last executing test programs: 23m9.896458465s ago: executing program 1 (id=1151): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, 0xa0000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0x80000000}, 0x0, 0x0, 0xc, 0x9, 0xf60, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0xb701, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0xfffffe00, 0x0, 0x0, 0x41000, 0x10}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 23m9.63658152s ago: executing program 1 (id=1154): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23m5.111202837s ago: executing program 2 (id=1173): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23m3.673488131s ago: executing program 1 (id=1164): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) 23m3.673133231s ago: executing program 2 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 23m3.309578668s ago: executing program 1 (id=1171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23m3.308380648s ago: executing program 2 (id=1174): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$inet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0xfffffce9) 23m3.048068782s ago: executing program 2 (id=1177): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) 23m1.822554293s ago: executing program 2 (id=1189): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040005, 0x0, 0x0, 0x3}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)='.', 0x1}], 0x1}, 0x0) 23m1.710589115s ago: executing program 1 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000290000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000240), 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 23m1.630862066s ago: executing program 2 (id=1183): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 23m1.289372392s ago: executing program 32 (id=1183): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 23m1.021973326s ago: executing program 1 (id=1186): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'io'}]}, 0x34) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060000120800040043000000a8001600040001761aff2266e5f4e90196ad8bc3d47a051ed59450a9cb6e217b69cb18b5e1e60490f9ba9f207eab83016772a308f100000000", 0x65}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 23m0.848807989s ago: executing program 33 (id=1186): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)={[{0x2b, 'perf_event'}, {0x2b, 'cpuset'}, {0x2d, 'perf_event'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'io'}]}, 0x34) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060000120800040043000000a8001600040001761aff2266e5f4e90196ad8bc3d47a051ed59450a9cb6e217b69cb18b5e1e60490f9ba9f207eab83016772a308f100000000", 0x65}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 15m20.295437261s ago: executing program 5 (id=4206): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 15m19.444790415s ago: executing program 5 (id=4209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, 0x0, 0x4) 15m19.091683601s ago: executing program 5 (id=4212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 15m17.856273892s ago: executing program 5 (id=4216): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) 15m16.382612767s ago: executing program 5 (id=4235): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) 15m14.175505274s ago: executing program 5 (id=4244): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4240, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) 14m58.48906307s ago: executing program 34 (id=4244): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4240, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.291724263s ago: executing program 0 (id=9706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800a5ac760000000000008027000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xfdfffbffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 3.196994115s ago: executing program 4 (id=9707): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.194435062s ago: executing program 7 (id=9712): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 2.184307392s ago: executing program 4 (id=9713): socket$kcm(0xa, 0x922000000003, 0x11) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa, &(0x7f0000000300), 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x28, 0x3, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 2.159704653s ago: executing program 6 (id=9714): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1aa, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50) 2.005260375s ago: executing program 3 (id=9715): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.906786137s ago: executing program 6 (id=9716): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0xfffffffe, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x1000, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4008810) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) 1.906184467s ago: executing program 4 (id=9717): perf_event_open(&(0x7f0000000140)={0x2, 0x8c, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xa}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.905582747s ago: executing program 0 (id=9718): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 1.904798627s ago: executing program 7 (id=9719): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 1.790507129s ago: executing program 3 (id=9720): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x480a00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) 1.7073554s ago: executing program 0 (id=9721): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 1.701815391s ago: executing program 6 (id=9722): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x3ff, 0xe, 0x8, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x10a, 0x4, 0x4, 0x200e}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f00000007c0)=""/60, 0x38, 0x0, &(0x7f0000000dc0)=""/153, 0x9d}}, 0xffffffffffffff9a) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.69938139s ago: executing program 4 (id=9723): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6c0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x3, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x4}, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.647101871s ago: executing program 7 (id=9724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.505164594s ago: executing program 0 (id=9725): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r1, 0x0, 0x1e) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x7, 0x0, 0x63) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.504299614s ago: executing program 3 (id=9726): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c8, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x90, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x50) 719.229127ms ago: executing program 4 (id=9727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000800a5ac760000000000008027000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xfdfffbffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 718.533217ms ago: executing program 3 (id=9728): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r1) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x28, 0x8, 0x0, 0x44) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 716.965587ms ago: executing program 0 (id=9729): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x80000000, 0xffffffffffffff24, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) 676.673318ms ago: executing program 7 (id=9730): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 646.169839ms ago: executing program 6 (id=9731): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 489.326521ms ago: executing program 3 (id=9732): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 426.133972ms ago: executing program 7 (id=9733): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0xfffffffe, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x1000, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121100, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4008810) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) 381.608703ms ago: executing program 6 (id=9734): socket$kcm(0xa, 0x922000000003, 0x11) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa, &(0x7f0000000300), 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x28, 0x3, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 362.051663ms ago: executing program 0 (id=9735): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}], 0x2}, 0x40000) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e371e14018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 240.905525ms ago: executing program 7 (id=9736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) socket$kcm(0xa, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 228.566366ms ago: executing program 4 (id=9737): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x480a00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 219.039316ms ago: executing program 3 (id=9738): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fd, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000008c0)=ANY=[@ANYRES8=r1], &(0x7f0000000880)='GPL\x00', 0x105, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000000), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000080)=""/167, 0xa7}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000480)=""/108, 0x6c}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000700)=""/125, 0x7d}], 0x9, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) close(r3) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff0200000000000008000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x8100, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 0s ago: executing program 6 (id=9739): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10eb}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4000002) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): /0x12 [ 1196.409494][T14323] ? load_image+0x3b0/0x3b0 [ 1196.414295][T14323] sysfs_create_dir_ns+0x252/0x280 [ 1196.419508][T14323] ? hci_rx_work+0x3eb/0xd40 [ 1196.424169][T14323] ? sysfs_warn_dup+0xa0/0xa0 [ 1196.428901][T14323] ? do_raw_spin_unlock+0x11d/0x230 [ 1196.434199][T14323] kobject_add_internal+0x6b8/0xc80 [ 1196.439514][T14323] kobject_add+0x152/0x210 [ 1196.444091][T14323] ? kobject_init+0x1d0/0x1d0 [ 1196.448837][T14323] ? klist_children_get+0x50/0x50 [ 1196.454011][T14323] ? get_device_parent+0x121/0x3f0 [ 1196.459201][T14323] device_add+0x483/0xfb0 [ 1196.463681][T14323] ? kmem_cache_free+0xf7/0x290 [ 1196.468620][T14323] hci_conn_add_sysfs+0xd1/0x1e0 [ 1196.473764][T14323] le_conn_complete_evt+0xd1d/0x1320 [ 1196.479189][T14323] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1196.485504][T14323] ? bt_info+0x150/0x150 [ 1196.489812][T14323] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1196.495678][T14323] ? skb_pull_data+0xf7/0x200 [ 1196.500455][T14323] hci_le_conn_complete_evt+0x183/0x440 [ 1196.506066][T14323] ? hci_remote_host_features_evt+0x270/0x270 [ 1196.512181][T14323] hci_event_packet+0x791/0x1210 [ 1196.517172][T14323] ? bis_list+0x280/0x280 [ 1196.521724][T14323] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1196.527678][T14323] ? kcov_remote_start+0x4c7/0x7e0 [ 1196.532990][T14323] ? default_do_nmi+0xf0/0x150 [ 1196.539214][T14323] ? hci_send_to_monitor+0x9c/0x4a0 [ 1196.544591][T14323] hci_rx_work+0x3eb/0xd40 [ 1196.549073][T14323] ? _raw_spin_unlock+0x40/0x40 [ 1196.554167][T14323] ? process_one_work+0x7a1/0x1160 [ 1196.559560][T14323] process_one_work+0x898/0x1160 [ 1196.565446][T14323] ? worker_detach_from_pool+0x240/0x240 [ 1196.571154][T14323] ? _raw_spin_lock_irq+0x7a/0xe0 [ 1196.576233][T14323] ? _raw_spin_lock_irq+0xab/0xe0 [ 1196.581306][T14323] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1196.586725][T14323] ? kthread_data+0x4b/0xc0 [ 1196.591277][T14323] worker_thread+0xaa2/0x1250 [ 1196.596579][T14323] ? __kthread_parkme+0x162/0x1c0 [ 1196.602179][T14323] kthread+0x29d/0x330 [ 1196.606369][T14323] ? worker_clr_flags+0x1a0/0x1a0 [ 1196.611526][T14323] ? kthread_blkcg+0xd0/0xd0 [ 1196.616251][T14323] ret_from_fork+0x1f/0x30 [ 1196.620848][T14323] [ 1196.625301][T14323] kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1196.639027][T14323] Bluetooth: hci5: failed to register connection device [ 1196.689885][T20341] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6398'. [ 1196.732358][T20341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1196.784405][T20341] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1198.668628][T14323] Bluetooth: hci5: command 0x2016 tx timeout [ 1199.504412][T20393] netlink: 'syz.7.6421': attribute type 21 has an invalid length. [ 1199.535949][T20393] netlink: 'syz.7.6421': attribute type 1 has an invalid length. [ 1201.264068][T20427] device syzkaller0 entered promiscuous mode [ 1201.277397][T20430] netlink: 'syz.3.6438': attribute type 19 has an invalid length. [ 1201.303607][T20430] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1201.325305][T14323] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1201.333225][T14323] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1201.353620][T14323] CPU: 0 PID: 14323 Comm: kworker/u5:0 Not tainted 6.1.147-syzkaller #0 [ 1201.362139][T14323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1201.372348][T14323] Workqueue: hci2 hci_rx_work [ 1201.377079][T14323] Call Trace: [ 1201.380378][T14323] [ 1201.383327][T14323] dump_stack_lvl+0x168/0x22e [ 1201.388028][T14323] ? show_regs_print_info+0x12/0x12 [ 1201.393249][T14323] ? load_image+0x3b0/0x3b0 [ 1201.397804][T14323] sysfs_create_dir_ns+0x252/0x280 [ 1201.402948][T14323] ? hci_rx_work+0x3eb/0xd40 [ 1201.407573][T14323] ? sysfs_warn_dup+0xa0/0xa0 [ 1201.412294][T14323] ? do_raw_spin_unlock+0x11d/0x230 [ 1201.417528][T14323] kobject_add_internal+0x6b8/0xc80 [ 1201.422767][T14323] kobject_add+0x152/0x210 [ 1201.427221][T14323] ? kobject_init+0x1d0/0x1d0 [ 1201.431931][T14323] ? klist_children_get+0x50/0x50 [ 1201.437028][T14323] ? get_device_parent+0x121/0x3f0 [ 1201.442172][T14323] device_add+0x483/0xfb0 [ 1201.446520][T14323] ? kmem_cache_free+0xf7/0x290 [ 1201.451495][T14323] hci_conn_add_sysfs+0xd1/0x1e0 [ 1201.456469][T14323] le_conn_complete_evt+0xd1d/0x1320 [ 1201.461829][T14323] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 1201.468143][T14323] ? bt_info+0x150/0x150 [ 1201.472438][T14323] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 1201.478106][T14323] ? skb_pull_data+0xf7/0x200 [ 1201.482836][T14323] hci_le_conn_complete_evt+0x183/0x440 [ 1201.488423][T14323] ? hci_remote_host_features_evt+0x270/0x270 [ 1201.494519][T14323] hci_event_packet+0x791/0x1210 [ 1201.499499][T14323] ? bis_list+0x280/0x280 [ 1201.503850][T14323] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1201.509782][T14323] ? kcov_remote_start+0x4c7/0x7e0 [ 1201.514921][T14323] ? default_do_nmi+0xf0/0x150 [ 1201.519805][T14323] ? hci_send_to_monitor+0x9c/0x4a0 [ 1201.525173][T14323] hci_rx_work+0x3eb/0xd40 [ 1201.529628][T14323] ? _raw_spin_unlock+0x40/0x40 [ 1201.534525][T14323] ? process_one_work+0x7a1/0x1160 [ 1201.539665][T14323] process_one_work+0x898/0x1160 [ 1201.544647][T14323] ? worker_detach_from_pool+0x240/0x240 [ 1201.550321][T14323] ? _raw_spin_lock_irq+0x7a/0xe0 [ 1201.555387][T14323] ? _raw_spin_lock_irq+0xab/0xe0 [ 1201.560545][T14323] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1201.565974][T14323] ? kthread_data+0x4b/0xc0 [ 1201.570550][T14323] worker_thread+0xaa2/0x1250 [ 1201.575273][T14323] ? __kthread_parkme+0x162/0x1c0 [ 1201.580332][T14323] kthread+0x29d/0x330 [ 1201.584516][T14323] ? worker_clr_flags+0x1a0/0x1a0 [ 1201.589564][T14323] ? kthread_blkcg+0xd0/0xd0 [ 1201.594284][T14323] ret_from_fork+0x1f/0x30 [ 1201.598737][T14323] [ 1201.611164][T14323] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1201.625440][T14323] Bluetooth: hci2: failed to register connection device [ 1203.708343][T14323] Bluetooth: hci2: command 0x2016 tx timeout [ 1204.269042][T20437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6440'. [ 1204.278091][T20437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1204.286372][T20437] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1204.302796][T20438] netlink: 'syz.3.6439': attribute type 21 has an invalid length. [ 1204.315105][T20438] netlink: 'syz.3.6439': attribute type 1 has an invalid length. [ 1204.688633][T20448] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1204.762633][T20448] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1204.798741][T20448] CPU: 1 PID: 20448 Comm: syz.3.6447 Not tainted 6.1.147-syzkaller #0 [ 1204.807154][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1204.817255][T20448] Call Trace: [ 1204.820568][T20448] [ 1204.823535][T20448] dump_stack_lvl+0x168/0x22e [ 1204.828257][T20448] ? show_regs_print_info+0x12/0x12 [ 1204.833491][T20448] ? load_image+0x3b0/0x3b0 [ 1204.838058][T20448] sysfs_warn_dup+0x8a/0xa0 [ 1204.842606][T20448] sysfs_do_create_link_sd+0xc0/0x110 [ 1204.848112][T20448] device_add+0x7ed/0xfb0 [ 1204.852519][T20448] wiphy_register+0x1e68/0x2bd0 [ 1204.857438][T20448] ? cfg80211_event_work+0x40/0x40 [ 1204.862599][T20448] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1204.868823][T20448] ieee80211_register_hw+0x2c29/0x38c0 [ 1204.874360][T20448] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1204.879947][T20448] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1204.885716][T20448] ? ieee80211_tasklet_handler+0x20/0x20 [ 1204.891398][T20448] ? lockdep_hardirqs_on+0x94/0x140 [ 1204.896754][T20448] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1204.903071][T20448] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1204.909066][T20448] hwsim_new_radio_nl+0xafa/0xce0 [ 1204.914259][T20448] genl_family_rcv_msg_doit+0x22e/0x320 [ 1204.919858][T20448] ? end_current_label_crit_section+0x170/0x170 [ 1204.926158][T20448] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1204.932107][T20448] ? bpf_lsm_capable+0x5/0x10 [ 1204.936820][T20448] ? security_capable+0x85/0xb0 [ 1204.941728][T20448] genl_rcv_msg+0x5f2/0x780 [ 1204.946318][T20448] ? genl_bind+0x350/0x350 [ 1204.950791][T20448] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1204.957201][T20448] netlink_rcv_skb+0x1de/0x420 [ 1204.962020][T20448] ? genl_bind+0x350/0x350 [ 1204.966741][T20448] ? netlink_ack+0x1100/0x1100 [ 1204.972417][T20448] ? down_read+0x1a8/0x2d0 [ 1204.976912][T20448] genl_rcv+0x24/0x40 [ 1204.981030][T20448] netlink_unicast+0x74d/0x8d0 [ 1204.985856][T20448] netlink_sendmsg+0x89e/0xbc0 [ 1204.990889][T20448] ? netlink_getsockopt+0x540/0x540 [ 1204.996252][T20448] ? aa_sock_msg_perm+0x94/0x150 [ 1205.001256][T20448] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1205.006605][T20448] ? security_socket_sendmsg+0x7c/0xa0 [ 1205.012324][T20448] ? netlink_getsockopt+0x540/0x540 [ 1205.017788][T20448] ____sys_sendmsg+0x59b/0x970 [ 1205.022733][T20448] ? __sys_sendmsg_sock+0x30/0x30 [ 1205.027814][T20448] ? __import_iovec+0x315/0x500 [ 1205.032828][T20448] ? import_iovec+0x6f/0xa0 [ 1205.037388][T20448] ___sys_sendmsg+0x21c/0x290 [ 1205.042123][T20448] ? __sys_sendmsg+0x270/0x270 [ 1205.046985][T20448] ? __fdget+0x17c/0x200 [ 1205.051274][T20448] __se_sys_sendmsg+0x19e/0x270 [ 1205.056170][T20448] ? __x64_sys_sendmsg+0x80/0x80 [ 1205.061389][T20448] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1205.067370][T20448] do_syscall_64+0x4c/0xa0 [ 1205.071911][T20448] ? clear_bhb_loop+0x60/0xb0 [ 1205.077537][T20448] ? clear_bhb_loop+0x60/0xb0 [ 1205.082624][T20448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1205.088593][T20448] RIP: 0033:0x7f911518e9a9 [ 1205.093056][T20448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.112816][T20448] RSP: 002b:00007f9115ff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.121380][T20448] RAX: ffffffffffffffda RBX: 00007f91153b5fa0 RCX: 00007f911518e9a9 [ 1205.129931][T20448] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1205.137950][T20448] RBP: 00007f9115210d69 R08: 0000000000000000 R09: 0000000000000000 [ 1205.146046][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.154053][T20448] R13: 0000000000000000 R14: 00007f91153b5fa0 R15: 00007fff7e87d398 [ 1205.162085][T20448] [ 1205.853379][T20463] netlink: 'syz.0.6461': attribute type 15 has an invalid length. [ 1205.875637][T20463] netlink: 'syz.0.6461': attribute type 5 has an invalid length. [ 1205.928384][T20463] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1206.706303][T20471] netlink: 'syz.7.6454': attribute type 19 has an invalid length. [ 1206.776896][T20471] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6454'. [ 1209.331987][T20485] device syzkaller0 entered promiscuous mode [ 1213.547059][T20527] netlink: 'syz.4.6477': attribute type 19 has an invalid length. [ 1213.565452][T20527] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6477'. [ 1214.614948][T20544] device syzkaller0 entered promiscuous mode [ 1214.634806][T20546] netlink: 'syz.4.6485': attribute type 15 has an invalid length. [ 1214.665016][T20546] netlink: 'syz.4.6485': attribute type 5 has an invalid length. [ 1214.688407][T20546] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6485'. [ 1219.069261][T20639] netlink: 'syz.3.6504': attribute type 15 has an invalid length. [ 1219.098557][T20639] netlink: 'syz.3.6504': attribute type 5 has an invalid length. [ 1219.123769][T20639] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1219.267360][T20641] device syzkaller0 entered promiscuous mode [ 1224.496662][T20695] delete_channel: no stack [ 1224.503331][T20695] delete_channel: no stack [ 1227.604694][T20703] netlink: 'syz.0.6528': attribute type 19 has an invalid length. [ 1227.623514][T20703] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6528'. [ 1228.195289][T14323] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 1236.464075][T20850] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1236.518542][T14323] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 1237.375364][T20863] delete_channel: no stack [ 1237.402745][T20865] device syzkaller0 entered promiscuous mode [ 1237.479416][T20863] delete_channel: no stack [ 1238.051340][T20882] syzkaller0: create flow: hash 3552698923 index 1 [ 1238.337690][T13325] syzkaller0: tun_net_xmit 76 [ 1238.351342][T13325] syzkaller0: tun_net_xmit 48 [ 1238.371135][T13323] syzkaller0: tun_net_xmit 76 [ 1238.747347][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.753969][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.278503][T20879] syzkaller0: delete flow: hash 3552698923 index 1 [ 1243.112469][T20938] syzkaller0: create flow: hash 2134340636 index 1 [ 1243.806958][T20939] syzkaller0: delete flow: hash 2134340636 index 1 [ 1244.151874][T14323] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 1248.093065][T14323] Bluetooth: hci5: unexpected event 0x33 length: 15 > 10 [ 1248.126808][T21002] syzkaller0: create flow: hash 2134340636 index 1 [ 1248.253901][ T14] syzkaller0: tun_net_xmit 76 [ 1248.259894][ T14] syzkaller0: tun_net_xmit 48 [ 1248.279440][ T4315] syzkaller0: tun_net_xmit 76 [ 1248.348824][T20997] syzkaller0: delete flow: hash 2134340636 index 1 [ 1248.910569][T21026] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6641'. [ 1253.053702][T21048] netlink: 'syz.7.6658': attribute type 10 has an invalid length. [ 1253.079134][T21048] netlink: 55 bytes leftover after parsing attributes in process `syz.7.6658'. [ 1253.757656][T21063] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1253.826779][T21072] syzkaller0: create flow: hash 3552698923 index 1 [ 1254.462969][T21072] syzkaller0: delete flow: hash 3552698923 index 1 [ 1258.494492][T21117] netlink: 'syz.7.6669': attribute type 11 has an invalid length. [ 1258.528489][T21117] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6669'. [ 1258.553181][T21115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.926828][T21127] netlink: 'syz.3.6673': attribute type 10 has an invalid length. [ 1260.087035][T21149] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1260.127228][T21151] netlink: 'syz.3.6683': attribute type 10 has an invalid length. [ 1260.146478][T21151] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6683'. [ 1262.935306][T21169] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1262.984587][T21179] netlink: 'syz.7.6693': attribute type 10 has an invalid length. [ 1263.503961][T21198] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6698'. [ 1263.534135][T21194] netlink: 'syz.4.6699': attribute type 10 has an invalid length. [ 1263.578688][T21194] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6699'. [ 1264.969211][T21219] netlink: 'syz.6.6717': attribute type 10 has an invalid length. [ 1264.998787][T21219] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6717'. [ 1265.327374][T21225] netlink: 'syz.6.6710': attribute type 10 has an invalid length. [ 1267.604308][T21257] syzkaller0: create flow: hash 2134340636 index 1 [ 1267.630558][ T4315] syzkaller0: tun_net_xmit 76 [ 1267.636057][ T4315] syzkaller0: tun_net_xmit 48 [ 1267.668521][ T14] syzkaller0: tun_net_xmit 76 [ 1268.044697][T21257] syzkaller0: delete flow: hash 2134340636 index 1 [ 1270.598383][T21267] netlink: 'syz.0.6722': attribute type 10 has an invalid length. [ 1270.606291][T21267] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1270.959000][T21281] syzkaller0: create flow: hash 2134340636 index 1 [ 1272.357118][T21281] syzkaller0: delete flow: hash 2134340636 index 1 [ 1276.816231][T21306] netlink: 'syz.4.6734': attribute type 10 has an invalid length. [ 1276.956214][T21309] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6736'. [ 1277.408274][T21316] netlink: 'syz.6.6738': attribute type 10 has an invalid length. [ 1277.461590][T21316] device team0 left promiscuous mode [ 1277.478321][T21316] device team_slave_0 left promiscuous mode [ 1277.495441][T21316] device team_slave_1 left promiscuous mode [ 1277.510552][T21316] device bridge0 left promiscuous mode [ 1277.563786][T21316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.016906][T21324] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6753'. [ 1282.240064][T21336] netlink: 71 bytes leftover after parsing attributes in process `syz.6.6748'. [ 1282.406670][T21352] netlink: 'syz.4.6755': attribute type 10 has an invalid length. [ 1282.524653][T21352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.572421][T21352] device team0 entered promiscuous mode [ 1282.578069][T21352] device team_slave_0 entered promiscuous mode [ 1282.605660][T21352] device team_slave_1 entered promiscuous mode [ 1282.615824][T21352] device netdevsim0 entered promiscuous mode [ 1282.635254][T21352] bond0: (slave team0): Enslaving as an active interface with an up link [ 1282.671119][T21351] netlink: 'syz.0.6754': attribute type 10 has an invalid length. [ 1283.417382][T21351] bond0: (slave geneve0): Releasing backup interface [ 1283.876167][T21373] netlink: 'syz.7.6762': attribute type 10 has an invalid length. [ 1283.958377][T21373] netlink: 55 bytes leftover after parsing attributes in process `syz.7.6762'. [ 1284.470094][T21380] device sit0 entered promiscuous mode [ 1285.873740][T21401] netlink: 71 bytes leftover after parsing attributes in process `syz.7.6768'. [ 1286.109958][T21405] netlink: 'syz.6.6771': attribute type 10 has an invalid length. [ 1286.135091][T21409] netlink: 'syz.0.6770': attribute type 10 has an invalid length. [ 1286.377503][T21409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.403466][T21409] device team0 entered promiscuous mode [ 1286.418006][T21409] device team_slave_0 entered promiscuous mode [ 1286.427393][T21409] device team_slave_1 entered promiscuous mode [ 1286.446667][T21409] device netdevsim0 entered promiscuous mode [ 1286.462643][T21409] bond0: (slave team0): Enslaving as an active interface with an up link [ 1287.201223][T21423] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.6780'. [ 1287.357218][T21432] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6783'. [ 1287.645365][T21438] device syzkaller0 entered promiscuous mode [ 1288.667776][T21451] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6789'. [ 1289.455521][T21458] device sit0 entered promiscuous mode [ 1290.187048][T21466] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6797'. [ 1291.493966][T21492] netlink: 'syz.7.6805': attribute type 2 has an invalid length. [ 1291.557005][T21492] netlink: 'syz.7.6805': attribute type 8 has an invalid length. [ 1291.601758][T21492] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6805'. [ 1292.613676][T21517] device syzkaller0 entered promiscuous mode [ 1293.177556][T21525] netlink: 'syz.4.6817': attribute type 10 has an invalid length. [ 1293.223185][T21525] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6817'. [ 1293.764914][T21541] netlink: 71 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1295.742597][T21563] netlink: 'syz.6.6828': attribute type 2 has an invalid length. [ 1295.776140][T21563] netlink: 'syz.6.6828': attribute type 8 has an invalid length. [ 1295.802728][T21563] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6828'. [ 1296.112593][T21568] device sit0 entered promiscuous mode [ 1296.286880][T21570] netlink: 'syz.7.6833': attribute type 10 has an invalid length. [ 1296.770335][T21577] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6835'. [ 1296.899628][T21582] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6837'. [ 1297.561222][T21593] netlink: 'syz.7.6839': attribute type 10 has an invalid length. [ 1297.594808][T21595] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6850'. [ 1297.849223][T21593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.873880][T21593] bond0: (slave team0): Enslaving as an active interface with an up link [ 1298.102764][T21606] netlink: 'syz.0.6842': attribute type 15 has an invalid length. [ 1298.222644][T21609] netlink: 'syz.0.6843': attribute type 2 has an invalid length. [ 1298.263916][T21609] netlink: 'syz.0.6843': attribute type 8 has an invalid length. [ 1298.293629][T21609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6843'. [ 1298.723445][T21617] device sit0 entered promiscuous mode [ 1298.994202][T21622] raw_sendmsg: syz.3.6849 forgot to set AF_INET. Fix it! [ 1299.620657][T21630] netlink: 71 bytes leftover after parsing attributes in process `syz.6.6853'. [ 1300.204594][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.211228][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.611540][T21645] netlink: 'syz.3.6859': attribute type 10 has an invalid length. [ 1300.831134][T21645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.935284][T21645] device team0 entered promiscuous mode [ 1300.971375][T21645] device team_slave_0 entered promiscuous mode [ 1300.990240][T21645] device team_slave_1 entered promiscuous mode [ 1301.037408][T21645] device netdevsim0 entered promiscuous mode [ 1301.078223][T21645] bond0: (slave team0): Enslaving as an active interface with an up link [ 1301.822048][T21666] netlink: 'syz.4.6864': attribute type 10 has an invalid length. [ 1301.968463][T21666] device macvlan0 entered promiscuous mode [ 1301.980987][T21666] team0: Port device macvlan0 added [ 1302.003651][T21669] device sit0 entered promiscuous mode [ 1302.052491][T21670] netlink: 'syz.6.6875': attribute type 10 has an invalid length. [ 1302.080469][T21670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1303.954317][T21689] netlink: 71 bytes leftover after parsing attributes in process `syz.3.6883'. [ 1304.480713][T21696] device syzkaller0 entered promiscuous mode [ 1304.494480][T21698] netlink: 'syz.3.6874': attribute type 2 has an invalid length. [ 1304.513379][T21698] netlink: 'syz.3.6874': attribute type 8 has an invalid length. [ 1304.548956][T21698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6874'. [ 1308.025891][T21703] netlink: 'syz.6.6878': attribute type 10 has an invalid length. [ 1308.034150][T21711] device sit0 left promiscuous mode [ 1308.109601][T21714] device sit0 entered promiscuous mode [ 1309.722265][T21755] netlink: 'syz.4.6894': attribute type 10 has an invalid length. [ 1309.797726][T21757] netlink: 'syz.3.6899': attribute type 10 has an invalid length. [ 1311.065342][T21783] device syzkaller0 entered promiscuous mode [ 1312.088229][T21804] netlink: 'syz.4.6914': attribute type 2 has an invalid length. [ 1312.154897][T21804] netlink: 'syz.4.6914': attribute type 8 has an invalid length. [ 1312.175745][T21804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1312.402847][T21809] netlink: 'syz.0.6915': attribute type 10 has an invalid length. [ 1312.558435][T21809] device macvlan0 entered promiscuous mode [ 1312.587186][T21809] team0: Port device macvlan0 added [ 1313.433690][T21828] device syzkaller0 entered promiscuous mode [ 1314.428595][T21841] device syzkaller0 entered promiscuous mode [ 1314.749850][T21845] netlink: 'syz.7.6929': attribute type 2 has an invalid length. [ 1314.828500][T21845] netlink: 'syz.7.6929': attribute type 8 has an invalid length. [ 1314.890964][T21845] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6929'. [ 1314.960886][T21847] netlink: 'syz.4.6930': attribute type 10 has an invalid length. [ 1316.594197][T21886] netlink: 'syz.0.6946': attribute type 2 has an invalid length. [ 1316.623755][T21886] netlink: 'syz.0.6946': attribute type 8 has an invalid length. [ 1316.642482][T21886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6946'. [ 1316.681421][T21890] netlink: 'syz.7.6947': attribute type 10 has an invalid length. [ 1321.791451][T21967] device syzkaller0 entered promiscuous mode [ 1324.067866][T21983] device syzkaller0 entered promiscuous mode [ 1328.647820][T22024] device syzkaller0 entered promiscuous mode [ 1328.988457][T22039] netlink: 154788 bytes leftover after parsing attributes in process `syz.6.7002'. [ 1329.008447][T22039] openvswitch: netlink: Message has 48126 unknown bytes. [ 1337.096403][T22143] netlink: 'syz.3.7045': attribute type 10 has an invalid length. [ 1337.106928][T22143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.143157][T22143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.292262][T22143] device batadv_slave_0 entered promiscuous mode [ 1337.316614][T22143] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1338.520152][T22165] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.7057'. [ 1338.533501][T22165] openvswitch: netlink: Message has 48126 unknown bytes. [ 1339.188013][T22190] device sit0 left promiscuous mode [ 1339.430816][T22191] device sit0 entered promiscuous mode [ 1340.103580][T22195] netlink: 'syz.4.7067': attribute type 10 has an invalid length. [ 1340.135397][T22195] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.150982][T22195] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.165576][T22195] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.236086][T22195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.259595][T22195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.276072][T22195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.319281][T22195] device geneve1 entered promiscuous mode [ 1340.356095][T22195] team0: Port device geneve1 added [ 1340.567792][T22209] device sit0 left promiscuous mode [ 1340.732422][T22215] device sit0 entered promiscuous mode [ 1341.734377][T22226] device syzkaller0 entered promiscuous mode [ 1341.905712][T22238] netlink: 'syz.0.7091': attribute type 10 has an invalid length. [ 1341.914018][T22238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.953463][T22238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.010076][T22238] device batadv_slave_0 entered promiscuous mode [ 1342.031845][T22238] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1342.095270][T22244] device syzkaller0 entered promiscuous mode [ 1342.764828][T22259] delete_channel: no stack [ 1342.771200][T22259] delete_channel: no stack [ 1342.885581][T22259] device syzkaller0 entered promiscuous mode [ 1345.887215][T22275] netlink: 'syz.4.7095': attribute type 6 has an invalid length. [ 1345.902918][T22275] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7095'. [ 1345.917773][T22274] netlink: 'syz.3.7096': attribute type 10 has an invalid length. [ 1345.937343][T22274] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.956884][T22274] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.966997][T22274] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.028052][T22274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.061862][T22274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.072305][T22274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.084618][T22274] device geneve1 entered promiscuous mode [ 1346.094790][T22274] team0: Port device geneve1 added [ 1346.644601][T22296] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7113'. [ 1346.843948][T22302] netlink: 'syz.6.7103': attribute type 10 has an invalid length. [ 1346.875202][T22302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.106472][T22302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.171071][T22302] device batadv_slave_0 entered promiscuous mode [ 1347.225995][T22302] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1347.672147][T22315] device syzkaller0 entered promiscuous mode [ 1348.164689][T22331] IPv6: sit2: Disabled Multicast RS [ 1348.196740][T22330] netlink: 'syz.7.7118': attribute type 2 has an invalid length. [ 1348.285866][T22330] device 3 entered promiscuous mode [ 1348.618605][T22343] device sit0 left promiscuous mode [ 1349.188172][T22347] device sit0 entered promiscuous mode [ 1349.642923][T22360] netlink: 'syz.4.7126': attribute type 10 has an invalid length. [ 1349.655982][T22360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.706360][T22360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.768945][T22360] device batadv_slave_0 entered promiscuous mode [ 1349.777553][T22360] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1349.818656][T22364] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7129'. [ 1350.570795][T22377] netlink: 'syz.6.7133': attribute type 2 has an invalid length. [ 1350.715007][T22377] device 1 entered promiscuous mode [ 1350.727527][T22381] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.7135'. [ 1350.844539][T22384] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7136'. [ 1351.765738][T22404] netlink: 'syz.0.7154': attribute type 2 has an invalid length. [ 1351.850312][T22404] device 1 entered promiscuous mode [ 1351.994131][T22408] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.7156'. [ 1352.082705][T22411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7145'. [ 1352.405071][T22420] netlink: 'syz.7.7148': attribute type 10 has an invalid length. [ 1352.444300][T22420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.490979][T22420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.557932][T22420] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1353.442476][T22436] netlink: 'syz.4.7159': attribute type 2 has an invalid length. [ 1353.548606][T22436] device 3 entered promiscuous mode [ 1353.566342][T22435] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7155'. [ 1353.960297][T14323] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 1354.210314][T22457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7160'. [ 1354.879491][T22470] netlink: 'syz.3.7170': attribute type 2 has an invalid length. [ 1354.902120][T22474] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.7169'. [ 1355.037130][T22470] device 2 entered promiscuous mode [ 1355.374810][T22486] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7174'. [ 1355.582957][T14323] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 1356.511636][T22515] netlink: 'syz.7.7186': attribute type 2 has an invalid length. [ 1356.626244][T22515] device 4 entered promiscuous mode [ 1357.144435][T22529] netlink: 'syz.0.7202': attribute type 2 has an invalid length. [ 1357.247829][T22529] device 2 entered promiscuous mode [ 1358.020443][T14323] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1358.029592][T14323] Bluetooth: hci2: Injecting HCI hardware error event [ 1358.046146][T14323] Bluetooth: hci2: hardware error 0x00 [ 1358.160627][T22556] netlink: 'syz.4.7204': attribute type 10 has an invalid length. [ 1358.189323][T22556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7204'. [ 1358.903715][T22569] netlink: 'syz.3.7210': attribute type 2 has an invalid length. [ 1359.029563][T22569] device 3 entered promiscuous mode [ 1359.619112][T22555] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1359.627980][T22555] Bluetooth: hci4: Injecting HCI hardware error event [ 1359.636940][T22555] Bluetooth: hci4: hardware error 0x00 [ 1359.828847][T22582] delete_channel: no stack [ 1360.004242][T22585] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1360.076880][T22592] device sit0 left promiscuous mode [ 1360.181307][T22593] device sit0 entered promiscuous mode [ 1360.194026][T14323] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1361.437649][T22611] netlink: 'syz.7.7225': attribute type 2 has an invalid length. [ 1361.610380][T22611] device 5 entered promiscuous mode [ 1361.621080][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.627466][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.709046][T22555] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1362.113179][T22623] delete_channel: no stack [ 1362.227965][T22630] device syzkaller0 entered promiscuous mode [ 1363.651575][T22653] netlink: 'syz.6.7241': attribute type 2 has an invalid length. [ 1365.356077][T22646] netlink: 64985 bytes leftover after parsing attributes in process `syz.7.7249'. [ 1365.375351][T22653] device 2 entered promiscuous mode [ 1365.724752][T22655] netlink: 766 bytes leftover after parsing attributes in process `syz.0.7253'. [ 1365.972844][T22666] delete_channel: no stack [ 1368.274772][T22710] netlink: 766 bytes leftover after parsing attributes in process `syz.7.7261'. [ 1368.429252][T22710] device bond_slave_0 entered promiscuous mode [ 1368.435991][T22710] device bond_slave_1 entered promiscuous mode [ 1368.442584][T22710] device team_slave_0 entered promiscuous mode [ 1368.450397][T22710] device team_slave_1 entered promiscuous mode [ 1368.456645][T22710] device netdevsim0 entered promiscuous mode [ 1368.462848][T22710] device batadv_slave_0 entered promiscuous mode [ 1368.569263][T22713] delete_channel: no stack [ 1369.287265][T22721] device sit0 left promiscuous mode [ 1369.625724][T22721] device sit0 entered promiscuous mode [ 1370.496364][T22744] delete_channel: no stack [ 1370.552749][T22750] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1373.515813][T22793] netlink: 766 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1376.110442][T22835] netlink: 766 bytes leftover after parsing attributes in process `syz.6.7311'. [ 1378.620311][T22870] device syzkaller0 entered promiscuous mode [ 1382.047380][T22922] netlink: 766 bytes leftover after parsing attributes in process `syz.7.7349'. [ 1389.079703][T22980] device syzkaller0 entered promiscuous mode [ 1389.523776][T22993] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.7379'. [ 1389.547178][T22993] netlink: 'syz.3.7379': attribute type 21 has an invalid length. [ 1389.580212][T22993] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7379'. [ 1389.831983][T23001] netlink: 'syz.6.7381': attribute type 2 has an invalid length. [ 1389.881908][T23001] netlink: 'syz.6.7381': attribute type 2 has an invalid length. [ 1391.402538][T23031] device syzkaller0 entered promiscuous mode [ 1392.197107][T23043] netlink: 'syz.0.7398': attribute type 2 has an invalid length. [ 1392.285154][T23047] netlink: 'syz.0.7398': attribute type 2 has an invalid length. [ 1392.978466][T23055] netlink: 15231 bytes leftover after parsing attributes in process `syz.7.7399'. [ 1393.053141][T23056] netlink: 'syz.7.7399': attribute type 21 has an invalid length. [ 1393.205835][T23056] netlink: 156 bytes leftover after parsing attributes in process `syz.7.7399'. [ 1393.874930][T23069] device syzkaller0 entered promiscuous mode [ 1396.208644][T23115] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.7420'. [ 1396.256823][T23115] netlink: 'syz.0.7420': attribute type 21 has an invalid length. [ 1396.312912][T23115] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7420'. [ 1397.658001][T23125] device syzkaller0 entered promiscuous mode [ 1399.929910][T23166] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1400.028406][T23167] netlink: 'syz.6.7440': attribute type 21 has an invalid length. [ 1400.204195][T23167] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1400.371948][T23170] netlink: 'syz.0.7445': attribute type 10 has an invalid length. [ 1400.386426][T23170] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1406.815452][T23278] netlink: 'syz.3.7485': attribute type 10 has an invalid length. [ 1406.845553][T23278] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1412.297867][T23365] netlink: 'syz.4.7513': attribute type 10 has an invalid length. [ 1412.325935][T23365] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1416.433813][T23447] netlink: 'syz.6.7547': attribute type 10 has an invalid length. [ 1416.552839][T23447] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1416.897883][T23452] device syzkaller0 entered promiscuous mode [ 1417.329363][T23469] netlink: 'syz.0.7553': attribute type 17 has an invalid length. [ 1417.367134][T23469] netlink: 'syz.0.7553': attribute type 16 has an invalid length. [ 1417.398181][T23469] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7553'. [ 1419.730691][T23500] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1419.811927][T23500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1421.240149][T23509] netlink: 'syz.0.7575': attribute type 10 has an invalid length. [ 1421.442640][T23508] netlink: 67 bytes leftover after parsing attributes in process `syz.6.7576'. [ 1421.828395][T23528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1421.836007][T23528] IPv6: NLM_F_CREATE should be set when creating new route [ 1421.844071][T23528] IPv6: NLM_F_CREATE should be set when creating new route [ 1421.851657][T23528] IPv6: NLM_F_CREATE should be set when creating new route [ 1422.055959][T23530] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1423.122658][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.129512][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.634463][T23560] netlink: 'syz.6.7584': attribute type 10 has an invalid length. [ 1423.743351][T23560] device wlan1 entered promiscuous mode [ 1423.780674][T23560] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1425.270115][T23580] netlink: 'syz.4.7590': attribute type 17 has an invalid length. [ 1425.338734][T23580] netlink: 'syz.4.7590': attribute type 16 has an invalid length. [ 1425.346937][T23580] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7590'. [ 1425.721128][T23579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1429.207455][T23627] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1429.671088][T23636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1429.772440][T23636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.066704][T23650] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7616'. [ 1432.778686][T23670] netlink: 67 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1433.691312][T23697] netlink: 'syz.3.7632': attribute type 10 has an invalid length. [ 1434.156923][T23702] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1436.349373][T23734] netlink: 67 bytes leftover after parsing attributes in process `syz.7.7642'. [ 1436.607100][T23745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.691943][T23746] netlink: 'syz.6.7650': attribute type 10 has an invalid length. [ 1436.763107][T23746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.409990][T23772] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1441.280560][T23822] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1441.447179][T23825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1441.509639][T23825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1441.542280][T23829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1441.817776][T23838] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1441.898207][T23838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1443.721357][T23874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1443.795452][T23874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1444.395215][T23887] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1444.615171][T23887] device syzkaller0 entered promiscuous mode [ 1448.349418][T23897] netlink: 67 bytes leftover after parsing attributes in process `syz.4.7707'. [ 1448.797691][T23922] netlink: 'syz.6.7716': attribute type 39 has an invalid length. [ 1448.967162][T23926] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 1449.669442][T23946] netlink: 67 bytes leftover after parsing attributes in process `syz.3.7728'. [ 1451.305531][T23974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1453.086036][T24018] netlink: 67 bytes leftover after parsing attributes in process `syz.7.7754'. [ 1454.297171][T24045] netlink: 67 bytes leftover after parsing attributes in process `syz.3.7774'. [ 1458.701930][T24119] netlink: 67 bytes leftover after parsing attributes in process `syz.6.7787'. [ 1459.325820][T24143] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1459.523433][T24143] device syzkaller0 entered promiscuous mode [ 1462.703989][T24163] netlink: 'syz.0.7810': attribute type 15 has an invalid length. [ 1462.722194][T24163] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.7810'. [ 1463.128074][T24171] netlink: 'syz.6.7801': attribute type 8 has an invalid length. [ 1463.162136][T24171] netlink: 399 bytes leftover after parsing attributes in process `syz.6.7801'. [ 1464.294108][T24196] netlink: 'syz.4.7814': attribute type 21 has an invalid length. [ 1464.329883][T24196] netlink: 'syz.4.7814': attribute type 6 has an invalid length. [ 1464.374092][T24196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1464.760247][T24209] netlink: 'syz.4.7819': attribute type 21 has an invalid length. [ 1464.818298][T24209] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7819'. [ 1466.313019][T24237] netlink: 'syz.3.7831': attribute type 21 has an invalid length. [ 1466.395146][T24237] netlink: 'syz.3.7831': attribute type 6 has an invalid length. [ 1466.486901][T24237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7831'. [ 1470.637674][T24291] device syzkaller0 entered promiscuous mode [ 1471.315193][T24295] netlink: 'syz.0.7853': attribute type 21 has an invalid length. [ 1471.369506][T24295] netlink: 'syz.0.7853': attribute type 6 has an invalid length. [ 1471.409251][T24295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1472.126127][T24302] netlink: 'syz.7.7855': attribute type 8 has an invalid length. [ 1472.140462][T24302] netlink: 399 bytes leftover after parsing attributes in process `syz.7.7855'. [ 1472.864957][T24329] bond0: (slave team0): Error: Slave device does not support XDP [ 1473.234158][T24333] device syzkaller0 entered promiscuous mode [ 1473.281254][T24337] netlink: 'syz.7.7867': attribute type 21 has an invalid length. [ 1473.300979][T24337] netlink: 'syz.7.7867': attribute type 6 has an invalid length. [ 1473.315558][T24337] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7867'. [ 1474.137619][T24358] netlink: 'syz.3.7874': attribute type 8 has an invalid length. [ 1474.153119][T24358] netlink: 399 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1474.276935][T24361] bridge0: port 4(batadv_slave_1) entered disabled state [ 1474.290914][T24361] bridge0: port 3(bond0) entered disabled state [ 1474.303088][T24361] device bridge_slave_1 left promiscuous mode [ 1474.309871][T24361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.321807][T24361] device bridge_slave_0 left promiscuous mode [ 1474.328603][T24361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.375985][T24361] team0: Port device bridge0 removed [ 1474.957284][T24369] bond0: (slave team0): Error: Slave device does not support XDP [ 1475.247144][T24379] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1475.306137][T24379] device syzkaller0 entered promiscuous mode [ 1477.993486][T24385] netlink: 'syz.6.7882': attribute type 21 has an invalid length. [ 1478.001970][T24385] netlink: 'syz.6.7882': attribute type 6 has an invalid length. [ 1478.009963][T24385] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7882'. [ 1479.242558][T24431] bond0: (slave team0): Error: Slave device does not support XDP [ 1479.701385][T24444] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1479.786219][T24444] device syzkaller0 entered promiscuous mode [ 1482.734733][T24479] bond0: (slave team0): Error: Slave device does not support XDP [ 1484.500645][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.507053][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.241503][T24570] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1486.266843][T24570] device syzkaller0 entered promiscuous mode [ 1488.812797][T24586] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1488.823668][T24586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1488.834098][T24586] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1490.600499][T24611] netlink: 'syz.4.7972': attribute type 21 has an invalid length. [ 1490.621052][T24611] netlink: 'syz.4.7972': attribute type 6 has an invalid length. [ 1490.633922][T24611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7972'. [ 1491.423743][T24634] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1491.660838][T24634] device syzkaller0 entered promiscuous mode [ 1494.723744][T24653] netlink: 'syz.4.7989': attribute type 21 has an invalid length. [ 1494.738795][T24653] netlink: 'syz.4.7989': attribute type 6 has an invalid length. [ 1494.746602][T24653] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7989'. [ 1495.405016][T24680] netlink: 'syz.6.8001': attribute type 9 has an invalid length. [ 1495.414220][T24680] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.8001'. [ 1496.069948][T24694] netlink: 'syz.3.8005': attribute type 21 has an invalid length. [ 1496.147602][T24694] netlink: 'syz.3.8005': attribute type 6 has an invalid length. [ 1496.190039][T24694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8005'. [ 1497.103727][T24724] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1497.808894][T24736] netlink: 'syz.7.8021': attribute type 21 has an invalid length. [ 1497.819639][T24736] netlink: 'syz.7.8021': attribute type 6 has an invalid length. [ 1497.828772][T24736] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8021'. [ 1499.156413][T24776] bond0: (slave team0): Error: Slave device does not support XDP [ 1499.989157][T24780] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1500.049667][T24780] device syzkaller0 entered promiscuous mode [ 1500.074560][T24782] netlink: 'syz.0.8039': attribute type 21 has an invalid length. [ 1500.089171][T24782] netlink: 'syz.0.8039': attribute type 6 has an invalid length. [ 1500.097091][T24782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8039'. [ 1502.957536][T24818] netlink: 'syz.4.8054': attribute type 21 has an invalid length. [ 1503.040184][T24818] netlink: 'syz.4.8054': attribute type 6 has an invalid length. [ 1503.068547][T24818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8054'. [ 1503.303119][T24826] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1503.737347][T24837] netlink: 'syz.4.8058': attribute type 10 has an invalid length. [ 1503.883662][T24837] team0: Device veth1_vlan is already a lower device of the team interface [ 1504.757890][T24866] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1505.075145][T24880] netlink: 'syz.6.8075': attribute type 10 has an invalid length. [ 1505.123757][T24880] team0: Device veth1_vlan failed to register rx_handler [ 1506.199855][T24915] netlink: 'syz.0.8090': attribute type 29 has an invalid length. [ 1506.221138][T24915] netlink: 'syz.0.8090': attribute type 29 has an invalid length. [ 1506.269650][T24922] netlink: 'syz.0.8090': attribute type 29 has an invalid length. [ 1506.284148][T24919] netlink: 'syz.3.8092': attribute type 11 has an invalid length. [ 1506.479967][T24928] netlink: 'syz.7.8093': attribute type 10 has an invalid length. [ 1506.574888][T24928] team0: Device veth1_vlan failed to register rx_handler [ 1506.687914][T24930] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1506.719342][T24930] device syzkaller0 entered promiscuous mode [ 1509.177779][T24942] netlink: 'syz.7.8100': attribute type 21 has an invalid length. [ 1509.185854][T24942] netlink: 'syz.7.8100': attribute type 6 has an invalid length. [ 1509.193683][T24942] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8100'. [ 1509.389123][T24956] device sit0 left promiscuous mode [ 1509.558952][T24960] device sit0 entered promiscuous mode [ 1510.302266][T24975] netlink: 'syz.4.8115': attribute type 11 has an invalid length. [ 1510.433960][T24983] netlink: 'syz.6.8119': attribute type 29 has an invalid length. [ 1510.513332][T24983] netlink: 'syz.6.8119': attribute type 29 has an invalid length. [ 1510.536070][T24986] netlink: 'syz.6.8119': attribute type 29 has an invalid length. [ 1510.581896][T24988] netlink: 'syz.4.8121': attribute type 10 has an invalid length. [ 1510.697109][T24988] device hsr_slave_0 left promiscuous mode [ 1511.845259][T25028] netlink: 'syz.7.8139': attribute type 11 has an invalid length. [ 1512.193118][T25035] netlink: 'syz.3.8143': attribute type 29 has an invalid length. [ 1512.230134][T25035] netlink: 'syz.3.8143': attribute type 29 has an invalid length. [ 1512.274406][T25035] netlink: 'syz.3.8143': attribute type 29 has an invalid length. [ 1512.573736][T25051] netlink: 'syz.6.8149': attribute type 10 has an invalid length. [ 1512.726710][T25051] device hsr_slave_0 left promiscuous mode [ 1512.895470][T25059] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1513.079494][T25067] netlink: 'syz.6.8155': attribute type 11 has an invalid length. [ 1514.055373][T25091] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1514.082582][T25091] device syzkaller0 entered promiscuous mode [ 1516.502007][T25109] validate_nla: 1 callbacks suppressed [ 1516.502044][T25109] netlink: 'syz.3.8171': attribute type 10 has an invalid length. [ 1516.559350][T25109] team0: Device veth1_vlan failed to register rx_handler [ 1517.889337][T25136] netlink: 67 bytes leftover after parsing attributes in process `syz.7.8180'. [ 1519.601433][T25170] netlink: 'syz.0.8193': attribute type 10 has an invalid length. [ 1520.262015][T25170] device hsr_slave_0 left promiscuous mode [ 1520.321310][T25175] device sit0 left promiscuous mode [ 1520.386085][T25178] device sit0 entered promiscuous mode [ 1520.792831][T25185] netlink: 'syz.0.8201': attribute type 10 has an invalid length. [ 1520.855796][T25185] team0: Device veth1_vlan is already a lower device of the team interface [ 1521.401350][T25206] netlink: 'syz.4.8208': attribute type 10 has an invalid length. [ 1521.509003][T25206] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1521.562541][T25213] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8210'. [ 1521.591637][T25213] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1523.332268][T25244] netlink: 'syz.7.8225': attribute type 29 has an invalid length. [ 1523.372978][T25244] netlink: 'syz.7.8225': attribute type 29 has an invalid length. [ 1523.385694][T25244] netlink: 'syz.7.8225': attribute type 29 has an invalid length. [ 1524.590018][T25260] netlink: 67 bytes leftover after parsing attributes in process `syz.4.8226'. [ 1526.335971][T25282] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8237'. [ 1526.401087][T25282] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1527.115406][T25309] delete_channel: no stack [ 1527.134425][T25309] delete_channel: no stack [ 1527.210106][T25310] netlink: 'syz.6.8249': attribute type 39 has an invalid length. [ 1527.336845][T25317] netlink: 'syz.4.8252': attribute type 10 has an invalid length. [ 1527.380262][T25317] team0: Device wlan1 is of different type [ 1528.647330][T25337] netlink: 67 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1528.800988][T25339] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8262'. [ 1528.864702][T25339] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1529.685918][T25364] netlink: 'syz.4.8273': attribute type 10 has an invalid length. [ 1529.708374][T25364] team0: Device wlan1 is of different type [ 1530.404656][T25389] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8278'. [ 1530.424688][T25389] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1531.147497][T25405] netlink: 'syz.6.8285': attribute type 10 has an invalid length. [ 1531.262009][T25405] bond0: (slave wlan1): Releasing backup interface [ 1531.344792][T25405] device wlan1 left promiscuous mode [ 1531.401206][T25405] team0: Port device wlan1 added [ 1532.078415][T25433] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8298'. [ 1532.200296][T25433] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1534.789830][T25478] netlink: 'syz.6.8319': attribute type 10 has an invalid length. [ 1535.578874][T25485] netlink: 'syz.3.8322': attribute type 10 has an invalid length. [ 1535.591746][T25485] device wlan1 entered promiscuous mode [ 1535.600259][T25485] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1535.937634][T25496] netlink: 'syz.0.8325': attribute type 10 has an invalid length. [ 1536.023713][T25496] device wlan1 entered promiscuous mode [ 1536.048783][T25496] team0: Port device wlan1 added [ 1536.978903][T25519] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8333'. [ 1537.757123][T25535] netlink: 'syz.4.8339': attribute type 39 has an invalid length. [ 1538.359600][T25541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8337'. [ 1538.369864][T25541] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1538.524936][T25545] netlink: 'syz.3.8342': attribute type 10 has an invalid length. [ 1538.663361][T25545] bond0: (slave wlan1): Releasing backup interface [ 1538.740326][T25545] device wlan1 left promiscuous mode [ 1538.785472][T25545] device wlan1 entered promiscuous mode [ 1538.811254][T25545] team0: Port device wlan1 added [ 1538.854144][T25553] netlink: 'syz.7.8347': attribute type 10 has an invalid length. [ 1538.880105][T25553] device wlan1 entered promiscuous mode [ 1538.887034][T25553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1539.198635][T25565] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1540.139299][T25589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8358'. [ 1540.169098][T25589] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1540.258936][T25590] netlink: 10 bytes leftover after parsing attributes in process `syz.6.8359'. [ 1541.743794][T25623] netlink: 'syz.3.8372': attribute type 39 has an invalid length. [ 1543.119027][T25667] netlink: 10 bytes leftover after parsing attributes in process `syz.7.8385'. [ 1543.711702][T25691] netlink: 'syz.7.8397': attribute type 10 has an invalid length. [ 1543.753833][T25691] bond0: (slave wlan1): Releasing backup interface [ 1543.779631][T25691] device wlan1 left promiscuous mode [ 1543.796061][T25691] device wlan1 entered promiscuous mode [ 1543.819363][T25691] team0: Port device wlan1 added [ 1544.071235][T25705] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1545.361885][T25756] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.8424'. [ 1545.374000][T25756] netlink: zone id is out of range [ 1545.382668][T25756] netlink: zone id is out of range [ 1545.399060][T25756] netlink: zone id is out of range [ 1545.415293][T25756] netlink: zone id is out of range [ 1545.949817][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.956203][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.623337][T25803] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8442'. [ 1547.271526][T25826] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.8447'. [ 1547.298689][T25826] netlink: zone id is out of range [ 1547.306453][T25826] netlink: zone id is out of range [ 1547.326969][T25826] netlink: zone id is out of range [ 1547.358867][T25826] netlink: zone id is out of range [ 1549.133414][T25900] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.8478'. [ 1549.152676][T25900] netlink: zone id is out of range [ 1549.159026][T25900] netlink: zone id is out of range [ 1549.165007][T25900] netlink: zone id is out of range [ 1549.175268][T25900] netlink: zone id is out of range [ 1550.820743][T25968] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8510'. [ 1550.907893][T25971] netlink: 'syz.0.8513': attribute type 39 has an invalid length. [ 1552.141569][T26017] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.8530'. [ 1552.164385][T26017] netlink: zone id is out of range [ 1552.176107][T26017] netlink: zone id is out of range [ 1552.200490][T26017] netlink: zone id is out of range [ 1552.206745][T26017] netlink: zone id is out of range [ 1552.678743][T26039] netlink: 'syz.3.8542': attribute type 10 has an invalid length. [ 1552.745861][T26039] device bridge_slave_1 entered promiscuous mode [ 1552.771664][T26039] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1556.203680][T26139] netlink: 'syz.4.8585': attribute type 28 has an invalid length. [ 1556.251790][T26147] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.8584'. [ 1556.290498][T26147] netlink: zone id is out of range [ 1556.298951][T26147] netlink: zone id is out of range [ 1556.319008][T26147] netlink: zone id is out of range [ 1556.329413][T26147] netlink: zone id is out of range [ 1557.181378][T26171] netlink: 'syz.7.8597': attribute type 10 has an invalid length. [ 1557.252914][T26171] device bridge_slave_1 entered promiscuous mode [ 1557.284521][T26171] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1557.572696][T26176] netlink: 'syz.0.8610': attribute type 28 has an invalid length. [ 1558.252452][T26205] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8612'. [ 1558.295035][T26205] netlink: zone id is out of range [ 1558.322474][T26206] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.8608'. [ 1558.373440][T26205] netlink: del zone limit has 4 unknown bytes [ 1558.381281][T26206] netlink: zone id is out of range [ 1558.387215][T26206] netlink: zone id is out of range [ 1558.396186][T26206] netlink: zone id is out of range [ 1558.409623][T26206] netlink: zone id is out of range [ 1558.815171][T26221] netlink: 'syz.3.8617': attribute type 28 has an invalid length. [ 1560.006960][T26259] netlink: 'syz.7.8633': attribute type 28 has an invalid length. [ 1560.840029][T26286] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.8647'. [ 1562.228675][T26322] netlink: 'syz.6.8662': attribute type 28 has an invalid length. [ 1563.490643][T26365] netlink: 'syz.0.8679': attribute type 28 has an invalid length. [ 1565.607986][T26404] netlink: 'syz.0.8697': attribute type 28 has an invalid length. [ 1570.858257][T26545] netlink: 'syz.6.8753': attribute type 10 has an invalid length. [ 1570.866559][T26545] netlink: 'syz.6.8753': attribute type 10 has an invalid length. [ 1571.765970][T26582] IPv6: NLM_F_CREATE should be specified when creating new route [ 1571.808837][T26582] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8769'. [ 1571.847318][T26583] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.8766'. [ 1571.871757][T26583] net_ratelimit: 2 callbacks suppressed [ 1571.871790][T26583] netlink: zone id is out of range [ 1571.884129][T26583] netlink: zone id is out of range [ 1571.890805][T26583] netlink: zone id is out of range [ 1571.924549][T26583] netlink: zone id is out of range [ 1572.092137][T26589] delete_channel: no stack [ 1573.117218][T26619] netlink: 'syz.3.8782': attribute type 10 has an invalid length. [ 1573.143026][T26619] netlink: 'syz.3.8782': attribute type 10 has an invalid length. [ 1573.772222][T26643] IPv6: NLM_F_CREATE should be specified when creating new route [ 1573.792240][T26643] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1574.523201][T26672] delete_channel: no stack [ 1574.607429][T26677] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.8803'. [ 1574.621052][T26677] netlink: zone id is out of range [ 1574.628866][T26677] netlink: zone id is out of range [ 1574.634157][T26677] netlink: zone id is out of range [ 1574.646186][T26677] netlink: zone id is out of range [ 1574.661424][T26679] IPv6: NLM_F_CREATE should be specified when creating new route [ 1574.671842][T26679] netlink: 1 bytes leftover after parsing attributes in process `syz.7.8804'. [ 1575.540481][T26704] delete_channel: no stack [ 1575.581548][T26707] IPv6: NLM_F_CREATE should be specified when creating new route [ 1575.604081][T26707] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8817'. [ 1576.135671][T26731] netlink: 'syz.7.8827': attribute type 10 has an invalid length. [ 1576.145120][T26731] netlink: 'syz.7.8827': attribute type 10 has an invalid length. [ 1576.420257][T26741] netlink: 'syz.3.8832': attribute type 10 has an invalid length. [ 1576.462360][T26741] netlink: 'syz.3.8832': attribute type 10 has an invalid length. [ 1576.785245][T26752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1576.860891][T26752] device caif0 entered promiscuous mode [ 1576.927024][T26759] IPv6: NLM_F_CREATE should be specified when creating new route [ 1576.936577][T26759] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8835'. [ 1577.373063][T26779] netlink: 'syz.3.8846': attribute type 10 has an invalid length. [ 1577.428723][T26779] netlink: 'syz.3.8846': attribute type 10 has an invalid length. [ 1577.942692][T26797] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8853'. [ 1578.765406][T26824] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.8861'. [ 1578.775787][T26824] netlink: zone id is out of range [ 1578.786416][T26824] netlink: zone id is out of range [ 1578.793554][T26824] netlink: zone id is out of range [ 1578.897100][T26826] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8865'. [ 1578.950345][T26826] device caif0 entered promiscuous mode [ 1579.847016][T26863] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8879'. [ 1579.886997][T26863] device caif0 entered promiscuous mode [ 1580.294740][T26886] netlink: 'syz.6.8889': attribute type 10 has an invalid length. [ 1580.303136][T26886] netlink: 'syz.6.8889': attribute type 10 has an invalid length. [ 1580.341617][T26888] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.8887'. [ 1580.361270][T26888] netlink: zone id is out of range [ 1580.372728][T26888] netlink: zone id is out of range [ 1580.384844][T26888] netlink: zone id is out of range [ 1580.642100][T26894] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8894'. [ 1580.685314][T26897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8895'. [ 1580.706875][T26897] device caif0 entered promiscuous mode [ 1580.867818][T26904] netlink: 'syz.6.8898': attribute type 15 has an invalid length. [ 1580.876300][T26904] netlink: 'syz.6.8898': attribute type 7 has an invalid length. [ 1581.579490][T26925] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8906'. [ 1581.652672][T26932] netlink: 'syz.6.8909': attribute type 10 has an invalid length. [ 1581.681618][T26932] netlink: 'syz.6.8909': attribute type 10 has an invalid length. [ 1582.673616][T26961] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8922'. [ 1582.952182][T26969] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.8925'. [ 1582.972505][T26976] netlink: 'syz.0.8927': attribute type 10 has an invalid length. [ 1582.993802][T26969] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1583.015732][T26969] CPU: 0 PID: 26969 Comm: syz.3.8925 Not tainted 6.1.147-syzkaller #0 [ 1583.023969][T26969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1583.034081][T26969] Call Trace: [ 1583.037401][T26969] [ 1583.040373][T26969] dump_stack_lvl+0x168/0x22e [ 1583.045148][T26969] ? show_regs_print_info+0x12/0x12 [ 1583.050403][T26969] ? load_image+0x3b0/0x3b0 [ 1583.054978][T26969] sysfs_warn_dup+0x8a/0xa0 [ 1583.059612][T26969] sysfs_do_create_link_sd+0xc0/0x110 [ 1583.065031][T26969] device_add+0x7ed/0xfb0 [ 1583.069472][T26969] wiphy_register+0x1e68/0x2bd0 [ 1583.074498][T26969] ? cfg80211_event_work+0x40/0x40 [ 1583.079667][T26969] ? minstrel_ht_alloc+0x894/0xa20 [ 1583.084889][T26969] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1583.091077][T26969] ieee80211_register_hw+0x2c29/0x38c0 [ 1583.096671][T26969] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1583.102269][T26969] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1583.107871][T26969] ? ieee80211_tasklet_handler+0x20/0x20 [ 1583.113569][T26969] ? memset+0x1e/0x40 [ 1583.117703][T26969] ? __hrtimer_init+0x186/0x270 [ 1583.122728][T26969] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1583.128602][T26969] hwsim_new_radio_nl+0xafa/0xce0 [ 1583.133712][T26969] genl_family_rcv_msg_doit+0x22e/0x320 [ 1583.139394][T26969] ? end_current_label_crit_section+0x170/0x170 [ 1583.145764][T26969] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1583.151810][T26969] ? bpf_lsm_capable+0x5/0x10 [ 1583.156594][T26969] ? security_capable+0x85/0xb0 [ 1583.161537][T26969] genl_rcv_msg+0x5f2/0x780 [ 1583.166100][T26969] ? genl_bind+0x350/0x350 [ 1583.170565][T26969] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1583.176967][T26969] netlink_rcv_skb+0x1de/0x420 [ 1583.181794][T26969] ? genl_bind+0x350/0x350 [ 1583.186258][T26969] ? netlink_ack+0x1100/0x1100 [ 1583.191080][T26969] ? down_read+0x1a8/0x2d0 [ 1583.195626][T26969] genl_rcv+0x24/0x40 [ 1583.199647][T26969] netlink_unicast+0x74d/0x8d0 [ 1583.204471][T26969] netlink_sendmsg+0x89e/0xbc0 [ 1583.209298][T26969] ? netlink_getsockopt+0x540/0x540 [ 1583.214551][T26969] ? aa_sock_msg_perm+0x94/0x150 [ 1583.219550][T26969] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1583.224924][T26969] ? security_socket_sendmsg+0x7c/0xa0 [ 1583.230482][T26969] ? netlink_getsockopt+0x540/0x540 [ 1583.235722][T26969] ____sys_sendmsg+0x59b/0x970 [ 1583.240564][T26969] ? __sys_sendmsg_sock+0x30/0x30 [ 1583.245641][T26969] ? __import_iovec+0x315/0x500 [ 1583.250620][T26969] ? import_iovec+0x6f/0xa0 [ 1583.255184][T26969] ___sys_sendmsg+0x21c/0x290 [ 1583.260002][T26969] ? __sys_sendmsg+0x270/0x270 [ 1583.264870][T26969] ? __fdget+0x17c/0x200 [ 1583.269169][T26969] __se_sys_sendmsg+0x19e/0x270 [ 1583.274072][T26969] ? perf_trace_preemptirq_template+0x287/0x330 [ 1583.280441][T26969] ? __x64_sys_sendmsg+0x80/0x80 [ 1583.285464][T26969] ? lockdep_hardirqs_on+0x94/0x140 [ 1583.290789][T26969] do_syscall_64+0x4c/0xa0 [ 1583.295245][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1583.299962][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1583.304685][T26969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.310639][T26969] RIP: 0033:0x7f911518e9a9 [ 1583.315094][T26969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.334837][T26969] RSP: 002b:00007f9115ff5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1583.343300][T26969] RAX: ffffffffffffffda RBX: 00007f91153b5fa0 RCX: 00007f911518e9a9 [ 1583.351315][T26969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1583.359321][T26969] RBP: 00007f9115210d69 R08: 0000000000000000 R09: 0000000000000000 [ 1583.367340][T26969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.375348][T26969] R13: 0000000000000000 R14: 00007f91153b5fa0 R15: 00007fff7e87d398 [ 1583.383386][T26969] [ 1583.412548][T26976] netlink: 'syz.0.8927': attribute type 10 has an invalid length. [ 1584.346830][T27017] netlink: 'syz.3.8943': attribute type 10 has an invalid length. [ 1584.442669][T27017] netlink: 'syz.3.8943': attribute type 10 has an invalid length. [ 1584.512659][T27020] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1584.535430][T27019] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.8944'. [ 1584.571674][T27020] netlink: zone id is out of range [ 1584.592437][T27020] netlink: zone id is out of range [ 1584.604608][T27019] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1584.609483][T27020] netlink: zone id is out of range [ 1584.616860][T27019] CPU: 0 PID: 27019 Comm: syz.6.8944 Not tainted 6.1.147-syzkaller #0 [ 1584.627092][T27019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1584.630670][T27020] netlink: zone id is out of range [ 1584.637164][T27019] Call Trace: [ 1584.637179][T27019] [ 1584.637190][T27019] dump_stack_lvl+0x168/0x22e [ 1584.637225][T27019] ? show_regs_print_info+0x12/0x12 [ 1584.637250][T27019] ? load_image+0x3b0/0x3b0 [ 1584.637299][T27019] sysfs_warn_dup+0x8a/0xa0 [ 1584.637329][T27019] sysfs_do_create_link_sd+0xc0/0x110 [ 1584.637361][T27019] device_add+0x7ed/0xfb0 [ 1584.637404][T27019] wiphy_register+0x1e68/0x2bd0 [ 1584.637453][T27019] ? cfg80211_event_work+0x40/0x40 [ 1584.637477][T27019] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1584.637520][T27019] ieee80211_register_hw+0x2c29/0x38c0 [ 1584.637559][T27019] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1584.637582][T27019] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1584.637615][T27019] ? ieee80211_tasklet_handler+0x20/0x20 [ 1584.637652][T27019] ? memset+0x1e/0x40 [ 1584.720151][T27019] ? __hrtimer_init+0x186/0x270 [ 1584.725047][T27019] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1584.730809][T27019] hwsim_new_radio_nl+0xafa/0xce0 [ 1584.735862][T27019] genl_family_rcv_msg_doit+0x22e/0x320 [ 1584.741446][T27019] ? end_current_label_crit_section+0x170/0x170 [ 1584.747713][T27019] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1584.753628][T27019] ? bpf_lsm_capable+0x5/0x10 [ 1584.758319][T27019] ? security_capable+0x85/0xb0 [ 1584.763187][T27019] genl_rcv_msg+0x5f2/0x780 [ 1584.767711][T27019] ? genl_bind+0x350/0x350 [ 1584.772150][T27019] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1584.778529][T27019] netlink_rcv_skb+0x1de/0x420 [ 1584.783348][T27019] ? genl_bind+0x350/0x350 [ 1584.787831][T27019] ? netlink_ack+0x1100/0x1100 [ 1584.792658][T27019] ? down_read+0x1a8/0x2d0 [ 1584.797121][T27019] genl_rcv+0x24/0x40 [ 1584.801156][T27019] netlink_unicast+0x74d/0x8d0 [ 1584.805977][T27019] netlink_sendmsg+0x89e/0xbc0 [ 1584.810799][T27019] ? netlink_getsockopt+0x540/0x540 [ 1584.816048][T27019] ? aa_sock_msg_perm+0x94/0x150 [ 1584.821038][T27019] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1584.826357][T27019] ? security_socket_sendmsg+0x7c/0xa0 [ 1584.831861][T27019] ? netlink_getsockopt+0x540/0x540 [ 1584.837081][T27019] ____sys_sendmsg+0x59b/0x970 [ 1584.841867][T27019] ? __sys_sendmsg_sock+0x30/0x30 [ 1584.846898][T27019] ? __import_iovec+0x315/0x500 [ 1584.851772][T27019] ? import_iovec+0x6f/0xa0 [ 1584.856295][T27019] ___sys_sendmsg+0x21c/0x290 [ 1584.861001][T27019] ? __sys_sendmsg+0x270/0x270 [ 1584.865842][T27019] ? __fdget+0x17c/0x200 [ 1584.870214][T27019] __se_sys_sendmsg+0x19e/0x270 [ 1584.875090][T27019] ? __x64_sys_sendmsg+0x80/0x80 [ 1584.880068][T27019] ? __x64_sys_sendmsg+0x4/0x80 [ 1584.884955][T27019] do_syscall_64+0x4c/0xa0 [ 1584.889404][T27019] ? clear_bhb_loop+0x60/0xb0 [ 1584.894109][T27019] ? clear_bhb_loop+0x60/0xb0 [ 1584.898799][T27019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.904753][T27019] RIP: 0033:0x7f5cc698e9a9 [ 1584.909307][T27019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.928953][T27019] RSP: 002b:00007f5cc7763038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.937392][T27019] RAX: ffffffffffffffda RBX: 00007f5cc6bb5fa0 RCX: 00007f5cc698e9a9 [ 1584.945383][T27019] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1584.953375][T27019] RBP: 00007f5cc6a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1584.961358][T27019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.969350][T27019] R13: 0000000000000000 R14: 00007f5cc6bb5fa0 R15: 00007fff87497c98 [ 1584.977366][T27019] [ 1585.336492][T27038] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.8951'. [ 1585.357859][T27038] netlink: zone id is out of range [ 1585.366894][T27038] netlink: zone id is out of range [ 1585.373001][T27038] netlink: zone id is out of range [ 1585.380028][T27038] netlink: zone id is out of range [ 1585.637873][T27050] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.8955'. [ 1585.676487][T27050] netlink: zone id is out of range [ 1585.696677][T27050] netlink: zone id is out of range [ 1586.000290][T27062] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8961'. [ 1586.139988][T27066] netlink: 'syz.6.8963': attribute type 10 has an invalid length. [ 1586.201659][T27066] netlink: 'syz.6.8963': attribute type 10 has an invalid length. [ 1587.536122][T27097] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.8972'. [ 1587.639403][T27101] netlink: 1 bytes leftover after parsing attributes in process `syz.7.8975'. [ 1587.724410][T27105] netlink: 'syz.0.8976': attribute type 10 has an invalid length. [ 1587.783424][T27105] netlink: 'syz.0.8976': attribute type 10 has an invalid length. [ 1588.129752][T27119] netlink: 'syz.6.8993': attribute type 10 has an invalid length. [ 1588.148275][T27119] netlink: 'syz.6.8993': attribute type 10 has an invalid length. [ 1588.328806][T27125] netlink: 'syz.7.8985': attribute type 2 has an invalid length. [ 1588.338427][T27125] netlink: 'syz.7.8985': attribute type 8 has an invalid length. [ 1588.352599][T27125] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8985'. [ 1588.377493][T27132] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1589.207121][T27146] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8994'. [ 1589.355671][T27149] netlink: 'syz.0.8995': attribute type 3 has an invalid length. [ 1589.376635][T27149] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8995'. [ 1589.502429][T27160] netlink: 'syz.3.9000': attribute type 10 has an invalid length. [ 1589.510668][T27160] netlink: 'syz.3.9000': attribute type 10 has an invalid length. [ 1589.601776][T27161] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.8999'. [ 1589.629026][T27161] net_ratelimit: 10 callbacks suppressed [ 1589.629063][T27161] netlink: zone id is out of range [ 1589.644457][T27161] netlink: zone id is out of range [ 1589.651209][T27161] netlink: zone id is out of range [ 1589.669046][T27161] netlink: zone id is out of range [ 1589.911172][T27173] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9005'. [ 1589.942893][T27173] netlink: zone id is out of range [ 1589.996561][T27173] netlink: zone id is out of range [ 1590.016867][T27175] netlink: 122896 bytes leftover after parsing attributes in process `syz.7.9006'. [ 1590.028331][T27173] netlink: zone id is out of range [ 1590.042269][T27173] netlink: zone id is out of range [ 1590.092646][T27177] netlink: 'syz.0.9007': attribute type 2 has an invalid length. [ 1590.109405][T27177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9007'. [ 1590.129042][T27175] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1590.138200][T27175] CPU: 0 PID: 27175 Comm: syz.7.9006 Not tainted 6.1.147-syzkaller #0 [ 1590.146430][T27175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1590.156532][T27175] Call Trace: [ 1590.159837][T27175] [ 1590.162808][T27175] dump_stack_lvl+0x168/0x22e [ 1590.167544][T27175] ? show_regs_print_info+0x12/0x12 [ 1590.172783][T27175] ? load_image+0x3b0/0x3b0 [ 1590.177350][T27175] sysfs_warn_dup+0x8a/0xa0 [ 1590.181912][T27175] sysfs_do_create_link_sd+0xc0/0x110 [ 1590.187346][T27175] device_add+0x7ed/0xfb0 [ 1590.191739][T27175] wiphy_register+0x1e68/0x2bd0 [ 1590.196653][T27175] ? cfg80211_event_work+0x40/0x40 [ 1590.201816][T27175] ? minstrel_ht_alloc+0x894/0xa20 [ 1590.206984][T27175] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1590.213126][T27175] ieee80211_register_hw+0x2c29/0x38c0 [ 1590.218642][T27175] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1590.224242][T27175] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1590.229851][T27175] ? ieee80211_tasklet_handler+0x20/0x20 [ 1590.235538][T27175] ? memset+0x1e/0x40 [ 1590.239578][T27175] ? __hrtimer_init+0x186/0x270 [ 1590.244440][T27175] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1590.250213][T27175] hwsim_new_radio_nl+0xafa/0xce0 [ 1590.255302][T27175] genl_family_rcv_msg_doit+0x22e/0x320 [ 1590.260887][T27175] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1590.266819][T27175] ? genl_rcv_msg+0x583/0x780 [ 1590.271535][T27175] genl_rcv_msg+0x5f2/0x780 [ 1590.276069][T27175] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1590.281909][T27175] ? genl_bind+0x350/0x350 [ 1590.286353][T27175] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1590.292725][T27175] netlink_rcv_skb+0x1de/0x420 [ 1590.297539][T27175] ? genl_bind+0x350/0x350 [ 1590.301984][T27175] ? netlink_ack+0x1100/0x1100 [ 1590.306794][T27175] ? lockdep_hardirqs_on+0x94/0x140 [ 1590.312030][T27175] ? down_read+0x1a8/0x2d0 [ 1590.316480][T27175] genl_rcv+0x24/0x40 [ 1590.320482][T27175] netlink_unicast+0x74d/0x8d0 [ 1590.325273][T27175] netlink_sendmsg+0x89e/0xbc0 [ 1590.330062][T27175] ? netlink_getsockopt+0x540/0x540 [ 1590.335375][T27175] ? aa_sock_msg_perm+0x94/0x150 [ 1590.340339][T27175] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1590.345647][T27175] ? security_socket_sendmsg+0x7c/0xa0 [ 1590.351142][T27175] ? netlink_getsockopt+0x540/0x540 [ 1590.356361][T27175] ____sys_sendmsg+0x59b/0x970 [ 1590.361156][T27175] ? __sys_sendmsg_sock+0x30/0x30 [ 1590.366201][T27175] ? __import_iovec+0x315/0x500 [ 1590.371085][T27175] ? import_iovec+0x6f/0xa0 [ 1590.375615][T27175] ___sys_sendmsg+0x21c/0x290 [ 1590.380315][T27175] ? __sys_sendmsg+0x270/0x270 [ 1590.385141][T27175] ? __fdget+0x17c/0x200 [ 1590.389411][T27175] __se_sys_sendmsg+0x19e/0x270 [ 1590.394286][T27175] ? __x64_sys_sendmsg+0x80/0x80 [ 1590.399256][T27175] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1590.405182][T27175] do_syscall_64+0x4c/0xa0 [ 1590.409625][T27175] ? clear_bhb_loop+0x60/0xb0 [ 1590.414316][T27175] ? clear_bhb_loop+0x60/0xb0 [ 1590.419023][T27175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1590.424972][T27175] RIP: 0033:0x7ff06b58e9a9 [ 1590.429454][T27175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.449096][T27175] RSP: 002b:00007ff06c38b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1590.457534][T27175] RAX: ffffffffffffffda RBX: 00007ff06b7b5fa0 RCX: 00007ff06b58e9a9 [ 1590.465637][T27175] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1590.473626][T27175] RBP: 00007ff06b610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1590.481612][T27175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.489603][T27175] R13: 0000000000000000 R14: 00007ff06b7b5fa0 R15: 00007fff5ad32ab8 [ 1590.497604][T27175] [ 1590.539504][T27180] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9008'. [ 1590.731378][T27180] device vlan0 left promiscuous mode [ 1590.736855][T27180] À: port 1(vlan0) entered disabled state [ 1591.714242][T27215] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1591.727051][T27215] netlink: zone id is out of range [ 1591.733189][T27215] netlink: zone id is out of range [ 1592.913561][T27253] validate_nla: 7 callbacks suppressed [ 1592.913654][T27253] netlink: 'syz.4.9036': attribute type 10 has an invalid length. [ 1592.969519][T27259] netlink: 'syz.3.9039': attribute type 2 has an invalid length. [ 1592.987736][T27259] netlink: 'syz.3.9039': attribute type 8 has an invalid length. [ 1593.294487][T27265] netlink: 'syz.7.9041': attribute type 10 has an invalid length. [ 1593.309722][T27265] netlink: 'syz.7.9041': attribute type 10 has an invalid length. [ 1593.474630][T27269] netlink: 'syz.4.9043': attribute type 3 has an invalid length. [ 1593.496133][T27269] __nla_validate_parse: 3 callbacks suppressed [ 1593.496172][T27269] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9043'. [ 1593.737322][T27283] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9047'. [ 1593.847461][T27285] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9049'. [ 1593.881785][T27289] ref_ctr_offset mismatch. inode: 0x2251 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 1593.913637][T27290] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9051'. [ 1594.510792][T27296] netlink: 'syz.3.9055': attribute type 10 has an invalid length. [ 1594.578826][T27300] netlink: 'syz.6.9054': attribute type 2 has an invalid length. [ 1594.607402][T27300] netlink: 'syz.6.9054': attribute type 8 has an invalid length. [ 1594.632991][T27300] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9054'. [ 1594.677388][T27302] netlink: 'syz.3.9056': attribute type 10 has an invalid length. [ 1594.885622][T27308] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.9059'. [ 1595.543007][T27324] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9062'. [ 1595.598858][T27324] net_ratelimit: 18 callbacks suppressed [ 1595.598877][T27324] netlink: zone id is out of range [ 1595.612374][T27321] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9063'. [ 1595.618728][T27324] netlink: zone id is out of range [ 1595.626742][T27324] netlink: zone id is out of range [ 1595.632473][T27324] netlink: zone id is out of range [ 1595.863707][T27321] device vlan0 left promiscuous mode [ 1595.870918][T27321] À: port 1(vlan0) entered disabled state [ 1596.083689][T27321] device macvlan0 left promiscuous mode [ 1596.108338][T27321] team0: Port device macvlan0 removed [ 1596.264074][T27331] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9066'. [ 1596.281365][T27331] netlink: zone id is out of range [ 1596.298415][T27331] netlink: zone id is out of range [ 1596.306047][T27331] netlink: zone id is out of range [ 1596.320081][T27331] netlink: zone id is out of range [ 1596.398645][T27333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1596.406217][T27333] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.413669][T27333] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.686721][T27342] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9069'. [ 1596.708589][T27342] netlink: zone id is out of range [ 1596.714657][T27342] netlink: zone id is out of range [ 1598.779299][T27367] __nla_validate_parse: 4 callbacks suppressed [ 1598.779318][T27367] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9091'. [ 1599.058201][T27370] ref_ctr_offset mismatch. inode: 0x23e3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 1599.080493][T27373] validate_nla: 9 callbacks suppressed [ 1599.080530][T27373] netlink: 'syz.6.9081': attribute type 10 has an invalid length. [ 1599.102493][T27373] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9081'. [ 1599.164794][T27378] netlink: 'syz.0.9084': attribute type 10 has an invalid length. [ 1599.438641][T27373] device vlan0 left promiscuous mode [ 1599.444897][T27373] À: port 1(vlan0) entered disabled state [ 1599.664706][T27378] netlink: 'syz.0.9084': attribute type 10 has an invalid length. [ 1599.673229][T27384] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1599.956711][T27393] netlink: 'syz.7.9090': attribute type 10 has an invalid length. [ 1600.069742][T27393] netlink: 'syz.7.9090': attribute type 10 has an invalid length. [ 1600.203871][T27401] netlink: 'syz.7.9095': attribute type 10 has an invalid length. [ 1600.436639][T27402] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9104'. [ 1600.782943][T27415] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9098'. [ 1600.816498][T27415] net_ratelimit: 17 callbacks suppressed [ 1600.816531][T27415] netlink: zone id is out of range [ 1600.851403][T27415] netlink: zone id is out of range [ 1600.869096][T27415] netlink: zone id is out of range [ 1600.889034][T27415] netlink: zone id is out of range [ 1601.082631][T27427] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9101'. [ 1601.093177][T27426] netlink: 'syz.6.9102': attribute type 10 has an invalid length. [ 1601.100060][T27427] netlink: zone id is out of range [ 1601.106276][T27427] netlink: zone id is out of range [ 1601.112217][T27426] netlink: 'syz.6.9102': attribute type 10 has an invalid length. [ 1601.118913][T27427] netlink: zone id is out of range [ 1601.326567][T27433] netlink: 'syz.6.9109': attribute type 10 has an invalid length. [ 1601.843295][T27449] netlink: 'syz.6.9116': attribute type 10 has an invalid length. [ 1602.100365][T27450] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9115'. [ 1602.116805][T27449] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1602.141662][T27450] netlink: zone id is out of range [ 1602.152359][T27450] netlink: zone id is out of range [ 1602.169116][T27450] netlink: zone id is out of range [ 1602.703752][T27469] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9122'. [ 1603.027510][T27476] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9135'. [ 1603.731135][T27487] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9141'. [ 1603.848158][T27491] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9133'. [ 1604.173255][T27504] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9137'. [ 1604.545323][T27514] validate_nla: 6 callbacks suppressed [ 1604.545347][T27514] netlink: 'syz.0.9143': attribute type 10 has an invalid length. [ 1604.560020][T27514] netlink: 'syz.0.9143': attribute type 10 has an invalid length. [ 1604.607564][T27516] netlink: 'syz.7.9144': attribute type 10 has an invalid length. [ 1604.619571][T27516] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1604.731753][T27523] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9145'. [ 1605.010824][T27530] netlink: 10 bytes leftover after parsing attributes in process `syz.7.9149'. [ 1605.227633][T27537] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9152'. [ 1605.552290][T27547] netlink: 'syz.3.9158': attribute type 10 has an invalid length. [ 1605.622880][T27547] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1605.643942][T27545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9157'. [ 1605.677180][T27550] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9159'. [ 1606.032330][T27556] netlink: 'syz.4.9162': attribute type 11 has an invalid length. [ 1606.050879][T27556] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.9162'. [ 1606.086153][T27555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.287354][T27568] netlink: 'syz.0.9177': attribute type 10 has an invalid length. [ 1607.308619][T27568] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1607.390129][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.396496][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.293244][T27568] device macvlan0 left promiscuous mode [ 1608.305389][T27568] team0: Port device macvlan0 removed [ 1608.714047][T27602] netlink: 'syz.4.9181': attribute type 10 has an invalid length. [ 1608.765693][T27602] netlink: 'syz.4.9181': attribute type 10 has an invalid length. [ 1608.774341][T27601] netlink: 'syz.7.9179': attribute type 39 has an invalid length. [ 1608.935668][T27600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9180'. [ 1609.093500][T27611] netlink: 'syz.0.9193': attribute type 10 has an invalid length. [ 1609.140228][T27611] netlink: 'syz.0.9193': attribute type 10 has an invalid length. [ 1609.735774][T27627] netlink: 'syz.0.9190': attribute type 10 has an invalid length. [ 1609.830081][T27627] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1609.892919][T27632] netlink: 'syz.7.9189': attribute type 10 has an invalid length. [ 1609.912045][T27632] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9189'. [ 1610.343012][T27632] device vlan0 left promiscuous mode [ 1610.356999][T27632] À: port 1(vlan0) entered disabled state [ 1610.698379][T27648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9196'. [ 1610.711953][T27654] netlink: 'syz.4.9199': attribute type 21 has an invalid length. [ 1610.722862][T27654] netlink: 'syz.4.9199': attribute type 1 has an invalid length. [ 1610.936775][T27660] netlink: 'syz.7.9203': attribute type 11 has an invalid length. [ 1610.968614][T27660] netlink: 173820 bytes leftover after parsing attributes in process `syz.7.9203'. [ 1611.034470][T27659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.139650][T27666] netlink: 'syz.4.9206': attribute type 10 has an invalid length. [ 1611.159023][T27666] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1611.318664][T27679] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9219'. [ 1611.331769][T27679] net_ratelimit: 23 callbacks suppressed [ 1611.331786][T27679] netlink: zone id is out of range [ 1611.347334][T27679] netlink: zone id is out of range [ 1611.364415][T27679] netlink: zone id is out of range [ 1611.385800][T27680] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1612.106402][T27689] netlink: 'syz.3.9214': attribute type 10 has an invalid length. [ 1612.120988][T27689] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9214'. [ 1612.185462][T27692] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9215'. [ 1612.197770][T27692] netlink: zone id is out of range [ 1612.204926][T27692] netlink: zone id is out of range [ 1612.211751][T27692] netlink: zone id is out of range [ 1612.228622][T27692] netlink: zone id is out of range [ 1612.306516][T27697] netlink: 'syz.3.9227': attribute type 10 has an invalid length. [ 1612.316171][T27697] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9227'. [ 1612.626571][T27700] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9217'. [ 1612.802976][T27700] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1612.829000][T27700] CPU: 0 PID: 27700 Comm: syz.0.9217 Not tainted 6.1.147-syzkaller #0 [ 1612.837246][T27700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1612.847354][T27700] Call Trace: [ 1612.850671][T27700] [ 1612.853658][T27700] dump_stack_lvl+0x168/0x22e [ 1612.858413][T27700] ? show_regs_print_info+0x12/0x12 [ 1612.863675][T27700] ? load_image+0x3b0/0x3b0 [ 1612.868444][T27700] sysfs_warn_dup+0x8a/0xa0 [ 1612.873007][T27700] sysfs_do_create_link_sd+0xc0/0x110 [ 1612.878441][T27700] device_add+0x7ed/0xfb0 [ 1612.882844][T27700] wiphy_register+0x1e68/0x2bd0 [ 1612.887775][T27700] ? cfg80211_event_work+0x40/0x40 [ 1612.892941][T27700] ? minstrel_ht_alloc+0x894/0xa20 [ 1612.898110][T27700] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1612.904242][T27700] ieee80211_register_hw+0x2c29/0x38c0 [ 1612.909771][T27700] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1612.915799][T27700] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1612.921401][T27700] ? ieee80211_tasklet_handler+0x20/0x20 [ 1612.927107][T27700] ? memset+0x1e/0x40 [ 1612.931152][T27700] ? __hrtimer_init+0x186/0x270 [ 1612.936048][T27700] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1612.941826][T27700] hwsim_new_radio_nl+0xafa/0xce0 [ 1612.946900][T27700] genl_family_rcv_msg_doit+0x22e/0x320 [ 1612.952477][T27700] ? end_current_label_crit_section+0x170/0x170 [ 1612.958847][T27700] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1612.964781][T27700] ? bpf_lsm_capable+0x5/0x10 [ 1612.969492][T27700] ? security_capable+0x85/0xb0 [ 1612.974373][T27700] genl_rcv_msg+0x5f2/0x780 [ 1612.978918][T27700] ? genl_bind+0x350/0x350 [ 1612.983363][T27700] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1612.989749][T27700] netlink_rcv_skb+0x1de/0x420 [ 1612.994541][T27700] ? genl_bind+0x350/0x350 [ 1612.998990][T27700] ? netlink_ack+0x1100/0x1100 [ 1613.003823][T27700] ? down_read+0x1a8/0x2d0 [ 1613.008272][T27700] genl_rcv+0x24/0x40 [ 1613.012284][T27700] netlink_unicast+0x74d/0x8d0 [ 1613.017086][T27700] netlink_sendmsg+0x89e/0xbc0 [ 1613.021891][T27700] ? netlink_getsockopt+0x540/0x540 [ 1613.027125][T27700] ? aa_sock_msg_perm+0x94/0x150 [ 1613.032104][T27700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1613.037417][T27700] ? security_socket_sendmsg+0x7c/0xa0 [ 1613.042927][T27700] ? netlink_getsockopt+0x540/0x540 [ 1613.048156][T27700] ____sys_sendmsg+0x59b/0x970 [ 1613.052956][T27700] ? __sys_sendmsg_sock+0x30/0x30 [ 1613.058003][T27700] ? __import_iovec+0x315/0x500 [ 1613.062891][T27700] ? import_iovec+0x6f/0xa0 [ 1613.067418][T27700] ___sys_sendmsg+0x21c/0x290 [ 1613.072117][T27700] ? __sys_sendmsg+0x270/0x270 [ 1613.076934][T27700] ? __fdget+0x17c/0x200 [ 1613.081199][T27700] __se_sys_sendmsg+0x19e/0x270 [ 1613.086066][T27700] ? ct_nmi_exit+0x145/0x1c0 [ 1613.090682][T27700] ? __x64_sys_sendmsg+0x80/0x80 [ 1613.095676][T27700] ? lockdep_hardirqs_on+0x94/0x140 [ 1613.100963][T27700] do_syscall_64+0x4c/0xa0 [ 1613.105408][T27700] ? clear_bhb_loop+0x60/0xb0 [ 1613.110107][T27700] ? clear_bhb_loop+0x60/0xb0 [ 1613.114804][T27700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1613.120723][T27700] RIP: 0033:0x7f9a44d8e9a9 [ 1613.125155][T27700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1613.144784][T27700] RSP: 002b:00007f9a45b1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.153218][T27700] RAX: ffffffffffffffda RBX: 00007f9a44fb6080 RCX: 00007f9a44d8e9a9 [ 1613.161207][T27700] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1613.169206][T27700] RBP: 00007f9a44e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1613.177200][T27700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.185279][T27700] R13: 0000000000000000 R14: 00007f9a44fb6080 R15: 00007ffcad6092c8 [ 1613.193308][T27700] [ 1613.943248][T27721] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9228'. [ 1613.977917][T27721] netlink: zone id is out of range [ 1613.987357][T27721] netlink: zone id is out of range [ 1613.993723][T27721] netlink: zone id is out of range [ 1614.374607][T27730] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9240'. [ 1614.781112][T27738] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9242'. [ 1615.502773][T27764] netlink: 'syz.0.9246': attribute type 10 has an invalid length. [ 1615.513410][T27764] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1615.614073][T27766] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9245'. [ 1615.993258][T27778] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9252'. [ 1616.125035][T27784] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9253'. [ 1616.317472][T27790] netlink: 'syz.7.9257': attribute type 10 has an invalid length. [ 1616.342601][T27790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1616.397606][T27792] netlink: 144 bytes leftover after parsing attributes in process `syz.6.9258'. [ 1618.077617][T27828] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9274'. [ 1618.098251][T27828] net_ratelimit: 17 callbacks suppressed [ 1618.098287][T27828] netlink: zone id is out of range [ 1618.111335][T27828] netlink: zone id is out of range [ 1618.116655][T27828] netlink: zone id is out of range [ 1618.122612][T27828] netlink: zone id is out of range [ 1618.469996][T27843] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9276'. [ 1618.555596][T27843] netlink: zone id is out of range [ 1618.569997][T27840] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9278'. [ 1618.607395][T27843] netlink: zone id is out of range [ 1618.630883][T27840] netlink: zone id is out of range [ 1618.638231][T27843] netlink: zone id is out of range [ 1618.659578][T27843] netlink: zone id is out of range [ 1618.671023][T27840] netlink: zone id is out of range [ 1618.974280][T27849] netlink: 'syz.3.9281': attribute type 21 has an invalid length. [ 1619.024619][T27849] netlink: 'syz.3.9281': attribute type 1 has an invalid length. [ 1619.317766][T27852] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9282'. [ 1619.534591][T27859] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9294'. [ 1620.126553][T27875] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9289'. [ 1620.386271][T27882] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9293'. [ 1620.662434][T27894] netlink: 'syz.3.9300': attribute type 10 has an invalid length. [ 1620.675471][T27894] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9300'. [ 1621.135425][T27906] netlink: 'syz.3.9303': attribute type 10 has an invalid length. [ 1621.189618][T27906] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1621.435474][T27912] netlink: 'syz.6.9307': attribute type 10 has an invalid length. [ 1621.465621][T27909] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9306'. [ 1621.477280][T27912] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9307'. [ 1621.833128][T27913] device syzkaller0 entered promiscuous mode [ 1621.847586][T27919] netlink: 'syz.6.9311': attribute type 21 has an invalid length. [ 1621.856434][T27919] netlink: 'syz.6.9311': attribute type 1 has an invalid length. [ 1622.476059][T27940] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1622.654630][T27942] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9321'. [ 1624.551051][T27935] netlink: 'syz.6.9318': attribute type 10 has an invalid length. [ 1624.564406][T27935] __nla_validate_parse: 1 callbacks suppressed [ 1624.564423][T27935] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9318'. [ 1624.898415][T27963] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9329'. [ 1625.219658][T27967] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9331'. [ 1625.240396][T27967] net_ratelimit: 32 callbacks suppressed [ 1625.240453][T27967] netlink: zone id is out of range [ 1625.277463][T27973] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1625.282712][T27967] netlink: zone id is out of range [ 1625.315210][T27976] netlink: 'syz.0.9334': attribute type 10 has an invalid length. [ 1625.325012][T27967] netlink: zone id is out of range [ 1625.339908][T27967] netlink: zone id is out of range [ 1625.345991][T27976] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9334'. [ 1625.362821][T27973] netlink: zone id is out of range [ 1625.381007][T27973] netlink: zone id is out of range [ 1625.387749][T27973] netlink: zone id is out of range [ 1625.793533][T27993] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9339'. [ 1625.804918][T27993] netlink: zone id is out of range [ 1625.818735][T27993] netlink: zone id is out of range [ 1625.836803][T27993] netlink: zone id is out of range [ 1625.916548][T27996] device syzkaller0 entered promiscuous mode [ 1626.286731][T28007] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9346'. [ 1626.475013][T28010] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9348'. [ 1628.562711][T28017] netlink: 'syz.4.9350': attribute type 10 has an invalid length. [ 1628.570874][T28017] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9350'. [ 1628.775475][T28028] netlink: 'syz.6.9353': attribute type 10 has an invalid length. [ 1628.791634][T28028] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9353'. [ 1629.226477][T28045] netlink: 'syz.3.9359': attribute type 10 has an invalid length. [ 1629.332416][T28050] netdevsim netdevsim7: Direct firmware load for Ö failed with error -2 [ 1629.346940][T28050] netdevsim netdevsim7: Falling back to sysfs fallback for: Ö [ 1629.475817][T28058] netlink: 'syz.4.9367': attribute type 10 has an invalid length. [ 1629.667455][T28066] __nla_validate_parse: 3 callbacks suppressed [ 1629.667509][T28066] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9368'. [ 1629.722041][T28068] netlink: 'syz.0.9371': attribute type 10 has an invalid length. [ 1629.730490][T28068] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9371'. [ 1631.184437][T28087] device syzkaller0 entered promiscuous mode [ 1633.421530][T28100] netlink: 'syz.0.9380': attribute type 10 has an invalid length. [ 1633.429488][T28100] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9380'. [ 1633.708780][T28113] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9386'. [ 1633.740523][T28113] net_ratelimit: 15 callbacks suppressed [ 1633.740558][T28113] netlink: zone id is out of range [ 1633.775143][T28113] netlink: zone id is out of range [ 1633.797550][T28113] netlink: zone id is out of range [ 1633.833276][T28113] netlink: zone id is out of range [ 1633.942400][T28110] netlink: 'syz.3.9387': attribute type 10 has an invalid length. [ 1633.951802][T28110] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9387'. [ 1635.275278][T28153] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9403'. [ 1635.359294][T28153] netlink: zone id is out of range [ 1635.364500][T28153] netlink: zone id is out of range [ 1635.448016][T28153] netlink: zone id is out of range [ 1635.488337][T28153] netlink: zone id is out of range [ 1635.695069][T28158] netlink: 'syz.7.9405': attribute type 10 has an invalid length. [ 1635.707708][T28158] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9405'. [ 1635.880587][T28161] netdevsim netdevsim6: Direct firmware load for Ö failed with error -2 [ 1635.891452][T28162] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9407'. [ 1635.902821][T28162] netlink: zone id is out of range [ 1635.909971][T28161] netdevsim netdevsim6: Falling back to sysfs fallback for: Ö [ 1635.917775][T28162] netlink: zone id is out of range [ 1636.255077][T28172] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9418'. [ 1636.927804][T28187] netlink: 'syz.4.9417': attribute type 1 has an invalid length. [ 1636.958927][T28185] netlink: 'syz.6.9415': attribute type 21 has an invalid length. [ 1637.001131][T28185] netlink: 'syz.6.9415': attribute type 1 has an invalid length. [ 1637.163526][T28193] netlink: 'syz.0.9420': attribute type 10 has an invalid length. [ 1637.176036][T28193] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9420'. [ 1637.427904][T28205] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9423'. [ 1637.534000][T28212] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 1637.554319][T28212] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 1637.714794][T28216] netlink: 'syz.6.9430': attribute type 10 has an invalid length. [ 1637.735073][T28216] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9430'. [ 1637.779848][T28219] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9431'. [ 1637.855210][T28221] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1638.056521][T28231] netlink: 'syz.0.9436': attribute type 10 has an invalid length. [ 1638.065000][T28231] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9436'. [ 1638.075037][T28227] netlink: 'syz.6.9435': attribute type 10 has an invalid length. [ 1638.538402][T28246] netlink: 'syz.3.9443': attribute type 10 has an invalid length. [ 1639.200544][T28254] netlink: 'syz.4.9447': attribute type 10 has an invalid length. [ 1639.292953][T28258] net_ratelimit: 22 callbacks suppressed [ 1639.293047][T28258] netlink: zone id is out of range [ 1639.353130][T28258] netlink: zone id is out of range [ 1639.380489][T28258] netlink: zone id is out of range [ 1639.399222][T28258] netlink: zone id is out of range [ 1639.493595][T28261] netlink: 'syz.4.9449': attribute type 10 has an invalid length. [ 1639.704610][T28265] netlink: zone id is out of range [ 1639.724567][T28265] netlink: zone id is out of range [ 1639.746033][T28265] netlink: zone id is out of range [ 1639.766715][T28265] netlink: zone id is out of range [ 1640.086850][T28274] netlink: 'syz.6.9454': attribute type 10 has an invalid length. [ 1641.067844][T28289] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1641.408808][T28296] __nla_validate_parse: 8 callbacks suppressed [ 1641.409390][T28296] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9460'. [ 1641.509823][T28296] netlink: zone id is out of range [ 1641.516544][T28296] netlink: zone id is out of range [ 1641.519338][T28301] netlink: 'syz.6.9462': attribute type 21 has an invalid length. [ 1641.539548][T28301] netlink: 'syz.6.9462': attribute type 1 has an invalid length. [ 1641.715538][T28306] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9464'. [ 1641.763179][T28309] netlink: 'syz.7.9475': attribute type 21 has an invalid length. [ 1641.772233][T28309] netlink: 'syz.7.9475': attribute type 1 has an invalid length. [ 1641.977625][T28311] netlink: 'syz.7.9466': attribute type 10 has an invalid length. [ 1642.299630][T28315] netlink: 'syz.3.9468': attribute type 10 has an invalid length. [ 1642.307933][T28315] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9468'. [ 1642.862220][T28330] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9484'. [ 1643.089490][T28341] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1643.145784][T28339] netlink: 'syz.3.9478': attribute type 10 has an invalid length. [ 1643.168394][T28339] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1643.226959][T28344] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9477'. [ 1643.313260][T28347] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9479'. [ 1643.528729][T28356] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9483'. [ 1644.275335][T28372] validate_nla: 5 callbacks suppressed [ 1644.275372][T28372] netlink: 'syz.3.9493': attribute type 10 has an invalid length. [ 1644.310138][T28372] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1644.507268][T28384] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9495'. [ 1644.524033][T28384] net_ratelimit: 18 callbacks suppressed [ 1644.524103][T28384] netlink: zone id is out of range [ 1644.558975][T28384] netlink: zone id is out of range [ 1644.567874][T28384] netlink: zone id is out of range [ 1644.597992][T28384] netlink: zone id is out of range [ 1644.655519][T28388] netlink: zone id is out of range [ 1644.661613][T28388] netlink: zone id is out of range [ 1644.667006][T28388] netlink: zone id is out of range [ 1644.673012][T28388] netlink: zone id is out of range [ 1644.992756][T28392] netlink: 'syz.7.9499': attribute type 21 has an invalid length. [ 1645.003334][T28392] netlink: 'syz.7.9499': attribute type 1 has an invalid length. [ 1645.076941][T28394] netlink: 'syz.6.9500': attribute type 10 has an invalid length. [ 1645.570737][T28405] netlink: 'syz.0.9504': attribute type 10 has an invalid length. [ 1645.618487][T28407] netlink: 'syz.3.9505': attribute type 10 has an invalid length. [ 1646.416780][T28423] netlink: 'syz.7.9512': attribute type 21 has an invalid length. [ 1646.428846][T28423] netlink: 'syz.7.9512': attribute type 1 has an invalid length. [ 1646.763443][T28436] netlink: 'syz.0.9518': attribute type 10 has an invalid length. [ 1646.782330][T28436] __nla_validate_parse: 3 callbacks suppressed [ 1646.782365][T28436] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9518'. [ 1647.394168][T28459] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9524'. [ 1647.425319][T28459] netlink: zone id is out of range [ 1647.463920][T28459] netlink: zone id is out of range [ 1647.635904][T28461] netlink: 'syz.0.9525': attribute type 21 has an invalid length. [ 1647.947460][T28473] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9531'. [ 1648.298046][T28482] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9535'. [ 1648.380802][T28486] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9536'. [ 1648.591205][T28500] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9547'. [ 1648.949364][T28510] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9540'. [ 1649.302973][T28522] validate_nla: 11 callbacks suppressed [ 1649.303061][T28522] netlink: 'syz.7.9543': attribute type 10 has an invalid length. [ 1649.340884][T28522] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9543'. [ 1649.372305][T28524] netlink: 830 bytes leftover after parsing attributes in process `syz.6.9544'. [ 1649.496448][T28527] netlink: 'syz.0.9545': attribute type 21 has an invalid length. [ 1649.526304][T28527] netlink: 'syz.0.9545': attribute type 1 has an invalid length. [ 1649.912152][T28534] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9546'. [ 1649.923131][T28534] net_ratelimit: 6 callbacks suppressed [ 1649.923162][T28534] netlink: zone id is out of range [ 1649.935879][T28534] netlink: zone id is out of range [ 1649.959606][T28534] netlink: zone id is out of range [ 1649.995728][T28534] netlink: zone id is out of range [ 1650.261364][T28541] netlink: zone id is out of range [ 1650.268735][T28541] netlink: zone id is out of range [ 1650.276234][T28541] netlink: zone id is out of range [ 1650.283559][T28541] netlink: zone id is out of range [ 1650.310304][T28543] netlink: 'syz.3.9556': attribute type 10 has an invalid length. [ 1651.132696][T28566] netlink: 'syz.4.9561': attribute type 10 has an invalid length. [ 1651.461192][T28585] mac80211_hwsim hwsim22 »»»»»»: renamed from wlan0 [ 1651.679831][T28587] netlink: 'syz.3.9572': attribute type 28 has an invalid length. [ 1651.994183][T28594] mac80211_hwsim hwsim25 »»»»»»: renamed from wlan0 [ 1652.116780][T28601] __nla_validate_parse: 3 callbacks suppressed [ 1652.116800][T28601] netlink: 766 bytes leftover after parsing attributes in process `syz.4.9576'. [ 1652.470563][T28611] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.9577'. [ 1652.583754][T28611] netlink: zone id is out of range [ 1652.608045][T28611] netlink: zone id is out of range [ 1652.726128][T28617] netlink: 'syz.6.9580': attribute type 10 has an invalid length. [ 1652.735247][T28617] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9580'. [ 1653.008785][T28624] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9582'. [ 1653.468617][T28632] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9590'. [ 1653.573944][T28635] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1653.776511][T28637] mac80211_hwsim hwsim21 »»»»»»: renamed from wlan0 [ 1653.917319][T28640] netlink: 'syz.7.9593': attribute type 10 has an invalid length. [ 1653.948354][T28640] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9593'. [ 1653.988710][T28646] netlink: 'syz.3.9595': attribute type 10 has an invalid length. [ 1653.998745][T28646] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1654.034830][T28644] netlink: 'syz.0.9594': attribute type 21 has an invalid length. [ 1656.265824][T28663] validate_nla: 2 callbacks suppressed [ 1656.265841][T28663] netlink: 'syz.0.9601': attribute type 10 has an invalid length. [ 1656.280214][T28663] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9601'. [ 1656.584646][T28678] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.9603'. [ 1656.600240][T28680] netlink: 'syz.7.9609': attribute type 10 has an invalid length. [ 1656.614734][T28678] net_ratelimit: 10 callbacks suppressed [ 1656.614767][T28678] netlink: zone id is out of range [ 1656.652144][T28678] netlink: zone id is out of range [ 1656.685994][T28678] netlink: zone id is out of range [ 1656.697713][T28678] netlink: zone id is out of range [ 1656.749033][T28684] netlink: 'syz.4.9610': attribute type 21 has an invalid length. [ 1656.759069][T28684] netlink: 'syz.4.9610': attribute type 1 has an invalid length. [ 1656.770599][T28682] netlink: 'syz.6.9608': attribute type 10 has an invalid length. [ 1656.942051][T28693] netlink: zone id is out of range [ 1656.949982][T28693] netlink: zone id is out of range [ 1656.957324][T28693] netlink: zone id is out of range [ 1656.966265][T28693] netlink: zone id is out of range [ 1657.063927][T28698] netlink: 'syz.4.9612': attribute type 28 has an invalid length. [ 1657.183614][T28700] netlink: 'syz.0.9615': attribute type 10 has an invalid length. [ 1657.193636][T28700] __nla_validate_parse: 3 callbacks suppressed [ 1657.193675][T28700] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9615'. [ 1657.328218][T28704] netlink: 'syz.0.9617': attribute type 21 has an invalid length. [ 1657.336166][T28704] netlink: 'syz.0.9617': attribute type 1 has an invalid length. [ 1657.374290][T28702] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 1657.558236][T28706] netlink: 'syz.3.9618': attribute type 21 has an invalid length. [ 1657.704514][T28714] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9621'. [ 1657.833535][T28721] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9624'. [ 1658.014909][T28728] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9627'. [ 1658.510615][T28742] mac80211_hwsim hwsim17 »»»»»»: renamed from wlan0 [ 1658.654069][T28749] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1658.713965][T28749] netlink: zone id is out of range [ 1658.725321][T28749] netlink: zone id is out of range [ 1658.986026][T28762] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9637'. [ 1659.124155][T28765] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9638'. [ 1659.452885][T28773] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9640'. [ 1659.748793][T28785] netlink: 766 bytes leftover after parsing attributes in process `syz.6.9642'. [ 1660.355959][T28796] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9650'. [ 1661.405344][T28832] validate_nla: 23 callbacks suppressed [ 1661.405384][T28832] netlink: 'syz.4.9661': attribute type 10 has an invalid length. [ 1661.687461][T28837] netlink: 'syz.3.9664': attribute type 10 has an invalid length. [ 1662.139238][T28848] netlink: 'syz.6.9676': attribute type 10 has an invalid length. [ 1662.196175][T28847] netlink: 'syz.3.9668': attribute type 21 has an invalid length. [ 1662.217081][T28847] netlink: 'syz.3.9668': attribute type 1 has an invalid length. [ 1662.284586][T28852] netlink: 'syz.0.9669': attribute type 10 has an invalid length. [ 1662.294326][T28852] __nla_validate_parse: 7 callbacks suppressed [ 1662.294362][T28852] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9669'. [ 1662.411523][T28860] netlink: 'syz.6.9670': attribute type 10 has an invalid length. [ 1662.431827][T28860] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9670'. [ 1662.490853][T28868] netlink: 'syz.0.9672': attribute type 10 has an invalid length. [ 1662.514660][T28868] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9672'. [ 1662.718950][T28871] netlink: 'syz.4.9673': attribute type 21 has an invalid length. [ 1662.767019][T28880] netlink: 192156 bytes leftover after parsing attributes in process `syz.6.9675'. [ 1662.784847][T28871] netlink: 'syz.4.9673': attribute type 1 has an invalid length. [ 1662.794438][T28880] net_ratelimit: 10 callbacks suppressed [ 1662.794469][T28880] netlink: zone id is out of range [ 1662.815121][T28880] netlink: zone id is out of range [ 1662.824150][T28880] netlink: zone id is out of range [ 1662.844624][T28880] netlink: zone id is out of range [ 1663.002280][T28888] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9681'. [ 1663.143129][T28889] netlink: 192156 bytes leftover after parsing attributes in process `syz.7.9680'. [ 1663.279663][T28889] netlink: zone id is out of range [ 1663.296951][T28889] netlink: zone id is out of range [ 1663.330929][T28889] netlink: zone id is out of range [ 1663.365054][T28889] netlink: zone id is out of range [ 1663.864239][T28899] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9685'. [ 1664.015716][T28907] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9688'. [ 1664.280536][T28920] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9692'. [ 1664.377987][T28926] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.9693'. [ 1665.631760][T28935] netlink: zone id is out of range [ 1665.641728][T28935] netlink: zone id is out of range [ 1667.668480][T28934] validate_nla: 10 callbacks suppressed [ 1667.668497][T28934] netlink: 'syz.3.9694': attribute type 10 has an invalid length. [ 1667.683163][T28934] __nla_validate_parse: 2 callbacks suppressed [ 1667.683178][T28934] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9694'. [ 1667.700193][T28940] netlink: 'syz.7.9697': attribute type 21 has an invalid length. [ 1667.708491][T28940] netlink: 'syz.7.9697': attribute type 1 has an invalid length. [ 1667.716846][T28926] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 1667.757434][T28926] CPU: 0 PID: 28926 Comm: syz.6.9693 Not tainted 6.1.147-syzkaller #0 [ 1667.765662][T28926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1667.775784][T28926] Call Trace: [ 1667.779087][T28926] [ 1667.782034][T28926] dump_stack_lvl+0x168/0x22e [ 1667.786745][T28926] ? show_regs_print_info+0x12/0x12 [ 1667.791971][T28926] ? load_image+0x3b0/0x3b0 [ 1667.796514][T28926] sysfs_warn_dup+0x8a/0xa0 [ 1667.801044][T28926] sysfs_do_create_link_sd+0xc0/0x110 [ 1667.806441][T28926] device_add+0x7ed/0xfb0 [ 1667.810805][T28926] wiphy_register+0x1e68/0x2bd0 [ 1667.815696][T28926] ? cfg80211_event_work+0x40/0x40 [ 1667.820835][T28926] ? minstrel_ht_alloc+0x894/0xa20 [ 1667.825973][T28926] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1667.832060][T28926] ieee80211_register_hw+0x2c29/0x38c0 [ 1667.837541][T28926] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1667.843102][T28926] ? ieee80211_register_hw+0xeb1/0x38c0 [ 1667.848669][T28926] ? ieee80211_tasklet_handler+0x20/0x20 [ 1667.854328][T28926] ? memset+0x1e/0x40 [ 1667.858357][T28926] ? __hrtimer_init+0x186/0x270 [ 1667.863238][T28926] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1667.868999][T28926] hwsim_new_radio_nl+0xafa/0xce0 [ 1667.874068][T28926] genl_family_rcv_msg_doit+0x22e/0x320 [ 1667.879637][T28926] ? end_current_label_crit_section+0x170/0x170 [ 1667.885927][T28926] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 1667.891878][T28926] ? bpf_lsm_capable+0x5/0x10 [ 1667.896581][T28926] ? security_capable+0x85/0xb0 [ 1667.901486][T28926] genl_rcv_msg+0x5f2/0x780 [ 1667.906028][T28926] ? genl_bind+0x350/0x350 [ 1667.910478][T28926] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 1667.916855][T28926] netlink_rcv_skb+0x1de/0x420 [ 1667.921640][T28926] ? genl_bind+0x350/0x350 [ 1667.926078][T28926] ? netlink_ack+0x1100/0x1100 [ 1667.930873][T28926] ? down_read+0x1a8/0x2d0 [ 1667.935310][T28926] genl_rcv+0x24/0x40 [ 1667.939311][T28926] netlink_unicast+0x74d/0x8d0 [ 1667.944100][T28926] netlink_sendmsg+0x89e/0xbc0 [ 1667.948891][T28926] ? netlink_getsockopt+0x540/0x540 [ 1667.954281][T28926] ? aa_sock_msg_perm+0x94/0x150 [ 1667.959265][T28926] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1667.964568][T28926] ? security_socket_sendmsg+0x7c/0xa0 [ 1667.970053][T28926] ? netlink_getsockopt+0x540/0x540 [ 1667.975268][T28926] ____sys_sendmsg+0x59b/0x970 [ 1667.980063][T28926] ? __sys_sendmsg_sock+0x30/0x30 [ 1667.985106][T28926] ? __import_iovec+0x315/0x500 [ 1667.989992][T28926] ? import_iovec+0x6f/0xa0 [ 1667.994522][T28926] ___sys_sendmsg+0x21c/0x290 [ 1667.999217][T28926] ? __sys_sendmsg+0x270/0x270 [ 1668.004053][T28926] ? __fdget+0x17c/0x200 [ 1668.008318][T28926] __se_sys_sendmsg+0x19e/0x270 [ 1668.013212][T28926] ? __x64_sys_sendmsg+0x80/0x80 [ 1668.018198][T28926] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1668.024124][T28926] do_syscall_64+0x4c/0xa0 [ 1668.028569][T28926] ? clear_bhb_loop+0x60/0xb0 [ 1668.033263][T28926] ? clear_bhb_loop+0x60/0xb0 [ 1668.037964][T28926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1668.043895][T28926] RIP: 0033:0x7f5cc698e9a9 [ 1668.048324][T28926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1668.067992][T28926] RSP: 002b:00007f5cc7763038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1668.076424][T28926] RAX: ffffffffffffffda RBX: 00007f5cc6bb5fa0 RCX: 00007f5cc698e9a9 [ 1668.084416][T28926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1668.092401][T28926] RBP: 00007f5cc6a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1668.100383][T28926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1668.108456][T28926] R13: 0000000000000000 R14: 00007f5cc6bb5fa0 R15: 00007fff87497c98 [ 1668.116457][T28926] [ 1668.175960][T28950] netlink: 'syz.0.9711': attribute type 10 has an invalid length. [ 1668.214619][T28950] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9711'. [ 1668.306065][T28956] netlink: 'syz.6.9703': attribute type 10 has an invalid length. [ 1668.324781][T28956] netlink: 55 bytes leftover after parsing attributes in process `syz.6.9703'. [ 1668.342647][T28957] netlink: 'syz.4.9702': attribute type 10 has an invalid length. [ 1668.358324][T28957] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9702'. [ 1668.524710][T28962] netlink: 'syz.3.9705': attribute type 21 has an invalid length. [ 1668.548495][T28962] netlink: 'syz.3.9705': attribute type 1 has an invalid length. [ 1668.822570][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.829084][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.629639][T28985] netlink: 'syz.7.9712': attribute type 10 has an invalid length. [ 1669.652467][T28985] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9712'. [ 1669.794449][T28989] netlink: 'syz.3.9715': attribute type 21 has an invalid length. [ 1669.845057][T28995] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9718'. [ 1669.905128][T28997] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9719'. [ 1670.052962][T29002] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9721'. [ 1671.147485][T29023] netlink: 55 bytes leftover after parsing attributes in process `syz.7.9730'. [ 1671.334616][T29029] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9732'. [ 1671.504160][T29039] net_ratelimit: 6 callbacks suppressed [ 1671.504213][T29039] netlink: zone id is out of range [ 1671.528317][T29039] netlink: zone id is out of range [ 1671.534531][T29039] netlink: zone id is out of range [ 1671.866904][T29045] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1671.870055][T29039] netlink: zone id is out of range [ 1671.874743][T29045] #PF: supervisor instruction fetch in kernel mode [ 1671.874757][T29045] #PF: error_code(0x0010) - not-present page [ 1671.874781][T29045] PGD 58067067 P4D 58067067 PUD 0 [ 1671.897538][T29045] Oops: 0010 [#1] PREEMPT SMP KASAN [ 1671.902762][T29045] CPU: 0 PID: 29045 Comm: syz.7.9736 Not tainted 6.1.147-syzkaller #0 [ 1671.910933][T29045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1671.920993][T29045] RIP: 0010:0x0 [ 1671.924459][T29045] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1671.931822][T29045] RSP: 0018:ffffc900058d7218 EFLAGS: 00010246 [ 1671.937894][T29045] RAX: 1ffffffff162ae67 RBX: 000000000000000f RCX: 0000000000000000 [ 1671.945881][T29045] RDX: ffffc900058d72c0 RSI: 0000000000000001 RDI: ffff888055a54000 [ 1671.953958][T29045] RBP: ffffc900058d7330 R08: dffffc0000000000 R09: ffffed100ab4a808 [ 1671.961932][T29045] R10: ffffed100ab4a808 R11: 1ffff1100ab4a807 R12: ffffe8ffffc62360 [ 1671.969916][T29045] R13: ffffffff8b157338 R14: 0000000000000000 R15: ffff888055a54000 [ 1671.977988][T29045] FS: 00007ff06c38b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1671.986940][T29045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1671.993527][T29045] CR2: ffffffffffffffd6 CR3: 000000007acde000 CR4: 00000000003506f0 [ 1672.001726][T29045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00002000000000c0 [ 1672.009705][T29045] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1672.017681][T29045] Call Trace: [ 1672.020984][T29045] [ 1672.023928][T29045] bond_xdp_xmit+0x309/0x520 [ 1672.028613][T29045] ? bond_xdp_xmit+0x93/0x520 [ 1672.033311][T29045] ? bond_xdp+0x840/0x840 [ 1672.037658][T29045] bq_xmit_all+0xc99/0x10d0 [ 1672.042337][T29045] ? page_ext_put+0x98/0xb0 [ 1672.047005][T29045] ? __lock_acquire+0x7c50/0x7c50 [ 1672.052042][T29045] ? page_ext_get+0x1de/0x2a0 [ 1672.056846][T29045] ? get_page_from_freelist+0x1a26/0x1ac0 [ 1672.062611][T29045] ? __dev_flush+0x1b0/0x1b0 [ 1672.067250][T29045] ? verify_lock_unused+0x140/0x140 [ 1672.072465][T29045] ? __next_zones_zonelist+0x99/0x120 [ 1672.077951][T29045] ? rcu_is_watching+0x11/0xa0 [ 1672.082833][T29045] ? __alloc_pages+0x287/0x4e0 [ 1672.087615][T29045] ? verify_lock_unused+0x140/0x140 [ 1672.092839][T29045] ? zone_statistics+0x170/0x170 [ 1672.097790][T29045] bq_enqueue+0x337/0x3d0 [ 1672.102143][T29045] dev_map_enqueue_multi+0xff9/0x1160 [ 1672.107532][T29045] ? dev_map_enqueue+0x340/0x340 [ 1672.112480][T29045] ? rcu_is_watching+0x11/0xa0 [ 1672.117252][T29045] ? trace_page_pool_state_hold+0xa7/0x250 [ 1672.123159][T29045] ? __page_pool_alloc_pages_slow+0x6ec/0x890 [ 1672.129238][T29045] ? __cant_sleep+0x210/0x210 [ 1672.133976][T29045] xdp_do_redirect_frame+0x477/0x650 [ 1672.139317][T29045] bpf_test_run_xdp_live+0x9dd/0x1970 [ 1672.144730][T29045] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 1672.150288][T29045] ? xdp_convert_md_to_buff+0x330/0x330 [ 1672.155942][T29045] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1672.162198][T29045] ? bpf_test_init+0x134/0x150 [ 1672.166977][T29045] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1672.172450][T29045] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 1672.177784][T29045] ? dev_put+0x80/0x80 [ 1672.181885][T29045] ? dev_put+0x80/0x80 [ 1672.185960][T29045] bpf_prog_test_run+0x31e/0x390 [ 1672.190974][T29045] __sys_bpf+0x593/0x6d0 [ 1672.195246][T29045] ? bpf_link_show_fdinfo+0x340/0x340 [ 1672.200634][T29045] ? lock_chain_count+0x20/0x20 [ 1672.205507][T29045] __x64_sys_bpf+0x78/0x90 [ 1672.209968][T29045] do_syscall_64+0x4c/0xa0 [ 1672.214416][T29045] ? clear_bhb_loop+0x60/0xb0 [ 1672.219114][T29045] ? clear_bhb_loop+0x60/0xb0 [ 1672.223807][T29045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.229756][T29045] RIP: 0033:0x7ff06b58e9a9 [ 1672.234198][T29045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1672.253831][T29045] RSP: 002b:00007ff06c38b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1672.262248][T29045] RAX: ffffffffffffffda RBX: 00007ff06b7b5fa0 RCX: 00007ff06b58e9a9 [ 1672.270221][T29045] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1672.278191][T29045] RBP: 00007ff06b610d69 R08: 0000000000000000 R09: 0000000000000000 [ 1672.286162][T29045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.294140][T29045] R13: 0000000000000000 R14: 00007ff06b7b5fa0 R15: 00007fff5ad32ab8 [ 1672.302219][T29045] [ 1672.305263][T29045] Modules linked in: [ 1672.309174][T29045] CR2: 0000000000000000 [ 1672.313336][T29045] ---[ end trace 0000000000000000 ]--- [ 1672.318796][T29045] RIP: 0010:0x0 [ 1672.322294][T29045] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1672.329661][T29045] RSP: 0018:ffffc900058d7218 EFLAGS: 00010246 [ 1672.335749][T29045] RAX: 1ffffffff162ae67 RBX: 000000000000000f RCX: 0000000000000000 [ 1672.343725][T29045] RDX: ffffc900058d72c0 RSI: 0000000000000001 RDI: ffff888055a54000 [ 1672.351700][T29045] RBP: ffffc900058d7330 R08: dffffc0000000000 R09: ffffed100ab4a808 [ 1672.359687][T29045] R10: ffffed100ab4a808 R11: 1ffff1100ab4a807 R12: ffffe8ffffc62360 [ 1672.367690][T29045] R13: ffffffff8b157338 R14: 0000000000000000 R15: ffff888055a54000 [ 1672.375756][T29045] FS: 00007ff06c38b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1672.384694][T29045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1672.391285][T29045] CR2: ffffffffffffffd6 CR3: 000000007acde000 CR4: 00000000003506f0 [ 1672.399265][T29045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00002000000000c0 [ 1672.407280][T29045] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1672.415295][T29045] Kernel panic - not syncing: Fatal exception in interrupt [ 1672.422823][T29045] Kernel Offset: disabled [ 1672.427167][T29045] Rebooting in 86400 seconds..