last executing test programs: 9.64607312s ago: executing program 1 (id=5874): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 9.115835923s ago: executing program 1 (id=5882): socketpair(0x10, 0x0, 0x6, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) socketpair(0x21, 0x2, 0x1, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34a0, 0x0, 0x0, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x87, &(0x7f0000000140)=""/135}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x450040, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000580)) 8.346314708s ago: executing program 1 (id=5885): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x6, 0x2, 0x1c, {0xa, 0x4e23, 0x7ffffffc, @local, 0x2}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a29492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d070000", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xffdd) 8.339607509s ago: executing program 4 (id=5886): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 7.143973527s ago: executing program 2 (id=5893): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)}, {0x0}], 0x2, &(0x7f0000000700)=ANY=[], 0xa0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff000000007100080400000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000080000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='afs_get_tree\x00', 0xffffffffffffffff, 0x0, 0xc0bf}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 5.299965729s ago: executing program 4 (id=5894): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 5.18639781s ago: executing program 2 (id=5895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socketpair(0x11, 0x3, 0x300, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/2245], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48800) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x36, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x20000054) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xb00) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.18307656s ago: executing program 0 (id=5905): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 5.18226401s ago: executing program 1 (id=5896): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc60b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x10, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000240), 0x0}, 0x40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101000000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 4.57750546s ago: executing program 0 (id=5898): socketpair(0x10, 0x0, 0x6, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000), 0x8) socketpair(0x21, 0x2, 0x1, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x34a0, 0x0, 0x0, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x87, &(0x7f0000000140)=""/135}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x450040, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000580)) 4.509948187s ago: executing program 1 (id=5900): perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x900000000000000) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24008080) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) recvmsg$kcm(r2, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000200)=@ieee802154={0x24, @long={0xa}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4000010) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) 4.452620512s ago: executing program 2 (id=5901): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10b8}, 0x20044010) close(r1) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.289418238s ago: executing program 1 (id=5902): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x1c, 0x0, 0x0, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f02, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) 4.289068298s ago: executing program 4 (id=5903): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x40, 0x40, 0x41}, 0x50) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10eb}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) 4.036399233s ago: executing program 4 (id=5906): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)="1f432d5b98", &(0x7f0000000300), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x9) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000bc0)={&(0x7f00000002c0)=@l2={0x1f, 0x69ec, @any, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)="dea07f2798c6ffb205f63c78cfb2083d76bee988b5c5cc60d15b4150473c3d3222fb0a9c4e919f830e110202af2200d9e4a7a4b407a4265f6c29302ba8d155c2bd44bd36a64f1077255494359e901cebed8d5f8c37c173a3a86e6eaab5aed6837bbb61882ccb6526a1b646", 0x6b}, {&(0x7f0000000240)="7243dcc1924c5b180fad97d8ab0cf736d5779e05760a6ef2be5c1de1facadbe860600d42022fd9e76dbe35e893817f330c7d84", 0x33}, {&(0x7f0000000340)="261934d5068a553597f0e5cc7826abdb87be27e4d69b2e9d302838c9bf0b46401b7bc099dcb453ae93", 0x29}, {&(0x7f00000003c0)="af2ee77a06a96e7443ec4e3cf39fe168bd941a3fe96f622970108c1d2d5a4e4ac4ab39712c7b88c5435770", 0x2b}, {&(0x7f0000000680)}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="2bb8189df924712ffe24404c676e519a7364929742980f2d67f644af164be6a60b6a084cad2980f10ae4ac92d0f2f79eef46eac63a691455d94fb2e7ef7a238bce0654354e8a51dc444ae85c271133d4798a6047ecdeab670c3ff0e10e7276f55b62d2dfd8c75e383094b718bbeb3596fe4121a88eebfebbbe1f816dd0e7668d41b1b539fc483484c1a50a7b098343628d81bc6154696d6cef76623d4cd2003f5b888959039273c5648851695c8695c9103bd2e01ed1f8298ff87e7b4be3e201bc07c337b2bdca5d831aa6b1d7c86299afb7cac52000aa096fa776e5b410111035506c41af34cee45050", 0xea}, {&(0x7f00000008c0)="8a1a60ba4a47e663475c2f88908c040b121e4353f968320e7b6678226a0a10fbe28535c715e13fb72dfa78ba5459d73c4c3ac9c11f3f1a566a7ce5c9959475d74f15a6b152ab24c86dc25ca55e9240f64a1ea7ccd7c0f16fa9dd5741288ba587d0e3e120e8453da5b1b4c1ecd06815b6755bf87fb2fc8cc275a3eebe7cd0d5ac33146231e029eb0dd92f969950e6f3f031348a9a531b203863d65dd0c244f9d4061fcfd8ed2d7e4d6657263a67951823de50ad0a90799b573fbcefb95338cf24bd7f02bbcef702e2ba8d498e84848e3315e457c32004bd2bd499db322d165ca5", 0xe0}], 0x8, &(0x7f0000000a40)=[{0xd8, 0x102, 0x80000000, "175ad9b9c27a94ae7edf1e6afdd1470c0fc4f4e587afd855086e250a11dc280dec5798fcf41908666782c178654b53fb1f41c67a52ebb258c39112741e93fcef19d6da76606a7dc31fe65abd25d5f8a570c0f8eaa7b6643ba3e221d00c3f49189904e9e429c33424da14581fce8045fe2c5a15df26fecf99b1e2b4e1d2ef61ac38ba0f9939853e6117e0b3e62d1ccf840710cf5c124a3e24d2a30ae5032ce72192da1fcd392dd6148dca3a7a46e2b7e6e7d024d1851955894cb8b0ad83aa3374f891"}], 0xd8}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000000000008500000017000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) 4.035358833s ago: executing program 0 (id=5916): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x20044010) close(r1) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.034534663s ago: executing program 2 (id=5907): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001540)=ANY=[@ANYBLOB="1b00000000000000000000200000baaa2f73f6009c7ef46e54f4c83bccaf6b052f541785e56ec82b4f8cb1448f5c7043334232beb2769d4f5f70aba0367ea424ecef335727bfcb0e44def882ce35470a193a5c11cf5237a2f6313fa108ba94ec94a1cf310200000000000000cee9a085c0ab966d22372406fc8b52674db7b071f064ff7b63960a136cc45113c0b3293937f23c1945d82f8319d23b4621bf7f95fdbc64ac664a1cfe37a878c65d306d365cc30afccd"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000"], 0x50) socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, @value=r1}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x0) socketpair(0x18, 0x2, 0xfff, &(0x7f0000001440)) setsockopt$sock_attach_bpf(r2, 0x29, 0x48, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) 3.846359802s ago: executing program 0 (id=5908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x8, 0x110}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0xd}, 0x50) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x10100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.773855619s ago: executing program 4 (id=5909): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 3.735272033s ago: executing program 2 (id=5910): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, 0x0, 0x40) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000f00)=r0, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) syz_clone(0x28000080, 0x0, 0x0, 0x0, 0x0, 0x0) 3.323311393s ago: executing program 0 (id=5912): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc60b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\n\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x10, 0x0, 0x1, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000240), 0x0}, 0x40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101000000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) 2.360381358s ago: executing program 2 (id=5924): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000000500)) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="050000000000000000000000694287a96fc09583cd8c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.833750849s ago: executing program 3 (id=5917): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x40, 0x40, 0x41}, 0x50) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10eb}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) 1.737489159s ago: executing program 3 (id=5918): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0x841}, 0x84) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="c9399cdd7302fe00001d042086d9961ba78f465d1f620d5700810000000000f207c804a00d0000008808fd0e0b0002a60a0ada1b40d80800c5ffffff7fb897266a4e5d180b3d17d7c02a8a5cb730d41bc453a9c3dd39cf0e87984d803dd75e513a8fd271c8cf5eb9ed4d320001974ab1a8b407e4bf1313c2307891449d24fbd3903c3c305ebbb18551be197d9ead86bab1b59874fde943e7367db573e8a1b3b24d1506b128f6ad4b578d4f0c7afd70629769bc180572255b824a659498", 0xbd}, {&(0x7f0000000740)="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", 0xfd9}], 0x2, 0x0, 0x0, 0x5865}, 0x8010) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x0) 1.573503235s ago: executing program 3 (id=5919): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x20044010) close(r1) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.342513398s ago: executing program 3 (id=5920): perf_event_open(&(0x7f0000000140)={0x2, 0x8c, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdir(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.199688902s ago: executing program 3 (id=5921): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)="1f432d5b98", &(0x7f0000000300), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={0xffffffffffffffff, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x9) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000bc0)={&(0x7f00000002c0)=@l2={0x1f, 0x69ec, @any, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)="dea07f2798c6ffb205f63c78cfb2083d76bee988b5c5cc60d15b4150473c3d3222fb0a9c4e919f830e110202af2200d9e4a7a4b407a4265f6c29302ba8d155c2bd44bd36a64f1077255494359e901cebed8d5f8c37c173a3a86e6eaab5aed6837bbb61882ccb6526a1b646", 0x6b}, {&(0x7f0000000240)="7243dcc1924c5b180fad97d8ab0cf736d5779e05760a6ef2be5c1de1facadbe860600d42022fd9e76dbe35e893817f330c7d84", 0x33}, {&(0x7f0000000340)="261934d5068a553597f0e5cc7826abdb87be27e4d69b2e9d302838c9bf0b46401b7bc099dcb453ae93", 0x29}, {&(0x7f00000003c0)="af2ee77a06a96e7443ec4e3cf39fe168bd941a3fe96f622970108c1d2d5a4e4ac4ab39712c7b88c5435770", 0x2b}, {&(0x7f0000000680)}, {&(0x7f00000006c0)}, {&(0x7f00000007c0)="2bb8189df924712ffe24404c676e519a7364929742980f2d67f644af164be6a60b6a084cad2980f10ae4ac92d0f2f79eef46eac63a691455d94fb2e7ef7a238bce0654354e8a51dc444ae85c271133d4798a6047ecdeab670c3ff0e10e7276f55b62d2dfd8c75e383094b718bbeb3596fe4121a88eebfebbbe1f816dd0e7668d41b1b539fc483484c1a50a7b098343628d81bc6154696d6cef76623d4cd2003f5b888959039273c5648851695c8695c9103bd2e01ed1f8298ff87e7b4be3e201bc07c337b2bdca5d831aa6b1d7c86299afb7cac52000aa096fa776e5b410111035506c41af34cee45050", 0xea}, {&(0x7f00000008c0)="8a1a60ba4a47e663475c2f88908c040b121e4353f968320e7b6678226a0a10fbe28535c715e13fb72dfa78ba5459d73c4c3ac9c11f3f1a566a7ce5c9959475d74f15a6b152ab24c86dc25ca55e9240f64a1ea7ccd7c0f16fa9dd5741288ba587d0e3e120e8453da5b1b4c1ecd06815b6755bf87fb2fc8cc275a3eebe7cd0d5ac33146231e029eb0dd92f969950e6f3f031348a9a531b203863d65dd0c244f9d4061fcfd8ed2d7e4d6657263a67951823de50ad0a90799b573fbcefb95338cf24bd7f02bbcef702e2ba8d498e84848e3315e457c32004bd2bd499db322d165ca5", 0xe0}], 0x8, &(0x7f0000000a40)=[{0xd8, 0x102, 0x80000000, "175ad9b9c27a94ae7edf1e6afdd1470c0fc4f4e587afd855086e250a11dc280dec5798fcf41908666782c178654b53fb1f41c67a52ebb258c39112741e93fcef19d6da76606a7dc31fe65abd25d5f8a570c0f8eaa7b6643ba3e221d00c3f49189904e9e429c33424da14581fce8045fe2c5a15df26fecf99b1e2b4e1d2ef61ac38ba0f9939853e6117e0b3e62d1ccf840710cf5c124a3e24d2a30ae5032ce72192da1fcd392dd6148dca3a7a46e2b7e6e7d024d1851955894cb8b0ad83aa3374f891"}], 0xd8}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000000000008500000017000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) 1.086009383s ago: executing program 3 (id=5922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 56.874664ms ago: executing program 0 (id=5923): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x11, &(0x7f0000001040), 0x4) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b000000010000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r2}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) socketpair(0x2b, 0x1, 0x4b8, &(0x7f0000000000)) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000440), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="ef197510b33a17147b9d3499fdfcf58f45a6ec91ece6211a9b8d9b2528d4a6d8ccfec3614e249ee7a09d4a8c0d46d9e676fe40658030516df69f05dbb3ebd8773694b7bb47088130fa9bd4d2b010089bf70d89481dd147a31a758a1fcf381edfea798591f888786922e0ebdc303d3f5b87521ffe3f91d37987a33410dc06e999433110b743f03380e4cc8fcb750f3f3d015cfc2287c265ce2b44ca73b73aac83f09145fb85e8462e92ba3d52"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) 0s ago: executing program 4 (id=5925): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x40, 0x40, 0x41}, 0x50) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10eb}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): it_rate_ctrl_alg+0x55e/0x5e0 [ 496.923488][ T9590] ieee80211_register_hw+0x2d16/0x39e0 [ 496.929013][ T9590] ? ieee80211_register_hw+0xf31/0x39e0 [ 496.934607][ T9590] ? ieee80211_register_hw+0xf31/0x39e0 [ 496.940210][ T9590] ? ieee80211_tasklet_handler+0x20/0x20 [ 496.945903][ T9590] ? memset+0x1e/0x40 [ 496.949944][ T9590] ? __hrtimer_init+0x186/0x270 [ 496.954844][ T9590] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 496.960642][ T9590] hwsim_new_radio_nl+0xafa/0xce0 [ 496.965741][ T9590] genl_family_rcv_msg_doit+0x22e/0x320 [ 496.971341][ T9590] ? end_current_label_crit_section+0x170/0x170 [ 496.977633][ T9590] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 496.983597][ T9590] ? bpf_lsm_capable+0x5/0x10 [ 496.988322][ T9590] ? security_capable+0x85/0xb0 [ 496.993228][ T9590] genl_rcv_msg+0x5f2/0x780 [ 496.997801][ T9590] ? genl_bind+0x350/0x350 [ 497.002270][ T9590] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 497.008671][ T9590] ? lock_acquire+0x20f/0x490 [ 497.013411][ T9590] netlink_rcv_skb+0x1de/0x420 [ 497.018229][ T9590] ? genl_bind+0x350/0x350 [ 497.022701][ T9590] ? netlink_ack+0x1100/0x1100 [ 497.027526][ T9590] ? down_read+0x1a8/0x2d0 [ 497.031992][ T9590] genl_rcv+0x24/0x40 [ 497.036015][ T9590] netlink_unicast+0x74d/0x8d0 [ 497.040829][ T9590] netlink_sendmsg+0x89e/0xbc0 [ 497.045640][ T9590] ? netlink_getsockopt+0x540/0x540 [ 497.050882][ T9590] ? aa_sock_msg_perm+0x94/0x150 [ 497.055861][ T9590] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 497.061173][ T9590] ? security_socket_sendmsg+0x7c/0xa0 [ 497.066682][ T9590] ? netlink_getsockopt+0x540/0x540 [ 497.071925][ T9590] ____sys_sendmsg+0x59b/0x970 [ 497.076744][ T9590] ? __sys_sendmsg_sock+0x30/0x30 [ 497.081804][ T9590] ? __import_iovec+0x315/0x500 [ 497.086793][ T9590] ? import_iovec+0x6f/0xa0 [ 497.091339][ T9590] ___sys_sendmsg+0x21c/0x290 [ 497.096054][ T9590] ? __sys_sendmsg+0x270/0x270 [ 497.100905][ T9590] ? __fdget+0x17c/0x200 [ 497.105192][ T9590] __se_sys_sendmsg+0x19e/0x270 [ 497.110088][ T9590] ? __x64_sys_sendmsg+0x80/0x80 [ 497.115077][ T9590] ? syscall_enter_from_user_mode+0x2a/0x80 [ 497.121013][ T9590] do_syscall_64+0x4c/0xa0 [ 497.125463][ T9590] ? clear_bhb_loop+0x60/0xb0 [ 497.130168][ T9590] ? clear_bhb_loop+0x60/0xb0 [ 497.134890][ T9590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.140814][ T9590] RIP: 0033:0x7efd4598eec9 [ 497.145260][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.164903][ T9590] RSP: 002b:00007efd46752038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.173359][ T9590] RAX: ffffffffffffffda RBX: 00007efd45be5fa0 RCX: 00007efd4598eec9 [ 497.181366][ T9590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 497.189368][ T9590] RBP: 00007efd45a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.197368][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.205369][ T9590] R13: 00007efd45be6038 R14: 00007efd45be5fa0 R15: 00007fff5dae7138 [ 497.213389][ T9590] [ 497.302490][ T9607] netlink: 'syz.3.1881': attribute type 15 has an invalid length. [ 497.639306][ T9606] device syzkaller0 entered promiscuous mode [ 500.749628][ T9638] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1892'. [ 500.865543][ T9647] device syzkaller0 entered promiscuous mode [ 501.540503][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.547071][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.530330][ T9689] syz.0.1910[9689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.530446][ T9689] syz.0.1910[9689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.593113][ T9705] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 504.624888][ T9705] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 504.647146][ T9705] netlink: 'syz.1.1916': attribute type 8 has an invalid length. [ 504.660375][ T9705] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1916'. [ 504.877785][ T9717] netlink: 'syz.3.1922': attribute type 4 has an invalid length. [ 504.912645][ T9717] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1922'. [ 505.540464][ T9736] netlink: 'syz.4.1928': attribute type 15 has an invalid length. [ 505.936930][ T9746] netlink: 'syz.4.1932': attribute type 2 has an invalid length. [ 505.971828][ T9746] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 506.004335][ T9746] netlink: 'syz.4.1932': attribute type 8 has an invalid length. [ 506.021833][ T9746] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1932'. [ 506.615187][ T9770] netlink: 'syz.4.1944': attribute type 4 has an invalid length. [ 506.631607][ T9770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1944'. [ 507.052894][ T9785] netlink: 'syz.3.1949': attribute type 2 has an invalid length. [ 507.062271][ T9785] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1949'. [ 507.816877][ T9805] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1958'. [ 508.240853][ T9817] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1974'. [ 508.423188][ T9821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1963'. [ 508.998503][ T9839] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1972'. [ 509.364882][ T9848] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1978'. [ 509.632743][ T9851] validate_nla: 7 callbacks suppressed [ 509.632923][ T9851] netlink: 'syz.0.1979': attribute type 2 has an invalid length. [ 509.653208][ T9851] netlink: 'syz.0.1979': attribute type 1 has an invalid length. [ 509.661860][ T9851] netlink: 'syz.0.1979': attribute type 8 has an invalid length. [ 509.670273][ T9851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1979'. [ 509.887507][ T9854] netlink: 'syz.1.1982': attribute type 3 has an invalid length. [ 509.896589][ T9854] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1982'. [ 511.356360][ T9892] netlink: 'syz.1.1990': attribute type 4 has an invalid length. [ 511.397278][ T9892] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1990'. [ 511.474195][ T9894] netlink: 'syz.0.1994': attribute type 2 has an invalid length. [ 511.505404][ T9894] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 511.553480][ T9894] netlink: 'syz.0.1994': attribute type 8 has an invalid length. [ 511.591639][ T9894] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1994'. [ 513.714111][ T9935] netlink: 'syz.2.2014': attribute type 2 has an invalid length. [ 513.753577][ T9935] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 513.765377][ T9935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2014'. [ 513.967853][ T9940] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2015'. [ 514.596534][ T9954] syz.2.2021[9954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.596665][ T9954] syz.2.2021[9954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.954218][ T9959] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.427424][ T9982] device pim6reg1 entered promiscuous mode [ 516.771877][ T9989] validate_nla: 4 callbacks suppressed [ 516.771979][ T9989] netlink: 'syz.1.2036': attribute type 21 has an invalid length. [ 516.841786][ T9989] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 517.058456][ T9998] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 517.445555][T10009] syz.4.2044[10009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.445664][T10009] syz.4.2044[10009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 519.284722][T10031] netlink: 'syz.3.2052': attribute type 21 has an invalid length. [ 519.433871][T10031] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 520.345897][T10057] netlink: 'syz.4.2061': attribute type 4 has an invalid length. [ 520.363852][T10057] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2061'. [ 521.351555][T10070] device pim6reg1 entered promiscuous mode [ 521.496129][T10076] netlink: 'syz.0.2079': attribute type 4 has an invalid length. [ 521.528095][T10076] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2079'. [ 521.565101][T10075] netlink: 'syz.4.2069': attribute type 21 has an invalid length. [ 521.601279][T10075] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 521.910257][T10084] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2072'. [ 522.324913][T10094] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 523.012004][T10104] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2092'. [ 523.085852][T10104] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 523.461088][T10114] device sit0 left promiscuous mode [ 523.856631][T10117] device sit0 entered promiscuous mode [ 524.547056][T10131] netlink: 'syz.4.2086': attribute type 21 has an invalid length. [ 524.625734][T10131] netlink: 'syz.4.2086': attribute type 1 has an invalid length. [ 527.613948][T10184] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2110'. [ 527.731422][T10184] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 531.657350][T10245] netlink: 'syz.3.2132': attribute type 21 has an invalid length. [ 531.711161][T10245] netlink: 'syz.3.2132': attribute type 1 has an invalid length. [ 534.590267][T10269] device sit0 left promiscuous mode [ 534.716432][T10270] device sit0 entered promiscuous mode [ 536.468942][T10298] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2152'. [ 536.539780][T10298] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 537.404457][T10311] device sit0 left promiscuous mode [ 537.623402][T10315] device sit0 entered promiscuous mode [ 539.346992][T10344] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2171'. [ 539.468792][T10344] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 541.036249][T10362] device sit0 left promiscuous mode [ 541.387770][T10369] device sit0 entered promiscuous mode [ 543.790344][T10409] netlink: 'syz.1.2193': attribute type 4 has an invalid length. [ 543.802403][T10409] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2193'. [ 544.502880][T10420] device sit0 left promiscuous mode [ 544.716536][T10421] device sit0 entered promiscuous mode [ 547.824793][T10467] device sit0 left promiscuous mode [ 548.320051][T10467] device sit0 entered promiscuous mode [ 549.156246][T10486] device syzkaller0 entered promiscuous mode [ 556.761701][T10554] device syzkaller0 entered promiscuous mode [ 556.834709][T10566] netlink: 'syz.2.2250': attribute type 39 has an invalid length. [ 557.428991][T10566] device veth0_macvtap left promiscuous mode [ 562.968897][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.976475][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.419022][ T4276] Bluetooth: hci2: unexpected event 0x3c length: 15 > 7 [ 567.793185][T10646] device syzkaller0 entered promiscuous mode [ 570.989471][T10667] bond_slave_1: mtu less than device minimum [ 571.232075][T10669] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 571.241335][T10669] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2289'. [ 571.902300][T10684] netlink: 'syz.1.2293': attribute type 39 has an invalid length. [ 571.932893][T10684] device veth0_macvtap left promiscuous mode [ 572.331172][T10688] device wlan1 entered promiscuous mode [ 573.578808][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2303'. [ 573.657236][T10708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.952388][T10705] device syzkaller0 entered promiscuous mode [ 578.967452][T10732] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2310'. [ 579.827935][T10751] netlink: 'syz.3.2314': attribute type 39 has an invalid length. [ 580.021601][T10751] device veth0_macvtap left promiscuous mode [ 581.494328][T10778] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2328'. [ 581.522307][T10773] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2328'. [ 581.876252][T10775] device syzkaller0 entered promiscuous mode [ 581.939626][T10784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2330'. [ 581.968595][T10784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.165899][T10801] device wlan1 entered promiscuous mode [ 585.233448][T10803] netlink: 'syz.0.2335': attribute type 39 has an invalid length. [ 585.283346][T10803] device veth0_macvtap left promiscuous mode [ 586.289013][T10821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2344'. [ 586.546777][T10821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.588251][T10842] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 587.613049][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2352'. [ 587.717888][T10842] batman_adv: batadv0: Adding interface: vlan1 [ 587.763576][T10842] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.959426][T10842] batman_adv: batadv0: Interface activated: vlan1 [ 588.487511][T10854] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2354'. [ 588.547393][T10852] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2354'. [ 588.872165][T10858] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2359'. [ 588.955866][T10858] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 588.978799][T10858] CPU: 1 PID: 10858 Comm: syz.0.2359 Not tainted syzkaller #0 [ 588.986364][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 588.996603][T10858] Call Trace: [ 589.000015][T10858] [ 589.003000][T10858] dump_stack_lvl+0x168/0x22e [ 589.007750][T10858] ? show_regs_print_info+0x12/0x12 [ 589.013018][T10858] ? load_image+0x3b0/0x3b0 [ 589.017870][T10858] sysfs_warn_dup+0x8a/0xa0 [ 589.022895][T10858] sysfs_do_create_link_sd+0xc0/0x110 [ 589.028933][T10858] device_add+0x7ed/0xfb0 [ 589.034308][T10858] wiphy_register+0x1e68/0x2bd0 [ 589.039412][T10858] ? cfg80211_event_work+0x40/0x40 [ 589.044601][T10858] ? minstrel_ht_alloc+0x894/0xa20 [ 589.049895][T10858] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 589.056319][T10858] ieee80211_register_hw+0x2d16/0x39e0 [ 589.061988][T10858] ? lockdep_hardirqs_on+0x94/0x140 [ 589.067396][T10858] ? ieee80211_register_hw+0xf31/0x39e0 [ 589.073062][T10858] ? ieee80211_register_hw+0xf31/0x39e0 [ 589.078717][T10858] ? ieee80211_tasklet_handler+0x20/0x20 [ 589.084544][T10858] ? memset+0x1e/0x40 [ 589.088622][T10858] ? __hrtimer_init+0x186/0x270 [ 589.093894][T10858] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 589.099702][T10858] hwsim_new_radio_nl+0xafa/0xce0 [ 589.104954][T10858] genl_family_rcv_msg_doit+0x22e/0x320 [ 589.110544][T10858] ? end_current_label_crit_section+0x170/0x170 [ 589.116869][T10858] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 589.122828][T10858] ? bpf_lsm_capable+0x5/0x10 [ 589.127904][T10858] ? security_capable+0x85/0xb0 [ 589.132798][T10858] genl_rcv_msg+0x5f2/0x780 [ 589.137345][T10858] ? genl_bind+0x350/0x350 [ 589.141797][T10858] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 589.148193][T10858] ? lock_acquire+0x20f/0x490 [ 589.152909][T10858] netlink_rcv_skb+0x1de/0x420 [ 589.157712][T10858] ? genl_bind+0x350/0x350 [ 589.162180][T10858] ? netlink_ack+0x1100/0x1100 [ 589.167006][T10858] ? down_read+0x1a8/0x2d0 [ 589.171459][T10858] genl_rcv+0x24/0x40 [ 589.175473][T10858] netlink_unicast+0x74d/0x8d0 [ 589.180274][T10858] netlink_sendmsg+0x89e/0xbc0 [ 589.185093][T10858] ? netlink_getsockopt+0x540/0x540 [ 589.190331][T10858] ? aa_sock_msg_perm+0x94/0x150 [ 589.195318][T10858] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 589.200667][T10858] ? security_socket_sendmsg+0x7c/0xa0 [ 589.206171][T10858] ? netlink_getsockopt+0x540/0x540 [ 589.211423][T10858] ____sys_sendmsg+0x59b/0x970 [ 589.216228][T10858] ? __sys_sendmsg_sock+0x30/0x30 [ 589.221358][T10858] ? __import_iovec+0x315/0x500 [ 589.226271][T10858] ? import_iovec+0x6f/0xa0 [ 589.230815][T10858] ___sys_sendmsg+0x21c/0x290 [ 589.235533][T10858] ? __sys_sendmsg+0x270/0x270 [ 589.240346][T10858] ? lockdep_hardirqs_on+0x94/0x140 [ 589.245589][T10858] ? __fdget+0x17c/0x200 [ 589.249862][T10858] __se_sys_sendmsg+0x19e/0x270 [ 589.254870][T10858] ? perf_trace_preemptirq_template+0x287/0x330 [ 589.261265][T10858] ? __x64_sys_sendmsg+0x80/0x80 [ 589.266471][T10858] ? lockdep_hardirqs_on+0x94/0x140 [ 589.271752][T10858] do_syscall_64+0x4c/0xa0 [ 589.276192][T10858] ? clear_bhb_loop+0x60/0xb0 [ 589.280910][T10858] ? clear_bhb_loop+0x60/0xb0 [ 589.285624][T10858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.291550][T10858] RIP: 0033:0x7ff78fb8eec9 [ 589.295992][T10858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.315643][T10858] RSP: 002b:00007ff7909b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.324081][T10858] RAX: ffffffffffffffda RBX: 00007ff78fde5fa0 RCX: 00007ff78fb8eec9 [ 589.332085][T10858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 589.340160][T10858] RBP: 00007ff78fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.348165][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.356194][T10858] R13: 00007ff78fde6038 R14: 00007ff78fde5fa0 R15: 00007fffd0b66db8 [ 589.364208][T10858] [ 590.308815][T10877] netlink: 'syz.0.2374': attribute type 12 has an invalid length. [ 590.328570][T10877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2374'. [ 597.668385][T10994] device syzkaller0 entered promiscuous mode [ 597.945421][ T4276] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 600.603382][T11018] netlink: 'syz.1.2419': attribute type 39 has an invalid length. [ 600.832434][T11020] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 600.864255][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2418'. [ 600.919258][T11020] device ipvlan1 entered promiscuous mode [ 601.104517][T11020] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 601.132572][T11025] netlink: 'syz.4.2420': attribute type 39 has an invalid length. [ 601.205030][T11025] device veth0_macvtap left promiscuous mode [ 603.946036][T11056] : renamed from pim6reg1 [ 603.995804][T11058] netlink: 'syz.3.2434': attribute type 39 has an invalid length. [ 604.597687][T11070] netlink: 'syz.1.2438': attribute type 39 has an invalid length. [ 605.234539][T11078] netlink: 'syz.2.2452': attribute type 39 has an invalid length. [ 606.236461][T11094] device macsec0 entered promiscuous mode [ 607.106083][T11105] netlink: 'syz.4.2453': attribute type 39 has an invalid length. [ 607.930998][T11128] netlink: 'syz.4.2461': attribute type 39 has an invalid length. [ 609.339119][T11145] netlink: 'syz.2.2467': attribute type 10 has an invalid length. [ 609.393680][T11145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2467'. [ 610.533805][T11165] : port 1(ip6gretap0) entered blocking state [ 610.540374][T11165] : port 1(ip6gretap0) entered disabled state [ 610.586306][T11165] device ip6gretap0 entered promiscuous mode [ 610.784719][ T4276] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 611.804741][T11180] netlink: 'syz.4.2480': attribute type 10 has an invalid length. [ 611.887813][T11183] netlink: 'syz.2.2481': attribute type 27 has an invalid length. [ 611.943745][T11183] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2481'. [ 612.149698][T11180] device hsr_slave_0 left promiscuous mode [ 612.368820][T11186] netlink: 'syz.1.2482': attribute type 39 has an invalid length. [ 613.309447][T11209] : port 1(ip6gretap0) entered blocking state [ 613.334157][T11209] : port 1(ip6gretap0) entered disabled state [ 613.356501][T11209] device ip6gretap0 entered promiscuous mode [ 613.852238][T11223] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 614.462837][T11235] netlink: 'syz.1.2499': attribute type 27 has an invalid length. [ 614.510550][T11235] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2499'. [ 614.869043][T11223] device hsr_slave_0 left promiscuous mode [ 615.284883][T11243] netlink: 'syz.2.2515': attribute type 2 has an invalid length. [ 615.296274][T11245] netlink: 'syz.3.2516': attribute type 27 has an invalid length. [ 615.313624][T11243] netlink: 'syz.2.2515': attribute type 8 has an invalid length. [ 615.323899][T11245] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2516'. [ 615.335007][T11243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2515'. [ 615.361606][T11247] netlink: 'syz.1.2514': attribute type 10 has an invalid length. [ 615.709919][T11247] device hsr_slave_0 left promiscuous mode [ 616.346708][T11262] : port 1(ip6gretap0) entered blocking state [ 616.370016][T11262] : port 1(ip6gretap0) entered disabled state [ 616.384826][T11262] device ip6gretap0 entered promiscuous mode [ 616.657941][T11277] netlink: 'syz.4.2512': attribute type 10 has an invalid length. [ 616.668384][T11277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2512'. [ 616.697973][T11277] device ipvlan1 entered promiscuous mode [ 616.781408][T11277] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 617.393229][T11296] netlink: 'syz.4.2524': attribute type 27 has an invalid length. [ 617.459337][T11296] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2524'. [ 617.499915][T11294] device syzkaller0 entered promiscuous mode [ 620.051579][T11301] netlink: 'syz.2.2526': attribute type 10 has an invalid length. [ 620.338872][T11309] : port 1(ip6gretap0) entered blocking state [ 620.368830][T11309] : port 1(ip6gretap0) entered disabled state [ 620.378089][T11309] device ip6gretap0 entered promiscuous mode [ 620.636112][T11323] netlink: 'syz.1.2532': attribute type 10 has an invalid length. [ 620.677929][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2532'. [ 622.058286][T11350] netlink: 'syz.0.2540': attribute type 10 has an invalid length. [ 622.387940][T11350] device hsr_slave_0 left promiscuous mode [ 623.030491][T11353] netlink: 'syz.0.2542': attribute type 27 has an invalid length. [ 623.040682][T11353] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2542'. [ 623.112183][T11360] netlink: 'syz.4.2558': attribute type 10 has an invalid length. [ 623.304583][T11365] device wlan1 left promiscuous mode [ 623.726961][T11369] : port 1(ip6gretap0) entered blocking state [ 623.787895][T11369] : port 1(ip6gretap0) entered disabled state [ 623.863886][T11369] device ip6gretap0 entered promiscuous mode [ 624.363113][T11382] netlink: 'syz.4.2555': attribute type 10 has an invalid length. [ 624.427497][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.433891][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.551515][T11382] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 624.582011][T11385] netlink: 'syz.1.2560': attribute type 11 has an invalid length. [ 624.590862][T11385] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2560'. [ 624.603612][T11383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.831425][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 624.874173][T11397] netlink: 'syz.1.2564': attribute type 29 has an invalid length. [ 624.899403][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 624.921623][T11394] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2563'. [ 624.936106][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 624.950048][T11394] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2563'. [ 624.969139][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 624.987166][T11394] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2563'. [ 625.003820][T11397] netlink: 'syz.1.2564': attribute type 29 has an invalid length. [ 625.323650][T11411] netlink: 'syz.3.2569': attribute type 10 has an invalid length. [ 625.483194][T11415] netlink: 'syz.0.2570': attribute type 2 has an invalid length. [ 625.561003][T11415] netlink: 'syz.0.2570': attribute type 2 has an invalid length. [ 626.710098][T11441] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 626.740787][T11441] netlink: 'syz.4.2582': attribute type 29 has an invalid length. [ 627.689281][T11479] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2592'. [ 628.532129][T11492] netlink: 'syz.0.2598': attribute type 29 has an invalid length. [ 628.556052][T11492] netlink: 'syz.0.2598': attribute type 29 has an invalid length. [ 629.074216][T11495] device syzkaller0 entered promiscuous mode [ 631.380772][T11506] IPv6: pim6reg1: Disabled Multicast RS [ 631.403989][T11514] netlink: 'syz.4.2610': attribute type 10 has an invalid length. [ 632.413937][T11532] device syzkaller0 entered promiscuous mode [ 635.731833][T11545] netlink: 'syz.3.2621': attribute type 29 has an invalid length. [ 635.750495][T11545] netlink: 'syz.3.2621': attribute type 29 has an invalid length. [ 636.843112][T11569] netlink: 'syz.1.2637': attribute type 10 has an invalid length. [ 636.889110][T11571] netlink: 'syz.4.2627': attribute type 11 has an invalid length. [ 636.925919][T11571] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2627'. [ 636.949716][T11569] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 636.989415][T11570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.926024][T11590] device syzkaller0 entered promiscuous mode [ 640.500702][T11603] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 640.543163][T11603] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 641.279432][T11617] netlink: 'syz.1.2654': attribute type 29 has an invalid length. [ 641.411953][T11617] netlink: 'syz.1.2654': attribute type 29 has an invalid length. [ 641.643912][T11626] netlink: 'syz.3.2643': attribute type 3 has an invalid length. [ 641.682973][T11626] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2643'. [ 642.896457][T11635] netlink: 'syz.2.2659': attribute type 29 has an invalid length. [ 642.946725][T11635] netlink: 'syz.2.2659': attribute type 29 has an invalid length. [ 646.909305][T11751] netlink: 'syz.1.2677': attribute type 15 has an invalid length. [ 646.943672][T11751] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2677'. [ 649.241864][T11802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.293190][T11802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.374363][T11802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.381854][T11802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.421740][T11802] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 649.441010][T11802] batman_adv: batadv0: Removing interface: virt_wifi0 [ 649.591110][T11806] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2678'. [ 650.332838][T11813] netlink: 'syz.2.2680': attribute type 11 has an invalid length. [ 650.345509][T11813] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2680'. [ 650.404464][T11811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.137129][T11830] netlink: 'syz.2.2686': attribute type 15 has an invalid length. [ 651.164930][T11830] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2686'. [ 651.442390][T11832] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2689'. [ 651.935543][T11841] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2696'. [ 652.125119][T11846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.190367][T11846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.505641][T11855] netlink: 'syz.3.2699': attribute type 11 has an invalid length. [ 652.507245][T11846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.534648][T11855] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2699'. [ 652.623452][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.666135][T11846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.883766][T11846] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 652.912063][T11846] batman_adv: batadv0: Removing interface: virt_wifi0 [ 653.005165][T11846] batman_adv: batadv0: Interface deactivated: vlan1 [ 653.033224][T11846] batman_adv: batadv0: Removing interface: vlan1 [ 653.600408][T11865] netlink: 'syz.3.2705': attribute type 15 has an invalid length. [ 653.653708][T11865] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2705'. [ 654.748470][T11884] netlink: 'syz.0.2718': attribute type 15 has an invalid length. [ 654.763850][T11884] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2718'. [ 655.525721][T11895] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2711'. [ 656.467443][T11913] netlink: 'syz.0.2714': attribute type 11 has an invalid length. [ 656.513572][T11913] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2714'. [ 656.555401][T11910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.086500][T12038] netlink: 'syz.3.2764': attribute type 10 has an invalid length. [ 664.486600][T12038] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 666.191379][T12056] netlink: 'syz.0.2782': attribute type 28 has an invalid length. [ 673.651668][T12135] netlink: 'syz.2.2806': attribute type 28 has an invalid length. [ 674.942725][T12165] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 675.007929][T12165] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 680.014890][T12235] netlink: 'syz.1.2835': attribute type 10 has an invalid length. [ 680.022886][T12235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.108152][T12235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.219158][T12235] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 681.626857][T12257] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 682.423641][T12268] delete_channel: no stack [ 685.803508][T12289] netlink: 'syz.3.2859': attribute type 39 has an invalid length. [ 685.830087][T12292] netlink: 'syz.2.2858': attribute type 10 has an invalid length. [ 685.841521][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.848136][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.855395][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.934422][T12292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.990426][T12292] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 686.977704][T12305] netlink: 'syz.4.2873': attribute type 10 has an invalid length. [ 687.004014][T12305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.036311][T12305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.107545][T12305] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 688.281960][ T4276] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 688.481009][T12323] device syzkaller0 entered promiscuous mode [ 694.455061][T12347] netlink: 'syz.4.2880': attribute type 10 has an invalid length. [ 694.463049][T12347] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2880'. [ 694.472379][T12347] device bond0 entered promiscuous mode [ 694.478138][T12347] device bond_slave_0 entered promiscuous mode [ 694.486471][T12347] device bond_slave_1 entered promiscuous mode [ 694.513634][T12347] device batadv_slave_0 entered promiscuous mode [ 694.527332][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.558981][T12349] netlink: 'syz.1.2881': attribute type 10 has an invalid length. [ 696.708824][T12393] device syzkaller0 entered promiscuous mode [ 696.762289][T12398] netlink: 'syz.3.2896': attribute type 10 has an invalid length. [ 696.783905][T12398] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2896'. [ 696.804887][T12398] device bond0 entered promiscuous mode [ 696.813112][T12398] device bond_slave_0 entered promiscuous mode [ 696.835314][T12398] device bond_slave_1 entered promiscuous mode [ 696.855635][T12398] device batadv_slave_0 entered promiscuous mode [ 701.119130][T12431] netlink: 'syz.0.2906': attribute type 39 has an invalid length. [ 703.027304][T12443] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 703.082461][T12443] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2911'. [ 703.161647][T12443] device bond0 entered promiscuous mode [ 703.169633][T12443] device bond_slave_0 entered promiscuous mode [ 703.184185][T12443] device bond_slave_1 entered promiscuous mode [ 703.193741][T12443] device batadv_slave_0 entered promiscuous mode [ 703.206304][T12450] : port 2(veth0_to_bridge) entered blocking state [ 703.214707][T12450] : port 2(veth0_to_bridge) entered disabled state [ 703.237590][T12450] device veth0_to_bridge entered promiscuous mode [ 703.294925][T12448] : port 3(erspan0) entered blocking state [ 703.314900][T12448] : port 3(erspan0) entered disabled state [ 703.334992][T12448] device erspan0 entered promiscuous mode [ 703.696766][T12454] delete_channel: no stack [ 704.525963][T12478] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 705.775865][T12495] : port 2(veth0_to_bridge) entered blocking state [ 705.783042][T12495] : port 2(veth0_to_bridge) entered disabled state [ 705.802685][T12495] device veth0_to_bridge entered promiscuous mode [ 705.837216][T12495] : port 3(erspan0) entered blocking state [ 705.865641][T12495] : port 3(erspan0) entered disabled state [ 705.896042][T12495] device erspan0 entered promiscuous mode [ 706.262828][T12501] delete_channel: no stack [ 706.972747][T11721] wlan1: Trigger new scan to find an IBSS to join [ 711.931730][T11701] wlan1: Trigger new scan to find an IBSS to join [ 712.922848][T11726] wlan1: Creating new IBSS network, BSSID f6:9e:68:ed:16:51 [ 712.971098][T12545] : port 2(veth0_to_bridge) entered blocking state [ 712.996747][T12545] : port 2(veth0_to_bridge) entered disabled state [ 713.037439][T12545] device veth0_to_bridge entered promiscuous mode [ 716.510124][T12547] : port 3(erspan0) entered blocking state [ 716.516523][T12547] : port 3(erspan0) entered disabled state [ 716.525359][T12547] device erspan0 entered promiscuous mode [ 716.928066][T12567] netlink: 'syz.4.2968': attribute type 11 has an invalid length. [ 716.949361][T12567] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2968'. [ 717.047740][T12566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.552200][T12579] device syzkaller0 entered promiscuous mode [ 720.639875][T12617] : port 2(veth0_to_bridge) entered blocking state [ 720.647595][T12617] : port 2(veth0_to_bridge) entered disabled state [ 720.655573][T12617] device veth0_to_bridge entered promiscuous mode [ 720.668604][T12620] : port 3(erspan0) entered blocking state [ 720.684004][T12620] : port 3(erspan0) entered disabled state [ 720.701668][T12620] device erspan0 entered promiscuous mode [ 721.022766][T12632] netlink: 'syz.1.2976': attribute type 11 has an invalid length. [ 721.038057][T12632] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2976'. [ 721.170110][T12622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.332876][T12639] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 722.138094][T12658] device syzkaller0 entered promiscuous mode [ 722.144571][T12658] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 722.214872][T12657] netlink: 'syz.4.2991': attribute type 10 has an invalid length. [ 722.224757][T12657] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2991'. [ 722.253152][T12657] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 722.498911][T12657] batman_adv: batadv0: Removing interface: virt_wifi0 [ 723.203095][T12670] device syzkaller0 entered promiscuous mode [ 723.762059][T12687] netlink: 'syz.0.3000': attribute type 11 has an invalid length. [ 723.770943][T12687] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3000'. [ 723.816788][T12686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.783651][T12711] netlink: 'syz.2.3010': attribute type 10 has an invalid length. [ 727.797275][T12711] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3010'. [ 727.824276][T12711] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 727.916287][T12711] batman_adv: batadv0: Removing interface: virt_wifi0 [ 727.949337][ T4276] Bluetooth: hci2: unexpected event 0x36 length: 82 > 7 [ 729.711125][T12757] netlink: 'syz.0.3028': attribute type 10 has an invalid length. [ 729.731493][T12757] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3028'. [ 730.398051][ T4276] Bluetooth: hci0: unexpected event 0x36 length: 82 > 7 [ 730.684008][T12775] netlink: 'syz.2.3036': attribute type 11 has an invalid length. [ 730.707406][T12775] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3036'. [ 730.800138][T12774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.334766][T12795] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 733.798564][T12830] netlink: 'syz.3.3053': attribute type 11 has an invalid length. [ 733.829312][T12830] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3053'. [ 733.869277][T12828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.939052][T12852] netlink: 'syz.4.3062': attribute type 39 has an invalid length. [ 739.267359][T12924] netlink: 'syz.4.3096': attribute type 3 has an invalid length. [ 739.301346][T12924] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3096'. [ 740.125548][T12949] netlink: 'syz.1.3103': attribute type 10 has an invalid length. [ 740.162743][T12949] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3103'. [ 740.460540][T12949] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 740.600052][T12949] batman_adv: batadv0: Removing interface: virt_wifi0 [ 742.536670][T12972] netlink: 'syz.2.3114': attribute type 3 has an invalid length. [ 742.565056][T12972] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3114'. [ 742.582105][T12977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.330022][T13016] netlink: 'syz.0.3131': attribute type 3 has an invalid length. [ 744.338905][T13016] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3131'. [ 745.018829][T13028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.363423][T11726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.709131][T13045] netlink: 'syz.4.3139': attribute type 10 has an invalid length. [ 745.793569][T13045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3139'. [ 746.379851][T13064] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3148'. [ 747.286911][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.294814][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.288545][T13062] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 749.455099][T13074] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3165'. [ 749.619430][T13082] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 749.640577][T13082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3157'. [ 749.996844][T13090] netlink: 'syz.0.3161': attribute type 2 has an invalid length. [ 750.373890][ T4276] Bluetooth: hci2: Unknown advertising packet type: 0x1000 [ 752.043949][T13121] netlink: 'syz.2.3170': attribute type 10 has an invalid length. [ 752.124472][T13121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3170'. [ 752.140066][T13124] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3171'. [ 752.217783][T13129] netlink: 'syz.1.3174': attribute type 2 has an invalid length. [ 752.727236][T13140] netlink: 'syz.3.3177': attribute type 10 has an invalid length. [ 755.299215][T13167] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3185'. [ 755.345234][T13167] netlink: 'syz.4.3185': attribute type 21 has an invalid length. [ 755.357611][T13167] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3185'. [ 755.392255][T13171] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3187'. [ 756.400954][T13181] device syzkaller0 entered promiscuous mode [ 759.059927][T13187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3191'. [ 759.404752][T13208] netlink: 'syz.4.3199': attribute type 4 has an invalid length. [ 759.422804][T13208] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3199'. [ 760.111370][T13208] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 760.136055][T13209] netlink: 'syz.2.3195': attribute type 10 has an invalid length. [ 760.767921][T13229] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3206'. [ 760.924591][T13233] netlink: 'syz.2.3209': attribute type 39 has an invalid length. [ 761.236024][T13237] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3221'. [ 761.264134][T13237] device bond_slave_1 entered promiscuous mode [ 761.271052][T13237] device batadv_slave_0 entered promiscuous mode [ 761.569094][T13245] device syzkaller0 entered promiscuous mode [ 764.160528][T13254] netlink: 'syz.2.3217': attribute type 4 has an invalid length. [ 764.168405][T13254] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3217'. [ 764.186114][T13254] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 764.222339][T13263] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 764.369171][T13266] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 764.389390][T13266] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3230'. [ 764.494872][T13266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 764.609233][T13273] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3222'. [ 764.718340][T13279] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3224'. [ 764.766270][T13279] netlink: 'syz.2.3224': attribute type 21 has an invalid length. [ 764.799897][T13279] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3224'. [ 765.853904][T13293] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3242'. [ 765.956682][T13293] netlink: 'syz.1.3242': attribute type 21 has an invalid length. [ 765.976904][T13293] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3242'. [ 766.152533][T13299] device syzkaller0 entered promiscuous mode [ 766.783035][T13300] device syzkaller0 entered promiscuous mode [ 766.808294][T13307] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3235'. [ 767.210691][T13320] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3240'. [ 771.597035][T13352] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3248'. [ 771.615588][T13352] netlink: 'syz.0.3248': attribute type 21 has an invalid length. [ 771.627071][T13352] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3248'. [ 772.812553][T13360] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3252'. [ 772.968096][T13366] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3255'. [ 773.266956][ T4276] Bluetooth: hci0: Malformed LE Event: 0x0d [ 773.379499][T13373] device team_slave_0 left promiscuous mode [ 773.468031][T13373] team0: Port device team_slave_0 removed [ 773.490734][T13373] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 775.132082][T13408] netlink: 'syz.3.3265': attribute type 21 has an invalid length. [ 775.250883][T13402] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3265'. [ 775.253807][T13408] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3265'. [ 775.274637][T13410] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3267'. [ 775.284357][T13410] device bond_slave_0 entered promiscuous mode [ 775.290623][T13410] device bond_slave_1 entered promiscuous mode [ 775.296936][T13410] device batadv_slave_0 entered promiscuous mode [ 775.699812][T13421] device team_slave_0 left promiscuous mode [ 775.811817][T13421] team0: Port device team_slave_0 removed [ 775.829442][T13421] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 776.371257][T13432] device syzkaller0 entered promiscuous mode [ 776.821170][T13447] netlink: 'syz.3.3287': attribute type 4 has an invalid length. [ 776.843877][T13447] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3287'. [ 776.968656][T13447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 777.212452][T13461] device team_slave_0 left promiscuous mode [ 777.272741][T13461] team0: Port device team_slave_0 removed [ 777.297817][T13461] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 777.364292][T11721] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.629580][T13478] device syzkaller0 entered promiscuous mode [ 779.701409][T13507] netlink: 'syz.1.3300': attribute type 4 has an invalid length. [ 779.739944][T13507] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3300'. [ 779.979371][T13507] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 780.818510][T13523] device team_slave_0 left promiscuous mode [ 780.925211][T13523] team0: Port device team_slave_0 removed [ 780.952737][T13523] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 782.330094][T13551] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3317'. [ 782.786582][T13553] netlink: 'syz.2.3317': attribute type 21 has an invalid length. [ 782.795084][T13553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3317'. [ 784.040464][T13577] device team_slave_0 left promiscuous mode [ 784.126607][T13577] team0: Port device team_slave_0 removed [ 784.165104][T13577] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 784.207136][T13581] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3325'. [ 784.637043][T13592] netlink: 'syz.3.3332': attribute type 4 has an invalid length. [ 784.659638][T13592] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3332'. [ 784.698830][T13592] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 785.548623][T13602] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3334'. [ 785.566867][T13602] netlink: 'syz.2.3334': attribute type 21 has an invalid length. [ 785.579412][T13602] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3334'. [ 786.835952][T13622] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 786.878008][T13623] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3344'. [ 789.722612][T13661] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 790.106844][T13667] netlink: 'syz.3.3360': attribute type 27 has an invalid length. [ 791.026210][T13667] bond0: (slave bond_slave_0): Releasing backup interface [ 793.349708][T13711] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3386'. [ 795.843120][T13725] device syzkaller0 entered promiscuous mode [ 795.998845][T13739] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3396'. [ 798.481905][T13739] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 798.493071][T13739] CPU: 0 PID: 13739 Comm: syz.2.3396 Not tainted syzkaller #0 [ 798.500609][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 798.510711][T13739] Call Trace: [ 798.514021][T13739] [ 798.516994][T13739] dump_stack_lvl+0x168/0x22e [ 798.521732][T13739] ? show_regs_print_info+0x12/0x12 [ 798.526992][T13739] ? load_image+0x3b0/0x3b0 [ 798.531573][T13739] sysfs_warn_dup+0x8a/0xa0 [ 798.536125][T13739] sysfs_do_create_link_sd+0xc0/0x110 [ 798.541568][T13739] device_add+0x7ed/0xfb0 [ 798.545966][T13739] wiphy_register+0x1e68/0x2bd0 [ 798.550983][T13739] ? cfg80211_event_work+0x40/0x40 [ 798.556154][T13739] ? minstrel_ht_alloc+0x894/0xa20 [ 798.561322][T13739] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 798.567449][T13739] ieee80211_register_hw+0x2d16/0x39e0 [ 798.572968][T13739] ? ieee80211_register_hw+0xf31/0x39e0 [ 798.578566][T13739] ? ieee80211_register_hw+0xf31/0x39e0 [ 798.584164][T13739] ? ieee80211_tasklet_handler+0x20/0x20 [ 798.589837][T13739] ? memset+0x1e/0x40 [ 798.593876][T13739] ? __hrtimer_init+0x186/0x270 [ 798.598753][T13739] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 798.604530][T13739] hwsim_new_radio_nl+0xafa/0xce0 [ 798.609598][T13739] genl_family_rcv_msg_doit+0x22e/0x320 [ 798.615175][T13739] ? end_current_label_crit_section+0x170/0x170 [ 798.621448][T13739] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 798.627380][T13739] ? bpf_lsm_capable+0x5/0x10 [ 798.632165][T13739] ? security_capable+0x85/0xb0 [ 798.637042][T13739] genl_rcv_msg+0x5f2/0x780 [ 798.641577][T13739] ? genl_bind+0x350/0x350 [ 798.646018][T13739] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 798.652390][T13739] netlink_rcv_skb+0x1de/0x420 [ 798.657182][T13739] ? genl_bind+0x350/0x350 [ 798.661620][T13739] ? netlink_ack+0x1100/0x1100 [ 798.666414][T13739] ? down_read+0x1a8/0x2d0 [ 798.670852][T13739] genl_rcv+0x24/0x40 [ 798.674856][T13739] netlink_unicast+0x74d/0x8d0 [ 798.679647][T13739] netlink_sendmsg+0x89e/0xbc0 [ 798.684441][T13739] ? netlink_getsockopt+0x540/0x540 [ 798.689659][T13739] ? aa_sock_msg_perm+0x94/0x150 [ 798.694625][T13739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 798.699923][T13739] ? security_socket_sendmsg+0x7c/0xa0 [ 798.705406][T13739] ? netlink_getsockopt+0x540/0x540 [ 798.710620][T13739] ____sys_sendmsg+0x59b/0x970 [ 798.715408][T13739] ? __sys_sendmsg_sock+0x30/0x30 [ 798.720476][T13739] ? __import_iovec+0x315/0x500 [ 798.725357][T13739] ? import_iovec+0x6f/0xa0 [ 798.729886][T13739] ___sys_sendmsg+0x21c/0x290 [ 798.734585][T13739] ? __sys_sendmsg+0x270/0x270 [ 798.739403][T13739] ? __fdget+0x17c/0x200 [ 798.743670][T13739] __se_sys_sendmsg+0x19e/0x270 [ 798.748545][T13739] ? __x64_sys_sendmsg+0x80/0x80 [ 798.753512][T13739] ? lockdep_hardirqs_on+0x94/0x140 [ 798.758732][T13739] do_syscall_64+0x4c/0xa0 [ 798.763170][T13739] ? clear_bhb_loop+0x60/0xb0 [ 798.767874][T13739] ? clear_bhb_loop+0x60/0xb0 [ 798.772564][T13739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.778486][T13739] RIP: 0033:0x7f207678eec9 [ 798.782925][T13739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.802589][T13739] RSP: 002b:00007f20776c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.811026][T13739] RAX: ffffffffffffffda RBX: 00007f20769e5fa0 RCX: 00007f207678eec9 [ 798.819011][T13739] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 798.826996][T13739] RBP: 00007f2076811f91 R08: 0000000000000000 R09: 0000000000000000 [ 798.834977][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.842961][T13739] R13: 00007f20769e6038 R14: 00007f20769e5fa0 R15: 00007ffc7765dd18 [ 798.850970][T13739] [ 799.013951][T13754] netlink: 'syz.1.3400': attribute type 10 has an invalid length. [ 799.049057][T13754] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.102210][T13754] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.129039][T13754] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.140996][T13754] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.192340][T13754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.202975][T13754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.212706][T13754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.221762][T13754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.234545][T13754] device geneve1 entered promiscuous mode [ 799.241029][T13754] team0: Port device geneve1 added [ 799.409435][T13766] netlink: 'syz.2.3405': attribute type 27 has an invalid length. [ 799.594103][T13766] bond0: (slave bond_slave_0): Releasing backup interface [ 800.245493][T13783] netlink: 'syz.4.3402': attribute type 17 has an invalid length. [ 800.299244][T13783] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3402'. [ 801.022276][T13805] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 801.026401][ T4276] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 801.139554][T13805] device geneve1 entered promiscuous mode [ 801.174600][T13805] team0: Port device geneve1 added [ 801.353070][T13808] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 801.636196][T13816] netlink: 'syz.3.3417': attribute type 17 has an invalid length. [ 801.664120][T13816] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3417'. [ 806.470583][T13843] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3426'. [ 806.480416][T13848] netlink: 'syz.2.3428': attribute type 10 has an invalid length. [ 806.517645][T13848] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.527061][T13848] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.541291][T13848] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.550674][T13848] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.574890][T13848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.604308][T13848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.613105][T13848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.627166][T13848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.642433][T13848] device geneve1 entered promiscuous mode [ 806.652961][T13848] team0: Port device geneve1 added [ 806.663071][T13851] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 807.026081][T13864] netlink: 'syz.0.3433': attribute type 17 has an invalid length. [ 807.046008][T13864] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3433'. [ 808.801719][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.808289][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.022392][T13893] netlink: 'syz.3.3443': attribute type 2 has an invalid length. [ 809.043022][T13893] netlink: 'syz.3.3443': attribute type 8 has an invalid length. [ 809.080958][T13893] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3443'. [ 809.374486][T11723] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.599318][T13942] netlink: 'syz.3.3462': attribute type 2 has an invalid length. [ 810.691007][T13942] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3462'. [ 816.714795][T14040] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3496'. [ 816.757357][T14040] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 816.766236][T14040] CPU: 0 PID: 14040 Comm: syz.4.3496 Not tainted syzkaller #0 [ 816.773750][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 816.783852][T14040] Call Trace: [ 816.787166][T14040] [ 816.790127][T14040] dump_stack_lvl+0x168/0x22e [ 816.794859][T14040] ? show_regs_print_info+0x12/0x12 [ 816.800097][T14040] ? load_image+0x3b0/0x3b0 [ 816.804670][T14040] sysfs_warn_dup+0x8a/0xa0 [ 816.809280][T14040] sysfs_do_create_link_sd+0xc0/0x110 [ 816.814704][T14040] device_add+0x7ed/0xfb0 [ 816.819086][T14040] wiphy_register+0x1e68/0x2bd0 [ 816.824005][T14040] ? cfg80211_event_work+0x40/0x40 [ 816.829167][T14040] ? _dev_printk+0x1/0x157 [ 816.833626][T14040] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 816.839748][T14040] ieee80211_register_hw+0x2d16/0x39e0 [ 816.845265][T14040] ? ieee80211_register_hw+0xf31/0x39e0 [ 816.850860][T14040] ? ieee80211_register_hw+0xf31/0x39e0 [ 816.856457][T14040] ? ieee80211_tasklet_handler+0x20/0x20 [ 816.862146][T14040] ? memset+0x1e/0x40 [ 816.866178][T14040] ? __hrtimer_init+0x186/0x270 [ 816.871071][T14040] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 816.876875][T14040] hwsim_new_radio_nl+0xafa/0xce0 [ 816.881975][T14040] genl_family_rcv_msg_doit+0x22e/0x320 [ 816.887574][T14040] ? rcu_is_watching+0x11/0xa0 [ 816.892389][T14040] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 816.898332][T14040] ? lockdep_hardirqs_on+0x94/0x140 [ 816.903593][T14040] ? genl_rcv_msg+0x5ca/0x780 [ 816.908325][T14040] genl_rcv_msg+0x5f2/0x780 [ 816.912889][T14040] ? genl_bind+0x350/0x350 [ 816.917349][T14040] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 816.923754][T14040] netlink_rcv_skb+0x1de/0x420 [ 816.928571][T14040] ? genl_bind+0x350/0x350 [ 816.933037][T14040] ? netlink_ack+0x1100/0x1100 [ 816.937869][T14040] ? down_read+0x1a8/0x2d0 [ 816.942335][T14040] genl_rcv+0x24/0x40 [ 816.946360][T14040] netlink_unicast+0x74d/0x8d0 [ 816.951271][T14040] netlink_sendmsg+0x89e/0xbc0 [ 816.956090][T14040] ? netlink_getsockopt+0x540/0x540 [ 816.961333][T14040] ? perf_trace_preemptirq_template+0xa0/0x330 [ 816.967537][T14040] ? aa_sock_msg_perm+0x94/0x150 [ 816.972532][T14040] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 816.977860][T14040] ? security_socket_sendmsg+0x7c/0xa0 [ 816.983374][T14040] ? netlink_getsockopt+0x540/0x540 [ 816.988620][T14040] ____sys_sendmsg+0x59b/0x970 [ 816.993445][T14040] ? __sys_sendmsg_sock+0x30/0x30 [ 816.998509][T14040] ? __import_iovec+0x315/0x500 [ 817.003419][T14040] ? import_iovec+0x6f/0xa0 [ 817.007976][T14040] ___sys_sendmsg+0x21c/0x290 [ 817.012703][T14040] ? __sys_sendmsg+0x270/0x270 [ 817.017540][T14040] ? ktime_get_real_ts64+0x420/0x420 [ 817.022902][T14040] ? __fdget+0x17c/0x200 [ 817.027202][T14040] __se_sys_sendmsg+0x19e/0x270 [ 817.032103][T14040] ? rcu_is_watching+0x11/0xa0 [ 817.036915][T14040] ? __x64_sys_sendmsg+0x80/0x80 [ 817.041925][T14040] do_syscall_64+0x4c/0xa0 [ 817.046387][T14040] ? clear_bhb_loop+0x60/0xb0 [ 817.051103][T14040] ? clear_bhb_loop+0x60/0xb0 [ 817.055826][T14040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.061759][T14040] RIP: 0033:0x7f5aeb78eec9 [ 817.066215][T14040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.085863][T14040] RSP: 002b:00007f5aec59f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.094320][T14040] RAX: ffffffffffffffda RBX: 00007f5aeb9e6090 RCX: 00007f5aeb78eec9 [ 817.102333][T14040] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 817.110342][T14040] RBP: 00007f5aeb811f91 R08: 0000000000000000 R09: 0000000000000000 [ 817.118382][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.126391][T14040] R13: 00007f5aeb9e6128 R14: 00007f5aeb9e6090 R15: 00007ffe1fab2d98 [ 817.134448][T14040] [ 823.121610][T14122] netlink: 'syz.4.3526': attribute type 39 has an invalid length. [ 824.417010][T14153] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 824.423022][T14153] syzkaller0: linktype set to 800 [ 827.914084][T14150] device syzkaller0 entered promiscuous mode [ 828.079442][T14171] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3543'. [ 830.111134][T14171] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 830.135756][T14171] CPU: 1 PID: 14171 Comm: syz.2.3543 Not tainted syzkaller #0 [ 830.143341][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 830.153438][T14171] Call Trace: [ 830.156755][T14171] [ 830.159744][T14171] dump_stack_lvl+0x168/0x22e [ 830.164491][T14171] ? show_regs_print_info+0x12/0x12 [ 830.169749][T14171] ? load_image+0x3b0/0x3b0 [ 830.174548][T14171] sysfs_warn_dup+0x8a/0xa0 [ 830.179115][T14171] sysfs_do_create_link_sd+0xc0/0x110 [ 830.184558][T14171] device_add+0x7ed/0xfb0 [ 830.188952][T14171] wiphy_register+0x1e68/0x2bd0 [ 830.193892][T14171] ? cfg80211_event_work+0x40/0x40 [ 830.199048][T14171] ? minstrel_ht_alloc+0x894/0xa20 [ 830.204212][T14171] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 830.210347][T14171] ieee80211_register_hw+0x2d16/0x39e0 [ 830.215870][T14171] ? ieee80211_register_hw+0xf31/0x39e0 [ 830.221466][T14171] ? ieee80211_register_hw+0xf31/0x39e0 [ 830.227071][T14171] ? ieee80211_tasklet_handler+0x20/0x20 [ 830.232781][T14171] ? memset+0x1e/0x40 [ 830.236827][T14171] ? __hrtimer_init+0x186/0x270 [ 830.241749][T14171] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 830.247560][T14171] hwsim_new_radio_nl+0xafa/0xce0 [ 830.252751][T14171] genl_family_rcv_msg_doit+0x22e/0x320 [ 830.258359][T14171] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 830.264577][T14171] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 830.270546][T14171] ? bpf_lsm_capable+0x5/0x10 [ 830.275273][T14171] ? security_capable+0x85/0xb0 [ 830.280181][T14171] genl_rcv_msg+0x5f2/0x780 [ 830.284756][T14171] ? genl_bind+0x350/0x350 [ 830.289225][T14171] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 830.295630][T14171] ? lock_acquire+0x20f/0x490 [ 830.300380][T14171] netlink_rcv_skb+0x1de/0x420 [ 830.305205][T14171] ? genl_bind+0x350/0x350 [ 830.309691][T14171] ? netlink_ack+0x1100/0x1100 [ 830.314529][T14171] ? down_read+0x1a8/0x2d0 [ 830.319000][T14171] genl_rcv+0x24/0x40 [ 830.323049][T14171] netlink_unicast+0x74d/0x8d0 [ 830.327897][T14171] netlink_sendmsg+0x89e/0xbc0 [ 830.332901][T14171] ? lockdep_hardirqs_on+0x94/0x140 [ 830.338178][T14171] ? netlink_getsockopt+0x540/0x540 [ 830.343447][T14171] ? bpf_lsm_socket_accept+0x10/0x10 [ 830.348782][T14171] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 830.354121][T14171] ? security_socket_sendmsg+0x7c/0xa0 [ 830.359655][T14171] ? netlink_getsockopt+0x540/0x540 [ 830.364921][T14171] ____sys_sendmsg+0x59b/0x970 [ 830.369844][T14171] ? __sys_sendmsg_sock+0x30/0x30 [ 830.374928][T14171] ? __import_iovec+0x315/0x500 [ 830.379927][T14171] ? import_iovec+0x6f/0xa0 [ 830.384499][T14171] ___sys_sendmsg+0x21c/0x290 [ 830.389570][T14171] ? __sys_sendmsg+0x270/0x270 [ 830.394415][T14171] ? ktime_get_real_ts64+0x420/0x420 [ 830.399773][T14171] ? __fdget+0x17c/0x200 [ 830.404083][T14171] __se_sys_sendmsg+0x19e/0x270 [ 830.408986][T14171] ? perf_trace_preemptirq_template+0x287/0x330 [ 830.415272][T14171] ? __x64_sys_sendmsg+0x80/0x80 [ 830.420287][T14171] ? lockdep_hardirqs_on+0x94/0x140 [ 830.425544][T14171] do_syscall_64+0x4c/0xa0 [ 830.429990][T14171] ? clear_bhb_loop+0x60/0xb0 [ 830.434688][T14171] ? clear_bhb_loop+0x60/0xb0 [ 830.439391][T14171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.445310][T14171] RIP: 0033:0x7f207678eec9 [ 830.449759][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.469491][T14171] RSP: 002b:00007f20776c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.477957][T14171] RAX: ffffffffffffffda RBX: 00007f20769e5fa0 RCX: 00007f207678eec9 [ 830.485947][T14171] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 830.493934][T14171] RBP: 00007f2076811f91 R08: 0000000000000000 R09: 0000000000000000 [ 830.501919][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.509907][T14171] R13: 00007f20769e6038 R14: 00007f20769e5fa0 R15: 00007ffc7765dd18 [ 830.517995][T14171] [ 830.535388][T14177] IPv6: Can't replace route, no match found [ 830.547170][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3546'. [ 831.755276][T14216] netlink: 'syz.3.3559': attribute type 10 has an invalid length. [ 831.766208][T14216] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3559'. [ 831.805027][T14216] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 832.437255][T14224] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3562'. [ 832.452979][T14221] device syzkaller0 entered promiscuous mode [ 832.479035][ T4370] syzkaller0: tun_net_xmit 48 [ 832.490380][T14222] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 832.496575][T14222] syzkaller0: Linktype set failed because interface is up [ 832.506478][T14229] IPv6: Can't replace route, no match found [ 832.524341][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3563'. [ 835.333906][T14224] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 835.341696][T14224] CPU: 1 PID: 14224 Comm: syz.3.3562 Not tainted syzkaller #0 [ 835.349191][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.359276][T14224] Call Trace: [ 835.362624][T14224] [ 835.365579][T14224] dump_stack_lvl+0x168/0x22e [ 835.370293][T14224] ? show_regs_print_info+0x12/0x12 [ 835.375525][T14224] ? load_image+0x3b0/0x3b0 [ 835.380090][T14224] sysfs_warn_dup+0x8a/0xa0 [ 835.384766][T14224] sysfs_do_create_link_sd+0xc0/0x110 [ 835.390391][T14224] device_add+0x7ed/0xfb0 [ 835.394780][T14224] wiphy_register+0x1e68/0x2bd0 [ 835.399696][T14224] ? cfg80211_event_work+0x40/0x40 [ 835.404850][T14224] ? minstrel_ht_alloc+0x894/0xa20 [ 835.410021][T14224] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 835.416134][T14224] ieee80211_register_hw+0x2d16/0x39e0 [ 835.421634][T14224] ? lockdep_hardirqs_on+0x94/0x140 [ 835.426875][T14224] ? ieee80211_register_hw+0xf31/0x39e0 [ 835.432479][T14224] ? ieee80211_register_hw+0xf31/0x39e0 [ 835.438055][T14224] ? ieee80211_tasklet_handler+0x20/0x20 [ 835.443721][T14224] ? memset+0x1e/0x40 [ 835.447732][T14224] ? __hrtimer_init+0x186/0x270 [ 835.452601][T14224] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 835.458370][T14224] hwsim_new_radio_nl+0xafa/0xce0 [ 835.463449][T14224] genl_family_rcv_msg_doit+0x22e/0x320 [ 835.469022][T14224] ? end_current_label_crit_section+0x170/0x170 [ 835.475300][T14224] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 835.481256][T14224] ? bpf_lsm_capable+0x5/0x10 [ 835.485951][T14224] ? security_capable+0x85/0xb0 [ 835.490841][T14224] genl_rcv_msg+0x5f2/0x780 [ 835.495387][T14224] ? genl_bind+0x350/0x350 [ 835.499827][T14224] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 835.506199][T14224] netlink_rcv_skb+0x1de/0x420 [ 835.510987][T14224] ? genl_bind+0x350/0x350 [ 835.515435][T14224] ? netlink_ack+0x1100/0x1100 [ 835.520230][T14224] ? down_read+0x1a8/0x2d0 [ 835.524673][T14224] genl_rcv+0x24/0x40 [ 835.528677][T14224] netlink_unicast+0x74d/0x8d0 [ 835.533474][T14224] netlink_sendmsg+0x89e/0xbc0 [ 835.538265][T14224] ? netlink_getsockopt+0x540/0x540 [ 835.543492][T14224] ? aa_sock_msg_perm+0x94/0x150 [ 835.548458][T14224] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 835.553756][T14224] ? security_socket_sendmsg+0x7c/0xa0 [ 835.559243][T14224] ? netlink_getsockopt+0x540/0x540 [ 835.564470][T14224] ____sys_sendmsg+0x59b/0x970 [ 835.569268][T14224] ? __sys_sendmsg_sock+0x30/0x30 [ 835.574310][T14224] ? __import_iovec+0x315/0x500 [ 835.579229][T14224] ? import_iovec+0x6f/0xa0 [ 835.583799][T14224] ___sys_sendmsg+0x21c/0x290 [ 835.588517][T14224] ? __sys_sendmsg+0x270/0x270 [ 835.593353][T14224] ? __fdget+0x17c/0x200 [ 835.597629][T14224] __se_sys_sendmsg+0x19e/0x270 [ 835.602513][T14224] ? __x64_sys_sendmsg+0x80/0x80 [ 835.607500][T14224] ? syscall_enter_from_user_mode+0x2a/0x80 [ 835.613450][T14224] do_syscall_64+0x4c/0xa0 [ 835.617900][T14224] ? clear_bhb_loop+0x60/0xb0 [ 835.622607][T14224] ? clear_bhb_loop+0x60/0xb0 [ 835.627312][T14224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.633226][T14224] RIP: 0033:0x7fc737b8eec9 [ 835.637670][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.657312][T14224] RSP: 002b:00007fc738b0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.665767][T14224] RAX: ffffffffffffffda RBX: 00007fc737de5fa0 RCX: 00007fc737b8eec9 [ 835.673758][T14224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 835.681744][T14224] RBP: 00007fc737c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 835.689741][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.697727][T14224] R13: 00007fc737de6038 R14: 00007fc737de5fa0 R15: 00007ffc6cd81b98 [ 835.705752][T14224] [ 836.113734][ T4276] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 836.113770][ T4276] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 836.287123][T14263] netlink: 'syz.0.3581': attribute type 39 has an invalid length. [ 837.388821][T14281] device syzkaller0 entered promiscuous mode [ 837.448748][T14283] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 837.468906][T14283] syzkaller0: Linktype set failed because interface is up [ 837.501616][ T7309] syzkaller0: tun_net_xmit 48 [ 840.088988][T14304] netlink: 'syz.3.3597': attribute type 39 has an invalid length. [ 840.710607][ T4276] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17 [ 840.710643][ T4276] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 841.654985][T11705] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 844.059935][T14350] netlink: 'syz.3.3614': attribute type 16 has an invalid length. [ 844.070952][T14350] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3614'. [ 845.321565][T14367] netlink: 'syz.2.3617': attribute type 39 has an invalid length. [ 845.412116][T14369] netlink: 'syz.1.3619': attribute type 10 has an invalid length. [ 845.495428][T14369] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3619'. [ 845.639179][T14369] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 847.736926][T14398] netlink: 'syz.2.3629': attribute type 16 has an invalid length. [ 847.755544][T14398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3629'. [ 848.133909][ T4276] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 849.565339][T14419] netlink: 'syz.1.3637': attribute type 39 has an invalid length. [ 849.656726][T14425] netlink: 'syz.2.3638': attribute type 10 has an invalid length. [ 849.751917][T14425] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3638'. [ 849.966110][T14425] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 851.554663][T14451] netlink: 'syz.0.3645': attribute type 16 has an invalid length. [ 851.562824][T14451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3645'. [ 852.419168][T14470] netlink: 'syz.4.3655': attribute type 10 has an invalid length. [ 852.466915][T14470] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3655'. [ 852.512724][T14470] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 854.878818][T14503] netlink: 'syz.1.3668': attribute type 16 has an invalid length. [ 854.922241][T14503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3668'. [ 858.366738][T14522] netlink: 'syz.0.3674': attribute type 10 has an invalid length. [ 858.405441][T14522] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3674'. [ 858.488439][T14522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 861.485220][T14573] netlink: 'syz.4.3696': attribute type 16 has an invalid length. [ 861.520250][T14573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3696'. [ 861.571388][ T4276] Bluetooth: hci2: unexpected event 0x3d length: 15 > 14 [ 863.149313][T14609] netlink: 'syz.0.3712': attribute type 16 has an invalid length. [ 863.176190][T14609] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3712'. [ 864.318015][T14629] netlink: 'syz.1.3720': attribute type 10 has an invalid length. [ 864.358337][T14629] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3720'. [ 864.442175][T14629] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 864.904498][ T4276] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 864.912346][ T4276] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 864.925226][ T4276] CPU: 0 PID: 4276 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 864.932929][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 864.943028][ T4276] Workqueue: hci0 hci_rx_work [ 864.947767][ T4276] Call Trace: [ 864.951084][ T4276] [ 864.954056][ T4276] dump_stack_lvl+0x168/0x22e [ 864.958874][ T4276] ? show_regs_print_info+0x12/0x12 [ 864.964253][ T4276] ? load_image+0x3b0/0x3b0 [ 864.968898][ T4276] sysfs_create_dir_ns+0x252/0x280 [ 864.974132][ T4276] ? hci_rx_work+0x3eb/0xd40 [ 864.978852][ T4276] ? sysfs_warn_dup+0xa0/0xa0 [ 864.983626][ T4276] ? do_raw_spin_unlock+0x11d/0x230 [ 864.988968][ T4276] kobject_add_internal+0x6b8/0xc80 [ 864.994290][ T4276] kobject_add+0x152/0x210 [ 864.998799][ T4276] ? kobject_init+0x1d0/0x1d0 [ 865.003578][ T4276] ? klist_children_get+0x50/0x50 [ 865.008885][ T4276] ? get_device_parent+0x121/0x3f0 [ 865.014101][ T4276] device_add+0x483/0xfb0 [ 865.018517][ T4276] ? kmem_cache_free+0xf7/0x290 [ 865.023470][ T4276] hci_conn_add_sysfs+0xd1/0x1e0 [ 865.028484][ T4276] le_conn_complete_evt+0xfec/0x15d0 [ 865.033862][ T4276] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 865.040208][ T4276] ? bt_info+0x150/0x150 [ 865.044635][ T4276] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 865.050371][ T4276] ? skb_pull_data+0xf7/0x200 [ 865.055163][ T4276] hci_le_enh_conn_complete_evt+0x185/0x460 [ 865.061152][ T4276] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 865.067647][ T4276] ? hci_remote_host_features_evt+0x270/0x270 [ 865.073803][ T4276] hci_event_packet+0x791/0x1210 [ 865.078865][ T4276] ? bis_list+0x280/0x280 [ 865.083298][ T4276] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 865.089329][ T4276] ? kcov_remote_start+0x4c7/0x7e0 [ 865.094521][ T4276] ? bt_err+0x80/0x150 [ 865.098664][ T4276] ? hci_send_to_monitor+0x9c/0x4a0 [ 865.103969][ T4276] hci_rx_work+0x3eb/0xd40 [ 865.108494][ T4276] ? _raw_spin_unlock+0x40/0x40 [ 865.113467][ T4276] ? process_one_work+0x7a1/0x1160 [ 865.118688][ T4276] process_one_work+0x898/0x1160 [ 865.123908][ T4276] ? worker_detach_from_pool+0x240/0x240 [ 865.129608][ T4276] ? _raw_spin_lock_irq+0x7a/0xe0 [ 865.134740][ T4276] ? _raw_spin_lock_irq+0xab/0xe0 [ 865.139885][ T4276] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 865.145482][ T4276] ? kthread_data+0x4b/0xc0 [ 865.150098][ T4276] worker_thread+0xaa2/0x1250 [ 865.154886][ T4276] ? __kthread_parkme+0x162/0x1c0 [ 865.160035][ T4276] kthread+0x29d/0x330 [ 865.164210][ T4276] ? worker_clr_flags+0x1a0/0x1a0 [ 865.169335][ T4276] ? kthread_blkcg+0xd0/0xd0 [ 865.174071][ T4276] ret_from_fork+0x1f/0x30 [ 865.178614][ T4276] [ 865.184001][ T4276] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 865.197252][ T4276] Bluetooth: hci0: failed to register connection device [ 866.669745][T14673] netlink: 'syz.4.3736': attribute type 10 has an invalid length. [ 866.694152][T14673] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3736'. [ 866.759476][T14673] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 870.175580][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.181944][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.014543][T14743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3766'. [ 871.064419][T14743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3766'. [ 871.108234][T14745] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3766'. [ 871.151222][T14743] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3766'. [ 873.978093][T14755] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 874.005397][ T4336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 874.018024][T14755] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 874.050599][T14759] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3767'. [ 874.660112][T14770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 875.365389][T14776] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3774'. [ 875.438788][T14778] netlink: 'syz.0.3776': attribute type 10 has an invalid length. [ 875.453448][T14778] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3776'. [ 875.495646][T14778] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 880.025766][T14869] netlink: 'syz.0.3811': attribute type 3 has an invalid length. [ 880.045976][T14869] netlink: 'syz.0.3811': attribute type 1 has an invalid length. [ 880.083821][T14869] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3811'. [ 880.433041][T14878] : renamed from pim6reg1 [ 882.712041][T14907] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3822'. [ 883.571758][T14912] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 884.390590][T14932] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3843'. [ 884.585855][T14936] netlink: 'syz.2.3834': attribute type 10 has an invalid length. [ 884.605128][T14936] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3834'. [ 888.823109][T14984] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3848'. [ 889.017275][T14985] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3850'. [ 889.682096][T15002] netlink: 'syz.3.3856': attribute type 3 has an invalid length. [ 889.711814][T15002] netlink: 'syz.3.3856': attribute type 1 has an invalid length. [ 889.731355][T15002] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3856'. [ 890.939730][T15026] device wlan1 left promiscuous mode [ 891.216148][T15026] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3866'. [ 891.930610][T15047] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3871'. [ 892.592890][T14648] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 893.645352][T15081] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3885'. [ 894.448759][T15096] : renamed from pim6reg1 [ 895.133503][T15099] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3890'. [ 895.677454][T15118] : renamed from pim6reg1 [ 895.951699][T15122] netlink: 'syz.4.3898': attribute type 10 has an invalid length. [ 895.960149][T15122] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3898'. [ 896.700635][T15131] netlink: 'syz.2.3902': attribute type 3 has an invalid length. [ 896.720988][T15131] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 896.730964][T15131] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3902'. [ 896.750199][T15124] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3899'. [ 897.146921][T15141] netlink: 'syz.0.3904': attribute type 33 has an invalid length. [ 897.344406][T15141] device team0 left promiscuous mode [ 897.352739][T15141] device team_slave_1 left promiscuous mode [ 897.805872][T15157] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3911'. [ 898.054459][T15169] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 898.154198][T15169] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3924'. [ 898.197972][T15171] : renamed from pim6reg1 [ 899.631291][T14648] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 900.968476][T15203] netlink: 'syz.2.3925': attribute type 33 has an invalid length. [ 901.027106][T15203] device team0 left promiscuous mode [ 901.032471][T15203] device team_slave_1 left promiscuous mode [ 901.050689][T15203] device geneve1 left promiscuous mode [ 901.415895][T15220] netlink: 'syz.3.3931': attribute type 10 has an invalid length. [ 901.463822][T15220] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3931'. [ 902.027722][T15219] netlink: 'syz.0.3941': attribute type 3 has an invalid length. [ 902.042766][T15219] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.3941'. [ 902.062811][T15232] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 903.877289][T15262] netlink: 'syz.3.3946': attribute type 33 has an invalid length. [ 904.192375][T15262] device team0 left promiscuous mode [ 904.231466][T15262] device team_slave_1 left promiscuous mode [ 904.564074][T15272] netlink: 'syz.1.3949': attribute type 10 has an invalid length. [ 904.572011][T15272] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3949'. [ 904.614233][T15274] netlink: 'syz.2.3950': attribute type 3 has an invalid length. [ 904.639915][T15274] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.3950'. [ 905.167720][T15292] netlink: 'syz.3.3956': attribute type 10 has an invalid length. [ 906.471740][T15312] netlink: 'syz.4.3964': attribute type 33 has an invalid length. [ 906.570654][T15312] device team0 left promiscuous mode [ 906.595504][T15312] device team_slave_1 left promiscuous mode [ 906.629164][T15312] device geneve1 left promiscuous mode [ 906.875466][T15318] netlink: 'syz.3.3965': attribute type 10 has an invalid length. [ 906.883711][T15318] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3965'. [ 906.951518][T15323] netlink: 'syz.1.3966': attribute type 3 has an invalid length. [ 906.974481][T15323] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.3966'. [ 907.377395][T15329] netlink: 'syz.4.3971': attribute type 21 has an invalid length. [ 907.423442][T15329] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3971'. [ 907.686207][T15344] netlink: 'syz.2.3976': attribute type 1 has an invalid length. [ 907.704376][T15344] netlink: 'syz.2.3976': attribute type 4 has an invalid length. [ 907.738248][T15344] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3976'. [ 908.530536][T15357] netlink: 'syz.2.3980': attribute type 10 has an invalid length. [ 908.561131][T15357] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3980'. [ 908.625739][T15363] netlink: 'syz.1.3981': attribute type 33 has an invalid length. [ 908.666162][T15363] device team0 left promiscuous mode [ 908.706188][T15363] device team_slave_1 left promiscuous mode [ 908.834805][T15363] device geneve1 left promiscuous mode [ 911.823146][T15407] netlink: 'syz.4.3998': attribute type 10 has an invalid length. [ 912.631789][T15416] netlink: 'syz.1.3999': attribute type 33 has an invalid length. [ 913.453006][T15443] IPv6: NLM_F_CREATE should be specified when creating new route [ 913.466203][T15443] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4009'. [ 913.931957][T15451] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4012'. [ 914.213839][T15454] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.4014'. [ 914.268990][T15454] openvswitch: netlink: Message has 48126 unknown bytes. [ 914.394026][T15463] netlink: 'syz.4.4017': attribute type 33 has an invalid length. [ 915.628363][T15495] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4029'. [ 916.323109][T15501] netlink: 'syz.2.4042': attribute type 21 has an invalid length. [ 916.363791][T15501] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4042'. [ 917.162781][T15532] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4043'. [ 917.817084][T15543] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.843012][T15543] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4046'. [ 917.867340][T15545] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.4056'. [ 918.723766][T15570] netlink: 'syz.3.4054': attribute type 21 has an invalid length. [ 918.741441][T15570] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4054'. [ 919.107158][T15578] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.4069'. [ 919.133712][T15578] openvswitch: netlink: Message has 48126 unknown bytes. [ 919.178896][T15582] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4057'. [ 919.762452][T15592] IPv6: NLM_F_CREATE should be specified when creating new route [ 919.794161][T15592] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4060'. [ 921.855736][T15640] IPv6: NLM_F_CREATE should be specified when creating new route [ 921.929252][T15640] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4083'. [ 922.020923][T15643] netlink: 'syz.1.4086': attribute type 21 has an invalid length. [ 922.066025][T15643] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4086'. [ 923.210568][T15668] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.4096'. [ 923.370655][T15668] openvswitch: netlink: Message has 48126 unknown bytes. [ 923.595777][T15675] netlink: 'syz.1.4100': attribute type 11 has an invalid length. [ 923.631384][T15675] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4100'. [ 923.733129][T15675] netlink: 'syz.1.4100': attribute type 10 has an invalid length. [ 923.761521][T15675] team0: Port device wlan1 added [ 923.769799][T15674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.040778][T15685] netlink: 'syz.0.4104': attribute type 21 has an invalid length. [ 924.067387][T15685] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4104'. [ 924.097591][ T4270] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 924.351756][ T3637] udevd[3637]: worker [12352] terminated by signal 33 (Unknown signal 33) [ 924.485691][ T3637] udevd[3637]: worker [12352] failed while handling '/devices/virtual/block/loop0' [ 925.529324][ T4270] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 926.120889][T15734] device macsec0 left promiscuous mode [ 926.344386][T15730] device macsec0 entered promiscuous mode [ 926.819472][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 927.299720][ T4270] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 927.632346][T15759] netlink: 'syz.1.4133': attribute type 3 has an invalid length. [ 927.681107][T15759] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4133'. [ 930.856254][ T4270] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 931.760972][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.779333][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.980783][T15844] netlink: 'syz.3.4163': attribute type 3 has an invalid length. [ 932.003790][T15844] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4163'. [ 934.662325][T15894] netlink: 'syz.4.4180': attribute type 3 has an invalid length. [ 934.678102][T15894] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4180'. [ 937.825535][ T4270] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 940.342558][T15989] netlink: 'syz.1.4226': attribute type 9 has an invalid length. [ 940.706176][T16005] : renamed from pim6reg1 [ 943.220478][T16056] netlink: 'syz.0.4243': attribute type 2 has an invalid length. [ 943.242954][T16056] netlink: 'syz.0.4243': attribute type 8 has an invalid length. [ 943.261389][T16056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4243'. [ 944.664153][T16080] : renamed from pim6reg1 [ 946.488926][T16118] device syzkaller0 entered promiscuous mode [ 949.969218][T16152] netlink: 'syz.4.4286': attribute type 1 has an invalid length. [ 949.993358][T16152] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4286'. [ 951.387344][T16171] netlink: 'syz.0.4296': attribute type 13 has an invalid length. [ 951.494935][T16171] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4296'. [ 952.279944][T16196] netlink: 'syz.2.4301': attribute type 1 has an invalid length. [ 952.287922][T16196] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4301'. [ 955.003035][T16230] netlink: 'syz.1.4318': attribute type 1 has an invalid length. [ 955.016131][T16230] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4318'. [ 955.675650][T16262] netlink: 'syz.1.4329': attribute type 2 has an invalid length. [ 955.704034][T16262] netlink: 'syz.1.4329': attribute type 8 has an invalid length. [ 955.712291][T16262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4329'. [ 956.469700][T16279] netlink: 'syz.3.4338': attribute type 1 has an invalid length. [ 956.503856][T16279] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4338'. [ 957.402116][T16302] netlink: 'syz.4.4347': attribute type 2 has an invalid length. [ 957.424377][T16302] netlink: 'syz.4.4347': attribute type 8 has an invalid length. [ 957.453748][T16302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4347'. [ 957.717655][T16315] device lo entered promiscuous mode [ 958.093409][T16326] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 958.101236][T16326] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4352'. [ 960.160258][T16359] netlink: 'syz.2.4363': attribute type 2 has an invalid length. [ 960.222366][T16359] netlink: 'syz.2.4363': attribute type 8 has an invalid length. [ 960.247182][T16359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4363'. [ 961.518556][T16373] device syzkaller0 entered promiscuous mode [ 962.300735][ T4270] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 964.940232][T16402] device syzkaller0 entered promiscuous mode [ 964.985497][T16410] netlink: 'syz.3.4385': attribute type 2 has an invalid length. [ 965.003364][T16410] netlink: 'syz.3.4385': attribute type 8 has an invalid length. [ 965.011175][T16410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4385'. [ 967.823107][T16436] device lo entered promiscuous mode [ 967.844859][T16437] netlink: 'syz.2.4400': attribute type 3 has an invalid length. [ 967.858778][T16436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 967.910539][T16437] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4400'. [ 968.073060][T16437] netlink: 'syz.2.4400': attribute type 39 has an invalid length. [ 969.777210][T16464] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4410'. [ 969.803068][T16460] netlink: 'syz.3.4410': attribute type 3 has an invalid length. [ 969.830019][T16460] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4410'. [ 972.224014][T16517] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4429'. [ 973.219089][T16539] device syzkaller0 entered promiscuous mode [ 975.925107][T16556] netlink: 'syz.2.4442': attribute type 39 has an invalid length. [ 978.105624][ T4270] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 981.758496][T16668] netlink: 'syz.3.4485': attribute type 10 has an invalid length. [ 982.085274][T16679] netlink: 'syz.1.4491': attribute type 21 has an invalid length. [ 982.133420][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 982.736046][ T4270] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 982.879274][T16700] netlink: 'syz.0.4508': attribute type 21 has an invalid length. [ 982.958882][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4508'. [ 983.666102][ T4270] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 984.233881][T16726] netlink: 'syz.1.4503': attribute type 10 has an invalid length. [ 984.540562][T16717] device syzkaller0 entered promiscuous mode [ 987.296089][T16742] netlink: 'syz.1.4512': attribute type 39 has an invalid length. [ 988.138252][T16774] netlink: 'syz.3.4521': attribute type 21 has an invalid length. [ 988.172276][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4521'. [ 990.371788][T16814] netlink: 'syz.0.4537': attribute type 10 has an invalid length. [ 990.393757][T16814] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4537'. [ 993.101478][ T4270] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 993.214537][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.228276][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.363062][T16924] netlink: 'syz.0.4576': attribute type 39 has an invalid length. [ 995.672210][ T4270] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 995.808085][T16964] netlink: 'syz.2.4591': attribute type 39 has an invalid length. [ 998.434021][T17023] bridge0: port 1(team0) entered blocking state [ 998.440429][T17023] bridge0: port 1(team0) entered disabled state [ 998.465069][T17023] device team0 entered promiscuous mode [ 998.481023][T17023] device team_slave_1 entered promiscuous mode [ 998.710997][T17034] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 999.875005][T17057] netlink: 'syz.4.4622': attribute type 39 has an invalid length. [ 1000.917923][T17096] device wlan1 entered promiscuous mode [ 1001.894741][T17110] device syzkaller0 entered promiscuous mode [ 1005.473031][ T4270] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1006.329620][T17144] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1006.795688][T17165] netlink: 'syz.4.4661': attribute type 10 has an invalid length. [ 1007.021287][ T4270] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1007.283378][T17186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.299405][T17186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.558537][T17195] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1008.865101][ T4270] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1009.051176][T17220] netlink: 'syz.1.4681': attribute type 10 has an invalid length. [ 1010.964031][T17272] device syzkaller0 entered promiscuous mode [ 1010.972246][T17274] netlink: 'syz.3.4702': attribute type 10 has an invalid length. [ 1013.747129][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1013.754858][T17279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.671766][T17304] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1015.451759][T17323] device syzkaller0 entered promiscuous mode [ 1017.688911][T17336] netlink: 'syz.0.4719': attribute type 10 has an invalid length. [ 1017.712030][T17334] bridge0: port 1(team0) entered blocking state [ 1017.719803][T17334] bridge0: port 1(team0) entered disabled state [ 1017.734668][T17334] device team0 entered promiscuous mode [ 1017.762061][T17334] device team_slave_1 entered promiscuous mode [ 1018.042165][T17344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.103813][T17344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.812413][T17358] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1019.610158][T17365] netlink: 'syz.3.4730': attribute type 10 has an invalid length. [ 1019.622884][T17365] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4730'. [ 1019.905436][T17378] device syzkaller0 entered promiscuous mode [ 1022.733440][T17385] bridge0: port 1(team0) entered blocking state [ 1022.740091][T17385] bridge0: port 1(team0) entered disabled state [ 1022.747673][T17385] device team0 entered promiscuous mode [ 1022.753357][T17385] device team_slave_1 entered promiscuous mode [ 1022.759615][T17385] device geneve1 entered promiscuous mode [ 1022.765894][T17385] device wlan1 entered promiscuous mode [ 1023.113629][T17423] device syzkaller0 entered promiscuous mode [ 1023.121853][T17421] netlink: 'syz.2.4750': attribute type 10 has an invalid length. [ 1023.142122][T17421] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4750'. [ 1026.060388][T17427] device syzkaller0 entered promiscuous mode [ 1029.788119][T17475] netlink: 'syz.1.4766': attribute type 10 has an invalid length. [ 1029.924637][T17475] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4766'. [ 1030.234404][T17488] device syzkaller0 entered promiscuous mode [ 1033.293601][T17505] device syzkaller0 entered promiscuous mode [ 1037.616574][T17590] netlink: 'syz.2.4810': attribute type 10 has an invalid length. [ 1037.625495][T17590] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1037.771771][T17596] device syzkaller0 entered promiscuous mode [ 1040.073542][T17613] netlink: 'syz.0.4818': attribute type 21 has an invalid length. [ 1042.097885][T17667] netlink: 'syz.1.4835': attribute type 21 has an invalid length. [ 1042.316515][T17666] device syzkaller0 entered promiscuous mode [ 1045.505578][T17711] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1046.071427][T17730] netlink: 'syz.3.4864': attribute type 21 has an invalid length. [ 1046.326041][T17737] netlink: 'syz.1.4866': attribute type 10 has an invalid length. [ 1046.360635][T17737] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4866'. [ 1049.078050][T17791] netlink: 'syz.4.4888': attribute type 10 has an invalid length. [ 1049.088124][T17791] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4888'. [ 1052.270043][T17848] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1052.429217][T17849] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4911'. [ 1052.777202][ T4270] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1053.667289][T17874] netlink: 'syz.2.4917': attribute type 21 has an invalid length. [ 1054.313782][T17880] netlink: 'syz.3.4921': attribute type 10 has an invalid length. [ 1054.331800][T17880] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4921'. [ 1054.485598][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.491984][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.801377][T17896] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4927'. [ 1056.698240][T17924] netlink: 'syz.4.4936': attribute type 21 has an invalid length. [ 1057.470735][T17939] netlink: 'syz.0.4938': attribute type 10 has an invalid length. [ 1057.484908][T17939] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4938'. [ 1057.693752][T17947] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4944'. [ 1058.314468][T17943] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1059.275837][T17959] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 1059.284435][T17964] netlink: 'syz.2.4950': attribute type 21 has an invalid length. [ 1059.302624][T17959] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 1060.047098][T17984] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4959'. [ 1060.345234][T17997] netlink: 'syz.3.4960': attribute type 10 has an invalid length. [ 1060.353624][T17997] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1061.059902][T18012] device sit0 left promiscuous mode [ 1061.450049][T18017] netlink: 'syz.0.4967': attribute type 21 has an invalid length. [ 1061.648638][T18018] device sit0 entered promiscuous mode [ 1061.986003][T18035] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 1062.004077][T18035] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 1062.422763][T18049] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4977'. [ 1063.456987][T18054] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1063.670719][ T4270] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1063.685159][T18054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.255165][T18069] netlink: 'syz.2.4984': attribute type 21 has an invalid length. [ 1064.462029][T18076] netlink: 'syz.0.4985': attribute type 10 has an invalid length. [ 1064.471727][T18076] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4985'. [ 1065.140424][T18087] bridge0: port 1(team0) entered blocking state [ 1065.155516][T18087] bridge0: port 1(team0) entered disabled state [ 1065.200219][T18087] device team0 entered promiscuous mode [ 1065.213273][T18087] device team_slave_1 entered promiscuous mode [ 1065.219670][T18087] device geneve1 entered promiscuous mode [ 1065.421727][T18098] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 1065.452763][T18098] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 1066.790873][T18122] netlink: 'syz.1.5002': attribute type 21 has an invalid length. [ 1067.672728][T18143] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1067.750375][T18143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.059478][ T4270] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1069.389644][T18175] netlink: 'syz.3.5020': attribute type 1 has an invalid length. [ 1070.229611][T18186] bridge0: port 1(team0) entered blocking state [ 1070.247496][T18186] bridge0: port 1(team0) entered disabled state [ 1070.267112][T18186] device team0 entered promiscuous mode [ 1070.279543][T18186] device team_slave_1 entered promiscuous mode [ 1070.296566][T18186] device geneve1 entered promiscuous mode [ 1072.336662][T18209] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1072.525393][ T4270] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1074.806183][T18261] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1079.452586][T18314] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1080.219478][T18323] netlink: 'syz.0.5071': attribute type 1 has an invalid length. [ 1080.291692][T18327] device sit0 left promiscuous mode [ 1080.439949][T18327] device sit0 entered promiscuous mode [ 1081.669339][T18353] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1081.724318][T18353] netlink: zone id is out of range [ 1081.756518][T18353] netlink: get zone limit has 8 unknown bytes [ 1081.800706][T18358] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1083.588570][T18378] device sit0 left promiscuous mode [ 1084.143939][T18384] device sit0 entered promiscuous mode [ 1085.406569][T18422] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1086.047868][T18437] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1086.066625][ T4270] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1087.924826][ T4270] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1088.182754][T18483] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.5124'. [ 1088.240036][T18483] netlink: zone id is out of range [ 1088.270673][T18483] netlink: get zone limit has 8 unknown bytes [ 1089.085576][T18492] netlink: 'syz.2.5127': attribute type 1 has an invalid length. [ 1089.102727][T18492] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1090.330249][T18517] netlink: 'syz.3.5136': attribute type 3 has an invalid length. [ 1090.359166][T18517] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1090.566273][ T4270] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 1090.885357][T18531] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.5141'. [ 1090.916176][T18531] netlink: zone id is out of range [ 1090.935960][T18531] netlink: get zone limit has 8 unknown bytes [ 1092.401296][T18563] netlink: 'syz.2.5150': attribute type 10 has an invalid length. [ 1092.555231][T18558] netlink: 'syz.1.5149': attribute type 3 has an invalid length. [ 1092.597851][T18558] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1093.241031][ T4270] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 1096.835791][T18600] netlink: 'syz.0.5165': attribute type 3 has an invalid length. [ 1096.893455][T18600] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5165'. [ 1097.138282][T18605] netlink: 'syz.3.5166': attribute type 1 has an invalid length. [ 1097.253401][T18605] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5166'. [ 1097.377210][T18612] netlink: 'syz.0.5170': attribute type 10 has an invalid length. [ 1097.638698][ T4270] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1099.233060][T18649] netlink: 'syz.0.5182': attribute type 1 has an invalid length. [ 1099.280489][T18649] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1099.699087][T18661] device syzkaller0 entered promiscuous mode [ 1106.031959][T18707] netlink: 'syz.4.5204': attribute type 3 has an invalid length. [ 1106.119878][T18708] netlink: 'syz.1.5199': attribute type 1 has an invalid length. [ 1106.149798][T18707] netlink: 'syz.4.5204': attribute type 4 has an invalid length. [ 1106.163632][T18708] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5199'. [ 1106.199433][T18707] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.5204'. [ 1106.317889][T18714] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1109.126391][T18737] device syzkaller0 entered promiscuous mode [ 1110.223441][T18758] netlink: 'syz.2.5218': attribute type 3 has an invalid length. [ 1110.231805][T18758] netlink: 'syz.2.5218': attribute type 4 has an invalid length. [ 1110.240062][T18758] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.5218'. [ 1111.861325][T18750] netlink: 'syz.4.5216': attribute type 1 has an invalid length. [ 1112.145149][T18766] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1112.378391][T18766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.561460][T18762] netlink: 'syz.4.5219': attribute type 1 has an invalid length. [ 1112.597155][T18762] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.5219'. [ 1114.702484][T18808] netlink: 'syz.0.5230': attribute type 3 has an invalid length. [ 1114.713290][T18808] netlink: 'syz.0.5230': attribute type 4 has an invalid length. [ 1114.732862][T18808] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.5230'. [ 1115.930105][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.936786][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.515850][T18816] netlink: 'syz.0.5232': attribute type 1 has an invalid length. [ 1116.562605][T18811] device syzkaller0 entered promiscuous mode [ 1119.188123][T18829] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1119.267997][T18829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1119.641566][T18846] netlink: 'syz.1.5238': attribute type 1 has an invalid length. [ 1119.904438][T18846] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5238'. [ 1120.636839][T18863] device syzkaller0 entered promiscuous mode [ 1125.721656][T18883] netlink: 'syz.0.5254': attribute type 21 has an invalid length. [ 1126.073609][T18894] netlink: 'syz.3.5257': attribute type 1 has an invalid length. [ 1126.158920][T18894] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5257'. [ 1127.086598][T18924] netlink: 'syz.4.5266': attribute type 39 has an invalid length. [ 1130.998815][T18969] netlink: 'syz.2.5281': attribute type 39 has an invalid length. [ 1131.264174][T18976] device syzkaller0 entered promiscuous mode [ 1131.856151][T18989] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1134.375069][T19003] @: port 1(veth0_to_bridge) entered blocking state [ 1134.446324][T19003] @: port 1(veth0_to_bridge) entered disabled state [ 1134.455580][T19003] device veth0_to_bridge entered promiscuous mode [ 1135.250514][T19028] netlink: 'syz.3.5300': attribute type 39 has an invalid length. [ 1135.503218][T19039] device syzkaller0 entered promiscuous mode [ 1135.556962][T19041] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1138.293287][T19074] netlink: 'syz.3.5315': attribute type 10 has an invalid length. [ 1139.885938][T19104] device syzkaller0 entered promiscuous mode [ 1142.348763][ T4270] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 1143.352635][T19145] netlink: 'syz.4.5339': attribute type 39 has an invalid length. [ 1143.980698][T19160] device syzkaller0 entered promiscuous mode [ 1147.558110][ T4270] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1147.938735][T19222] device syzkaller0 entered promiscuous mode [ 1154.772004][T19273] IPv6: Can't replace route, no match found [ 1154.803698][T19273] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1154.904969][T19279] device syzkaller0 entered promiscuous mode [ 1157.636891][T19318] netlink: 'syz.2.5403': attribute type 10 has an invalid length. [ 1157.800010][T19318] device bond_slave_1 left promiscuous mode [ 1157.806641][T19318] device batadv_slave_0 left promiscuous mode [ 1157.833345][T19318] device bond0 entered promiscuous mode [ 1157.843262][T19318] device bond_slave_1 entered promiscuous mode [ 1157.855351][T19318] device batadv_slave_0 entered promiscuous mode [ 1158.552398][T19337] device syzkaller0 entered promiscuous mode [ 1160.670020][T19357] IPv6: Can't replace route, no match found [ 1160.679812][T19358] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1161.820583][T19402] device syzkaller0 entered promiscuous mode [ 1164.326060][T19421] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5439'. [ 1164.531501][T19434] IPv6: Can't replace route, no match found [ 1164.564992][T19434] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1165.316207][T19459] device syzkaller0 entered promiscuous mode [ 1168.355229][T19481] IPv6: Can't replace route, no match found [ 1168.364134][T19482] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1169.522730][ T4270] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 1170.987897][T19525] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1171.461675][T19536] netlink: 'syz.3.5485': attribute type 10 has an invalid length. [ 1171.850336][T19536] device wlan1 entered promiscuous mode [ 1171.916006][T19536] team0: Port device wlan1 added [ 1173.267995][T19575] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5496'. [ 1173.497200][T19582] device syzkaller0 entered promiscuous mode [ 1173.923290][T11701] wlan1: Trigger new scan to find an IBSS to join [ 1176.397538][T19588] netlink: 'syz.4.5501': attribute type 10 has an invalid length. [ 1176.411672][T19588] device wlan1 left promiscuous mode [ 1176.428527][T19588] device wlan1 entered promiscuous mode [ 1176.435757][T19588] team0: Port device wlan1 added [ 1176.457054][T19609] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5511'. [ 1177.355647][T19635] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5521'. [ 1177.375194][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.381635][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.404933][T19641] netlink: 'syz.3.5524': attribute type 10 has an invalid length. [ 1177.465411][T19642] netlink: 'syz.3.5524': attribute type 2 has an invalid length. [ 1177.489528][T19641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5524'. [ 1177.536210][T19642] device 0 entered promiscuous mode [ 1177.926591][T11723] wlan1: Trigger new scan to find an IBSS to join [ 1178.516509][T19662] netlink: 'syz.4.5533': attribute type 21 has an invalid length. [ 1178.628320][T19662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5533'. [ 1179.320043][T19688] netlink: 'syz.4.5543': attribute type 10 has an invalid length. [ 1179.424972][T19688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5543'. [ 1179.631851][T19688] netlink: 'syz.4.5543': attribute type 2 has an invalid length. [ 1180.027700][T19688] device 0 entered promiscuous mode [ 1180.405232][T19704] netlink: 'syz.1.5551': attribute type 21 has an invalid length. [ 1180.457321][T19704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5551'. [ 1180.883487][ T4336] wlan1: Trigger new scan to find an IBSS to join [ 1181.013782][ T4336] wlan1: Creating new IBSS network, BSSID 06:71:c6:86:bd:b4 [ 1181.021778][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1182.243476][T19750] netlink: 'syz.2.5569': attribute type 21 has an invalid length. [ 1182.289603][T19750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5569'. [ 1183.934150][T19790] netlink: 'syz.2.5583': attribute type 39 has an invalid length. [ 1184.299067][T19803] netlink: 'syz.0.5587': attribute type 21 has an invalid length. [ 1184.366183][T19803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1184.740379][T19813] device syzkaller0 entered promiscuous mode [ 1188.139436][T19839] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5597'. [ 1188.365362][T19850] netlink: 'syz.2.5603': attribute type 10 has an invalid length. [ 1188.400728][T19850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5603'. [ 1188.740545][T19850] netlink: 'syz.2.5603': attribute type 2 has an invalid length. [ 1189.106182][T19850] device 0 entered promiscuous mode [ 1189.722215][T19881] device team0 left promiscuous mode [ 1189.728162][T19881] device team_slave_1 left promiscuous mode [ 1189.735307][T19881] device wlan1 left promiscuous mode [ 1189.745034][T19881] bridge0: port 1(team0) entered disabled state [ 1189.784805][T19879] TCP: TCP_TX_DELAY enabled [ 1190.137496][T19887] device syzkaller0 entered promiscuous mode [ 1193.332480][T19902] netlink: 'syz.0.5617': attribute type 10 has an invalid length. [ 1193.344455][T19902] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1193.811100][T19922] netlink: 'syz.0.5624': attribute type 10 has an invalid length. [ 1193.838063][T19922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5624'. [ 1193.925129][T19928] device team0 left promiscuous mode [ 1193.979173][T19928] device team_slave_1 left promiscuous mode [ 1193.995053][T19922] netlink: 'syz.0.5624': attribute type 2 has an invalid length. [ 1194.003256][T19928] device geneve1 left promiscuous mode [ 1194.003438][T19928] device wlan1 left promiscuous mode [ 1194.064777][T19928] bridge0: port 1(team0) entered disabled state [ 1194.525214][T19922] device 0 entered promiscuous mode [ 1194.711103][T19942] netlink: 'syz.3.5634': attribute type 3 has an invalid length. [ 1194.719339][T19942] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5634'. [ 1194.818011][T19944] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5635'. [ 1194.855496][T19944] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.5635'. [ 1194.892961][T19944] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5635'. [ 1195.770215][T19965] device team0 left promiscuous mode [ 1195.775890][T19965] device team_slave_1 left promiscuous mode [ 1195.782010][T19965] device geneve1 left promiscuous mode [ 1195.788015][T19965] bridge0: port 1(team0) entered disabled state [ 1195.837533][T19962] netlink: 'syz.4.5640': attribute type 10 has an invalid length. [ 1195.859633][T19962] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1196.001114][T19975] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5645'. [ 1196.598950][T19991] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1196.721788][T19991] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1196.739572][T19991] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1197.141771][T20004] netlink: 'syz.4.5654': attribute type 3 has an invalid length. [ 1197.166213][T20004] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5654'. [ 1197.278500][T20009] device team0 left promiscuous mode [ 1197.309770][T20009] device team_slave_1 left promiscuous mode [ 1197.351264][T20009] bridge0: port 1(team0) entered disabled state [ 1198.196432][T20020] netlink: 'syz.3.5657': attribute type 10 has an invalid length. [ 1199.311827][T20051] device syzkaller0 entered promiscuous mode [ 1199.345923][T20057] __nla_validate_parse: 3 callbacks suppressed [ 1199.345946][T20057] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5673'. [ 1201.673317][T20061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1201.680587][T20061] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.687943][T20061] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.695425][T20061] IPv6: NLM_F_CREATE should be set when creating new route [ 1201.704146][T20064] device team0 left promiscuous mode [ 1201.709634][T20064] device team_slave_1 left promiscuous mode [ 1201.716346][T20064] device geneve1 left promiscuous mode [ 1201.722060][T20064] device wlan1 left promiscuous mode [ 1201.728280][T20064] bridge0: port 1(team0) entered disabled state [ 1201.867261][T20069] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5679'. [ 1201.943389][T20069] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.5679'. [ 1201.993745][T20069] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5679'. [ 1202.066371][T20077] netlink: 'syz.2.5678': attribute type 10 has an invalid length. [ 1202.651193][T20089] netlink: 'syz.3.5686': attribute type 21 has an invalid length. [ 1202.721324][T20089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1203.140334][T20094] netlink: 'syz.4.5688': attribute type 13 has an invalid length. [ 1203.269952][T20094] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.5688'. [ 1204.088008][T20123] netlink: 'syz.1.5696': attribute type 10 has an invalid length. [ 1205.081212][ T4270] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 1205.700494][T20166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1207.931385][T20223] device syzkaller0 entered promiscuous mode [ 1211.299576][T20260] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5747'. [ 1212.565767][ T4270] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1212.858380][ T4270] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 1213.343535][T20307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5763'. [ 1213.515297][T20311] netlink: 'syz.2.5765': attribute type 1 has an invalid length. [ 1213.547085][T20311] netlink: 'syz.2.5765': attribute type 3 has an invalid length. [ 1213.574601][T20311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5765'. [ 1214.187669][ T4270] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 1215.026384][T20350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5783'. [ 1215.374655][T20358] netlink: 'syz.3.5795': attribute type 9 has an invalid length. [ 1215.382471][T20358] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5795'. [ 1216.945494][T20397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1220.886766][ T4270] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1222.588749][T20532] netlink: 'syz.0.5847': attribute type 39 has an invalid length. [ 1224.571915][T20570] device syzkaller0 entered promiscuous mode [ 1225.086574][T20590] netlink: 'syz.0.5877': attribute type 1 has an invalid length. [ 1225.110280][T20590] netlink: 'syz.0.5877': attribute type 3 has an invalid length. [ 1225.133728][T20590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5877'. [ 1227.174438][T20594] netlink: 'syz.4.5879': attribute type 9 has an invalid length. [ 1228.051841][T20633] netlink: 'syz.1.5882': attribute type 3 has an invalid length. [ 1228.064976][T20633] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.5882'. [ 1228.778631][T20645] device syzkaller0 entered promiscuous mode [ 1232.537444][T20685] netlink: 'syz.0.5898': attribute type 3 has an invalid length. [ 1232.564378][T20685] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1233.048895][T20708] netlink: 'syz.4.5906': attribute type 1 has an invalid length. [ 1233.086176][T20708] netlink: 'syz.4.5906': attribute type 3 has an invalid length. [ 1233.106885][T20708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5906'. [ 1233.140037][T20698] device syzkaller0 entered promiscuous mode [ 1235.791991][T20750] netlink: 'syz.3.5921': attribute type 1 has an invalid length. [ 1235.801459][T20750] netlink: 'syz.3.5921': attribute type 3 has an invalid length. [ 1235.811163][T20750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1236.862082][T20734] netlink: 'syz.2.5924': attribute type 10 has an invalid length. [ 1236.888752][ T4336] wlan1: Created IBSS using preconfigured BSSID ff:ff:ff:ff:00:00 [ 1236.898672][T20734] team0: Port device wlan1 added [ 1236.907060][ T4336] wlan1: Creating new IBSS network, BSSID ff:ff:ff:ff:00:00 [ 1236.964040][T11721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1236.975991][T11701] ------------[ cut here ]------------ [ 1236.981807][T11701] WARNING: CPU: 0 PID: 11701 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x418/0x4a0 [ 1236.991921][T11701] Modules linked in: [ 1236.995918][T11701] CPU: 0 PID: 11701 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 1237.003795][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1237.014038][T11701] Workqueue: cfg80211 cfg80211_event_work [ 1237.019953][T11701] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 1237.026220][T11701] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 31 b4 ff f7 0f 0b eb c3 e8 28 b4 ff f7 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 1a b4 ff f7 0f 0b e9 7a fd ff ff e8 [ 1237.046016][T11701] RSP: 0018:ffffc9000cdc7aa0 EFLAGS: 00010293 [ 1237.052143][T11701] RAX: ffffffff89811ac8 RBX: dffffc0000000000 RCX: ffff888074713b80 [ 1237.060308][T11701] RDX: 0000000000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adefd20 [ 1237.068612][T11701] RBP: ffffc9000cdc7b70 R08: dffffc0000000000 R09: fffffbfff215c455 [ 1237.076690][T11701] R10: fffffbfff215c455 R11: 1ffffffff215c454 R12: ffff888023b7b618 [ 1237.084750][T11701] R13: 1ffff920019b8f5c R14: 000000000000001f R15: ffff888028180c90 [ 1237.092777][T11701] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1237.101801][T11701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1237.108513][T11701] CR2: 00002000000a2000 CR3: 000000001eb84000 CR4: 00000000003506f0 [ 1237.116590][T11701] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1237.124643][T11701] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1237.132675][T11701] Call Trace: [ 1237.136047][T11701] [ 1237.139025][T11701] ? mutex_lock_nested+0x10/0x10 [ 1237.144063][T11701] ? trace_rdev_return_void+0x240/0x240 [ 1237.149689][T11701] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 1237.155702][T11701] cfg80211_process_rdev_events+0x9d/0x110 [ 1237.161589][T11701] ? process_one_work+0x7a1/0x1160 [ 1237.166809][T11701] cfg80211_event_work+0x2b/0x40 [ 1237.171856][T11701] process_one_work+0x898/0x1160 [ 1237.176934][T11701] ? worker_detach_from_pool+0x240/0x240 [ 1237.182629][T11701] ? _raw_spin_lock_irq+0xab/0xe0 [ 1237.187803][T11701] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1237.193267][T11701] ? kthread_data+0x4b/0xc0 [ 1237.197863][T11701] worker_thread+0xaa2/0x1250 [ 1237.202624][T11701] kthread+0x29d/0x330 [ 1237.206824][T11701] ? worker_clr_flags+0x1a0/0x1a0 [ 1237.211917][T11701] ? kthread_blkcg+0xd0/0xd0 [ 1237.216619][T11701] ret_from_fork+0x1f/0x30 [ 1237.221119][T11701] [ 1237.224241][T11701] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1237.231559][T11701] CPU: 0 PID: 11701 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 1237.239331][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1237.249428][T11701] Workqueue: cfg80211 cfg80211_event_work [ 1237.255205][T11701] Call Trace: [ 1237.258570][T11701] [ 1237.261516][T11701] dump_stack_lvl+0x168/0x22e [ 1237.266221][T11701] ? memcpy+0x3c/0x60 [ 1237.270228][T11701] ? show_regs_print_info+0x12/0x12 [ 1237.275461][T11701] ? load_image+0x3b0/0x3b0 [ 1237.280033][T11701] panic+0x2c9/0x710 [ 1237.283968][T11701] ? bpf_jit_dump+0xd0/0xd0 [ 1237.288509][T11701] ? ret_from_fork+0x1f/0x30 [ 1237.293169][T11701] __warn+0x2f8/0x4f0 [ 1237.297178][T11701] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 1237.302744][T11701] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 1237.308311][T11701] report_bug+0x2ba/0x4f0 [ 1237.312654][T11701] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 1237.318225][T11701] handle_bug+0x3a/0x70 [ 1237.322400][T11701] exc_invalid_op+0x16/0x40 [ 1237.326917][T11701] asm_exc_invalid_op+0x16/0x20 [ 1237.331778][T11701] RIP: 0010:__cfg80211_ibss_joined+0x418/0x4a0 [ 1237.337967][T11701] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 31 b4 ff f7 0f 0b eb c3 e8 28 b4 ff f7 <0f> 0b 4c 8b 6c 24 20 eb b5 e8 1a b4 ff f7 0f 0b e9 7a fd ff ff e8 [ 1237.357591][T11701] RSP: 0018:ffffc9000cdc7aa0 EFLAGS: 00010293 [ 1237.363672][T11701] RAX: ffffffff89811ac8 RBX: dffffc0000000000 RCX: ffff888074713b80 [ 1237.371671][T11701] RDX: 0000000000000000 RSI: ffffffff8a8c0500 RDI: ffffffff8adefd20 [ 1237.379656][T11701] RBP: ffffc9000cdc7b70 R08: dffffc0000000000 R09: fffffbfff215c455 [ 1237.387643][T11701] R10: fffffbfff215c455 R11: 1ffffffff215c454 R12: ffff888023b7b618 [ 1237.395632][T11701] R13: 1ffff920019b8f5c R14: 000000000000001f R15: ffff888028180c90 [ 1237.403620][T11701] ? __cfg80211_ibss_joined+0x418/0x4a0 [ 1237.409217][T11701] ? mutex_lock_nested+0x10/0x10 [ 1237.414184][T11701] ? trace_rdev_return_void+0x240/0x240 [ 1237.419757][T11701] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 1237.425676][T11701] cfg80211_process_rdev_events+0x9d/0x110 [ 1237.431500][T11701] ? process_one_work+0x7a1/0x1160 [ 1237.436628][T11701] cfg80211_event_work+0x2b/0x40 [ 1237.441584][T11701] process_one_work+0x898/0x1160 [ 1237.446548][T11701] ? worker_detach_from_pool+0x240/0x240 [ 1237.452197][T11701] ? _raw_spin_lock_irq+0xab/0xe0 [ 1237.457267][T11701] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1237.462702][T11701] ? kthread_data+0x4b/0xc0 [ 1237.467301][T11701] worker_thread+0xaa2/0x1250 [ 1237.472043][T11701] kthread+0x29d/0x330 [ 1237.476146][T11701] ? worker_clr_flags+0x1a0/0x1a0 [ 1237.481193][T11701] ? kthread_blkcg+0xd0/0xd0 [ 1237.485818][T11701] ret_from_fork+0x1f/0x30 [ 1237.490276][T11701] [ 1237.493536][T11701] Kernel Offset: disabled [ 1237.497951][T11701] Rebooting in 86400 seconds..