][T18663] Use struct sctp_sack_info instead [ 1088.526495][ T4281] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1090.610899][T18694] net_ratelimit: 153 callbacks suppressed [ 1090.610967][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.812988][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.823790][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.833954][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.843499][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.854484][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.864535][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.874574][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.885551][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1090.897254][T18694] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1091.317768][T17411] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1093.633440][T17411] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1094.281955][T18718] netlink: 'syz.6.5610': attribute type 21 has an invalid length. [ 1094.325375][T18718] netlink: 'syz.6.5610': attribute type 6 has an invalid length. [ 1094.338229][T18718] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5610'. [ 1096.398988][T18747] net_ratelimit: 1719 callbacks suppressed [ 1096.399066][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.491881][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.502153][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.511883][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.522093][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.532107][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.542207][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.552436][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.562313][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1096.572147][T18747] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1097.580194][T18764] netlink: 'syz.0.5631': attribute type 21 has an invalid length. [ 1097.614000][T18764] netlink: 'syz.0.5631': attribute type 6 has an invalid length. [ 1097.651477][T18764] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1101.828803][T18798] netlink: 'syz.5.5647': attribute type 21 has an invalid length. [ 1101.861083][T18798] netlink: 'syz.5.5647': attribute type 6 has an invalid length. [ 1101.902265][T18798] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5647'. [ 1101.943435][T18803] netlink: 'syz.6.5648': attribute type 10 has an invalid length. [ 1103.108935][T18819] device syzkaller0 entered promiscuous mode [ 1105.520744][T18837] netlink: 'syz.4.5664': attribute type 21 has an invalid length. [ 1105.588734][T18837] netlink: 'syz.4.5664': attribute type 6 has an invalid length. [ 1105.604059][T18837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1105.646990][T18841] netlink: 'syz.0.5665': attribute type 10 has an invalid length. [ 1106.135064][T18854] device syzkaller0 entered promiscuous mode [ 1106.979154][T18873] netlink: 'syz.1.5679': attribute type 21 has an invalid length. [ 1107.000908][T18873] netlink: 'syz.1.5679': attribute type 6 has an invalid length. [ 1107.021936][T18873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5679'. [ 1107.157997][T18881] netlink: 'syz.5.5682': attribute type 10 has an invalid length. [ 1107.345149][T18885] netlink: 'syz.5.5696': attribute type 21 has an invalid length. [ 1107.356085][T18885] netlink: 'syz.5.5696': attribute type 6 has an invalid length. [ 1107.369443][T18885] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5696'. [ 1107.624635][T18896] netlink: 'syz.0.5701': attribute type 21 has an invalid length. [ 1107.634203][T18896] netlink: 'syz.0.5701': attribute type 6 has an invalid length. [ 1107.654987][T18896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5701'. [ 1109.542985][T18920] netlink: 'syz.4.5697': attribute type 10 has an invalid length. [ 1109.770240][T18920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.777806][T18920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.844451][T18920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.851764][T18920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.859601][T18920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.866832][T18920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.907418][T18920] team0: Port device bridge0 added [ 1109.945848][T18921] device netdevsim0 left promiscuous mode [ 1109.966604][T18921] bridge0: port 3(netdevsim0) entered disabled state [ 1110.026408][T18921] device bridge_slave_1 left promiscuous mode [ 1110.054359][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.102579][T18921] device bridge_slave_0 left promiscuous mode [ 1110.141873][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.299517][T18921] team0: Port device bridge0 removed [ 1110.502625][T18944] netlink: 'syz.0.5707': attribute type 21 has an invalid length. [ 1110.526242][T18944] netlink: 'syz.0.5707': attribute type 6 has an invalid length. [ 1110.534450][T18944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5707'. [ 1111.905364][T18985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1112.089919][T18990] validate_nla: 3 callbacks suppressed [ 1112.089939][T18990] netlink: 'syz.5.5728': attribute type 10 has an invalid length. [ 1112.275221][T18995] netlink: 'syz.0.5741': attribute type 21 has an invalid length. [ 1112.308265][T18995] netlink: 'syz.0.5741': attribute type 6 has an invalid length. [ 1112.368875][T18995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5741'. [ 1113.212900][T19003] netlink: 'syz.0.5743': attribute type 21 has an invalid length. [ 1113.226755][T19003] netlink: 'syz.0.5743': attribute type 6 has an invalid length. [ 1113.250359][T19003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1115.092885][T19054] netlink: 'syz.6.5750': attribute type 21 has an invalid length. [ 1115.122732][T19054] netlink: 'syz.6.5750': attribute type 6 has an invalid length. [ 1115.161155][T19054] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5750'. [ 1116.135226][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.141922][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.029641][ T5967] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1117.032787][T19076] device veth0_vlan left promiscuous mode [ 1117.046765][T19076] device veth0_vlan entered promiscuous mode [ 1117.072724][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.098765][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.158339][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1117.412821][T19085] netlink: 'syz.6.5768': attribute type 21 has an invalid length. [ 1117.442176][T19085] netlink: 'syz.6.5768': attribute type 6 has an invalid length. [ 1117.473594][T19085] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5768'. [ 1119.809943][T19100] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.5773'. [ 1120.058565][T19117] sctp: [Deprecated]: syz.5.5779 (pid 19117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1120.058565][T19117] Use struct sctp_sack_info instead [ 1120.761888][T19127] netlink: 'syz.1.5784': attribute type 21 has an invalid length. [ 1120.788930][T19127] netlink: 'syz.1.5784': attribute type 6 has an invalid length. [ 1120.838395][T19127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1122.997666][T19170] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5801'. [ 1124.879457][T19174] netlink: 'syz.1.5803': attribute type 10 has an invalid length. [ 1124.926490][T19174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.938330][T19174] bond0: (slave team0): Enslaving as an active interface with an up link [ 1128.869103][T19264] netlink: 'syz.0.5837': attribute type 10 has an invalid length. [ 1129.179869][T19264] team0: Port device netdevsim0 added [ 1129.705965][T19283] sctp: [Deprecated]: syz.1.5845 (pid 19283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1129.705965][T19283] Use struct sctp_sack_info instead [ 1130.995314][T17411] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1131.003615][T17411] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1131.014047][T17411] CPU: 1 PID: 17411 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1131.021736][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1131.032044][T17411] Workqueue: hci1 hci_rx_work [ 1131.036803][T17411] Call Trace: [ 1131.040113][T17411] [ 1131.043078][T17411] dump_stack_lvl+0x168/0x22e [ 1131.047811][T17411] ? show_regs_print_info+0x12/0x12 [ 1131.053055][T17411] ? load_image+0x3b0/0x3b0 [ 1131.057729][T17411] sysfs_create_dir_ns+0x252/0x280 [ 1131.063152][T17411] ? hci_rx_work+0x3eb/0xd40 [ 1131.067849][T17411] ? sysfs_warn_dup+0xa0/0xa0 [ 1131.072576][T17411] ? do_raw_spin_unlock+0x11d/0x230 [ 1131.077843][T17411] kobject_add_internal+0x6b8/0xc80 [ 1131.083084][T17411] kobject_add+0x152/0x210 [ 1131.087628][T17411] ? kobject_init+0x1d0/0x1d0 [ 1131.092427][T17411] ? klist_children_get+0x50/0x50 [ 1131.097595][T17411] ? get_device_parent+0x121/0x3f0 [ 1131.102775][T17411] device_add+0x483/0xfb0 [ 1131.107132][T17411] ? kmem_cache_free+0xf7/0x290 [ 1131.112032][T17411] hci_conn_add_sysfs+0xd1/0x1e0 [ 1131.117020][T17411] le_conn_complete_evt+0xd1d/0x1320 [ 1131.122449][T17411] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1131.128786][T17411] ? bt_info+0x150/0x150 [ 1131.133248][T17411] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1131.138974][T17411] ? skb_pull_data+0xf7/0x200 [ 1131.143682][T17411] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1131.149611][T17411] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 1131.156069][T17411] ? hci_remote_host_features_evt+0x270/0x270 [ 1131.162248][T17411] hci_event_packet+0x791/0x1210 [ 1131.167307][T17411] ? bis_list+0x280/0x280 [ 1131.171652][T17411] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1131.177575][T17411] ? kcov_remote_start+0x4c7/0x7e0 [ 1131.182705][T17411] ? mt_dump_node+0xb00/0x1930 [ 1131.187660][T17411] ? hci_send_to_monitor+0x9c/0x4a0 [ 1131.192968][T17411] hci_rx_work+0x3eb/0xd40 [ 1131.197412][T17411] ? _raw_spin_unlock+0x40/0x40 [ 1131.202303][T17411] ? process_one_work+0x7a1/0x1160 [ 1131.207440][T17411] process_one_work+0x898/0x1160 [ 1131.212404][T17411] ? worker_detach_from_pool+0x240/0x240 [ 1131.218050][T17411] ? _raw_spin_lock_irq+0x7a/0xe0 [ 1131.223137][T17411] ? _raw_spin_lock_irq+0xab/0xe0 [ 1131.228181][T17411] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1131.233573][T17411] ? kthread_data+0x4b/0xc0 [ 1131.238101][T17411] worker_thread+0xaa2/0x1250 [ 1131.242819][T17411] ? __kthread_parkme+0x162/0x1c0 [ 1131.247871][T17411] kthread+0x29d/0x330 [ 1131.251967][T17411] ? worker_clr_flags+0x1a0/0x1a0 [ 1131.257037][T17411] ? kthread_blkcg+0xd0/0xd0 [ 1131.261655][T17411] ret_from_fork+0x1f/0x30 [ 1131.266107][T17411] [ 1131.271883][T17411] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1131.285742][T17411] Bluetooth: hci1: failed to register connection device [ 1132.620802][T17411] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1132.957362][T19343] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1133.323606][T17411] Bluetooth: hci1: command 0x2016 tx timeout [ 1135.082485][T19369] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.5877'. [ 1135.183340][T19371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5878'. [ 1137.436904][T19395] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5887'. [ 1145.815307][T19543] netlink: 'syz.1.5940': attribute type 10 has an invalid length. [ 1145.977627][T19543] team0: Port device netdevsim0 added [ 1147.064798][T19577] sctp: [Deprecated]: syz.0.5952 (pid 19577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1147.064798][T19577] Use struct sctp_sack_info instead [ 1147.175605][T19582] netlink: 'syz.6.5966': attribute type 10 has an invalid length. [ 1147.297403][T19582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.356462][T19582] bond0: (slave team0): Enslaving as an active interface with an up link [ 1147.643400][T19592] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5971'. [ 1148.374070][T19611] netlink: 'syz.6.5961': attribute type 10 has an invalid length. [ 1148.637662][T19611] team0: Port device netdevsim0 added [ 1149.141219][T19622] netlink: 'syz.5.5973': attribute type 10 has an invalid length. [ 1149.310652][T19622] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.389122][T19622] bond0: (slave team0): Enslaving as an active interface with an up link [ 1149.718282][T19642] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5980'. [ 1153.285730][T19707] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.6008'. [ 1160.823568][T19813] netlink: 'syz.4.6050': attribute type 10 has an invalid length. [ 1160.962776][T19813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.021771][T19813] bond0: (slave team0): Enslaving as an active interface with an up link [ 1164.872260][T19873] netlink: 'syz.0.6066': attribute type 10 has an invalid length. [ 1165.819741][T19873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.868217][T19873] bond0: (slave team0): Enslaving as an active interface with an up link [ 1169.004741][T19889] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.6076'. [ 1169.340916][T19916] netlink: 'syz.5.6085': attribute type 10 has an invalid length. [ 1169.423108][T19916] team0: Port device netdevsim0 added [ 1169.498134][T19920] netlink: 'syz.4.6090': attribute type 10 has an invalid length. [ 1169.747501][T19933] sctp: [Deprecated]: syz.5.6093 (pid 19933) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1169.747501][T19933] Use struct sctp_sack_info instead [ 1176.164539][T19958] netlink: 'syz.4.6105': attribute type 10 has an invalid length. [ 1176.225254][T19958] team0: Port device netdevsim0 added [ 1176.255235][T19965] netlink: 'syz.6.6108': attribute type 10 has an invalid length. [ 1177.375784][T20002] netlink: 'syz.1.6123': attribute type 10 has an invalid length. [ 1177.512299][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.518730][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.660376][T20000] netlink: 10 bytes leftover after parsing attributes in process `syz.6.6119'. [ 1178.439693][T20012] netlink: 'syz.4.6139': attribute type 10 has an invalid length. [ 1178.453485][T17411] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 1180.839252][T20060] netlink: 'syz.0.6145': attribute type 10 has an invalid length. [ 1182.056526][T20077] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1183.148966][T20099] netlink: 'syz.5.6158': attribute type 10 has an invalid length. [ 1187.732059][T20121] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1189.819913][T20142] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6174'. [ 1192.974654][T20154] netlink: 'syz.4.6178': attribute type 10 has an invalid length. [ 1193.305147][T20166] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6182'. [ 1197.174295][T20193] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1197.519137][T20198] netlink: 'syz.5.6194': attribute type 10 has an invalid length. [ 1199.030729][T20230] netlink: 'syz.0.6205': attribute type 1 has an invalid length. [ 1199.065639][T20230] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1199.896763][T20243] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6209'. [ 1200.009296][T20248] netlink: 'syz.1.6211': attribute type 10 has an invalid length. [ 1202.132600][T20279] netlink: 'syz.1.6223': attribute type 1 has an invalid length. [ 1202.196054][T20279] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1202.947048][T20285] netlink: 'syz.5.6226': attribute type 10 has an invalid length. [ 1209.230178][T20316] netlink: 'syz.4.6238': attribute type 1 has an invalid length. [ 1209.248121][T20316] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1209.561932][T20327] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6239'. [ 1210.194666][T20331] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.6240'. [ 1210.372385][T20340] device syzkaller0 entered promiscuous mode [ 1213.884862][T20372] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1215.363088][T20399] netlink: 'syz.1.6266': attribute type 10 has an invalid length. [ 1215.398271][T20399] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1216.124354][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1216.134297][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1216.143004][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1216.153568][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1216.161740][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1216.170314][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1216.449998][T20408] chnl_net:caif_netlink_parms(): no params data found [ 1216.496673][T20408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.504133][T20408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.512446][T20408] device bridge_slave_0 entered promiscuous mode [ 1216.522493][T20408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.529842][T20408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.538006][T20408] device bridge_slave_1 entered promiscuous mode [ 1216.562533][T20408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.573914][T20408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.601423][T20408] team0: Port device team_slave_0 added [ 1216.609256][T20408] team0: Port device team_slave_1 added [ 1216.630723][T20408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.637894][T20408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.664344][T20408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.677279][T20408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.684337][T20408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.710293][T20408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.743243][T20408] device hsr_slave_0 entered promiscuous mode [ 1216.750495][T20408] device hsr_slave_1 entered promiscuous mode [ 1216.850121][T20408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1216.859514][T20408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1216.870674][T20408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1216.880299][T20408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1216.904487][T20408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.911661][T20408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.919098][T20408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.926262][T20408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.973426][T20408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.988314][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1216.998119][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.007257][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.024830][T20408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.042613][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1217.051509][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.058677][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.066632][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1217.075425][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.082540][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.104243][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1217.113763][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1217.128407][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1217.141342][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1217.153483][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1217.164469][T20408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1217.350618][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1217.358458][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1217.371072][T20408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.639705][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1217.648884][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1217.668930][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1217.678310][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1217.687503][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1217.695902][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1217.707601][T20408] device veth0_vlan entered promiscuous mode [ 1217.720217][T20408] device veth1_vlan entered promiscuous mode [ 1217.741162][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1217.749901][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1217.761114][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1217.771260][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1217.781873][T20408] device veth0_macvtap entered promiscuous mode [ 1217.792496][T20408] device veth1_macvtap entered promiscuous mode [ 1217.809535][T20408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.817561][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1217.826779][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1217.834964][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.844286][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.856551][T20408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.863941][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1217.873323][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1217.887103][T20408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.896008][T20408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.904718][T20408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.913928][T20408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.983644][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.996588][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.009222][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1218.031052][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.039657][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.050199][ T5984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1218.199397][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 1220.285561][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 1221.374944][ T4281] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1222.355511][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 1224.037559][ T5970] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.439192][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 1224.788439][ T5970] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.090726][T20534] device syzkaller0 entered promiscuous mode [ 1225.199233][ T5970] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.281874][T20553] netlink: 'syz.4.6313': attribute type 10 has an invalid length. [ 1228.289898][T20553] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6313'. [ 1228.410246][T20553] device vlan0 left promiscuous mode [ 1228.415976][T20553] À: port 1(vlan0) entered disabled state [ 1228.497981][T20553] team0: Port device macvlan1 removed [ 1228.531923][ T5970] team0: Port device netdevsim0 removed [ 1228.540722][ T5970] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.582856][T20563] device syzkaller0 entered promiscuous mode [ 1230.669451][ T5970] device 0 left promiscuous mode [ 1233.073735][T20615] netlink: 'syz.4.6334': attribute type 1 has an invalid length. [ 1233.113759][T20615] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1234.408939][ T5970] device veth1_vlan left promiscuous mode [ 1234.414960][ T5970] device veth0_vlan left promiscuous mode [ 1234.742736][ T5970] team0 (unregistering): Port device macvlan1 removed [ 1235.197591][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 1235.268560][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 1235.319498][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.393047][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.971731][ T5970] bond0 (unregistering): (slave team0): Releasing backup interface [ 1236.212060][ T5970] bond0 (unregistering): Released all slaves [ 1236.397407][T20658] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1236.483618][T20658] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1238.955991][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.962424][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.650268][T20707] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1239.730864][T20707] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1239.744421][T20707] CPU: 1 PID: 20707 Comm: syz.4.6370 Not tainted syzkaller #0 [ 1239.751948][T20707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1239.762041][T20707] Call Trace: [ 1239.765376][T20707] [ 1239.768324][T20707] dump_stack_lvl+0x168/0x22e [ 1239.773034][T20707] ? show_regs_print_info+0x12/0x12 [ 1239.778256][T20707] ? load_image+0x3b0/0x3b0 [ 1239.782790][T20707] sysfs_warn_dup+0x8a/0xa0 [ 1239.787315][T20707] sysfs_do_create_link_sd+0xc0/0x110 [ 1239.792708][T20707] device_add+0x7ed/0xfb0 [ 1239.797082][T20707] wiphy_register+0x1e68/0x2bd0 [ 1239.801973][T20707] ? cfg80211_event_work+0x40/0x40 [ 1239.807114][T20707] ? minstrel_ht_alloc+0x894/0xa20 [ 1239.812322][T20707] ? strcmp+0x3c/0xb0 [ 1239.816332][T20707] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1239.822437][T20707] ieee80211_register_hw+0x2c29/0x38c0 [ 1239.827946][T20707] ? ieee80211_register_hw+0xea1/0x38c0 [ 1239.833509][T20707] ? ieee80211_register_hw+0xea1/0x38c0 [ 1239.839080][T20707] ? ieee80211_tasklet_handler+0x20/0x20 [ 1239.844736][T20707] ? memset+0x1e/0x40 [ 1239.848753][T20707] ? __hrtimer_init+0x186/0x270 [ 1239.853635][T20707] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1239.859405][T20707] hwsim_new_radio_nl+0xafa/0xce0 [ 1239.864472][T20707] genl_family_rcv_msg_doit+0x22e/0x320 [ 1239.870040][T20707] ? end_current_label_crit_section+0x170/0x170 [ 1239.876313][T20707] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1239.882935][T20707] ? bpf_lsm_capable+0x5/0x10 [ 1239.887628][T20707] ? security_capable+0x85/0xb0 [ 1239.892502][T20707] genl_rcv_msg+0x5f2/0x780 [ 1239.897043][T20707] ? genl_bind+0x350/0x350 [ 1239.901502][T20707] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1239.907876][T20707] ? lock_acquire+0x20f/0x490 [ 1239.912574][T20707] netlink_rcv_skb+0x1de/0x420 [ 1239.917451][T20707] ? genl_bind+0x350/0x350 [ 1239.921896][T20707] ? netlink_ack+0x1100/0x1100 [ 1239.926775][T20707] ? down_read+0x1a8/0x2d0 [ 1239.931223][T20707] genl_rcv+0x24/0x40 [ 1239.935220][T20707] netlink_unicast+0x74d/0x8d0 [ 1239.940004][T20707] netlink_sendmsg+0x89e/0xbc0 [ 1239.944876][T20707] ? netlink_getsockopt+0x540/0x540 [ 1239.950108][T20707] ? netlink_getsockopt+0x540/0x540 [ 1239.955327][T20707] ____sys_sendmsg+0x59b/0x970 [ 1239.960122][T20707] ? __sys_sendmsg_sock+0x30/0x30 [ 1239.965162][T20707] ? __import_iovec+0x315/0x500 [ 1239.970126][T20707] ? import_iovec+0x6f/0xa0 [ 1239.974654][T20707] ___sys_sendmsg+0x21c/0x290 [ 1239.979368][T20707] ? __sys_sendmsg+0x270/0x270 [ 1239.984364][T20707] ? __fdget+0x17c/0x200 [ 1239.988630][T20707] __se_sys_sendmsg+0x19e/0x270 [ 1239.993514][T20707] ? rcu_is_watching+0x11/0xa0 [ 1239.998330][T20707] ? __x64_sys_sendmsg+0x80/0x80 [ 1240.003369][T20707] do_syscall_64+0x4c/0xa0 [ 1240.007853][T20707] ? clear_bhb_loop+0x60/0xb0 [ 1240.012567][T20707] ? clear_bhb_loop+0x60/0xb0 [ 1240.017310][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1240.023237][T20707] RIP: 0033:0x7f9e8fb8ebe9 [ 1240.027781][T20707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.047460][T20707] RSP: 002b:00007f9e90a40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1240.055889][T20707] RAX: ffffffffffffffda RBX: 00007f9e8fdc5fa0 RCX: 00007f9e8fb8ebe9 [ 1240.063879][T20707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1240.071958][T20707] RBP: 00007f9e8fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1240.080383][T20707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.088446][T20707] R13: 00007f9e8fdc6038 R14: 00007f9e8fdc5fa0 R15: 00007ffe3b545208 [ 1240.096454][T20707] [ 1240.854792][T20718] IPv6: Can't replace route, no match found [ 1241.985165][T20732] netlink: 'syz.4.6379': attribute type 10 has an invalid length. [ 1241.998109][T20732] team0: Port device wlan1 added [ 1244.036819][ T46] wlan1: Trigger new scan to find an IBSS to join [ 1244.255942][T20749] device wg2 entered promiscuous mode [ 1245.020962][T20768] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.6392'. [ 1245.756758][T20786] IPv6: Can't replace route, no match found [ 1245.766552][T20768] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1247.075208][ T4281] Bluetooth: hci1: unexpected event 0x35 length: 82 > 6 [ 1248.008536][T20829] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6412'. [ 1248.035527][ T5984] wlan1: Trigger new scan to find an IBSS to join [ 1248.077089][T20829] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1248.087619][T20829] CPU: 1 PID: 20829 Comm: syz.1.6412 Not tainted syzkaller #0 [ 1248.095238][T20829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1248.105440][T20829] Call Trace: [ 1248.108847][T20829] [ 1248.111823][T20829] dump_stack_lvl+0x168/0x22e [ 1248.116567][T20829] ? show_regs_print_info+0x12/0x12 [ 1248.121870][T20829] ? load_image+0x3b0/0x3b0 [ 1248.126551][T20829] sysfs_warn_dup+0x8a/0xa0 [ 1248.131197][T20829] sysfs_do_create_link_sd+0xc0/0x110 [ 1248.136644][T20829] device_add+0x7ed/0xfb0 [ 1248.141042][T20829] wiphy_register+0x1e68/0x2bd0 [ 1248.145962][T20829] ? cfg80211_event_work+0x40/0x40 [ 1248.151124][T20829] ? minstrel_ht_alloc+0x894/0xa20 [ 1248.156288][T20829] ? strcmp+0x24/0xb0 [ 1248.160419][T20829] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1248.166545][T20829] ieee80211_register_hw+0x2c29/0x38c0 [ 1248.172044][T20829] ? ieee80211_register_hw+0xea1/0x38c0 [ 1248.177658][T20829] ? ieee80211_register_hw+0xea1/0x38c0 [ 1248.183409][T20829] ? ieee80211_tasklet_handler+0x20/0x20 [ 1248.189194][T20829] ? memset+0x1e/0x40 [ 1248.193227][T20829] ? __hrtimer_init+0x186/0x270 [ 1248.198103][T20829] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1248.204058][T20829] hwsim_new_radio_nl+0xafa/0xce0 [ 1248.209129][T20829] genl_family_rcv_msg_doit+0x22e/0x320 [ 1248.214706][T20829] ? end_current_label_crit_section+0x170/0x170 [ 1248.220981][T20829] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1248.226910][T20829] ? bpf_lsm_capable+0x5/0x10 [ 1248.231619][T20829] ? security_capable+0x85/0xb0 [ 1248.236491][T20829] genl_rcv_msg+0x5f2/0x780 [ 1248.241026][T20829] ? genl_bind+0x350/0x350 [ 1248.245472][T20829] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1248.251936][T20829] ? lock_chain_count+0x20/0x20 [ 1248.256814][T20829] netlink_rcv_skb+0x1de/0x420 [ 1248.261599][T20829] ? genl_bind+0x350/0x350 [ 1248.266037][T20829] ? netlink_ack+0x1100/0x1100 [ 1248.270840][T20829] ? down_read+0x67/0x2d0 [ 1248.275367][T20829] ? down_read+0x1a8/0x2d0 [ 1248.279826][T20829] genl_rcv+0x24/0x40 [ 1248.283827][T20829] netlink_unicast+0x74d/0x8d0 [ 1248.288632][T20829] netlink_sendmsg+0x89e/0xbc0 [ 1248.293434][T20829] ? netlink_getsockopt+0x540/0x540 [ 1248.298789][T20829] ? aa_sock_msg_perm+0x94/0x150 [ 1248.303841][T20829] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1248.309223][T20829] ? security_socket_sendmsg+0x7c/0xa0 [ 1248.314718][T20829] ? netlink_getsockopt+0x540/0x540 [ 1248.320055][T20829] ____sys_sendmsg+0x59b/0x970 [ 1248.324954][T20829] ? __sys_sendmsg_sock+0x30/0x30 [ 1248.330039][T20829] ? __import_iovec+0x315/0x500 [ 1248.334937][T20829] ? import_iovec+0x6f/0xa0 [ 1248.339468][T20829] ___sys_sendmsg+0x21c/0x290 [ 1248.344174][T20829] ? __sys_sendmsg+0x270/0x270 [ 1248.348972][T20829] ? ktime_get_real_ts64+0x420/0x420 [ 1248.354294][T20829] ? __fdget+0x17c/0x200 [ 1248.358565][T20829] __se_sys_sendmsg+0x19e/0x270 [ 1248.363440][T20829] ? perf_trace_preemptirq_template+0x287/0x330 [ 1248.369708][T20829] ? __x64_sys_sendmsg+0x80/0x80 [ 1248.374698][T20829] ? lockdep_hardirqs_on+0x94/0x140 [ 1248.379916][T20829] do_syscall_64+0x4c/0xa0 [ 1248.384350][T20829] ? clear_bhb_loop+0x60/0xb0 [ 1248.389039][T20829] ? clear_bhb_loop+0x60/0xb0 [ 1248.393733][T20829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.399650][T20829] RIP: 0033:0x7f865958ebe9 [ 1248.404076][T20829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.423717][T20829] RSP: 002b:00007f865a3a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.432243][T20829] RAX: ffffffffffffffda RBX: 00007f86597c5fa0 RCX: 00007f865958ebe9 [ 1248.440236][T20829] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1248.448225][T20829] RBP: 00007f8659611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1248.456213][T20829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.464227][T20829] R13: 00007f86597c6038 R14: 00007f86597c5fa0 R15: 00007ffeeb0a7508 [ 1248.472233][T20829] [ 1248.551041][T20834] IPv6: Can't replace route, no match found [ 1249.179913][T20851] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1249.317079][ T5984] wlan1: Creating new IBSS network, BSSID 56:e8:1a:49:93:27 [ 1249.440031][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1249.452295][T20851] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1249.463858][T20851] CPU: 1 PID: 20851 Comm: syz.0.6422 Not tainted syzkaller #0 [ 1249.471413][T20851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1249.481524][T20851] Call Trace: [ 1249.484960][T20851] [ 1249.487985][T20851] dump_stack_lvl+0x168/0x22e [ 1249.492733][T20851] ? show_regs_print_info+0x12/0x12 [ 1249.497997][T20851] ? load_image+0x3b0/0x3b0 [ 1249.502615][T20851] sysfs_warn_dup+0x8a/0xa0 [ 1249.507235][T20851] sysfs_do_create_link_sd+0xc0/0x110 [ 1249.512681][T20851] device_add+0x7ed/0xfb0 [ 1249.517151][T20851] wiphy_register+0x1e68/0x2bd0 [ 1249.522112][T20851] ? cfg80211_event_work+0x40/0x40 [ 1249.527427][T20851] ? minstrel_ht_alloc+0x894/0xa20 [ 1249.533137][T20851] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1249.539290][T20851] ieee80211_register_hw+0x2c29/0x38c0 [ 1249.544888][T20851] ? ieee80211_register_hw+0xea1/0x38c0 [ 1249.550484][T20851] ? ieee80211_register_hw+0xea1/0x38c0 [ 1249.556113][T20851] ? ieee80211_tasklet_handler+0x20/0x20 [ 1249.561837][T20851] ? memset+0x1e/0x40 [ 1249.565891][T20851] ? __hrtimer_init+0x186/0x270 [ 1249.570902][T20851] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1249.576739][T20851] hwsim_new_radio_nl+0xafa/0xce0 [ 1249.581863][T20851] genl_family_rcv_msg_doit+0x22e/0x320 [ 1249.587474][T20851] ? end_current_label_crit_section+0x170/0x170 [ 1249.593801][T20851] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1249.599774][T20851] ? bpf_lsm_capable+0x5/0x10 [ 1249.604502][T20851] ? security_capable+0x85/0xb0 [ 1249.609432][T20851] genl_rcv_msg+0x5f2/0x780 [ 1249.614119][T20851] ? genl_bind+0x350/0x350 [ 1249.618599][T20851] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1249.625118][T20851] netlink_rcv_skb+0x1de/0x420 [ 1249.629946][T20851] ? genl_bind+0x350/0x350 [ 1249.634439][T20851] ? netlink_ack+0x1100/0x1100 [ 1249.639351][T20851] ? down_read+0x1a8/0x2d0 [ 1249.643848][T20851] genl_rcv+0x24/0x40 [ 1249.647894][T20851] netlink_unicast+0x74d/0x8d0 [ 1249.652744][T20851] netlink_sendmsg+0x89e/0xbc0 [ 1249.657605][T20851] ? netlink_getsockopt+0x540/0x540 [ 1249.663249][T20851] ? aa_sock_msg_perm+0x94/0x150 [ 1249.668263][T20851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1249.673844][T20851] ? security_socket_sendmsg+0x7c/0xa0 [ 1249.679375][T20851] ? netlink_getsockopt+0x540/0x540 [ 1249.684634][T20851] ____sys_sendmsg+0x59b/0x970 [ 1249.689469][T20851] ? __sys_sendmsg_sock+0x30/0x30 [ 1249.694545][T20851] ? __import_iovec+0x315/0x500 [ 1249.699553][T20851] ? import_iovec+0x6f/0xa0 [ 1249.704134][T20851] ___sys_sendmsg+0x21c/0x290 [ 1249.708850][T20851] ? __sys_sendmsg+0x270/0x270 [ 1249.713724][T20851] ? __fdget+0x17c/0x200 [ 1249.718021][T20851] __se_sys_sendmsg+0x19e/0x270 [ 1249.723024][T20851] ? __x64_sys_sendmsg+0x80/0x80 [ 1249.728017][T20851] ? lockdep_hardirqs_on+0x94/0x140 [ 1249.733258][T20851] do_syscall_64+0x4c/0xa0 [ 1249.737719][T20851] ? clear_bhb_loop+0x60/0xb0 [ 1249.742441][T20851] ? clear_bhb_loop+0x60/0xb0 [ 1249.747161][T20851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1249.753114][T20851] RIP: 0033:0x7fa9c658ebe9 [ 1249.757554][T20851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.777210][T20851] RSP: 002b:00007fa9c74c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1249.785660][T20851] RAX: ffffffffffffffda RBX: 00007fa9c67c5fa0 RCX: 00007fa9c658ebe9 [ 1249.793666][T20851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1249.801695][T20851] RBP: 00007fa9c6611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1249.809779][T20851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.817773][T20851] R13: 00007fa9c67c6038 R14: 00007fa9c67c5fa0 R15: 00007ffc84dad3f8 [ 1249.825899][T20851] [ 1250.103452][T20865] device syzkaller0 entered promiscuous mode [ 1252.400893][T20877] IPv6: Can't replace route, no match found [ 1252.404443][T20879] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6439'. [ 1253.265020][T20879] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1253.274606][T20879] CPU: 1 PID: 20879 Comm: syz.1.6439 Not tainted syzkaller #0 [ 1253.282149][T20879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1253.292268][T20879] Call Trace: [ 1253.295600][T20879] [ 1253.298585][T20879] dump_stack_lvl+0x168/0x22e [ 1253.303417][T20879] ? show_regs_print_info+0x12/0x12 [ 1253.308655][T20879] ? load_image+0x3b0/0x3b0 [ 1253.313225][T20879] sysfs_warn_dup+0x8a/0xa0 [ 1253.317808][T20879] sysfs_do_create_link_sd+0xc0/0x110 [ 1253.323223][T20879] device_add+0x7ed/0xfb0 [ 1253.327601][T20879] wiphy_register+0x1e68/0x2bd0 [ 1253.332508][T20879] ? cfg80211_event_work+0x40/0x40 [ 1253.337645][T20879] ? minstrel_ht_alloc+0x894/0xa20 [ 1253.342795][T20879] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1253.348909][T20879] ieee80211_register_hw+0x2c29/0x38c0 [ 1253.354424][T20879] ? ieee80211_register_hw+0xea1/0x38c0 [ 1253.359993][T20879] ? ieee80211_register_hw+0xea1/0x38c0 [ 1253.365575][T20879] ? ieee80211_tasklet_handler+0x20/0x20 [ 1253.371253][T20879] ? memset+0x1e/0x40 [ 1253.375274][T20879] ? __hrtimer_init+0x186/0x270 [ 1253.380158][T20879] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1253.385943][T20879] hwsim_new_radio_nl+0xafa/0xce0 [ 1253.391034][T20879] genl_family_rcv_msg_doit+0x22e/0x320 [ 1253.396617][T20879] ? end_current_label_crit_section+0x170/0x170 [ 1253.402900][T20879] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1253.408845][T20879] ? bpf_lsm_capable+0x5/0x10 [ 1253.413545][T20879] ? security_capable+0x85/0xb0 [ 1253.418515][T20879] genl_rcv_msg+0x5f2/0x780 [ 1253.423076][T20879] ? genl_bind+0x350/0x350 [ 1253.427519][T20879] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1253.433931][T20879] netlink_rcv_skb+0x1de/0x420 [ 1253.438731][T20879] ? genl_bind+0x350/0x350 [ 1253.443180][T20879] ? netlink_ack+0x1100/0x1100 [ 1253.447992][T20879] ? down_read+0x1a8/0x2d0 [ 1253.452452][T20879] genl_rcv+0x24/0x40 [ 1253.456552][T20879] netlink_unicast+0x74d/0x8d0 [ 1253.461365][T20879] netlink_sendmsg+0x89e/0xbc0 [ 1253.466182][T20879] ? netlink_getsockopt+0x540/0x540 [ 1253.471411][T20879] ? aa_sock_msg_perm+0x94/0x150 [ 1253.476560][T20879] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1253.482132][T20879] ? security_socket_sendmsg+0x7c/0xa0 [ 1253.487633][T20879] ? netlink_getsockopt+0x540/0x540 [ 1253.492862][T20879] ____sys_sendmsg+0x59b/0x970 [ 1253.497677][T20879] ? __sys_sendmsg_sock+0x30/0x30 [ 1253.502783][T20879] ? __import_iovec+0x315/0x500 [ 1253.507684][T20879] ? import_iovec+0x6f/0xa0 [ 1253.512230][T20879] ___sys_sendmsg+0x21c/0x290 [ 1253.516939][T20879] ? __sys_sendmsg+0x270/0x270 [ 1253.521805][T20879] ? __fdget+0x17c/0x200 [ 1253.526084][T20879] __se_sys_sendmsg+0x19e/0x270 [ 1253.530967][T20879] ? perf_trace_preemptirq_template+0x287/0x330 [ 1253.537237][T20879] ? __x64_sys_sendmsg+0x80/0x80 [ 1253.542226][T20879] ? lockdep_hardirqs_on+0x94/0x140 [ 1253.547461][T20879] do_syscall_64+0x4c/0xa0 [ 1253.551897][T20879] ? clear_bhb_loop+0x60/0xb0 [ 1253.556596][T20879] ? clear_bhb_loop+0x60/0xb0 [ 1253.561300][T20879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1253.567231][T20879] RIP: 0033:0x7f865958ebe9 [ 1253.571671][T20879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.591306][T20879] RSP: 002b:00007f865a3a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1253.599860][T20879] RAX: ffffffffffffffda RBX: 00007f86597c5fa0 RCX: 00007f865958ebe9 [ 1253.607883][T20879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1253.615912][T20879] RBP: 00007f8659611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1253.623933][T20879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.631927][T20879] R13: 00007f86597c6038 R14: 00007f86597c5fa0 R15: 00007ffeeb0a7508 [ 1253.640056][T20879] [ 1256.084565][T20924] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.6449'. [ 1256.118914][T20924] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1256.131635][T20924] CPU: 1 PID: 20924 Comm: syz.7.6449 Not tainted syzkaller #0 [ 1256.139174][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1256.149285][T20924] Call Trace: [ 1256.152611][T20924] [ 1256.155670][T20924] dump_stack_lvl+0x168/0x22e [ 1256.160417][T20924] ? show_regs_print_info+0x12/0x12 [ 1256.165712][T20924] ? load_image+0x3b0/0x3b0 [ 1256.170295][T20924] sysfs_warn_dup+0x8a/0xa0 [ 1256.174839][T20924] sysfs_do_create_link_sd+0xc0/0x110 [ 1256.180309][T20924] device_add+0x7ed/0xfb0 [ 1256.184693][T20924] wiphy_register+0x1e68/0x2bd0 [ 1256.189610][T20924] ? cfg80211_event_work+0x40/0x40 [ 1256.194770][T20924] ? minstrel_ht_alloc+0x894/0xa20 [ 1256.200122][T20924] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1256.206253][T20924] ieee80211_register_hw+0x2c29/0x38c0 [ 1256.211843][T20924] ? ieee80211_register_hw+0xea1/0x38c0 [ 1256.217429][T20924] ? ieee80211_register_hw+0xea1/0x38c0 [ 1256.223043][T20924] ? ieee80211_tasklet_handler+0x20/0x20 [ 1256.228735][T20924] ? memset+0x1e/0x40 [ 1256.232760][T20924] ? __hrtimer_init+0x186/0x270 [ 1256.237754][T20924] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1256.243560][T20924] hwsim_new_radio_nl+0xafa/0xce0 [ 1256.248643][T20924] genl_family_rcv_msg_doit+0x22e/0x320 [ 1256.254220][T20924] ? end_current_label_crit_section+0x170/0x170 [ 1256.260519][T20924] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1256.266501][T20924] ? bpf_lsm_capable+0x5/0x10 [ 1256.271226][T20924] ? security_capable+0x85/0xb0 [ 1256.276137][T20924] genl_rcv_msg+0x5f2/0x780 [ 1256.280800][T20924] ? genl_bind+0x350/0x350 [ 1256.285296][T20924] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1256.291895][T20924] netlink_rcv_skb+0x1de/0x420 [ 1256.296790][T20924] ? genl_bind+0x350/0x350 [ 1256.301252][T20924] ? netlink_ack+0x1100/0x1100 [ 1256.306080][T20924] ? down_read+0x1a8/0x2d0 [ 1256.310533][T20924] genl_rcv+0x24/0x40 [ 1256.314551][T20924] netlink_unicast+0x74d/0x8d0 [ 1256.319360][T20924] netlink_sendmsg+0x89e/0xbc0 [ 1256.324167][T20924] ? netlink_getsockopt+0x540/0x540 [ 1256.329439][T20924] ? aa_sock_msg_perm+0x94/0x150 [ 1256.334423][T20924] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1256.339732][T20924] ? security_socket_sendmsg+0x7c/0xa0 [ 1256.345231][T20924] ? netlink_getsockopt+0x540/0x540 [ 1256.350810][T20924] ____sys_sendmsg+0x59b/0x970 [ 1256.355626][T20924] ? __sys_sendmsg_sock+0x30/0x30 [ 1256.360678][T20924] ? __import_iovec+0x315/0x500 [ 1256.365586][T20924] ? import_iovec+0x6f/0xa0 [ 1256.370136][T20924] ___sys_sendmsg+0x21c/0x290 [ 1256.374859][T20924] ? __sys_sendmsg+0x270/0x270 [ 1256.379733][T20924] ? __fdget+0x17c/0x200 [ 1256.384100][T20924] __se_sys_sendmsg+0x19e/0x270 [ 1256.388985][T20924] ? ct_nmi_exit+0x145/0x1c0 [ 1256.393631][T20924] ? __x64_sys_sendmsg+0x80/0x80 [ 1256.398718][T20924] ? lockdep_hardirqs_on+0x94/0x140 [ 1256.404106][T20924] do_syscall_64+0x4c/0xa0 [ 1256.408560][T20924] ? clear_bhb_loop+0x60/0xb0 [ 1256.413360][T20924] ? clear_bhb_loop+0x60/0xb0 [ 1256.418071][T20924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1256.424037][T20924] RIP: 0033:0x7f08a9f8ebe9 [ 1256.428506][T20924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.448152][T20924] RSP: 002b:00007f08a81f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.456600][T20924] RAX: ffffffffffffffda RBX: 00007f08aa1c5fa0 RCX: 00007f08a9f8ebe9 [ 1256.464595][T20924] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1256.472585][T20924] RBP: 00007f08aa011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1256.480670][T20924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.489015][T20924] R13: 00007f08aa1c6038 R14: 00007f08aa1c5fa0 R15: 00007fff21396f78 [ 1256.497058][T20924] [ 1256.512734][T20931] sctp: [Deprecated]: syz.0.6458 (pid 20931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1256.512734][T20931] Use struct sctp_sack_info instead [ 1256.970906][T20941] sctp: [Deprecated]: syz.4.6453 (pid 20941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1256.970906][T20941] Use struct sctp_sack_info instead [ 1259.130309][T20984] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1259.930967][T20984] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1259.940304][T21003] sctp: [Deprecated]: syz.1.6470 (pid 21003) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1259.940304][T21003] Use struct sctp_sack_info instead [ 1259.958021][T20984] CPU: 0 PID: 20984 Comm: syz.4.6466 Not tainted syzkaller #0 [ 1259.965544][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1259.975639][T20984] Call Trace: [ 1259.978944][T20984] [ 1259.981904][T20984] dump_stack_lvl+0x168/0x22e [ 1259.986710][T20984] ? show_regs_print_info+0x12/0x12 [ 1259.991933][T20984] ? load_image+0x3b0/0x3b0 [ 1259.996494][T20984] sysfs_warn_dup+0x8a/0xa0 [ 1260.001028][T20984] sysfs_do_create_link_sd+0xc0/0x110 [ 1260.006430][T20984] device_add+0x7ed/0xfb0 [ 1260.010800][T20984] wiphy_register+0x1e68/0x2bd0 [ 1260.015707][T20984] ? cfg80211_event_work+0x40/0x40 [ 1260.020850][T20984] ? minstrel_ht_alloc+0x894/0xa20 [ 1260.026175][T20984] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1260.032285][T20984] ieee80211_register_hw+0x2c29/0x38c0 [ 1260.037788][T20984] ? ieee80211_register_hw+0xea1/0x38c0 [ 1260.043385][T20984] ? ieee80211_register_hw+0xea1/0x38c0 [ 1260.048983][T20984] ? ieee80211_tasklet_handler+0x20/0x20 [ 1260.054708][T20984] ? memset+0x1e/0x40 [ 1260.058752][T20984] ? __hrtimer_init+0x186/0x270 [ 1260.063683][T20984] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1260.069490][T20984] hwsim_new_radio_nl+0xafa/0xce0 [ 1260.074585][T20984] genl_family_rcv_msg_doit+0x22e/0x320 [ 1260.080197][T20984] ? end_current_label_crit_section+0x170/0x170 [ 1260.086482][T20984] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1260.092422][T20984] ? bpf_lsm_capable+0x5/0x10 [ 1260.097120][T20984] ? security_capable+0x85/0xb0 [ 1260.102094][T20984] genl_rcv_msg+0x5f2/0x780 [ 1260.106644][T20984] ? genl_bind+0x350/0x350 [ 1260.111098][T20984] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1260.117490][T20984] netlink_rcv_skb+0x1de/0x420 [ 1260.122286][T20984] ? genl_bind+0x350/0x350 [ 1260.126910][T20984] ? netlink_ack+0x1100/0x1100 [ 1260.131723][T20984] ? down_read+0x1a8/0x2d0 [ 1260.136267][T20984] genl_rcv+0x24/0x40 [ 1260.140278][T20984] netlink_unicast+0x74d/0x8d0 [ 1260.145105][T20984] netlink_sendmsg+0x89e/0xbc0 [ 1260.149923][T20984] ? netlink_getsockopt+0x540/0x540 [ 1260.155163][T20984] ? aa_sock_msg_perm+0x94/0x150 [ 1260.160153][T20984] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1260.165464][T20984] ? security_socket_sendmsg+0x7c/0xa0 [ 1260.170958][T20984] ? netlink_getsockopt+0x540/0x540 [ 1260.176303][T20984] ____sys_sendmsg+0x59b/0x970 [ 1260.181137][T20984] ? __sys_sendmsg_sock+0x30/0x30 [ 1260.186194][T20984] ? __import_iovec+0x315/0x500 [ 1260.191098][T20984] ? import_iovec+0x6f/0xa0 [ 1260.195646][T20984] ___sys_sendmsg+0x21c/0x290 [ 1260.200364][T20984] ? __sys_sendmsg+0x270/0x270 [ 1260.205228][T20984] ? __fdget+0x17c/0x200 [ 1260.209506][T20984] __se_sys_sendmsg+0x19e/0x270 [ 1260.214863][T20984] ? __x64_sys_sendmsg+0x80/0x80 [ 1260.219939][T20984] ? lockdep_hardirqs_on+0x94/0x140 [ 1260.225177][T20984] do_syscall_64+0x4c/0xa0 [ 1260.229622][T20984] ? clear_bhb_loop+0x60/0xb0 [ 1260.234331][T20984] ? clear_bhb_loop+0x60/0xb0 [ 1260.239045][T20984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1260.244998][T20984] RIP: 0033:0x7f9e8fb8ebe9 [ 1260.249443][T20984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.269075][T20984] RSP: 002b:00007f9e90a40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1260.277522][T20984] RAX: ffffffffffffffda RBX: 00007f9e8fdc5fa0 RCX: 00007f9e8fb8ebe9 [ 1260.285539][T20984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1260.293533][T20984] RBP: 00007f9e8fc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1260.301532][T20984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.309637][T20984] R13: 00007f9e8fdc6038 R14: 00007f9e8fdc5fa0 R15: 00007ffe3b545208 [ 1260.317682][T20984] [ 1260.554099][T21010] netlink: 'syz.7.6471': attribute type 39 has an invalid length. [ 1260.604505][T21010] device veth0_macvtap left promiscuous mode [ 1262.171392][T21043] sctp: [Deprecated]: syz.5.6486 (pid 21043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.171392][T21043] Use struct sctp_sack_info instead [ 1262.297065][T21045] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.6488'. [ 1262.311140][T21045] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1262.831499][T21057] sctp: [Deprecated]: syz.7.6499 (pid 21057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1262.831499][T21057] Use struct sctp_sack_info instead [ 1262.916982][T21056] IPv6: Can't replace route, no match found [ 1268.632702][T21096] IPv6: Can't replace route, no match found [ 1268.680766][T21101] sctp: [Deprecated]: syz.0.6503 (pid 21101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1268.680766][T21101] Use struct sctp_sack_info instead [ 1270.584047][T21145] IPv6: Can't replace route, no match found [ 1270.646518][T21149] sctp: [Deprecated]: syz.0.6525 (pid 21149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1270.646518][T21149] Use struct sctp_sack_info instead [ 1272.466538][T21189] IPv6: Can't replace route, no match found [ 1272.680554][T21193] sctp: [Deprecated]: syz.7.6541 (pid 21193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1272.680554][T21193] Use struct sctp_sack_info instead [ 1272.806952][T21195] IPv6: Can't replace route, no match found [ 1273.354393][T21205] IPv6: Can't replace route, no match found [ 1277.175422][T21232] sctp: [Deprecated]: syz.5.6556 (pid 21232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1277.175422][T21232] Use struct sctp_sack_info instead [ 1279.258411][T21251] IPv6: Can't replace route, no match found [ 1279.327722][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1279.743279][T21260] IPv6: Can't replace route, no match found [ 1280.351583][ T5970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1280.936678][T21281] sctp: [Deprecated]: syz.4.6570 (pid 21281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1280.936678][T21281] Use struct sctp_sack_info instead [ 1280.981407][T21280] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1280.989286][T21280] #PF: supervisor instruction fetch in kernel mode [ 1280.995818][T21280] #PF: error_code(0x0010) - not-present page [ 1281.001847][T21280] PGD 7aafb067 P4D 7aafb067 PUD 0 [ 1281.007003][T21280] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1281.012229][T21280] CPU: 0 PID: 21280 Comm: syz.1.6571 Not tainted syzkaller #0 [ 1281.019710][T21280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1281.029932][T21280] RIP: 0010:0x0 [ 1281.033459][T21280] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1281.040847][T21280] RSP: 0018:ffffc900035f7458 EFLAGS: 00010246 [ 1281.047036][T21280] RAX: 1ffffffff162b037 RBX: 0000000000000001 RCX: 0000000000000001 [ 1281.055031][T21280] RDX: ffffc900035f7500 RSI: 0000000000000001 RDI: ffff888074480000 [ 1281.063033][T21280] RBP: ffffc900035f7570 R08: dffffc0000000000 R09: ffffed100e890008 [ 1281.071041][T21280] R10: ffffed100e890008 R11: 1ffff1100e890007 R12: ffffe8ffffc3f640 [ 1281.079042][T21280] R13: ffffffff8b1581b8 R14: 0000000000000000 R15: ffff888074480000 [ 1281.087216][T21280] FS: 00007f865a3a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1281.096178][T21280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1281.102793][T21280] CR2: ffffffffffffffd6 CR3: 000000005781c000 CR4: 00000000003506f0 [ 1281.110812][T21280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1281.118901][T21280] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1281.126900][T21280] Call Trace: [ 1281.130201][T21280] [ 1281.133153][T21280] bond_xdp_xmit+0x309/0x520 [ 1281.137795][T21280] ? bond_xdp_xmit+0x93/0x520 [ 1281.142534][T21280] ? bond_xdp+0x840/0x840 [ 1281.146904][T21280] bq_xmit_all+0xc99/0x10d0 [ 1281.151447][T21280] ? zone_statistics+0x170/0x170 [ 1281.156417][T21280] ? bq_enqueue+0x2ee/0x3d0 [ 1281.160959][T21280] ? dev_map_enqueue_multi+0xff9/0x1160 [ 1281.166549][T21280] ? __dev_flush+0x1b0/0x1b0 [ 1281.171194][T21280] ? dev_map_enqueue+0x340/0x340 [ 1281.176177][T21280] ? rcu_is_watching+0x11/0xa0 [ 1281.180977][T21280] ? trace_xdp_redirect+0xb3/0x2b0 [ 1281.186133][T21280] __dev_flush+0xbf/0x1b0 [ 1281.190525][T21280] xdp_do_flush+0xa/0x20 [ 1281.194818][T21280] bpf_test_run_xdp_live+0x1466/0x1970 [ 1281.200328][T21280] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 1281.205961][T21280] ? xdp_convert_md_to_buff+0x330/0x330 [ 1281.212006][T21280] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1281.218287][T21280] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1281.223831][T21280] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 1281.229163][T21280] ? lockdep_hardirqs_on+0x94/0x140 [ 1281.234490][T21280] ? dev_put+0x80/0x80 [ 1281.238660][T21280] ? dev_put+0x80/0x80 [ 1281.242772][T21280] bpf_prog_test_run+0x31e/0x390 [ 1281.247758][T21280] __sys_bpf+0x593/0x6d0 [ 1281.252053][T21280] ? bpf_link_show_fdinfo+0x340/0x340 [ 1281.257476][T21280] ? lock_chain_count+0x20/0x20 [ 1281.262379][T21280] __x64_sys_bpf+0x78/0x90 [ 1281.266827][T21280] do_syscall_64+0x4c/0xa0 [ 1281.271268][T21280] ? clear_bhb_loop+0x60/0xb0 [ 1281.275970][T21280] ? clear_bhb_loop+0x60/0xb0 [ 1281.280681][T21280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.286614][T21280] RIP: 0033:0x7f865958ebe9 [ 1281.291057][T21280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.311129][T21280] RSP: 002b:00007f865a3a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1281.319588][T21280] RAX: ffffffffffffffda RBX: 00007f86597c5fa0 RCX: 00007f865958ebe9 [ 1281.327596][T21280] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 1281.335622][T21280] RBP: 00007f8659611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1281.343616][T21280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.351624][T21280] R13: 00007f86597c6038 R14: 00007f86597c5fa0 R15: 00007ffeeb0a7508 [ 1281.359650][T21280] [ 1281.362709][T21280] Modules linked in: [ 1281.366641][T21280] CR2: 0000000000000000 [ 1281.370833][T21280] ---[ end trace 0000000000000000 ]--- [ 1281.376308][T21280] RIP: 0010:0x0 [ 1281.379813][T21280] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1281.387204][T21280] RSP: 0018:ffffc900035f7458 EFLAGS: 00010246 [ 1281.393303][T21280] RAX: 1ffffffff162b037 RBX: 0000000000000001 RCX: 0000000000000001 [ 1281.401304][T21280] RDX: ffffc900035f7500 RSI: 0000000000000001 RDI: ffff888074480000 [ 1281.409307][T21280] RBP: ffffc900035f7570 R08: dffffc0000000000 R09: ffffed100e890008 [ 1281.417310][T21280] R10: ffffed100e890008 R11: 1ffff1100e890007 R12: ffffe8ffffc3f640 [ 1281.425306][T21280] R13: ffffffff8b1581b8 R14: 0000000000000000 R15: ffff888074480000 [ 1281.433302][T21280] FS: 00007f865a3a06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1281.442297][T21280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1281.448942][T21280] CR2: ffffffffffffffd6 CR3: 000000005781c000 CR4: 00000000003506f0 [ 1281.456942][T21280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1281.465035][T21280] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1281.473244][T21280] Kernel panic - not syncing: Fatal exception in interrupt [ 1281.480971][T21280] Kernel Offset: disabled [ 1281.485311][T21280] Rebooting in 86400 seconds..