last executing test programs: 23.571702792s ago: executing program 1 (id=1844): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) (async, rerun: 64) write$cgroup_subtree(r2, &(0x7f0000001480)=ANY=[], 0xc54c295c) (async, rerun: 64) r3 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async, rerun: 64) r4 = socket$kcm(0x2, 0x1, 0x84) (rerun: 64) setsockopt$sock_attach_bpf(r4, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="3a89fc", 0x3}], 0x1}, 0x24008051) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x2083, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, r5, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc6004", 0x15}], 0x1}, 0x0) (async) socketpair(0x29, 0x5, 0x8, &(0x7f0000000180)) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) r7 = syz_clone(0x821100, &(0x7f0000001500)="aaf2e316c649c854dc706a807ece46a0cc08fb7f54a9ffc63a8275b9db9d03a8c32af5b678d9e2ed8a8988dcb0777c5d732737a0b68942ccf77307383204d541a418ce18b2074653a923fbaa74f4b301130db025ebe82328064bd45eb0157d424ba1150a6f631d2c6bf9b496ba971e637f5918a3185563588fdc1adef265739e41f0c14a534defb2ed53938c7593f3b2dd3da1edbd4b73c4", 0x98, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="42f6f49404382bbb439d198b54f429fad8c68a1482ea0d28406433fd6d1aecefe4b07aaa293eb6f2e0d8a331c532a78544004db4c14e03a102cfd2c1d15d34fe40935f666f9c1fc09b20ec52a0810baf50338107122e3409f237e7a446a2c8fcc97285fce68734ab6ceaba4d9f00ca5c448379e9d71a4e7a08f607cfd1badf76e1f14acb44e193479fff7f7f71e46f6a468429c9c902fb40553b87d3") ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x81, 0x80, 0x0, 0x9, 0x0, 0x9, 0x20442, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10802, 0x9, 0xc, 0x2, 0x6, 0x8, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffc}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 23.186937202s ago: executing program 1 (id=1846): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x167d17a8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x50) 22.391586674s ago: executing program 1 (id=1850): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0xc}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1, 0xffff}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @loopback={0xfec0ffffffffffff}}, 0x80, 0x0}, 0x20000001) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x280000000000, 0xfffffffffffffffe}, 0x11000, 0xc8, 0xfff, 0x0, 0xfffffffffffffffa, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) 21.852455713s ago: executing program 3 (id=1851): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0xbafa, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0xcb, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000300)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) 21.796169506s ago: executing program 0 (id=1853): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="06ac7036a2b85d763f4aba11dd5646585ff085ee62d34db0", @ANYRES64], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000010000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000800000"], 0x50) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x9) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3707df1488b022a7, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000103000000020000000000000800000000000000010500000020000000000000000000000a02"], 0x0, 0x4e}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001940)={&(0x7f0000000480)=@abs={0x1, 0x0, 0x5c}, 0x6e, 0x0}, 0x40004) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.72830689s ago: executing program 1 (id=1854): write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000580)=""/176, 0xb0}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES64=r5, @ANYRESDEC=r3, @ANYBLOB], 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x11, 0x0, r2, 0x0, '\x00', 0x0, r1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xa, [@func={0xb, 0x0, 0x0, 0xc, 0x3}, @struct={0xc, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x10, 0x5, 0x80}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xe}, {0xd, 0x3}, {0x6}, {0xb, 0x1}, {0x10}, {0x10, 0x5}, {0xc, 0x3}, {0xa, 0x1}, {0x0, 0x1}]}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000380)=""/145, 0xb2, 0x91, 0x0, 0xfeef}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.654121343s ago: executing program 3 (id=1855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x67, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000340), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.478805042s ago: executing program 2 (id=1856): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x828, 0x0, 0x8000, 0x7, 0x0, 0x1507, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a0000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x45, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) close(r0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 20.649783007s ago: executing program 3 (id=1857): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x4, 0x9}, {0xd, 0x7ff}, {0x7, 0x5e08}]}, @var={0xe, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000080)=""/160, 0x60, 0xa0, 0x0, 0x6}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6d2a, '\x00', 0x0, r0, 0x4, 0xffffffff, 0x2}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x1}, [@generic={0x22, 0xa, 0x6, 0x0, 0xffff}, @generic={0x2, 0x4, 0x3, 0x0, 0x5}]}, &(0x7f0000000240)='GPL\x00', 0xa1, 0x9e, &(0x7f0000000280)=""/158, 0x0, 0x26, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0xff, 0xe12}, 0x10, 0x23f34, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r1, r1, r1], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=0xffffffffffffffff, 0x2e, 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x4b, &(0x7f00000006c0)=""/75, 0x41100, 0x9, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0)=[{0x5, 0x5, 0x2, 0x4}, {0x1, 0x2, 0xb, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x3, 0x2, 0x8, 0x8}, {0x2, 0x1, 0x10, 0xb}, {0x1, 0x1, 0xa, 0x7}], 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r1, r2, 0x15, 0x8, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x9, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x965}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f00000009c0)='syzkaller\x00', 0x7, 0x11, &(0x7f0000000a00)=""/17, 0x41100, 0xa, '\x00', 0x0, @cgroup_device, r0, 0x8, &(0x7f0000000a40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x9, 0xc, 0x231}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[r1, r1], 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r5, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000bc0)=r6}, 0x20) r8 = openat$cgroup_pressure(r3, &(0x7f0000000c40)='memory.pressure\x00', 0x2, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x1, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000cc0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000e00), 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@ifindex=r10, r5, 0x16, 0x200c, 0x0, @value=r11, @void, @void, @void, r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={0x1, 0x58, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f00)={r12, 0x2, 0x10}, 0xc) r15 = perf_event_open(&(0x7f0000000f80)={0x5, 0x80, 0x1, 0xc7, 0x1, 0x1, 0x0, 0x7ff80000000, 0x8000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20e, 0x1, @perf_bp={&(0x7f0000000f40)}, 0x1182c, 0x7, 0x8000, 0x7, 0xffffffffffffff8c, 0x4, 0x1000, 0x0, 0x4, 0x0, 0x10}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r16 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001000)='devices.deny\x00', 0x2, 0x0) close(r16) openat$cgroup(r11, &(0x7f0000001040)='syz1\x00', 0x200002, 0x0) write$cgroup_subtree(r11, &(0x7f0000001080)={[{0x0, 'cpuacct'}, {0x2b, 'perf_event'}]}, 0x15) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x6, 0xff, 0x9, 0xad, 0x0, 0x7, 0x800, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000010c0)}, 0x10b00, 0x4, 0x3, 0x8, 0x6, 0x3, 0xf54, 0x0, 0x7, 0x0, 0x1ff}, 0xffffffffffffffff, 0xa, r15, 0x3) r17 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x5, &(0x7f0000001180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}], &(0x7f00000011c0)='GPL\x00', 0x3, 0xfa, &(0x7f0000001200)=""/250, 0x40f00, 0x1, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001340)=[r7, r11, r14, r14, r7, r1, r11, r0, r11], &(0x7f0000001380)=[{0x1, 0x4, 0x4, 0x6}, {0x4, 0x5, 0x3, 0x4}, {0x3, 0x2, 0xc, 0x1}], 0x10, 0x4}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001480)={r17, r1}, 0xc) socket$kcm(0x29, 0x2, 0x0) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x9, 0x6, 0xfff, 0x0, 0x48800, r11, 0x0, '\x00', r13, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @value=r0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_ext={0x1c, 0x6, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x37}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffbf3a, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000001500)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1221, r2, 0x3, &(0x7f0000001600)=[r18, r11, r11, r11, r11, r11, r14], &(0x7f0000001640)=[{0x5, 0x4, 0x2, 0xc}, {0x1, 0x2, 0xd, 0x7}, {0x2, 0x2, 0xe, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000019c0)={0x18, 0x28, &(0x7f0000001740)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r18}}, @generic={0xfd, 0x9, 0x8, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000001880)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x0, 0x0, 0xa07, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001940)=[r11, r1, r18, r14, r1, r18, r18], &(0x7f0000001980)=[{0x0, 0x4, 0x6, 0xc}, {0x4, 0x4, 0xd, 0x5}, {0x1, 0x5, 0x7, 0x8}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b80)={@fallback=r9, 0x7, 0x1, 0x9, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001ac0)=[0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 20.648549337s ago: executing program 2 (id=1858): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e19, @multicast1=0xe0000002}, 0x10, 0x0}, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 20.648009687s ago: executing program 0 (id=1859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x26, 0xa, 0x2f, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="bb3874b27c354d1a2a1177a2aa98b4d0333de8ba26c5cf6a0ad5eef84edd04084489109e0b01021380526e07510dbfdc1098263443d959011ec96aab60aa25c33290729825743f5d1e3ced962763cfa7c1e4e67a022647d6d4e5db941d9024e3a302007f8292d1fb71d764e704d1ca570e15e62932d833adddc47033bd9c2e4c164629990e79012a328c905ccc7478d566509f26ccb7ea0cedd46009143b95a754cf9dcd186fc83fad44528eaaedb1f15e7714a8ac94d2a1ac98543cb22fddcac931630981940cdeb7c08000c1", 0xcd}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x44879, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xe46, 0x59}, 0x8000, 0x4000000005, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x105d30, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffff7fffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2200, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x80fe) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x2002) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x3, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00b88141b99b6aeeeb1f0000000000000000691e271c2e88c5bf01db41", @ANYRES16=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000001740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) 20.647315567s ago: executing program 1 (id=1860): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xa, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8008}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000000000007fcc6c89d243240700000010"], 0x0, 0x53}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="f59a00000000000018100020", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa85, 0x9}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.436313758s ago: executing program 2 (id=1861): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022108020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x25, 0x0, 0xf1) write$cgroup_devices(r4, &(0x7f0000001140)=ANY=[@ANYBLOB='b *:'], 0xa) r6 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 20.318891904s ago: executing program 3 (id=1862): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @loopback={0xfec0ffffffffffff}}, 0x80, 0x0}, 0x20000001) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x280000000000, 0xfffffffffffffffe}, 0x11000, 0xc8, 0xfff, 0x0, 0xfffffffffffffffa, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000006c0)=""/9, 0x9}, {&(0x7f0000000700)=""/41, 0x29}, {&(0x7f0000000780)=""/4, 0x4}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/63, 0x3f}, {&(0x7f00000024c0)=""/231, 0xe7}], 0x6, &(0x7f0000002640)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40000000) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x15) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r8, &(0x7f0000000d40)={&(0x7f0000000740)={0x2, 0x4e21, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @local}}}], 0x20}, 0xf000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x376e4376}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x10, 0x5, 0xe, 0x1, 0x4}, @alu={0x4, 0x1, 0xa, 0x1, 0x8, 0x1e, 0x10}, @exit, @exit, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000240)='GPL\x00', 0x1799fd23, 0x41, &(0x7f0000000440)=""/65, 0x40f00, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000540)=[{0x0, 0x3, 0xb, 0x7}, {0x0, 0x2, 0x4, 0x5}, {0x0, 0x1, 0x6, 0x8}], 0x10, 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) 19.620794191s ago: executing program 2 (id=1863): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e1050007", 0x15}, {&(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f00000002c0)="832debe16dcb86c87d5aefe65d02cfd5abf09af52aa52b8cabb58fc01abb15", 0x1f}], 0x3}, 0x8080) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) 19.615565122s ago: executing program 0 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4106, 0x100a}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000000)=""/209, 0xd1}], 0x8}, 0x10022) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) (async) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) 19.326177427s ago: executing program 3 (id=1865): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@fallback=r3, r3, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@cgroup=r3, r3, 0x2f, 0x2030, 0x4, @void, @void, @value=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x3}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0xfffffff5, [{0x4, 0x1}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x5f, 0x30, 0x2e]}}, 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180011000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000000)="00cf1f5c5f", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty}}}], 0x20}, 0x0) 19.324322497s ago: executing program 2 (id=1866): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x20000000007, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xfffd, 0x8, 0x1, 0x8, 0x2020005, 0x95a, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x28, 0x1, 0x28, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x3, 0x4, 0xb, 0x0, 0x0, 0x2000000000010, 0xaa208, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x2c98, 0x3}, 0x18, 0x1000, 0xf1, 0x8, 0xffff, 0x200, 0x4, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, r0, 0xa) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={0x1, 0x58, &(0x7f0000000940)}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r2, 0x0, &(0x7f0000000300)=""/50}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, 0x0, 0x0) 19.323558687s ago: executing program 1 (id=1867): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009500009945aa5c00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 19.200256053s ago: executing program 0 (id=1868): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x48010) sendmsg$sock(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0xff}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x61, 0x0, 0xda]}}, 0x0, 0x46, 0x0, 0x1}, 0x28) r1 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @union]}}, 0x0, 0x56}, 0x28) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10180c, 0x401, 0x25, 0x0, 0x8001, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000003a00)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x8001, @private1, 0x80000, 0x1}, 0x80, &(0x7f0000002940)=[{&(0x7f00000001c0)="ca2a44ab2917f5ec6c013908a91a69e6b7c954bc597993b9da8288ba3de5cb7bf84d54b79b4c15ae9653c5f08d645ac34e58e2082c0faae027cf38650436ca8c5e594572a210000e68fdae6a030874cb6cfdf81aedc3bf94475fa211819511e61d17252e9c288f35050992092ce5853f170749d46d2701e49287035cf3f08a4e7310ae11954c2a64d96f53ef546eff168975ba07839b458d8ac15fc3c9bda6a7f00b2cda2dcb97ba1a9da7ba404a1c0e67200edd8e896ca6a814f057db8d5a843abd868e3548119c938ab174087f94a97deefacb7016b0201d42d041e0", 0xdd}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="87e35bf18cbb87d507933f4a1ab353bfca32311e1b4c7c8ac730f15278655a67e39400a559e46a72a8855df7ef2b16024a5d5e6be2d8813d82c0088d9c1a4fd5e939655a380523b94ccb5f69283a1111baefcbb092f91280e5a36968f043f6e088bd6b1bcf9e95585d5010f31ac17a79267285f10b2b439d24450577c890a7b3ab7b89058cf3f1", 0x87}], 0x3, &(0x7f0000002980)=[{0x38, 0x110, 0xffffff01, "73ca066f17b0d1f609e997f33c016d5defdebe9c2d1354e331bc118fa3231b390d3edb84e543"}, {0x1010, 0x118, 0x6, "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"}], 0x1048}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xfb, 0x0, 0x9, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="5c00000014006bbfd2718e78e06f1b93dbe59c0bad1be41ff3e5dc13df2ca689b341943fb7662e73", 0x28}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) 19.122413907s ago: executing program 3 (id=1869): syz_open_procfs$namespace(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000200f1000000000000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) 19.007502554s ago: executing program 0 (id=1870): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40048cc) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1}, 0x40000004) syz_clone(0x89000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x44, 0xf5, 0x0, 0x80000000, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_config_ext={0x9, 0x80000000000}, 0x800, 0x0, 0x20, 0x2093eb642c063c3c, 0x0, 0x0, 0x0, 0x0, 0x2fc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="8d", 0x1}], 0x1, 0x0, 0x0, 0x400c800}, 0x4000000) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x2b, 0x0, 0x4, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r3, 0x31, 0x2010, 0x0, @value, @void, @void, @void, r4}, 0x20) 19.006254783s ago: executing program 2 (id=1871): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022108020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x25, 0x0, 0xf1) write$cgroup_devices(r4, &(0x7f0000001140)=ANY=[@ANYBLOB='b *:'], 0xa) r6 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 18.192356376s ago: executing program 0 (id=1872): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x9, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 3.547810693s ago: executing program 32 (id=1867): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009500009945aa5c00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.363545022s ago: executing program 33 (id=1871): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022108020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x25, 0x0, 0xf1) write$cgroup_devices(r4, &(0x7f0000001140)=ANY=[@ANYBLOB='b *:'], 0xa) r6 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2.743541115s ago: executing program 34 (id=1869): syz_open_procfs$namespace(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000200f1000000000000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[], 0xfe33) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) 0s ago: executing program 35 (id=1872): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000201, 0x8002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400009, 0x0, 0x0, 0x4, 0x82f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x9, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x81200, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.1.167'. [ 128.228524][ T6432] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 128.253636][ T6438] netlink: 'syz.2.168': attribute type 2 has an invalid length. [ 128.272452][ T6438] netlink: 'syz.2.168': attribute type 8 has an invalid length. [ 128.327620][ T6438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.168'. [ 130.039104][ T6481] netlink: 'syz.0.178': attribute type 13 has an invalid length. [ 130.047094][ T6481] netlink: 160 bytes leftover after parsing attributes in process `syz.0.178'. [ 130.084260][ T6481] erspan0: refused to change device tx_queue_len [ 130.115469][ T6481] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 130.293451][ T6487] netlink: 128 bytes leftover after parsing attributes in process `syz.1.179'. [ 130.353781][ T6492] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.179'. [ 130.411203][ T6487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.431595][ T6489] netlink: 'syz.2.180': attribute type 2 has an invalid length. [ 130.439646][ T6489] netlink: 'syz.2.180': attribute type 8 has an invalid length. [ 130.460909][ T6489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.180'. [ 130.877522][ T6504] netlink: 168 bytes leftover after parsing attributes in process `syz.2.183'. [ 130.947348][ T6504] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.183'. [ 133.101027][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.107935][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.301906][ T6525] netlink: 'syz.0.191': attribute type 2 has an invalid length. [ 133.335972][ T6525] netlink: 'syz.0.191': attribute type 8 has an invalid length. [ 133.343692][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.191'. [ 134.271208][ T6544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 134.303008][ T6544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 134.322705][ T6544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.197'. [ 134.323724][ T6548] netlink: 3787 bytes leftover after parsing attributes in process `syz.1.198'. [ 134.344818][ T6544] netlink: 'syz.0.197': attribute type 8 has an invalid length. [ 134.350034][ T6547] netlink: 3787 bytes leftover after parsing attributes in process `syz.1.198'. [ 134.361617][ T6544] netlink: 'syz.0.197': attribute type 9 has an invalid length. [ 134.361697][ T6544] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 134.361725][ T6544] netlink: 'syz.0.197': attribute type 11 has an invalid length. [ 134.361768][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.197'. [ 135.236863][ T6575] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 135.262924][ T6575] netlink: 'syz.3.205': attribute type 8 has an invalid length. [ 135.270851][ T6566] can: request_module (can-proto-5) failed. [ 135.284600][ T6575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.205'. [ 135.604031][ T6581] netlink: 'syz.2.207': attribute type 3 has an invalid length. [ 135.614537][ T6580] netlink: 'syz.2.207': attribute type 3 has an invalid length. [ 135.622520][ T6581] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.207'. [ 135.632539][ T6580] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.207'. [ 136.973975][ T6609] veth0_macvtap: left promiscuous mode [ 137.381968][ T6620] geneve0: entered promiscuous mode [ 137.419569][ T6620] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 142.373507][ T6660] validate_nla: 5 callbacks suppressed [ 142.373552][ T6660] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 142.387237][ T6660] netlink: 'syz.1.230': attribute type 8 has an invalid length. [ 142.394913][ T6660] __nla_validate_parse: 6 callbacks suppressed [ 142.394922][ T6660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.230'. [ 142.663769][ T6680] netlink: 'syz.0.235': attribute type 21 has an invalid length. [ 143.877780][ T6706] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.240'. [ 144.131004][ T6710] netlink: 'syz.0.242': attribute type 2 has an invalid length. [ 144.166361][ T6710] netlink: 'syz.0.242': attribute type 8 has an invalid length. [ 144.195299][ T6710] netlink: 132 bytes leftover after parsing attributes in process `syz.0.242'. [ 145.448386][ T6741] netlink: 'syz.0.252': attribute type 2 has an invalid length. [ 145.465023][ T6741] netlink: 'syz.0.252': attribute type 8 has an invalid length. [ 145.482196][ T6741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.252'. [ 146.607441][ T6754] netlink: 10 bytes leftover after parsing attributes in process `syz.2.256'. [ 147.310389][ T6760] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.255'. [ 147.327340][ T6760] openvswitch: netlink: Flow key attribute not present in set flow. [ 147.530687][ T6761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.257'. [ 148.286638][ T6762] syzkaller0: entered promiscuous mode [ 148.365571][ T6762] syzkaller0: entered allmulticast mode [ 153.697261][ T6767] syzkaller0: entered promiscuous mode [ 153.702815][ T6767] syzkaller0: entered allmulticast mode [ 153.714688][ T6773] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 153.751040][ T6773] team0: Device ipvlan1 failed to register rx_handler [ 153.787944][ T6775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.259'. [ 154.322430][ T33] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 155.741160][ T6783] netlink: 'syz.2.262': attribute type 2 has an invalid length. [ 155.749160][ T6783] netlink: 'syz.2.262': attribute type 8 has an invalid length. [ 155.759568][ T6783] netlink: 132 bytes leftover after parsing attributes in process `syz.2.262'. [ 156.082015][ T6804] netlink: 'syz.2.267': attribute type 1 has an invalid length. [ 156.105459][ T6804] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.267'. [ 157.025325][ T6813] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 158.851717][ T6836] netlink: 'syz.0.276': attribute type 2 has an invalid length. [ 158.870432][ T6836] netlink: 'syz.0.276': attribute type 8 has an invalid length. [ 158.906283][ T6836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.276'. [ 159.132346][ T6849] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 159.141550][ T6849] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.280'. [ 159.276579][ T6849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.280'. [ 159.802346][ T6858] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 160.165617][ T6866] netlink: 'syz.1.286': attribute type 3 has an invalid length. [ 160.173349][ T6866] netlink: 'syz.1.286': attribute type 4 has an invalid length. [ 160.252309][ T6866] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.286'. [ 160.447305][ T6870] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.288'. [ 160.661171][ T6875] netlink: 'syz.1.289': attribute type 2 has an invalid length. [ 160.765269][ T6875] netlink: 'syz.1.289': attribute type 8 has an invalid length. [ 160.805779][ T6875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.289'. [ 161.042466][ T6880] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.292'. [ 161.356191][ T6887] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.294'. [ 162.241154][ T6903] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.296'. [ 162.383921][ T6903] openvswitch: netlink: Key type 29 is not supported [ 162.693711][ T6917] netlink: 76 bytes leftover after parsing attributes in process `syz.0.300'. [ 162.777420][ T6919] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 162.792561][ T6919] netlink: 'syz.3.301': attribute type 8 has an invalid length. [ 162.953358][ T6920] delete_channel: no stack [ 165.535241][ T6953] validate_nla: 1 callbacks suppressed [ 165.535259][ T6953] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 166.682552][ T6957] netlink: 'syz.1.312': attribute type 2 has an invalid length. [ 166.725812][ T6957] netlink: 'syz.1.312': attribute type 8 has an invalid length. [ 166.738616][ T6957] __nla_validate_parse: 2 callbacks suppressed [ 166.738634][ T6957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.312'. [ 167.619493][ T6983] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.321'. [ 167.671288][ T6983] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 167.774628][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 167.830762][ T6992] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.324'. [ 167.893219][ T6992] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 167.908144][ T6994] netlink: 'syz.3.325': attribute type 2 has an invalid length. [ 167.908169][ T6994] netlink: 'syz.3.325': attribute type 8 has an invalid length. [ 167.908198][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.325'. [ 168.006158][ T6992] netlink: 'syz.2.324': attribute type 29 has an invalid length. [ 168.164202][ T7001] netlink: 'syz.2.324': attribute type 39 has an invalid length. [ 169.104381][ T6996] syzkaller0: entered promiscuous mode [ 169.111854][ T6996] syzkaller0: entered allmulticast mode [ 171.354772][ T7016] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 171.362745][ T7021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.330'. [ 171.372025][ T7021] netlink: 6 bytes leftover after parsing attributes in process `syz.0.330'. [ 171.405288][ T7024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.412585][ T7024] IPv6: NLM_F_CREATE should be set when creating new route [ 171.419995][ T7024] IPv6: NLM_F_CREATE should be set when creating new route [ 171.427336][ T7024] IPv6: NLM_F_CREATE should be set when creating new route [ 171.575787][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 171.752355][ T7037] netlink: 'syz.1.335': attribute type 2 has an invalid length. [ 171.764364][ T7037] netlink: 'syz.1.335': attribute type 8 has an invalid length. [ 171.773781][ T7037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.335'. [ 171.979984][ T7042] sit0: entered allmulticast mode [ 172.007476][ T7045] sit0: entered promiscuous mode [ 172.082374][ T7040] netlink: 'syz.2.337': attribute type 19 has an invalid length. [ 173.054186][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.343'. [ 173.070031][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.343'. [ 173.086014][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.343'. [ 173.451117][ T7074] netlink: 'syz.2.347': attribute type 2 has an invalid length. [ 173.469520][ T7074] netlink: 'syz.2.347': attribute type 8 has an invalid length. [ 173.529835][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.347'. [ 173.564888][ T7065] netlink: 128 bytes leftover after parsing attributes in process `syz.3.345'. [ 173.642020][ T7065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.036238][ T7091] netlink: 'syz.3.352': attribute type 19 has an invalid length. [ 176.401368][ T7116] netlink: 'syz.1.357': attribute type 2 has an invalid length. [ 176.409503][ T7116] netlink: 'syz.1.357': attribute type 8 has an invalid length. [ 176.423651][ T7116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.357'. [ 177.037974][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.072280][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.084187][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.101503][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.112437][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.124339][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.138900][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.151976][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 177.186272][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.645172][ T7129] net_ratelimit: 11464 callbacks suppressed [ 178.645191][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.661345][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.671420][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.681614][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.691702][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.702959][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.713187][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.725391][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.736952][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 178.747571][ T7129] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 180.208016][ T7141] netlink: 'syz.1.364': attribute type 19 has an invalid length. [ 180.420058][ T7146] netlink: 'syz.0.367': attribute type 2 has an invalid length. [ 180.435124][ T7146] netlink: 'syz.0.367': attribute type 8 has an invalid length. [ 180.460275][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.367'. [ 181.305366][ T7155] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.370'. [ 181.347872][ T7166] netlink: 10 bytes leftover after parsing attributes in process `syz.1.372'. [ 181.474813][ T7170] netlink: 'syz.2.371': attribute type 4 has an invalid length. [ 181.516541][ T7170] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.371'. [ 181.557202][ T5779] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 181.571506][ T5779] Bluetooth: hci1: Invalid handle: 0xf800 > 0x0eff [ 181.850297][ T7175] delete_channel: no stack [ 181.956510][ T7185] netlink: 'syz.0.378': attribute type 2 has an invalid length. [ 181.971665][ T7185] netlink: 'syz.0.378': attribute type 8 has an invalid length. [ 181.995236][ T7185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.378'. [ 182.427458][ T7198] netlink: 'syz.2.382': attribute type 153 has an invalid length. [ 182.435424][ T7198] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.382'. [ 182.490380][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.381'. [ 182.598228][ T7200] tap0: tun_chr_ioctl cmd 1074025680 [ 182.634794][ T7202] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.385'. [ 182.904643][ T7213] pim6reg1: tun_chr_ioctl cmd 2147767520 [ 182.916329][ T7218] pim6reg1: tun_chr_ioctl cmd 2147767520 [ 182.922291][ T7213] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 182.933710][ T7213] pim6reg1: linktype set to 773 [ 182.944495][ T7218] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 182.962624][ T7218] pim6reg1: linktype set to 773 [ 183.798571][ T7228] netlink: 'syz.1.392': attribute type 2 has an invalid length. [ 183.807299][ T7228] netlink: 'syz.1.392': attribute type 8 has an invalid length. [ 183.827294][ T7228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.392'. [ 184.543466][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 10 [ 185.349224][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 186.245406][ T7275] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 186.253169][ T7275] netlink: 'syz.0.403': attribute type 8 has an invalid length. [ 186.294771][ T7275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.403'. [ 187.013395][ T7302] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 187.034427][ T7302] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.411'. [ 187.056019][ T7302] net_ratelimit: 10265 callbacks suppressed [ 187.056038][ T7302] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 187.071146][ T7295] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 187.088860][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.409'. [ 187.106560][ T7295] netlink: 'syz.1.409': attribute type 10 has an invalid length. [ 187.133940][ T7307] netlink: 'syz.3.412': attribute type 29 has an invalid length. [ 187.146227][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.409'. [ 187.170945][ T7307] netlink: 'syz.3.412': attribute type 29 has an invalid length. [ 187.229939][ T7307] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 187.265557][ T7307] dvmrp1: persist disabled [ 187.272349][ T7307] netlink: 'syz.3.412': attribute type 29 has an invalid length. [ 187.599485][ T7329] netlink: 'syz.0.417': attribute type 2 has an invalid length. [ 187.609106][ T7329] netlink: 'syz.0.417': attribute type 8 has an invalid length. [ 187.617596][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.417'. [ 188.072914][ T7344] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.421'. [ 188.460191][ T7352] netlink: 152 bytes leftover after parsing attributes in process `syz.2.424'. [ 188.544750][ T7352] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 188.649366][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.427'. [ 189.211214][ T7377] netlink: 'syz.3.433': attribute type 11 has an invalid length. [ 189.228408][ T7377] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.433'. [ 189.253117][ T7378] netlink: 14 bytes leftover after parsing attributes in process `syz.0.431'. [ 190.283289][ T7397] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 191.255976][ T7433] validate_nla: 11 callbacks suppressed [ 191.256038][ T7433] netlink: 'syz.3.446': attribute type 29 has an invalid length. [ 191.286926][ T7433] netlink: 'syz.3.446': attribute type 29 has an invalid length. [ 191.513312][ T7444] netlink: 'syz.3.446': attribute type 29 has an invalid length. [ 191.564708][ T7448] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 191.661856][ T7448] team0: Port device geneve1 added [ 192.378040][ T7465] netlink: 'syz.1.453': attribute type 2 has an invalid length. [ 192.396083][ T7465] netlink: 'syz.1.453': attribute type 8 has an invalid length. [ 192.425255][ T7465] __nla_validate_parse: 4 callbacks suppressed [ 192.425273][ T7465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.453'. [ 192.586650][ T7471] tap0: tun_chr_ioctl cmd 1074025680 [ 193.351672][ T7487] netlink: 'syz.3.460': attribute type 13 has an invalid length. [ 193.376952][ T7487] netlink: 'syz.3.460': attribute type 58 has an invalid length. [ 193.400547][ T7491] netlink: 'syz.2.461': attribute type 29 has an invalid length. [ 193.408585][ T7487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.460'. [ 193.441108][ T7491] netlink: 'syz.2.461': attribute type 29 has an invalid length. [ 193.466962][ T7487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.460'. [ 194.342106][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.466'. [ 194.567959][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.574796][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.003216][ T7516] tap0: tun_chr_ioctl cmd 1074025680 [ 195.422390][ T7520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.470'. [ 195.455225][ T7520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.470'. [ 195.496158][ T7520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.470'. [ 195.608807][ T7524] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.473'. [ 195.840839][ T7531] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.475'. [ 196.157689][ T5777] Bluetooth: hci3: unexpected event 0x3d length: 15 > 14 [ 196.376820][ T7550] veth1_macvtap: left promiscuous mode [ 196.399483][ T7550] macsec0: entered promiscuous mode [ 196.429889][ T7550] veth1_macvtap: entered promiscuous mode [ 196.445639][ T7550] macsec0: entered allmulticast mode [ 196.455075][ T7550] veth1_macvtap: entered allmulticast mode [ 196.501180][ T7549] validate_nla: 4 callbacks suppressed [ 196.501623][ T7549] netlink: 'syz.2.480': attribute type 10 has an invalid length. [ 196.770180][ T7549] veth0_vlan: left promiscuous mode [ 196.812918][ T7549] veth0_vlan: entered promiscuous mode [ 196.869368][ T7549] team0: Device veth0_vlan failed to register rx_handler [ 197.020685][ T7552] netlink: 'syz.3.482': attribute type 10 has an invalid length. [ 197.591456][ T7567] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 197.619449][ T7567] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.486'. [ 197.656180][ T7567] netlink: 9 bytes leftover after parsing attributes in process `syz.1.486'. [ 197.984205][ T7576] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.489'. [ 198.573592][ T7587] C: renamed from team_slave_0 (while UP) [ 198.730934][ T7587] netlink: 'syz.3.492': attribute type 3 has an invalid length. [ 198.763885][ T7587] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 198.809646][ T7587] netlink: 116 bytes leftover after parsing attributes in process `syz.3.492'. [ 198.837486][ T7587] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 198.897435][ T7598] netlink: 'syz.2.495': attribute type 10 has an invalid length. [ 199.008314][ T7598] team0: Device vxcan1 is of different type [ 200.010972][ T7619] netlink: 'syz.0.501': attribute type 46 has an invalid length. [ 200.777977][ T7632] netlink: 'syz.2.505': attribute type 10 has an invalid length. [ 201.362179][ T7644] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.510'. [ 205.268517][ T7671] netlink: 'syz.0.516': attribute type 21 has an invalid length. [ 205.276871][ T7671] netlink: 'syz.0.516': attribute type 6 has an invalid length. [ 205.284779][ T7671] netlink: 132 bytes leftover after parsing attributes in process `syz.0.516'. [ 205.318993][ T7669] netlink: 55047 bytes leftover after parsing attributes in process `syz.2.517'. [ 205.344307][ T7674] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.518'. [ 206.183409][ T7692] netlink: 'syz.2.524': attribute type 8 has an invalid length. [ 206.236219][ T7692] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.524'. [ 208.113247][ T7724] netlink: 'syz.3.532': attribute type 2 has an invalid length. [ 208.133291][ T7724] netlink: 'syz.3.532': attribute type 8 has an invalid length. [ 208.142379][ T7724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.532'. [ 208.173165][ T7721] netlink: 180 bytes leftover after parsing attributes in process `syz.2.530'. [ 208.702784][ T7739] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.538'. [ 208.850465][ T7745] netlink: 'syz.0.539': attribute type 8 has an invalid length. [ 208.878015][ T7745] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.539'. [ 209.021764][ T7752] netlink: 'syz.3.541': attribute type 10 has an invalid length. [ 211.769317][ T7768] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.544'. [ 211.805741][ T7768] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.544'. [ 211.957166][ T7777] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 211.964889][ T7777] netlink: 'syz.1.547': attribute type 8 has an invalid length. [ 211.977999][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.984128][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 211.984968][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 211.991563][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 212.016212][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.547'. [ 213.092684][ T7803] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.554'. [ 213.322443][ T7808] netlink: 172 bytes leftover after parsing attributes in process `syz.0.556'. [ 213.337004][ T7808] netlink: 'syz.0.556': attribute type 3 has an invalid length. [ 213.355083][ T7808] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 213.362802][ T7808] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.556'. [ 213.696545][ T7819] netlink: 'syz.2.560': attribute type 2 has an invalid length. [ 213.704395][ T7819] netlink: 'syz.2.560': attribute type 8 has an invalid length. [ 213.771417][ T7819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.560'. [ 213.949726][ T7825] syzkaller0: create flow: hash 742128821 index 0 [ 214.124320][ T7817] syzkaller0: entered promiscuous mode [ 214.205174][ T7817] syzkaller0: entered allmulticast mode [ 216.377158][ T2932] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 217.176426][ C0] syzkaller0 (unregistering): delete flow: hash 742128821 index 0 [ 217.846564][ T7866] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.573'. [ 217.873838][ T7867] netlink: 'syz.3.574': attribute type 10 has an invalid length. [ 217.982878][ T7874] netlink: 10 bytes leftover after parsing attributes in process `syz.2.576'. [ 218.299392][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 218.325171][ T7880] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 218.334496][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 218.349725][ T7879] netlink: 60 bytes leftover after parsing attributes in process `syz.2.577'. [ 218.949949][ T7885] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.579'. [ 219.548891][ T7895] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 219.573145][ T7895] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.583'. [ 219.594668][ T7896] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.582'. [ 219.887932][ T7902] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.586'. [ 220.070814][ T7908] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 220.108555][ T7906] netlink: 'syz.2.589': attribute type 39 has an invalid length. [ 220.513021][ T7906] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 220.539859][ T7914] netlink: 'syz.3.590': attribute type 2 has an invalid length. [ 220.574592][ T7914] netlink: 'syz.3.590': attribute type 8 has an invalid length. [ 220.634272][ T7906] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 220.783778][ T7911] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 220.942725][ T7906] netlink: 'syz.2.589': attribute type 29 has an invalid length. [ 224.873914][ T7934] __nla_validate_parse: 3 callbacks suppressed [ 224.873947][ T7934] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.596'. [ 224.923355][ T7944] validate_nla: 1 callbacks suppressed [ 224.923389][ T7944] netlink: 'syz.3.597': attribute type 3 has an invalid length. [ 224.942585][ T7938] netlink: 'syz.0.596': attribute type 13 has an invalid length. [ 224.956402][ T7944] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.597'. [ 224.975165][ T7938] netlink: 160 bytes leftover after parsing attributes in process `syz.0.596'. [ 224.984850][ T7938] erspan0: refused to change device tx_queue_len [ 225.010838][ T7938] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 225.212464][ T7947] syzkaller0: entered promiscuous mode [ 225.241828][ T7947] syzkaller0: entered allmulticast mode [ 225.300841][ T7947] netlink: 'syz.1.599': attribute type 2 has an invalid length. [ 225.314587][ T7947] netlink: 'syz.1.599': attribute type 8 has an invalid length. [ 225.335324][ T7947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.599'. [ 225.412077][ T7952] netlink: 168 bytes leftover after parsing attributes in process `syz.0.600'. [ 225.869261][ T7957] netlink: 'syz.0.602': attribute type 2 has an invalid length. [ 225.885458][ T7957] netlink: 'syz.0.602': attribute type 8 has an invalid length. [ 225.915295][ T7957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.602'. [ 227.294403][ T7982] netlink: 'syz.2.610': attribute type 3 has an invalid length. [ 227.335663][ T7982] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.610'. [ 227.413412][ T7987] netlink: 'syz.1.611': attribute type 2 has an invalid length. [ 227.842513][ T8000] netlink: 'syz.2.615': attribute type 2 has an invalid length. [ 227.885598][ T8000] netlink: 'syz.2.615': attribute type 8 has an invalid length. [ 227.913360][ T8000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.615'. [ 229.482302][ T8016] netlink: 55 bytes leftover after parsing attributes in process `syz.1.619'. [ 229.912495][ T8027] netlink: 132 bytes leftover after parsing attributes in process `syz.0.623'. [ 229.991179][ T8027] netlink: 12798 bytes leftover after parsing attributes in process `syz.0.623'. [ 230.351077][ T8039] validate_nla: 2 callbacks suppressed [ 230.351094][ T8039] netlink: 'syz.0.626': attribute type 2 has an invalid length. [ 230.369794][ T8039] netlink: 'syz.0.626': attribute type 8 has an invalid length. [ 230.391834][ T8039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.626'. [ 230.847995][ T8049] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.629'. [ 231.728633][ T8062] netlink: 'syz.0.632': attribute type 4 has an invalid length. [ 231.752833][ T8066] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 231.797160][ T8062] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.632'. [ 234.498008][ T8087] netlink: 830 bytes leftover after parsing attributes in process `syz.2.638'. [ 234.523771][ T8087] netlink: 'syz.2.638': attribute type 5 has an invalid length. [ 234.724218][ T8097] pim6reg1: entered promiscuous mode [ 234.738916][ T8097] pim6reg1: entered allmulticast mode [ 234.954012][ T8092] syzkaller0: entered promiscuous mode [ 234.975878][ T8092] syzkaller0: entered allmulticast mode [ 235.587677][ T8102] syzkaller0: entered promiscuous mode [ 235.610292][ T8102] syzkaller0: entered allmulticast mode [ 238.354201][ T8127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.648'. [ 238.497718][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.650'. [ 238.931429][ T8144] netlink: 'syz.3.655': attribute type 16 has an invalid length. [ 238.982213][ T8144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.655'. [ 239.035284][ T8144] veth1_macvtap: entered allmulticast mode [ 242.117364][ T8157] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 242.124708][ T8157] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 242.474491][ T8176] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 242.482361][ T8176] netlink: 'syz.2.663': attribute type 2 has an invalid length. [ 242.509331][ T8176] netlink: 'syz.2.663': attribute type 2 has an invalid length. [ 242.523536][ T8176] netlink: 'syz.2.663': attribute type 3 has an invalid length. [ 242.552863][ T8176] netlink: 'syz.2.663': attribute type 4 has an invalid length. [ 242.595365][ T8176] netlink: 'syz.2.663': attribute type 5 has an invalid length. [ 242.653003][ T8176] netlink: 'syz.2.663': attribute type 6 has an invalid length. [ 242.691849][ T8176] netlink: 'syz.2.663': attribute type 7 has an invalid length. [ 242.746350][ T8176] netlink: 'syz.2.663': attribute type 9 has an invalid length. [ 242.797158][ T8176] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.663'. [ 243.170836][ T8183] netlink: 2 bytes leftover after parsing attributes in process `syz.0.665'. [ 243.245146][ T8183] hsr0: entered promiscuous mode [ 243.250532][ T8183] bridge0: port 3(hsr0) entered blocking state [ 243.283670][ T8183] bridge0: port 3(hsr0) entered disabled state [ 243.307951][ T8183] hsr0: entered allmulticast mode [ 243.313034][ T8183] hsr_slave_0: entered allmulticast mode [ 243.336975][ T8183] hsr_slave_1: entered allmulticast mode [ 243.368629][ T8183] bridge0: port 3(hsr0) entered blocking state [ 243.375454][ T8183] bridge0: port 3(hsr0) entered forwarding state [ 244.206168][ T8209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.672'. [ 244.924134][ T8221] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.675'. [ 245.078581][ T8221] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 245.171989][ T8221] CPU: 1 PID: 8221 Comm: syz.2.675 Not tainted syzkaller #0 [ 245.179378][ T8221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.189594][ T8221] Call Trace: [ 245.192926][ T8221] [ 245.195929][ T8221] dump_stack_lvl+0x18c/0x250 [ 245.200707][ T8221] ? slab_post_alloc_hook+0x6e/0x4b0 [ 245.206051][ T8221] ? show_regs_print_info+0x20/0x20 [ 245.211315][ T8221] ? load_image+0x420/0x420 [ 245.215902][ T8221] sysfs_warn_dup+0x8e/0xa0 [ 245.220464][ T8221] sysfs_do_create_link_sd+0xc0/0x110 [ 245.225897][ T8221] device_add_class_symlinks+0x1cf/0x240 [ 245.231589][ T8221] device_add+0x507/0xc20 [ 245.235978][ T8221] wiphy_register+0x1dad/0x2ae0 [ 245.240902][ T8221] ? cfg80211_event_work+0x40/0x40 [ 245.246059][ T8221] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.252283][ T8221] ? ieee80211_register_hw+0x3301/0x4250 [ 245.257984][ T8221] ieee80211_register_hw+0x3464/0x4250 [ 245.263527][ T8221] ? ieee80211_tasklet_handler+0x20/0x20 [ 245.269210][ T8221] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 245.275170][ T8221] ? __debug_object_init+0xec/0x450 [ 245.280487][ T8221] ? __asan_memset+0x22/0x40 [ 245.285128][ T8221] ? __hrtimer_init+0x186/0x270 [ 245.290036][ T8221] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 245.295805][ T8221] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.302121][ T8221] ? mac80211_hwsim_free+0x220/0x220 [ 245.307454][ T8221] ? rcu_is_watching+0x15/0xb0 [ 245.312270][ T8221] ? kstrndup+0xbd/0x140 [ 245.316574][ T8221] hwsim_new_radio_nl+0xdc9/0x1a90 [ 245.321755][ T8221] ? __nla_validate+0x50/0x50 [ 245.326495][ T8221] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 245.332886][ T8221] ? __nla_parse+0x40/0x50 [ 245.337355][ T8221] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 245.343754][ T8221] genl_family_rcv_msg_doit+0x211/0x310 [ 245.349359][ T8221] ? end_current_label_crit_section+0x170/0x170 [ 245.355672][ T8221] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 245.361631][ T8221] ? bpf_lsm_capable+0x9/0x10 [ 245.366379][ T8221] ? security_capable+0x89/0xb0 [ 245.371293][ T8221] genl_rcv_msg+0x619/0x7a0 [ 245.375857][ T8221] ? genl_bind+0x360/0x360 [ 245.380431][ T8221] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 245.386833][ T8221] netlink_rcv_skb+0x241/0x4d0 [ 245.391675][ T8221] ? genl_bind+0x360/0x360 [ 245.396148][ T8221] ? netlink_ack+0x1180/0x1180 [ 245.401068][ T8221] ? __lock_acquire+0x7d40/0x7d40 [ 245.406155][ T8221] ? down_read+0x1ac/0x2e0 [ 245.410755][ T8221] genl_rcv+0x28/0x40 [ 245.414793][ T8221] netlink_unicast+0x751/0x8d0 [ 245.419625][ T8221] netlink_sendmsg+0x8d0/0xbf0 [ 245.424461][ T8221] ? netlink_getsockopt+0x590/0x590 [ 245.429724][ T8221] ? aa_sock_msg_perm+0x94/0x150 [ 245.434742][ T8221] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 245.440084][ T8221] ? security_socket_sendmsg+0x80/0xa0 [ 245.445602][ T8221] ? netlink_getsockopt+0x590/0x590 [ 245.450866][ T8221] ____sys_sendmsg+0x5ba/0x960 [ 245.455699][ T8221] ? __asan_memset+0x22/0x40 [ 245.460346][ T8221] ? __sys_sendmsg_sock+0x30/0x30 [ 245.465436][ T8221] ? __import_iovec+0x5f2/0x850 [ 245.470347][ T8221] ? import_iovec+0x73/0xa0 [ 245.474912][ T8221] ___sys_sendmsg+0x2a6/0x360 [ 245.479657][ T8221] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 245.485524][ T8221] ? __sys_sendmsg+0x2a0/0x2a0 [ 245.490367][ T8221] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.496623][ T8221] __se_sys_sendmsg+0x1c2/0x2b0 [ 245.501626][ T8221] ? __x64_sys_sendmsg+0x80/0x80 [ 245.506654][ T8221] ? syscall_enter_from_user_mode+0x2e/0x80 [ 245.512615][ T8221] do_syscall_64+0x55/0xa0 [ 245.517077][ T8221] ? clear_bhb_loop+0x40/0x90 [ 245.521811][ T8221] ? clear_bhb_loop+0x40/0x90 [ 245.526554][ T8221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.532506][ T8221] RIP: 0033:0x7f782d39cdd9 [ 245.536984][ T8221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.556652][ T8221] RSP: 002b:00007f782e20f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.565147][ T8221] RAX: ffffffffffffffda RBX: 00007f782d615fa0 RCX: 00007f782d39cdd9 [ 245.573178][ T8221] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 245.581286][ T8221] RBP: 00007f782d432d69 R08: 0000000000000000 R09: 0000000000000000 [ 245.589319][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.597348][ T8221] R13: 00007f782d616038 R14: 00007f782d615fa0 R15: 00007ffe0f3338a8 [ 245.605396][ T8221] [ 246.258477][ T8235] validate_nla: 4 callbacks suppressed [ 246.258572][ T8235] netlink: 'syz.3.679': attribute type 10 has an invalid length. [ 246.284646][ T8235] netlink: 2 bytes leftover after parsing attributes in process `syz.3.679'. [ 246.309888][ T8235] hsr0: entered promiscuous mode [ 246.332743][ T8235] bridge0: port 3(hsr0) entered blocking state [ 246.350364][ T8235] bridge0: port 3(hsr0) entered disabled state [ 246.367308][ T8235] hsr0: entered allmulticast mode [ 246.381738][ T8235] hsr_slave_0: entered allmulticast mode [ 246.410022][ T8235] hsr_slave_1: entered allmulticast mode [ 246.491678][ T8235] bridge0: port 3(hsr0) entered blocking state [ 246.498704][ T8235] bridge0: port 3(hsr0) entered forwarding state [ 246.810640][ T8256] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.301184][ T741] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.383071][ T8276] can: request_module (can-proto-0) failed. [ 250.029248][ T8339] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.707'. [ 250.101099][ T8340] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.707'. [ 250.176333][ T8339] netlink: 'syz.1.707': attribute type 46 has an invalid length. [ 250.184282][ T8340] netlink: 'syz.1.707': attribute type 46 has an invalid length. [ 251.107619][ T8356] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 251.174700][ T8356] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.710'. [ 251.543398][ T8367] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.713'. [ 255.211918][ T8408] netlink: 763 bytes leftover after parsing attributes in process `syz.3.723'. [ 255.247795][ T8410] netlink: 'syz.1.725': attribute type 2 has an invalid length. [ 255.285113][ T8410] netlink: 'syz.1.725': attribute type 8 has an invalid length. [ 255.366402][ T8410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.725'. [ 255.985606][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.992110][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.206493][ T8434] netlink: 763 bytes leftover after parsing attributes in process `syz.0.731'. [ 256.639463][ T8448] netlink: 'syz.1.736': attribute type 2 has an invalid length. [ 256.661010][ T8448] netlink: 'syz.1.736': attribute type 8 has an invalid length. [ 256.681271][ T8448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.736'. [ 257.746555][ T8479] netlink: 763 bytes leftover after parsing attributes in process `syz.0.743'. [ 258.650582][ T8501] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 258.668644][ T8501] netlink: 55 bytes leftover after parsing attributes in process `syz.1.750'. [ 258.684847][ T8502] netlink: 'syz.2.749': attribute type 2 has an invalid length. [ 258.700627][ T8502] netlink: 'syz.2.749': attribute type 8 has an invalid length. [ 258.714448][ T8502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.749'. [ 258.735212][ T8503] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 258.755476][ T8503] netlink: 55 bytes leftover after parsing attributes in process `syz.1.750'. [ 258.956157][ T8509] netlink: 763 bytes leftover after parsing attributes in process `syz.0.752'. [ 259.554004][ T8530] netlink: 'syz.3.759': attribute type 10 has an invalid length. [ 259.970122][ T8530] team0 (unregistering): Port device C removed [ 260.120040][ T8530] team0 (unregistering): Port device 0 removed [ 260.192121][ T8534] netlink: 'syz.3.759': attribute type 10 has an invalid length. [ 260.200362][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.759'. [ 260.214783][ T8534] batman_adv: batadv0: Adding interface: veth0_vlan [ 260.222824][ T8534] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.261384][ T8534] batman_adv: batadv0: Interface activated: veth0_vlan [ 260.294476][ T8541] netlink: 'syz.2.762': attribute type 2 has an invalid length. [ 260.317633][ T8541] netlink: 'syz.2.762': attribute type 8 has an invalid length. [ 260.333690][ T8541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.762'. [ 260.535805][ T8549] netlink: 'syz.3.764': attribute type 21 has an invalid length. [ 260.770313][ T8556] Ÿë: port 1(ip6gretap0) entered blocking state [ 260.777482][ T8556] Ÿë: port 1(ip6gretap0) entered disabled state [ 260.784281][ T8556] ip6gretap0: entered allmulticast mode [ 260.842092][ T8556] ip6gretap0: entered promiscuous mode [ 261.978066][ T8578] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.772'. [ 262.045163][ T8578] netlink: zone id is out of range [ 262.285959][ T8588] netlink: 'syz.3.775': attribute type 2 has an invalid length. [ 262.293779][ T8588] netlink: 'syz.3.775': attribute type 8 has an invalid length. [ 262.320737][ T8588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.775'. [ 263.181338][ T8599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.779'. [ 263.211750][ T8601] netlink: 'syz.2.780': attribute type 11 has an invalid length. [ 263.249728][ T8601] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.780'. [ 263.723014][ T8621] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 263.755928][ T8621] netlink: 'syz.0.786': attribute type 8 has an invalid length. [ 263.763684][ T8621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 264.019962][ T8631] macvlan1: entered promiscuous mode [ 264.778253][ T8658] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 264.786425][ T8658] netlink: 'syz.3.799': attribute type 8 has an invalid length. [ 264.794241][ T8658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.799'. [ 265.471700][ T8668] netlink: 14 bytes leftover after parsing attributes in process `syz.0.802'. [ 265.485512][ T8669] validate_nla: 1 callbacks suppressed [ 265.485527][ T8669] netlink: 'syz.0.802': attribute type 21 has an invalid length. [ 265.562575][ T8669] netlink: 128 bytes leftover after parsing attributes in process `syz.0.802'. [ 265.672057][ T8686] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.805'. [ 266.224613][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.0.810'. [ 266.369063][ T8706] netlink: 'syz.0.813': attribute type 2 has an invalid length. [ 266.385505][ T8706] netlink: 'syz.0.813': attribute type 8 has an invalid length. [ 266.393345][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.813'. [ 266.657926][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 266.813418][ T8715] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.814'. [ 266.839828][ T8714] netlink: 144300 bytes leftover after parsing attributes in process `syz.3.816'. [ 266.855635][ T8714] netlink: 5 bytes leftover after parsing attributes in process `syz.3.816'. [ 266.870221][ T8716] netlink: 'syz.3.816': attribute type 9 has an invalid length. [ 266.882767][ T8716] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.816'. [ 266.989442][ T8714] netlink: 'syz.3.816': attribute type 9 has an invalid length. [ 267.787801][ T8733] netlink: 'syz.2.822': attribute type 21 has an invalid length. [ 268.197650][ T8749] netlink: 'syz.0.826': attribute type 2 has an invalid length. [ 268.220390][ T8749] netlink: 'syz.0.826': attribute type 8 has an invalid length. [ 268.403668][ T8753] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 268.566123][ T8752] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 268.574103][ T8752] CPU: 0 PID: 8752 Comm: syz.3.825 Not tainted syzkaller #0 [ 268.581450][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.591559][ T8752] Call Trace: [ 268.594890][ T8752] [ 268.597874][ T8752] dump_stack_lvl+0x18c/0x250 [ 268.602622][ T8752] ? show_regs_print_info+0x20/0x20 [ 268.607904][ T8752] ? load_image+0x420/0x420 [ 268.612481][ T8752] sysfs_warn_dup+0x8e/0xa0 [ 268.617031][ T8752] sysfs_do_create_link_sd+0xc0/0x110 [ 268.622450][ T8752] device_add_class_symlinks+0x1cf/0x240 [ 268.628184][ T8752] device_add+0x507/0xc20 [ 268.632585][ T8752] wiphy_register+0x1dad/0x2ae0 [ 268.637507][ T8752] ? cfg80211_event_work+0x40/0x40 [ 268.642660][ T8752] ? minstrel_ht_alloc+0x88a/0x990 [ 268.647829][ T8752] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 268.653948][ T8752] ieee80211_register_hw+0x3464/0x4250 [ 268.659475][ T8752] ? ieee80211_tasklet_handler+0x20/0x20 [ 268.665176][ T8752] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 268.671127][ T8752] ? __debug_object_init+0xec/0x450 [ 268.676370][ T8752] ? __asan_memset+0x22/0x40 [ 268.681003][ T8752] ? __hrtimer_init+0x186/0x270 [ 268.685893][ T8752] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 268.691667][ T8752] ? mac80211_hwsim_free+0x220/0x220 [ 268.696988][ T8752] ? rcu_is_watching+0x15/0xb0 [ 268.701792][ T8752] ? kstrndup+0xbd/0x140 [ 268.706111][ T8752] hwsim_new_radio_nl+0xdc9/0x1a90 [ 268.711268][ T8752] ? __nla_validate+0x50/0x50 [ 268.715987][ T8752] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 268.722377][ T8752] ? __nla_parse+0x40/0x50 [ 268.726829][ T8752] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 268.733220][ T8752] genl_family_rcv_msg_doit+0x211/0x310 [ 268.738834][ T8752] ? end_current_label_crit_section+0x170/0x170 [ 268.745139][ T8752] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 268.751070][ T8752] ? bpf_lsm_capable+0x9/0x10 [ 268.755783][ T8752] ? security_capable+0x89/0xb0 [ 268.760680][ T8752] genl_rcv_msg+0x619/0x7a0 [ 268.765234][ T8752] ? genl_bind+0x360/0x360 [ 268.769678][ T8752] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 268.776045][ T8752] ? ref_tracker_free+0x690/0x840 [ 268.781122][ T8752] netlink_rcv_skb+0x241/0x4d0 [ 268.785928][ T8752] ? genl_bind+0x360/0x360 [ 268.790378][ T8752] ? netlink_ack+0x1180/0x1180 [ 268.795189][ T8752] ? __lock_acquire+0x7d40/0x7d40 [ 268.800265][ T8752] ? down_read+0x1ac/0x2e0 [ 268.804719][ T8752] genl_rcv+0x28/0x40 [ 268.808732][ T8752] netlink_unicast+0x751/0x8d0 [ 268.813553][ T8752] netlink_sendmsg+0x8d0/0xbf0 [ 268.818377][ T8752] ? netlink_getsockopt+0x590/0x590 [ 268.823614][ T8752] ? aa_sock_msg_perm+0x94/0x150 [ 268.828593][ T8752] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 268.833913][ T8752] ? security_socket_sendmsg+0x80/0xa0 [ 268.839400][ T8752] ? netlink_getsockopt+0x590/0x590 [ 268.844645][ T8752] ____sys_sendmsg+0x5ba/0x960 [ 268.849495][ T8752] ? __asan_memset+0x22/0x40 [ 268.854120][ T8752] ? __sys_sendmsg_sock+0x30/0x30 [ 268.859174][ T8752] ? __import_iovec+0x5f2/0x850 [ 268.864074][ T8752] ? import_iovec+0x73/0xa0 [ 268.868609][ T8752] ___sys_sendmsg+0x2a6/0x360 [ 268.873341][ T8752] ? __sys_sendmsg+0x2a0/0x2a0 [ 268.878188][ T8752] __se_sys_sendmsg+0x1c2/0x2b0 [ 268.883068][ T8752] ? __x64_sys_sendmsg+0x80/0x80 [ 268.888051][ T8752] ? lockdep_hardirqs_on+0x98/0x150 [ 268.893293][ T8752] do_syscall_64+0x55/0xa0 [ 268.897746][ T8752] ? clear_bhb_loop+0x40/0x90 [ 268.902457][ T8752] ? clear_bhb_loop+0x40/0x90 [ 268.907185][ T8752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.913118][ T8752] RIP: 0033:0x7f08e359cdd9 [ 268.917565][ T8752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.937657][ T8752] RSP: 002b:00007f08e4425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.946113][ T8752] RAX: ffffffffffffffda RBX: 00007f08e3816090 RCX: 00007f08e359cdd9 [ 268.954200][ T8752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 268.962202][ T8752] RBP: 00007f08e3632d69 R08: 0000000000000000 R09: 0000000000000000 [ 268.970204][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.978209][ T8752] R13: 00007f08e3816128 R14: 00007f08e3816090 R15: 00007fff512116c8 [ 268.986228][ T8752] [ 269.513347][ T8770] netlink: 'syz.1.833': attribute type 29 has an invalid length. [ 270.161386][ T8791] delete_channel: no stack [ 270.185261][ T8791] delete_channel: no stack [ 270.190322][ T8791] delete_channel: no stack [ 270.200572][ T8791] delete_channel: no stack [ 272.379764][ T8832] validate_nla: 7 callbacks suppressed [ 272.379782][ T8832] netlink: 'syz.3.848': attribute type 2 has an invalid length. [ 272.395248][ T8832] netlink: 'syz.3.848': attribute type 8 has an invalid length. [ 272.461190][ T8832] __nla_validate_parse: 7 callbacks suppressed [ 272.461209][ T8832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.848'. [ 273.177170][ T8840] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.851'. [ 273.195255][ T741] wlan1: Trigger new scan to find an IBSS to join [ 273.247415][ T8843] netlink: 'syz.0.852': attribute type 3 has an invalid length. [ 273.274068][ T8843] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.852'. [ 274.452905][ T8869] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 274.483923][ T8869] netlink: 'syz.0.859': attribute type 8 has an invalid length. [ 274.508297][ T8869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.859'. [ 274.838238][ T8877] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.861'. [ 275.521768][ T8890] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.865'. [ 276.084589][ T8897] netlink: 'syz.2.865': attribute type 10 has an invalid length. [ 278.135173][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 278.537747][ T8897] team0: Device wg1 is of different type [ 278.685888][ T8905] netlink: 'syz.1.869': attribute type 6 has an invalid length. [ 278.708429][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 278.738545][ T8908] netlink: 'syz.3.870': attribute type 2 has an invalid length. [ 278.753422][ T8908] netlink: 'syz.3.870': attribute type 8 has an invalid length. [ 278.780085][ T8908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.870'. [ 278.822292][ T8914] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.240133][ T741] wlan1: Creating new IBSS network, BSSID 16:f8:90:ef:1e:bd [ 279.765556][ T8926] delete_channel: no stack [ 279.937198][ T8935] netlink: 'syz.1.879': attribute type 21 has an invalid length. [ 280.007502][ T8935] netlink: 128 bytes leftover after parsing attributes in process `syz.1.879'. [ 280.293844][ T8953] netlink: 'syz.3.884': attribute type 2 has an invalid length. [ 280.316231][ T8953] netlink: 'syz.3.884': attribute type 8 has an invalid length. [ 280.323988][ T8953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.884'. [ 280.507314][ T8951] netlink: 'syz.1.883': attribute type 9 has an invalid length. [ 280.597367][ T8951] netlink: 84908 bytes leftover after parsing attributes in process `syz.1.883'. [ 281.016773][ T8961] netlink: 'syz.2.887': attribute type 7 has an invalid length. [ 281.032088][ T8961] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 281.093798][ T8961] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.887'. [ 281.941640][ T8985] netlink: 'syz.3.894': attribute type 2 has an invalid length. [ 281.953118][ T8985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.894'. [ 282.007747][ T8990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.897'. [ 282.971472][ T9019] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.907'. [ 283.180701][ T9021] hsr_slave_1 (unregistering): left promiscuous mode [ 283.359519][ T9025] netlink: 132 bytes leftover after parsing attributes in process `syz.0.911'. [ 283.719773][ T9039] __nla_validate_parse: 1 callbacks suppressed [ 283.719791][ T9039] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.915'. [ 283.775455][ T9039] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.915'. [ 284.489320][ T9060] validate_nla: 13 callbacks suppressed [ 284.489341][ T9060] netlink: 'syz.0.921': attribute type 2 has an invalid length. [ 284.505191][ T9060] netlink: 'syz.0.921': attribute type 8 has an invalid length. [ 284.544604][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.921'. [ 285.034162][ T9075] netlink: 763 bytes leftover after parsing attributes in process `syz.3.924'. [ 286.761666][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 287.196855][ T9113] netlink: 'syz.2.934': attribute type 2 has an invalid length. [ 287.204641][ T9113] netlink: 'syz.2.934': attribute type 8 has an invalid length. [ 287.304191][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.934'. [ 287.372162][ T9118] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 287.499471][ T9118] veth0_vlan: left promiscuous mode [ 287.509252][ T9118] veth0_vlan: entered promiscuous mode [ 287.520317][ T9118] team0: Device veth0_vlan failed to register rx_handler [ 287.646393][ T9130] netlink: 763 bytes leftover after parsing attributes in process `syz.3.937'. [ 287.873589][ T9135] netlink: 'syz.2.938': attribute type 10 has an invalid length. [ 287.973119][ T9135] batman_adv: batadv0: Adding interface: netdevsim0 [ 287.985315][ T9135] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.045307][ T9135] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 288.089290][ T9146] netlink: 172 bytes leftover after parsing attributes in process `syz.0.940'. [ 288.998883][ T9169] netlink: 763 bytes leftover after parsing attributes in process `syz.3.947'. [ 289.240244][ T9176] netlink: 'syz.2.948': attribute type 2 has an invalid length. [ 289.265134][ T9176] netlink: 'syz.2.948': attribute type 8 has an invalid length. [ 289.288854][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.948'. [ 291.321332][ T9209] netlink: 763 bytes leftover after parsing attributes in process `syz.0.957'. [ 291.502746][ T9213] netlink: 'syz.0.958': attribute type 2 has an invalid length. [ 291.558380][ T9213] netlink: 'syz.0.958': attribute type 8 has an invalid length. [ 291.566809][ T9213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.958'. [ 291.577403][ T9212] netlink: 'syz.3.959': attribute type 21 has an invalid length. [ 291.776600][ T9217] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.960'. [ 291.929537][ T5777] Bluetooth: hci1: ISO packet for unknown connection handle 70 [ 291.940489][ T9223] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 292.088561][ T9223] team0: Port device netdevsim0 added [ 292.175709][ T9229] netlink: 176 bytes leftover after parsing attributes in process `syz.2.964'. [ 292.531791][ T9233] netlink: 763 bytes leftover after parsing attributes in process `syz.1.966'. [ 292.881133][ T9245] netlink: 'syz.2.969': attribute type 2 has an invalid length. [ 292.889737][ T9245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.969'. [ 292.998869][ T9250] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 294.847952][ T9248] netlink: 'syz.3.968': attribute type 21 has an invalid length. [ 294.860812][ T9252] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 294.869099][ T9252] netlink: 'syz.2.971': attribute type 8 has an invalid length. [ 294.885070][ T9252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.971'. [ 294.915787][ T9255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'. [ 295.131572][ T9267] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 295.149026][ T9267] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.976'. [ 295.338921][ T9273] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.979'. [ 295.642360][ T9271] netlink: 763 bytes leftover after parsing attributes in process `syz.1.978'. [ 295.852148][ T9287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.984'. [ 295.907893][ T9289] macvlan1: entered promiscuous mode [ 296.467909][ T9307] netlink: 128 bytes leftover after parsing attributes in process `syz.2.990'. [ 296.627695][ T9307] validate_nla: 4 callbacks suppressed [ 296.627733][ T9307] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 296.645863][ T9309] netlink: 763 bytes leftover after parsing attributes in process `syz.0.991'. [ 296.694433][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.990'. [ 296.934799][ T9318] syzkaller0: entered promiscuous mode [ 296.943089][ T9318] syzkaller0: entered allmulticast mode [ 297.374186][ T9325] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.995'. [ 299.138957][ T9323] netlink: 'syz.0.994': attribute type 2 has an invalid length. [ 299.147288][ T9323] netlink: 'syz.0.994': attribute type 8 has an invalid length. [ 299.677064][ T9351] netlink: 'syz.1.1003': attribute type 3 has an invalid length. [ 299.705432][ T9351] netlink: 'syz.1.1003': attribute type 6 has an invalid length. [ 299.899219][ T9359] netlink: 'syz.0.1007': attribute type 2 has an invalid length. [ 299.920536][ T9359] netlink: 'syz.0.1007': attribute type 8 has an invalid length. [ 299.958777][ T9359] __nla_validate_parse: 4 callbacks suppressed [ 299.958793][ T9359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1007'. [ 300.313558][ T9371] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1011'. [ 301.581549][ T9405] netlink: 'syz.3.1021': attribute type 2 has an invalid length. [ 301.594511][ T9405] netlink: 'syz.3.1021': attribute type 8 has an invalid length. [ 301.626790][ T9405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1021'. [ 302.240646][ T9411] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1022'. [ 302.277535][ T9412] netlink: 'syz.0.1023': attribute type 2 has an invalid length. [ 302.286577][ T9412] netlink: 'syz.0.1023': attribute type 8 has an invalid length. [ 302.300698][ T9412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1023'. [ 302.325555][ T9419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1024'. [ 302.442795][ T9419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1024'. [ 302.491129][ T9416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1024'. [ 302.513732][ T9423] netlink: 'syz.2.1026': attribute type 25 has an invalid length. [ 302.522015][ T9423] netlink: 'syz.2.1026': attribute type 28 has an invalid length. [ 302.616752][ T9419] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1024'. [ 302.675588][ T9428] netlink: 'syz.2.1027': attribute type 12 has an invalid length. [ 302.705664][ T9428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1027'. [ 304.046720][ T9455] netlink: 'syz.3.1035': attribute type 2 has an invalid length. [ 304.054572][ T9455] netlink: 'syz.3.1035': attribute type 8 has an invalid length. [ 304.715430][ T9467] C: renamed from team_slave_0 (while UP) [ 304.836707][ T9479] netlink: 'syz.0.1040': attribute type 30 has an invalid length. [ 305.608048][ T9493] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 305.662830][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.705242][ T9493] bond0: (slave team0): Enslaving as an active interface with an up link [ 305.717197][ T9499] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 305.801300][ T9500] team0: Device vxcan1 is of different type [ 305.889656][ T9495] __nla_validate_parse: 2 callbacks suppressed [ 305.889739][ T9495] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1045'. [ 306.026543][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1048'. [ 306.105652][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1051'. [ 306.155368][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1051'. [ 306.204167][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1051'. [ 306.214165][ T9513] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1051'. [ 307.294105][ T9530] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1056'. [ 307.461900][ T9536] validate_nla: 3 callbacks suppressed [ 307.461916][ T9536] netlink: 'syz.1.1056': attribute type 21 has an invalid length. [ 307.481944][ T9536] netlink: 14378 bytes leftover after parsing attributes in process `syz.1.1056'. [ 307.747601][ T9543] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1059'. [ 307.875575][ T9549] netlink: 'syz.0.1061': attribute type 2 has an invalid length. [ 307.886964][ T9549] netlink: 'syz.0.1061': attribute type 8 has an invalid length. [ 307.903367][ T9549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1061'. [ 308.334743][ T9560] netlink: 'syz.3.1066': attribute type 3 has an invalid length. [ 308.373262][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.399131][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.431191][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.469650][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.490270][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.501990][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.580906][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.652639][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.698620][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 308.717185][ T9562] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 309.254111][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.498166][ T9579] __nla_validate_parse: 1 callbacks suppressed [ 311.498178][ T9579] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1069'. [ 311.760815][ T9589] netlink: 'syz.3.1074': attribute type 2 has an invalid length. [ 311.775144][ T9589] netlink: 'syz.3.1074': attribute type 8 has an invalid length. [ 311.785608][ T9589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1074'. [ 312.308441][ T9602] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1076'. [ 312.984190][ T9619] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1082'. [ 313.365676][ T9636] tun0: tun_chr_ioctl cmd 1074025677 [ 313.371248][ T9636] tun0: linktype set to 776 [ 313.597524][ T9645] netlink: 'syz.3.1089': attribute type 2 has an invalid length. [ 313.613999][ T9645] netlink: 'syz.3.1089': attribute type 8 has an invalid length. [ 313.622104][ T9645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1089'. [ 313.962065][ T9649] netlink: 'syz.0.1090': attribute type 3 has an invalid length. [ 314.032789][ T9649] netlink: 106052 bytes leftover after parsing attributes in process `syz.0.1090'. [ 314.799219][ T9665] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1093'. [ 315.331783][ T9680] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1095'. [ 315.414083][ T9680] net_ratelimit: 4377 callbacks suppressed [ 315.414101][ T9680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.541319][ T9691] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 315.565306][ T9691] netlink: 'syz.0.1102': attribute type 8 has an invalid length. [ 315.573152][ T9691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1102'. [ 315.920972][ T9698] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1104'. [ 316.160720][ T9708] netlink: 'syz.0.1107': attribute type 6 has an invalid length. [ 316.196054][ T9708] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 316.219281][ T9708] netlink: 'syz.0.1107': attribute type 33 has an invalid length. [ 316.849010][ T9720] netlink: 'syz.2.1112': attribute type 39 has an invalid length. [ 316.950961][ T9726] netlink: 'syz.3.1114': attribute type 10 has an invalid length. [ 316.985436][ T9726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1114'. [ 317.026912][ T9726] ipvlan1: entered promiscuous mode [ 317.035553][ T9726] ipvlan1: entered allmulticast mode [ 317.041145][ T9726] veth0_vlan: entered allmulticast mode [ 317.057355][ T9726] bridge0: port 4(ipvlan1) entered blocking state [ 317.074354][ T9726] bridge0: port 4(ipvlan1) entered disabled state [ 317.099994][ T9726] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 317.122087][ T9725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1114'. [ 317.136446][ T9725] bridge0: port 4(ipvlan1) entered blocking state [ 317.150869][ T9725] bridge0: port 4(ipvlan1) entered disabled state [ 317.161224][ T9725] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 317.185970][ T9723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1113'. [ 317.203252][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1115'. [ 317.214375][ T9731] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1116'. [ 317.426407][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432889][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.045560][ T9742] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1119'. [ 318.054723][ T9742] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1119'. [ 318.641181][ T9757] IPv6: pim6reg1: Disabled Multicast RS [ 319.089030][ T5777] Bluetooth: hci2: ACL packet for unknown connection handle 237 [ 319.629764][ T9773] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1127'. [ 319.887275][ T9787] validate_nla: 5 callbacks suppressed [ 319.887291][ T9787] netlink: 'syz.0.1131': attribute type 2 has an invalid length. [ 319.955303][ T9787] netlink: 'syz.0.1131': attribute type 8 has an invalid length. [ 320.011728][ T9787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1131'. [ 320.506907][ T9805] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1137'. [ 321.031646][ T9824] netlink: 'syz.3.1144': attribute type 2 has an invalid length. [ 321.060240][ T9824] netlink: 'syz.3.1144': attribute type 8 has an invalid length. [ 322.219189][ T9859] tun0: tun_chr_ioctl cmd 1074025678 [ 322.224768][ T9859] tun0: group set to 0 [ 322.290806][ T9857] netlink: 'syz.2.1154': attribute type 29 has an invalid length. [ 322.324210][ T9857] netlink: 'syz.2.1154': attribute type 29 has an invalid length. [ 322.369488][ T9857] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 322.396298][ T9857] __nla_validate_parse: 3 callbacks suppressed [ 322.396361][ T9857] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1154'. [ 322.431348][ T9857] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 322.460772][ T9863] netlink: 'syz.0.1153': attribute type 22 has an invalid length. [ 322.479050][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 322.530239][ T9861] netlink: 'syz.1.1155': attribute type 8 has an invalid length. [ 322.549885][ T9861] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.1155'. [ 322.866216][ T9874] netlink: 'syz.3.1157': attribute type 2 has an invalid length. [ 322.880400][ T9874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1157'. [ 323.599166][ T9889] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1161'. [ 324.239152][ T9906] ÿ: renamed from bond_slave_0 (while UP) [ 324.377539][ T5777] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 324.602379][ T9911] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1169'. [ 324.776530][ T9916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1170'. [ 325.963486][ T9933] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1175'. [ 326.081231][ T9937] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1176'. [ 326.572513][ T9950] validate_nla: 4 callbacks suppressed [ 326.572568][ T9950] netlink: 'syz.1.1182': attribute type 10 has an invalid length. [ 326.600440][ T9950] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1182'. [ 326.621918][ T9950] bond0: entered promiscuous mode [ 326.643880][ T9950] ÿ: entered promiscuous mode [ 326.673398][ T9950] bond_slave_1: entered promiscuous mode [ 326.694642][ T9950] team0: entered promiscuous mode [ 326.710172][ T9950] team_slave_0: entered promiscuous mode [ 326.720425][ T9950] team_slave_1: entered promiscuous mode [ 326.732320][ T9950] geneve1: entered promiscuous mode [ 326.756248][ T9950] bridge0: port 3(bond0) entered blocking state [ 326.776419][ T9950] bridge0: port 3(bond0) entered disabled state [ 326.802684][ T9950] bond0: entered allmulticast mode [ 326.812368][ T9950] ÿ: entered allmulticast mode [ 326.819033][ T9950] bond_slave_1: entered allmulticast mode [ 326.826456][ T9950] team0: entered allmulticast mode [ 326.832356][ T9950] team_slave_0: entered allmulticast mode [ 326.839797][ T9950] team_slave_1: entered allmulticast mode [ 326.848453][ T9950] geneve1: entered allmulticast mode [ 326.921952][ T9950] bridge0: port 3(bond0) entered blocking state [ 326.931303][ T9950] bridge0: port 3(bond0) entered forwarding state [ 326.946159][ T9958] netlink: 'syz.0.1183': attribute type 2 has an invalid length. [ 326.978453][ T9958] netlink: 'syz.0.1183': attribute type 8 has an invalid length. [ 327.313762][ T9973] netlink: 'syz.0.1189': attribute type 8 has an invalid length. [ 328.304352][ T9994] netlink: 'syz.0.1193': attribute type 21 has an invalid length. [ 328.319748][ T9991] __nla_validate_parse: 3 callbacks suppressed [ 328.319769][ T9991] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1192'. [ 328.357503][ T9991] netlink: zone id is out of range [ 328.362727][ T9991] netlink: zone id is out of range [ 328.413419][ T9991] netlink: zone id is out of range [ 328.430985][ T9991] netlink: zone id is out of range [ 328.445260][ T9991] netlink: zone id is out of range [ 328.457725][ T9991] netlink: zone id is out of range [ 328.472389][ T9991] netlink: zone id is out of range [ 328.488493][ T9991] netlink: zone id is out of range [ 328.504539][ T9991] netlink: zone id is out of range [ 328.522413][ T9991] netlink: zone id is out of range [ 328.942839][T10002] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.1195'. [ 329.064688][T10006] netlink: 'syz.1.1197': attribute type 2 has an invalid length. [ 329.086900][T10006] netlink: 'syz.1.1197': attribute type 8 has an invalid length. [ 329.107981][T10006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1197'. [ 329.338016][T10008] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1196'. [ 330.808344][T10050] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1209'. [ 331.027515][T10054] netlink: 'syz.3.1210': attribute type 2 has an invalid length. [ 331.045197][T10054] netlink: 'syz.3.1210': attribute type 8 has an invalid length. [ 331.075393][T10054] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'. [ 332.104811][T10067] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1214'. [ 333.040662][T10082] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1218'. [ 333.235952][T10091] netlink: 'syz.0.1221': attribute type 2 has an invalid length. [ 333.265352][T10091] netlink: 'syz.0.1221': attribute type 8 has an invalid length. [ 333.276462][T10091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1221'. [ 333.992028][T10102] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1224'. [ 334.404164][T10118] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1229'. [ 334.677034][T10123] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1231'. [ 334.707476][T10124] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1231'. [ 335.128980][ T5777] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 335.237552][T10132] netlink: 'syz.3.1234': attribute type 2 has an invalid length. [ 335.253553][T10132] netlink: 'syz.3.1234': attribute type 8 has an invalid length. [ 335.263796][T10132] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1234'. [ 335.602880][T10138] net_ratelimit: 42 callbacks suppressed [ 335.602926][T10138] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 336.334991][T10157] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1241'. [ 336.655552][T10151] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 336.771730][T10151] wg1: entered promiscuous mode [ 336.777508][T10151] wg1: entered allmulticast mode [ 336.782530][T10151] team0: Device wg1 is of different type [ 336.918029][T10166] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 336.960919][T10166] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1244'. [ 337.118498][T10172] netlink: 'syz.2.1246': attribute type 6 has an invalid length. [ 337.136491][T10172] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1246'. [ 337.164267][T10177] netlink: 'syz.1.1247': attribute type 2 has an invalid length. [ 337.172163][T10177] netlink: 'syz.1.1247': attribute type 8 has an invalid length. [ 337.187975][T10177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1247'. [ 337.793056][T10197] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1254'. [ 337.900864][T10200] netlink: 'syz.2.1255': attribute type 2 has an invalid length. [ 338.362326][T10213] validate_nla: 1 callbacks suppressed [ 338.362343][T10213] netlink: 'syz.2.1258': attribute type 2 has an invalid length. [ 338.402022][T10213] netlink: 'syz.2.1258': attribute type 8 has an invalid length. [ 338.941139][T10225] netlink: 'syz.3.1262': attribute type 8 has an invalid length. [ 338.962861][T10225] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 339.422903][T10232] __nla_validate_parse: 3 callbacks suppressed [ 339.422987][T10232] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1265'. [ 339.648961][T10238] netlink: 'syz.3.1266': attribute type 29 has an invalid length. [ 339.660437][T10238] netlink: 'syz.3.1266': attribute type 29 has an invalid length. [ 339.721907][T10238] netlink: 'syz.3.1266': attribute type 29 has an invalid length. [ 341.105394][T10259] syzkaller0: entered promiscuous mode [ 341.111143][T10259] syzkaller0: entered allmulticast mode [ 341.130032][T10260] netlink: 'syz.1.1271': attribute type 2 has an invalid length. [ 341.223032][T10260] netlink: 'syz.1.1271': attribute type 8 has an invalid length. [ 341.252135][T10260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1271'. [ 341.408036][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 341.532142][T10267] syz.0.1274[10267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.532461][T10267] syz.0.1274[10267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.319566][T10267] netlink: 'syz.0.1274': attribute type 13 has an invalid length. [ 343.348989][T10267] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1274'. [ 343.360779][T10267] erspan0: refused to change device tx_queue_len [ 343.520463][ T59] tipc: Subscription rejected, illegal request [ 343.583906][T10274] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1277'. [ 343.734159][T10285] netlink: 'syz.3.1281': attribute type 21 has an invalid length. [ 343.745127][T10285] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1281'. [ 343.773608][T10285] netlink: 'syz.3.1281': attribute type 21 has an invalid length. [ 343.816182][T10285] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1281'. [ 344.549022][T10298] netlink: 'syz.1.1285': attribute type 2 has an invalid length. [ 344.565229][T10298] netlink: 'syz.1.1285': attribute type 8 has an invalid length. [ 344.584796][T10298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1285'. [ 344.787714][T10309] syz.2.1287[10309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.787940][T10309] syz.2.1287[10309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.963269][T10313] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1289'. [ 344.981013][T10314] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1290'. [ 344.995729][T10315] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1290'. [ 345.519398][T10327] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1293'. [ 345.791785][T10335] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 345.909151][T10331] tap1: tun_chr_ioctl cmd 1074025677 [ 345.919434][T10331] tap1: linktype set to 778 [ 345.979904][T10331] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 345.999442][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 346.017364][T10341] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 346.025335][T10341] netlink: 'syz.2.1298': attribute type 8 has an invalid length. [ 346.034173][T10341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1298'. [ 346.048340][T10331] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 346.067974][T10331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 346.240832][T10348] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1300'. [ 346.303958][T10350] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1301'. [ 347.229715][T10370] netlink: 'syz.3.1309': attribute type 2 has an invalid length. [ 347.269340][T10370] netlink: 'syz.3.1309': attribute type 8 has an invalid length. [ 348.260215][T10402] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 348.327868][T10402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.589406][T10440] validate_nla: 7 callbacks suppressed [ 349.589425][T10440] netlink: 'syz.1.1332': attribute type 33 has an invalid length. [ 349.606151][T10440] __nla_validate_parse: 10 callbacks suppressed [ 349.606166][T10440] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1332'. [ 349.642472][T10444] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1334'. [ 349.663233][T10442] netlink: 'syz.3.1333': attribute type 10 has an invalid length. [ 349.758526][T10442] netlink: 'syz.3.1333': attribute type 9 has an invalid length. [ 349.787373][T10442] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1333'. [ 350.183094][T10451] netlink: 'syz.2.1335': attribute type 2 has an invalid length. [ 350.235177][T10451] netlink: 'syz.2.1335': attribute type 8 has an invalid length. [ 350.255181][T10451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1335'. [ 350.292269][T10454] sit0: left promiscuous mode [ 350.460503][T10459] sit0: entered promiscuous mode [ 351.002583][T10449] netlink: 'syz.3.1333': attribute type 9 has an invalid length. [ 351.006435][T10474] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1340'. [ 351.021696][T10449] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1333'. [ 351.189235][T10467] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1339'. [ 351.519582][T10488] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 351.576538][T10488] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1345'. [ 351.628623][T10492] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1345'. [ 351.700072][T10488] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.1345'. [ 351.787393][T10483] netlink: 'syz.0.1343': attribute type 21 has an invalid length. [ 351.808527][T10483] netlink: 'syz.0.1343': attribute type 6 has an invalid length. [ 352.413350][T10507] netlink: 'syz.3.1349': attribute type 2 has an invalid length. [ 354.114687][T10556] delete_channel: no stack [ 355.140355][T10564] __nla_validate_parse: 5 callbacks suppressed [ 355.140415][T10564] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1370'. [ 355.857132][T10579] validate_nla: 8 callbacks suppressed [ 355.857149][T10579] netlink: 'syz.3.1373': attribute type 2 has an invalid length. [ 355.873351][T10578] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1374'. [ 355.877465][T10581] netlink: 'syz.0.1375': attribute type 3 has an invalid length. [ 355.898557][T10581] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1375'. [ 355.901433][T10579] netlink: 'syz.3.1373': attribute type 8 has an invalid length. [ 355.966823][T10579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1373'. [ 357.502924][T10599] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1380'. [ 358.307738][T10620] netlink: 'syz.1.1387': attribute type 2 has an invalid length. [ 358.322080][T10620] netlink: 'syz.1.1387': attribute type 8 has an invalid length. [ 358.332274][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1387'. [ 358.359347][ T5777] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 358.502896][T10624] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1391'. [ 358.867732][T10637] netlink: 'syz.2.1392': attribute type 30 has an invalid length. [ 359.027456][T10646] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1396'. [ 360.054205][T10661] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1401'. [ 360.120606][T10663] netlink: 'syz.2.1402': attribute type 2 has an invalid length. [ 360.160592][T10663] netlink: 'syz.2.1402': attribute type 8 has an invalid length. [ 360.197857][T10663] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1402'. [ 360.498474][T10672] netlink: 'syz.0.1406': attribute type 16 has an invalid length. [ 360.517185][T10672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1406'. [ 360.547248][T10672] veth1_macvtap: entered allmulticast mode [ 360.738155][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1408'. [ 361.067330][T10687] netlink: 'syz.3.1409': attribute type 33 has an invalid length. [ 361.245121][T10687] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1409'. [ 363.714475][T10697] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1413'. [ 363.801837][T10700] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.822035][T10700] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1414'. [ 363.918767][T10703] netlink: 'syz.1.1415': attribute type 2 has an invalid length. [ 363.933213][T10703] netlink: 'syz.1.1415': attribute type 8 has an invalid length. [ 363.951764][T10703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1415'. [ 363.978105][T10705] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 364.057153][T10705] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1416'. [ 364.470056][T10722] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1423'. [ 364.535397][T10721] netlink: 'syz.0.1422': attribute type 2 has an invalid length. [ 364.563873][T10726] netlink: 'syz.0.1422': attribute type 2 has an invalid length. [ 364.600653][T10728] netlink: 'syz.1.1425': attribute type 3 has an invalid length. [ 364.608815][T10728] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1425'. [ 364.937243][T10736] sctp: [Deprecated]: syz.0.1427 (pid 10736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.937243][T10736] Use struct sctp_sack_info instead [ 364.981862][T10736] bond_slave_1: entered promiscuous mode [ 364.996806][T10736] bond_slave_1: entered allmulticast mode [ 365.442769][T10747] netlink: 'syz.2.1431': attribute type 2 has an invalid length. [ 365.457191][T10747] netlink: 'syz.2.1431': attribute type 8 has an invalid length. [ 365.468749][T10747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1431'. [ 365.782329][T10752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1433'. [ 365.792269][T10752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1433'. [ 365.803492][T10752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1433'. [ 365.842965][T10755] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1434'. [ 366.363303][T10779] netlink: 'syz.2.1441': attribute type 2 has an invalid length. [ 366.371368][T10779] netlink: 'syz.2.1441': attribute type 8 has an invalid length. [ 366.403331][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1441'. [ 367.284210][T10788] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1444'. [ 367.528076][T10795] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1446'. [ 367.842126][T10800] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 367.850250][T10800] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1447'. [ 368.199872][T10814] syzkaller0: entered promiscuous mode [ 368.208716][T10814] syzkaller0: entered allmulticast mode [ 370.674216][T10824] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1454'. [ 370.683862][T10827] netlink: 'syz.0.1455': attribute type 2 has an invalid length. [ 370.710137][T10827] netlink: 'syz.0.1455': attribute type 8 has an invalid length. [ 370.735092][T10827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1455'. [ 370.961558][T10837] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1459'. [ 371.175821][ T1093] wlan1: Trigger new scan to find an IBSS to join [ 372.184065][T10900] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1467'. [ 372.772339][T10926] netlink: 'syz.0.1468': attribute type 2 has an invalid length. [ 372.825372][T10926] netlink: 'syz.0.1468': attribute type 8 has an invalid length. [ 372.850634][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1468'. [ 372.870864][T10930] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1470'. [ 373.036261][T10927] netlink: 'syz.2.1469': attribute type 21 has an invalid length. [ 373.120468][T10927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1469'. [ 373.213373][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'. [ 373.662794][T10945] netlink: 'syz.1.1475': attribute type 29 has an invalid length. [ 373.685550][T10945] netlink: 'syz.1.1475': attribute type 29 has an invalid length. [ 374.020378][T10952] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1477'. [ 374.083426][T10954] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 374.914339][T10969] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1480'. [ 375.179513][T10904] wlan1: Trigger new scan to find an IBSS to join [ 375.785551][T10986] __nla_validate_parse: 2 callbacks suppressed [ 375.785613][T10986] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1486'. [ 375.837421][T10987] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1487'. [ 375.925628][T10989] netlink: 'syz.2.1489': attribute type 10 has an invalid length. [ 376.049525][T10989] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.148819][T10989] bond0: (slave team0): Enslaving as an active interface with an up link [ 376.178927][T10892] wlan1: Creating new IBSS network, BSSID 4a:40:da:9c:85:06 [ 377.475495][T11024] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1496'. [ 377.799475][T11030] netlink: 'syz.3.1498': attribute type 21 has an invalid length. [ 377.888015][T11032] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1500'. [ 378.142374][T11034] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1499'. [ 378.393147][T11041] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1501'. [ 378.664455][T11049] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 378.705998][T11049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.834325][T11052] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1504'. [ 378.892922][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.899478][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.164320][T11060] netlink: 'syz.0.1509': attribute type 2 has an invalid length. [ 379.182905][T11060] netlink: 'syz.0.1509': attribute type 8 has an invalid length. [ 379.208471][T11060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1509'. [ 380.806450][T11088] netlink: 'syz.0.1518': attribute type 153 has an invalid length. [ 380.853886][T11088] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1518'. [ 380.947888][T11091] netlink: 'syz.3.1519': attribute type 9 has an invalid length. [ 381.012761][T11093] netlink: 'syz.1.1520': attribute type 2 has an invalid length. [ 381.026643][T11091] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1519'. [ 381.059827][T11093] netlink: 'syz.1.1520': attribute type 8 has an invalid length. [ 381.071498][T11093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1520'. [ 383.067961][T11133] netlink: 'syz.0.1531': attribute type 2 has an invalid length. [ 383.104379][T11133] netlink: 'syz.0.1531': attribute type 8 has an invalid length. [ 383.144405][T11133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1531'. [ 383.425751][T11139] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'. [ 383.480733][T11139] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'. [ 383.517238][T11141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1533'. [ 385.106086][T11172] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.1542'. [ 385.146408][T11174] netlink: 'syz.1.1543': attribute type 2 has an invalid length. [ 385.154220][T11174] netlink: 'syz.1.1543': attribute type 8 has an invalid length. [ 385.226477][T11174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1543'. [ 385.387084][T11178] netlink: 'syz.2.1544': attribute type 49 has an invalid length. [ 385.476914][T11166] netlink: 'syz.3.1540': attribute type 2 has an invalid length. [ 385.485131][T11166] netlink: 'syz.3.1540': attribute type 8 has an invalid length. [ 385.493262][T11166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1540'. [ 385.535973][T11166] netlink: 'syz.3.1540': attribute type 11 has an invalid length. [ 386.087882][T11200] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1550'. [ 386.800147][T11210] syzkaller0: create flow: hash 742128821 index 0 [ 386.809198][T11205] syzkaller0: entered promiscuous mode [ 386.823372][T11205] syzkaller0: entered allmulticast mode [ 388.014245][T11214] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 388.023333][T11214] netlink: 'syz.1.1554': attribute type 8 has an invalid length. [ 388.031744][T11214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1554'. [ 390.135019][ C0] syzkaller0 (unregistering): delete flow: hash 742128821 index 0 [ 391.667286][T10904] tipc: Subscription rejected, illegal request [ 393.502118][T11243] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1562'. [ 393.661294][T11246] netlink: 'syz.1.1565': attribute type 2 has an invalid length. [ 393.683969][T11246] netlink: 'syz.1.1565': attribute type 8 has an invalid length. [ 393.694157][T11246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1565'. [ 394.149252][T11257] netlink: 'syz.1.1569': attribute type 6 has an invalid length. [ 394.185261][T11257] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1569'. [ 394.279274][T11262] netlink: 'syz.0.1571': attribute type 9 has an invalid length. [ 394.318471][T11262] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1571'. [ 394.741171][T11267] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 394.790906][T11269] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1573'. [ 394.825295][T11269] openvswitch: netlink: Flow key attribute not present in set flow. [ 395.096273][T11273] netlink: 'syz.0.1575': attribute type 2 has an invalid length. [ 395.104219][T11273] netlink: 'syz.0.1575': attribute type 8 has an invalid length. [ 395.158915][T11273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1575'. [ 395.228450][T11275] netlink: 'syz.1.1576': attribute type 21 has an invalid length. [ 395.279745][T11275] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.326924][T11275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.334344][T11275] IPv6: NLM_F_CREATE should be set when creating new route [ 395.341833][T11275] IPv6: NLM_F_CREATE should be set when creating new route [ 395.349169][T11275] IPv6: NLM_F_CREATE should be set when creating new route [ 396.509698][T11304] netlink: 'syz.3.1586': attribute type 2 has an invalid length. [ 396.532951][T11304] netlink: 'syz.3.1586': attribute type 8 has an invalid length. [ 396.561196][T11304] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1586'. [ 396.711429][T11309] netlink: 'syz.0.1585': attribute type 9 has an invalid length. [ 396.767622][T11309] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1585'. [ 397.504556][T11312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1588'. [ 397.539225][T11312] openvswitch: netlink: Key type 29 is not supported [ 397.626983][T11315] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1588'. [ 397.762189][T11314] syzkaller0: entered promiscuous mode [ 397.790834][T11314] syzkaller0: entered allmulticast mode [ 397.893668][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.923038][T11315] bridge_slave_1: left allmulticast mode [ 397.935056][T11315] bridge_slave_1: left promiscuous mode [ 397.942863][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.982172][T11315] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 399.126915][T11336] netlink: 'syz.0.1601': attribute type 11 has an invalid length. [ 399.134832][T11336] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1601'. [ 400.581423][T11336] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 400.612800][T11343] validate_nla: 2 callbacks suppressed [ 400.612818][T11343] netlink: 'syz.3.1596': attribute type 2 has an invalid length. [ 400.652974][T11343] netlink: 'syz.3.1596': attribute type 8 has an invalid length. [ 400.675428][T11343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1596'. [ 400.972699][T11354] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1600'. [ 401.020202][T11364] netlink: 'syz.3.1602': attribute type 1 has an invalid length. [ 401.028130][T11364] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1602'. [ 401.040508][T11364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1602'. [ 401.198911][T11369] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 401.225262][T11369] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 401.239490][T11373] netlink: 'syz.0.1605': attribute type 29 has an invalid length. [ 401.329698][T11373] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1605'. [ 402.221808][T11391] netlink: 'syz.1.1611': attribute type 2 has an invalid length. [ 402.265209][T11391] netlink: 'syz.1.1611': attribute type 8 has an invalid length. [ 402.273150][T11391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1611'. [ 402.693539][T11401] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1614'. [ 402.721013][T11401] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1614'. [ 402.733698][T11401] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1614'. [ 402.968933][T11414] netlink: 'syz.2.1617': attribute type 21 has an invalid length. [ 403.344366][T11427] netlink: 'syz.2.1622': attribute type 2 has an invalid length. [ 404.758352][T11470] __nla_validate_parse: 10 callbacks suppressed [ 404.758371][T11470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1635'. [ 405.095845][T11479] FAULT_INJECTION: forcing a failure. [ 405.095845][T11479] name failslab, interval 1, probability 0, space 0, times 1 [ 405.128893][T11479] CPU: 0 PID: 11479 Comm: syz.3.1636 Not tainted syzkaller #0 [ 405.136475][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.146606][T11479] Call Trace: [ 405.149950][T11479] [ 405.152937][T11479] dump_stack_lvl+0x18c/0x250 [ 405.158126][T11479] ? show_regs_print_info+0x20/0x20 [ 405.163398][T11479] ? load_image+0x420/0x420 [ 405.167956][T11479] ? perf_trace_lock+0xfc/0x3b0 [ 405.171650][T11474] team0: Device wg1 is of different type [ 405.172843][T11479] ? __might_fault+0xc6/0x120 [ 405.172879][T11479] should_fail_ex+0x39d/0x4d0 [ 405.172920][T11479] should_failslab+0x9/0x20 [ 405.172952][T11479] slab_pre_alloc_hook+0x59/0x310 [ 405.172992][T11479] kmem_cache_alloc+0x5a/0x2d0 [ 405.202581][T11479] ? build_skb+0x29/0x250 [ 405.206989][T11479] build_skb+0x29/0x250 [ 405.211199][T11479] __tun_build_skb+0x36/0x320 [ 405.215947][T11479] tun_get_user+0x1bf7/0x3ca0 [ 405.220678][T11479] ? tun_get_user+0x662/0x3ca0 [ 405.225515][T11479] ? rcu_read_unlock+0xa0/0xa0 [ 405.230364][T11479] ? tun_get+0x1c/0x2e0 [ 405.234583][T11479] ? __lock_acquire+0x7d40/0x7d40 [ 405.239693][T11479] ? tun_get+0x1c/0x2e0 [ 405.243900][T11479] tun_chr_write_iter+0x119/0x200 [ 405.248966][T11479] vfs_write+0x46c/0x990 [ 405.253257][T11479] ? file_end_write+0x250/0x250 [ 405.258151][T11479] ? __fget_files+0x43d/0x4b0 [ 405.262869][T11479] ? __fdget_pos+0x1d8/0x330 [ 405.267497][T11479] ? ksys_write+0x75/0x260 [ 405.271959][T11479] ksys_write+0x150/0x260 [ 405.276329][T11479] ? __ia32_sys_read+0x90/0x90 [ 405.281142][T11479] ? lockdep_hardirqs_on+0x98/0x150 [ 405.286384][T11479] do_syscall_64+0x55/0xa0 [ 405.290836][T11479] ? clear_bhb_loop+0x40/0x90 [ 405.295555][T11479] ? clear_bhb_loop+0x40/0x90 [ 405.300270][T11479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.306196][T11479] RIP: 0033:0x7f08e359cdd9 [ 405.310647][T11479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.330297][T11479] RSP: 002b:00007f08e4425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.338832][T11479] RAX: ffffffffffffffda RBX: 00007f08e3816090 RCX: 00007f08e359cdd9 [ 405.346859][T11479] RDX: 0000000000000015 RSI: 0000200000000000 RDI: 00000000000000c8 [ 405.354862][T11479] RBP: 00007f08e4425090 R08: 0000000000000000 R09: 0000000000000000 [ 405.362865][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.370862][T11479] R13: 00007f08e3816128 R14: 00007f08e3816090 R15: 00007fff512116c8 [ 405.378891][T11479] [ 405.618574][T11474] syz.2.1637 (11474) used greatest stack depth: 17640 bytes left [ 405.903619][T11489] syzkaller0: entered promiscuous mode [ 405.940584][T11489] syzkaller0: entered allmulticast mode [ 406.226106][T10892] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.771535][T11518] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1646'. [ 409.187628][T11532] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.246035][T11533] validate_nla: 8 callbacks suppressed [ 409.246052][T11533] netlink: 'syz.3.1653': attribute type 2 has an invalid length. [ 409.275104][T11533] netlink: 'syz.3.1653': attribute type 8 has an invalid length. [ 409.283765][T11533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1653'. [ 410.248076][T11550] netlink: 'syz.3.1658': attribute type 25 has an invalid length. [ 410.443917][T11562] netlink: 'syz.3.1662': attribute type 21 has an invalid length. [ 410.600416][T11560] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1661'. [ 411.147294][T11579] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1665'. [ 411.286677][T11579] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.1665'. [ 411.884134][T11598] netlink: 208092 bytes leftover after parsing attributes in process `syz.2.1670'. [ 411.927429][T11598] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 411.956717][T11598] netlink: 'syz.2.1670': attribute type 2 has an invalid length. [ 411.985686][T11598] netlink: 'syz.2.1670': attribute type 3 has an invalid length. [ 411.993537][T11598] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 412.490117][T11605] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 412.501336][T11605] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 413.229730][T11615] wg2: entered allmulticast mode [ 413.930473][T11624] netlink: 'syz.3.1677': attribute type 2 has an invalid length. [ 413.940858][T11624] netlink: 'syz.3.1677': attribute type 8 has an invalid length. [ 413.949248][T11624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1677'. [ 415.988201][T11666] netlink: 'syz.0.1686': attribute type 1 has an invalid length. [ 416.092738][T11654] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 416.103586][T11654] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 416.307452][T11664] netlink: 'syz.0.1686': attribute type 21 has an invalid length. [ 416.322662][T11667] netlink: 'syz.1.1687': attribute type 10 has an invalid length. [ 416.351947][T11667] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1687'. [ 416.788101][T11676] netlink: 'syz.0.1689': attribute type 2 has an invalid length. [ 416.836836][T11676] netlink: 'syz.0.1689': attribute type 8 has an invalid length. [ 416.853752][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1689'. [ 418.069824][T11701] netlink: 'syz.1.1696': attribute type 10 has an invalid length. [ 418.089955][T11701] bridge0: port 3(bond0) entered disabled state [ 418.098333][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.107592][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.219208][T11701] bridge0: port 3(bond0) entered blocking state [ 418.226558][T11701] bridge0: port 3(bond0) entered forwarding state [ 418.235767][T11701] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.243429][T11701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.252351][T11701] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.260798][T11701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.282306][T11701] bridge0: port 3(bond0) entered disabled state [ 418.289404][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.297499][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.676702][T11706] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 418.725955][T11706] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1705'. [ 419.104814][T11713] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 419.120185][T11713] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 419.600188][T11719] netlink: 'syz.0.1700': attribute type 21 has an invalid length. [ 419.614554][T11719] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1700'. [ 419.687342][T11721] netlink: 'syz.0.1700': attribute type 10 has an invalid length. [ 419.735532][T11721] team0: Device ipvlan1 failed to register rx_handler [ 420.453690][T11718] macvlan1: left promiscuous mode [ 420.493099][T11718] macvlan1: entered allmulticast mode [ 420.540849][T11718] veth1_vlan: entered allmulticast mode [ 420.622547][T11729] netlink: 'syz.1.1701': attribute type 2 has an invalid length. [ 420.682969][T11729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1701'. [ 420.814501][T11740] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1706'. [ 421.108975][T11747] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1709'. [ 421.140408][T11750] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1710'. [ 421.358901][T11759] netlink: 3890 bytes leftover after parsing attributes in process `syz.1.1712'. [ 421.375939][T11758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1713'. [ 421.402563][T11758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1713'. [ 421.412678][T11761] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1713'. [ 421.434380][T11758] validate_nla: 2 callbacks suppressed [ 421.434400][T11758] netlink: 'syz.3.1713': attribute type 21 has an invalid length. [ 421.459669][T11758] netlink: 'syz.3.1713': attribute type 6 has an invalid length. [ 421.478359][T11758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1713'. [ 421.642894][T11766] netlink: 'syz.1.1716': attribute type 2 has an invalid length. [ 421.666704][T11766] netlink: 'syz.1.1716': attribute type 8 has an invalid length. [ 421.685342][T11766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1716'. [ 421.732031][T11773] netlink: 'syz.3.1717': attribute type 10 has an invalid length. [ 421.761271][T11773] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1717'. [ 421.775316][T11773] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 422.278366][T11773] batman_adv: batadv0: Removing interface: veth0_vlan [ 422.329945][T11773] veth1_vlan (unregistering): left allmulticast mode [ 422.472768][T11776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1718'. [ 422.490657][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1718'. [ 422.647069][T11789] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1721'. [ 423.008840][T11802] netlink: 'syz.2.1726': attribute type 5 has an invalid length. [ 423.140923][T11808] netlink: 'syz.2.1728': attribute type 2 has an invalid length. [ 423.150776][T11808] netlink: 'syz.2.1728': attribute type 8 has an invalid length. [ 424.486699][T11838] netlink: 'syz.1.1739': attribute type 2 has an invalid length. [ 424.515258][T11838] netlink: 'syz.1.1739': attribute type 8 has an invalid length. [ 426.894323][T11898] validate_nla: 4 callbacks suppressed [ 426.894343][T11898] netlink: 'syz.2.1757': attribute type 10 has an invalid length. [ 426.942433][T11898] __nla_validate_parse: 12 callbacks suppressed [ 426.942454][T11898] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1757'. [ 426.989351][T11893] netlink: 'syz.0.1755': attribute type 21 has an invalid length. [ 427.018846][T11893] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1755'. [ 427.036874][T11896] delete_channel: no stack [ 427.046057][T11893] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1755'. [ 427.717419][T11915] netlink: 'syz.2.1762': attribute type 3 has an invalid length. [ 427.725994][T11915] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1762'. [ 428.506402][T11942] netlink: 'syz.2.1770': attribute type 12 has an invalid length. [ 428.538722][T11942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1770'. [ 429.511789][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 429.775236][T11967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.916376][T11982] netlink: 'syz.2.1780': attribute type 21 has an invalid length. [ 430.209206][T11988] netlink: 'syz.3.1783': attribute type 10 has an invalid length. [ 430.221567][T11988] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1783'. [ 430.239610][T11988] bond0: entered promiscuous mode [ 430.247542][T11988] bond_slave_0: entered promiscuous mode [ 430.256623][T11988] bond_slave_1: entered promiscuous mode [ 430.264251][T11988] bridge_slave_1: entered promiscuous mode [ 430.275326][T11988] bridge0: port 2(bond0) entered blocking state [ 430.282948][T11988] bridge0: port 2(bond0) entered disabled state [ 430.292823][T11988] bond0: entered allmulticast mode [ 430.359856][T11988] bond_slave_0: entered allmulticast mode [ 430.387642][T11988] bond_slave_1: entered allmulticast mode [ 430.398661][T11988] bridge_slave_1: entered allmulticast mode [ 430.416518][T11988] bridge0: port 2(bond0) entered blocking state [ 430.423438][T11988] bridge0: port 2(bond0) entered listening state [ 430.638378][T11997] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1786'. [ 430.666239][T11999] netlink: 'syz.1.1786': attribute type 10 has an invalid length. [ 430.891746][T12006] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1787'. [ 430.918805][T12001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.919455][T12006] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 431.326765][T12020] netlink: 'syz.2.1791': attribute type 10 has an invalid length. [ 431.353516][T12020] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1791'. [ 432.457992][T12052] netlink: 'syz.3.1802': attribute type 39 has an invalid length. [ 433.265672][T12069] netlink: 'syz.3.1807': attribute type 13 has an invalid length. [ 433.273606][T12069] __nla_validate_parse: 3 callbacks suppressed [ 433.273620][T12069] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1807'. [ 433.300171][T12069] erspan0: refused to change device tx_queue_len [ 433.342089][T12069] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 433.916386][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 434.065980][T12078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.366607][T12096] netlink: 'syz.2.1814': attribute type 2 has an invalid length. [ 434.387310][T12096] netlink: 'syz.2.1814': attribute type 1 has an invalid length. [ 434.426454][T12096] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1814'. [ 435.116036][T12118] netlink: 'syz.2.1820': attribute type 10 has an invalid length. [ 435.124587][T12118] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1820'. [ 435.137078][T12118] bond0: entered promiscuous mode [ 435.144336][T12118] bond_slave_0: entered promiscuous mode [ 435.152598][T12118] bond_slave_1: entered promiscuous mode [ 435.162026][T12118] team0: entered promiscuous mode [ 435.168102][T12118] C: entered promiscuous mode [ 435.174883][T12118] team_slave_1: entered promiscuous mode [ 435.194410][T12118] bridge0: port 3(bond0) entered blocking state [ 435.202621][T12118] bridge0: port 3(bond0) entered disabled state [ 435.210061][T12118] bond0: entered allmulticast mode [ 435.215622][T12118] bond_slave_0: entered allmulticast mode [ 435.221956][T12118] bond_slave_1: entered allmulticast mode [ 435.228697][T12118] geneve0: entered allmulticast mode [ 435.234405][T12118] team0: entered allmulticast mode [ 435.243678][T12118] C: entered allmulticast mode [ 435.252678][T12118] team_slave_1: entered allmulticast mode [ 435.287738][T12118] bridge0: port 3(bond0) entered blocking state [ 435.295048][T12118] bridge0: port 3(bond0) entered forwarding state [ 436.002102][T12147] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 436.070139][T12147] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 436.108968][T12150] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 436.178002][T12148] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 436.228160][T12147] netlink: 'syz.2.1825': attribute type 29 has an invalid length. [ 436.791434][T12173] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1834'. [ 437.026348][T12173] erspan0: refused to change device tx_queue_len [ 437.117657][T12173] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 438.903337][T12225] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1847'. [ 438.937136][T12225] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1847'. [ 438.962822][T12225] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1847'. [ 439.264149][T12233] validate_nla: 1 callbacks suppressed [ 439.264170][T12233] netlink: 'syz.0.1849': attribute type 2 has an invalid length. [ 439.309602][T12233] netlink: 'syz.0.1849': attribute type 8 has an invalid length. [ 439.349308][T12233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1849'. [ 440.447588][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.454084][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.573605][T12244] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1853'. [ 440.874603][T12259] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1856'. [ 441.510734][T12270] netlink: 'syz.2.1861': attribute type 2 has an invalid length. [ 441.585208][T12270] netlink: 'syz.2.1861': attribute type 8 has an invalid length. [ 441.625258][T12270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1861'. [ 442.206294][T12287] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1864'. [ 442.228600][T10892] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 442.230019][T12287] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1864'. [ 442.301501][T12288] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1864'. [ 443.077626][T12312] netlink: 'syz.2.1871': attribute type 2 has an invalid length. [ 443.117398][T12312] netlink: 'syz.2.1871': attribute type 8 has an invalid length. [ 459.097423][ C0] bridge0: port 2(bond0) entered learning state [ 461.388608][ T5777] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 462.006355][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 462.016479][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 462.024609][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 462.034691][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 462.042671][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 462.050246][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 462.924474][ T5081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.934860][ T5081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.943220][ T5081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.952050][ T5081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.960801][ T5081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 462.968332][ T5081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.980419][ T5779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 463.006516][ T5081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 463.015249][ T5081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 463.025359][ T5081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 463.043827][ T5081] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 463.053238][ T5081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 463.446948][ T5771] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 463.465154][ T5771] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 463.480014][ T5771] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 463.494422][ T5771] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 463.505315][ T5771] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 463.512790][ T5771] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 463.788929][T12326] chnl_net:caif_netlink_parms(): no params data found [ 464.061204][T12332] chnl_net:caif_netlink_parms(): no params data found [ 464.152062][ T5771] Bluetooth: hci4: command tx timeout [ 464.224889][T12337] chnl_net:caif_netlink_parms(): no params data found [ 464.287925][T12326] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.303789][T12326] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.312101][T12326] bridge_slave_0: entered allmulticast mode [ 464.326759][T12326] bridge_slave_0: entered promiscuous mode [ 464.369102][T12326] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.383992][T12326] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.391964][T12326] bridge_slave_1: entered allmulticast mode [ 464.410248][T12326] bridge_slave_1: entered promiscuous mode [ 464.601034][T12331] chnl_net:caif_netlink_parms(): no params data found [ 464.846594][T12326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.025060][ T5771] Bluetooth: hci5: command tx timeout [ 465.048582][T12326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.114681][ T5771] Bluetooth: hci6: command tx timeout [ 465.120978][T12332] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.140899][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.148851][T12332] bridge_slave_0: entered allmulticast mode [ 465.166286][T12332] bridge_slave_0: entered promiscuous mode [ 465.312624][T12332] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.329574][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.342300][T12332] bridge_slave_1: entered allmulticast mode [ 465.350520][T12332] bridge_slave_1: entered promiscuous mode [ 465.366932][T12337] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.374195][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.390608][T12337] bridge_slave_0: entered allmulticast mode [ 465.404852][T12337] bridge_slave_0: entered promiscuous mode [ 465.414821][T12337] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.431610][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.441660][T12337] bridge_slave_1: entered allmulticast mode [ 465.456604][T12337] bridge_slave_1: entered promiscuous mode [ 465.471164][T12326] team0: Port device team_slave_0 added [ 465.575391][ T5771] Bluetooth: hci7: command tx timeout [ 475.720675][ T5771] Bluetooth: hci4: command tx timeout [ 475.727649][ T5081] Bluetooth: hci5: command tx timeout [ 475.733141][ T5081] Bluetooth: hci6: command tx timeout [ 475.739312][ T5779] Bluetooth: hci7: command tx timeout [ 477.825559][ T5771] Bluetooth: hci4: command tx timeout [ 477.831094][ T5771] Bluetooth: hci7: command tx timeout [ 477.841014][ T5779] Bluetooth: hci5: command tx timeout [ 477.852020][ T5081] Bluetooth: hci6: command tx timeout [ 479.895374][ T5771] Bluetooth: hci7: command tx timeout [ 479.900956][ T5771] Bluetooth: hci5: command tx timeout [ 479.906743][ T5779] Bluetooth: hci4: command tx timeout [ 479.915038][ T5081] Bluetooth: hci6: command tx timeout [ 479.917079][ C0] bridge0: port 2(bond0) entered forwarding state [ 480.288128][ C0] bridge0: topology change detected, propagating [ 519.306203][ T5771] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 519.326032][ T5771] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 519.334119][ T5771] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 519.344053][ T5771] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 519.352084][ T5771] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 519.360919][ T5771] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 520.366095][ T5081] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.376216][ T5081] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 520.385969][ T5081] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 520.394228][ T5081] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 520.402785][ T5081] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 520.424216][ T5081] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 521.415353][ T5771] Bluetooth: hci8: command tx timeout [ 522.455289][ T5081] Bluetooth: hci9: command tx timeout [ 522.476179][ T5081] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 522.495324][ T5081] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 522.503628][ T5081] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 522.513628][ T5081] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 522.523921][ T5081] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 522.536003][ T5081] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 523.505221][ T5771] Bluetooth: hci8: command tx timeout [ 523.546200][ T5771] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 523.566537][ T5771] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 523.575618][ T5771] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 523.594819][ T5771] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 523.604118][ T5771] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 523.624145][ T5771] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 524.535272][ T5081] Bluetooth: hci9: command tx timeout [ 524.625002][ T5081] Bluetooth: hci10: command tx timeout [ 525.575186][ T5081] Bluetooth: hci8: command tx timeout [ 525.655169][ T5081] Bluetooth: hci11: command tx timeout [ 526.630783][ T5081] Bluetooth: hci9: command tx timeout [ 526.705459][ T5081] Bluetooth: hci10: command tx timeout [ 527.663088][ T5081] Bluetooth: hci8: command tx timeout [ 527.745618][ T5081] Bluetooth: hci11: command tx timeout [ 528.695303][ T5081] Bluetooth: hci9: command tx timeout [ 528.783600][ T5081] Bluetooth: hci10: command tx timeout [ 529.825545][ T5081] Bluetooth: hci11: command tx timeout [ 530.865324][ T5081] Bluetooth: hci10: command tx timeout [ 531.905351][ T5081] Bluetooth: hci11: command tx timeout [ 542.069629][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.084987][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 547.564901][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 547.571568][ C0] rcu: 0-....: (1 GPs behind) idle=ad14/1/0x4000000000000000 softirq=41074/41075 fqs=2645 [ 547.582734][ C0] rcu: hardirqs softirqs csw/system [ 547.589174][ C0] rcu: number: 1316251 0 0 [ 547.595622][ C0] rcu: cputime: 16516 34238 64 ==> 50760(ms) [ 547.603472][ C0] rcu: (t=10500 jiffies g=54917 q=3279 ncpus=2) [ 547.609840][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 448 jiffies! g54917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 547.622010][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=29483 [ 547.629925][ C0] rcu: rcu_preempt kthread starved for 454 jiffies! g54917 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 547.641154][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 547.651229][ C0] rcu: RCU grace-period kthread stack dump: [ 547.657161][ C0] task:rcu_preempt state:I stack:25736 pid:17 ppid:2 flags:0x00004000 [ 547.666414][ C0] Call Trace: [ 547.669724][ C0] [ 547.672681][ C0] __schedule+0x1553/0x45a0 [ 547.677334][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 547.683269][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 547.689190][ C0] ? asan.module_dtor+0x20/0x20 [ 547.694086][ C0] ? enqueue_timer+0x23d/0x550 [ 547.698875][ C0] ? __mod_timer+0x984/0xdb0 [ 547.703503][ C0] schedule+0xbd/0x170 [ 547.707618][ C0] schedule_timeout+0x188/0x2d0 [ 547.712496][ C0] ? console_conditional_schedule+0x40/0x40 [ 547.718411][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 547.724332][ C0] ? update_process_times+0x1b0/0x1b0 [ 547.729741][ C0] ? prepare_to_swait_event+0x339/0x360 [ 547.735317][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 547.740207][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 547.746432][ C0] ? rcu_gp_init+0x1560/0x1560 [ 547.751216][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 547.756085][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.761324][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 547.766542][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 547.771155][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 547.776275][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 547.781248][ C0] ? __kthread_parkme+0x162/0x1c0 [ 547.786311][ C0] kthread+0x2fa/0x390 [ 547.790411][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 547.795552][ C0] ? kthread_blkcg+0xd0/0xd0 [ 547.800178][ C0] ret_from_fork+0x48/0x80 [ 547.804893][ C0] ? kthread_blkcg+0xd0/0xd0 [ 547.809516][ C0] ret_from_fork_asm+0x11/0x20 [ 547.814327][ C0] [ 547.817362][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 547.823722][ C0] Sending NMI from CPU 0 to CPUs 1: [ 547.828943][ C1] NMI backtrace for cpu 1 [ 547.828952][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 547.828968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.828977][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x532/0x9d0 [ 547.829006][ C1] Code: 00 41 c6 45 00 00 48 8b 44 24 10 42 0f b6 04 38 84 c0 0f 85 1b 01 00 00 48 8b 44 24 08 c6 00 01 41 bd 00 80 ff ff eb 07 f3 90 <41> ff c5 74 47 43 0f b6 04 3e 84 c0 75 2b 80 3b 00 75 eb 48 89 df [ 547.829020][ C1] RSP: 0018:ffffc900001f09c0 EFLAGS: 00000206 [ 547.829035][ C1] RAX: 0000000000000000 RBX: ffff888078cf0c80 RCX: ffff88801b66bc00 [ 547.829047][ C1] RDX: 0000000000000100 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 547.829059][ C1] RBP: ffffc900001f0ab0 R08: ffffffff911c55df R09: 1ffffffff2238abb [ 547.829072][ C1] R10: dffffc0000000000 R11: fffffbfff2238abc R12: 1ffff110171e0001 [ 547.829084][ C1] R13: 00000000ffffd862 R14: 1ffff1100f19e190 R15: dffffc0000000000 [ 547.829097][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 547.829111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.829123][ C1] CR2: 00007f2fa2e5ce53 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 547.829138][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.829148][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 547.829158][ C1] Call Trace: [ 547.829166][ C1] [ 547.829177][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 547.829206][ C1] do_raw_spin_lock+0x23e/0x2c0 [ 547.829231][ C1] ? __rwlock_init+0x150/0x150 [ 547.829253][ C1] ? read_lock_is_recursive+0x20/0x20 [ 547.829277][ C1] br_hello_timer_expired+0x39/0x1c0 [ 547.829306][ C1] call_timer_fn+0x189/0x540 [ 547.829323][ C1] ? br_stp_timer_init+0x80/0x80 [ 547.829347][ C1] ? call_timer_fn+0xd2/0x540 [ 547.829363][ C1] ? __run_timers+0x800/0x800 [ 547.829384][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.829411][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 547.829431][ C1] ? br_stp_timer_init+0x80/0x80 [ 547.829456][ C1] __run_timers+0x542/0x800 [ 547.829480][ C1] ? detach_timer+0x2b0/0x2b0 [ 547.829500][ C1] ? lock_chain_count+0x20/0x20 [ 547.829521][ C1] run_timer_softirq+0x67/0xf0 [ 547.829538][ C1] handle_softirqs+0x280/0x820 [ 547.829557][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 547.829577][ C1] ? do_softirq+0x1a0/0x1a0 [ 547.829595][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 547.829619][ C1] __irq_exit_rcu+0xd3/0x190 [ 547.829636][ C1] ? irq_exit_rcu+0x20/0x20 [ 547.829657][ C1] irq_exit_rcu+0x9/0x20 [ 547.829672][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 547.829693][ C1] [ 547.829697][ C1] [ 547.829703][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.829725][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 547.829745][ C1] Code: 39 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 f3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 547.829759][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 547.829771][ C1] RAX: 30bc24284e9e4c00 RBX: ffffffff8162a8f1 RCX: 30bc24284e9e4c00 [ 547.829784][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 547.829795][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 547.829807][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 547.829820][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 547.829833][ C1] ? do_idle+0x221/0x590 [ 547.829858][ C1] default_idle+0x13/0x20 [ 547.829878][ C1] default_idle_call+0x6c/0xa0 [ 547.829899][ C1] do_idle+0x221/0x590 [ 547.829922][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 547.829949][ C1] ? do_idle+0xa/0x590 [ 547.829969][ C1] cpu_startup_entry+0x43/0x60 [ 547.829989][ C1] start_secondary+0xee/0xf0 [ 547.830007][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 547.830038][ C1] [ 547.830959][ C0] CPU: 0 PID: 12294 Comm: syz.1.1867 Not tainted syzkaller #0 [ 548.225236][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.235335][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 548.241884][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 94 cc f6 65 8b 05 4c c1 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 548.261499][ C0] RSP: 0018:ffffc90000006d60 EFLAGS: 00000206 [ 548.267588][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: a80c6c11da352100 [ 548.275601][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 548.283597][ C0] RBP: ffffc90000006de8 R08: ffffffff911c55df R09: 1ffffffff2238abb [ 548.291581][ C0] R10: dffffc0000000000 R11: fffffbfff2238abc R12: dffffc0000000000 [ 548.299566][ C0] R13: ffff88805ca9fc80 R14: ffff8880b8e3d790 R15: 1ffff92000000dac [ 548.307568][ C0] FS: 00007fb9dfa426c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 548.316533][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.323175][ C0] CR2: 0000000100000000 CR3: 000000005a6ea000 CR4: 00000000003506f0 [ 548.331169][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.339163][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 548.347161][ C0] Call Trace: [ 548.350466][ C0] [ 548.353331][ C0] ? _raw_spin_unlock+0x40/0x40 [ 548.358219][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 548.364492][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 548.369805][ C0] enqueue_to_backlog+0xa08/0xe30 [ 548.374884][ C0] netif_rx_internal+0x119/0x4e0 [ 548.379873][ C0] ? dev_forward_skb+0x50/0x50 [ 548.384663][ C0] ? rcu_is_watching+0x15/0xb0 [ 548.389469][ C0] __netif_rx+0x78/0xc0 [ 548.393650][ C0] veth_xmit+0x550/0x9f0 [ 548.397915][ C0] ? veth_xmit+0x60/0x9f0 [ 548.402273][ C0] dev_hard_start_xmit+0x246/0x740 [ 548.407417][ C0] __dev_queue_xmit+0x19a3/0x3660 [ 548.412488][ C0] ? lapic_next_event+0x11/0x20 [ 548.417383][ C0] ? clockevents_program_event+0x230/0x310 [ 548.423240][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 548.428397][ C0] ? mark_lock+0x94/0x320 [ 548.432767][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 548.438881][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 548.444207][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.450410][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 548.455644][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.461840][ C0] bond_start_xmit+0x12c8/0x1ca0 [ 548.466809][ C0] ? bond_start_xmit+0x103/0x1ca0 [ 548.471883][ C0] ? bond_close+0x670/0x670 [ 548.476462][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 548.482492][ C0] ? lock_chain_count+0x20/0x20 [ 548.487365][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.493548][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 548.498766][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.504961][ C0] dev_hard_start_xmit+0x246/0x740 [ 548.510117][ C0] __dev_queue_xmit+0x19a3/0x3660 [ 548.515190][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 548.520252][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 548.525404][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 548.530807][ C0] ? br_send_bpdu+0x626/0x920 [ 548.535513][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 548.540650][ C0] ? nf_hook_slow+0x1b4/0x200 [ 548.545346][ C0] br_send_bpdu+0x479/0x920 [ 548.549967][ C0] ? br_send_bpdu+0x626/0x920 [ 548.554684][ C0] ? br_send_config_bpdu+0x740/0x740 [ 548.559996][ C0] ? pskb_may_pull+0xd0/0xd0 [ 548.564648][ C0] ? verify_lock_unused+0x140/0x140 [ 548.569866][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 548.575106][ C0] ? sched_clock_cpu+0x75/0x430 [ 548.579979][ C0] br_send_config_bpdu+0x473/0x740 [ 548.585127][ C0] ? br_set_forward_delay+0x160/0x160 [ 548.590559][ C0] br_transmit_config+0x3be/0x5d0 [ 548.595619][ C0] ? br_config_bpdu_generation+0x1d0/0x1d0 [ 548.601553][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 548.606640][ C0] ? __rwlock_init+0x150/0x150 [ 548.611454][ C0] br_hold_timer_expired+0x85/0x170 [ 548.616699][ C0] call_timer_fn+0x189/0x540 [ 548.621328][ C0] ? br_forward_delay_timer_expired+0x420/0x420 [ 548.627596][ C0] ? call_timer_fn+0xd2/0x540 [ 548.632301][ C0] ? __run_timers+0x800/0x800 [ 548.637000][ C0] ? preempt_count_add+0x1a0/0x1a0 [ 548.642154][ C0] ? br_forward_delay_timer_expired+0x420/0x420 [ 548.648435][ C0] __run_timers+0x542/0x800 [ 548.652964][ C0] ? detach_timer+0x2b0/0x2b0 [ 548.657673][ C0] run_timer_softirq+0x67/0xf0 [ 548.662459][ C0] handle_softirqs+0x280/0x820 [ 548.667247][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 548.672034][ C0] ? do_softirq+0x1a0/0x1a0 [ 548.676575][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 548.681819][ C0] __irq_exit_rcu+0xd3/0x190 [ 548.686440][ C0] ? irq_exit_rcu+0x20/0x20 [ 548.690969][ C0] irq_exit_rcu+0x9/0x20 [ 548.695219][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 548.700873][ C0] [ 548.703809][ C0] [ 548.706758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.712772][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 548.718688][ C0] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 2e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 548.738337][ C0] RSP: 0018:ffffc90004447a00 EFLAGS: 00000246 [ 548.744425][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 548.752424][ C0] RDX: ffffc9000ce62000 RSI: 0000000000001d83 RDI: 0000000000001d84 [ 548.760425][ C0] RBP: ffffc90004447ad0 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 548.768440][ C0] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: 1ffff92000888f44 [ 548.776877][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000888f65 [ 548.784996][ C0] ? event_function+0x300/0x300 [ 548.789885][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 548.795634][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 548.801383][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 548.806605][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 548.812287][ C0] smp_call_function_single+0x36d/0x5a0 [ 548.817858][ C0] ? event_function+0x300/0x300 [ 548.822739][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 548.828914][ C0] ? event_function+0x300/0x300 [ 548.833812][ C0] perf_install_in_context+0x5be/0x920 [ 548.839306][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 548.845324][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 548.850567][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 548.855798][ C0] ? perf_event__header_size+0x165/0x220 [ 548.861473][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 548.867212][ C0] ? security_bpf+0x7e/0xa0 [ 548.871749][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 548.877416][ C0] ? lock_chain_count+0x20/0x20 [ 548.882303][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 548.887518][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 548.893178][ C0] do_syscall_64+0x55/0xa0 [ 548.897613][ C0] ? clear_bhb_loop+0x40/0x90 [ 548.902319][ C0] ? clear_bhb_loop+0x40/0x90 [ 548.907017][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.912939][ C0] RIP: 0033:0x7fb9deb9cdd9 [ 548.917376][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.937014][ C0] RSP: 002b:00007fb9dfa42028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 548.945465][ C0] RAX: ffffffffffffffda RBX: 00007fb9dee15fa0 RCX: 00007fb9deb9cdd9 [ 548.953547][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 548.961540][ C0] RBP: 00007fb9dec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 548.969539][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 548.977536][ C0] R13: 00007fb9dee16038 R14: 00007fb9dee15fa0 R15: 00007ffde33b5628 [ 548.985550][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)