last executing test programs: 2m40.312181511s ago: executing program 1 (id=4121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 2m40.03818704s ago: executing program 1 (id=4124): socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x81}, 0x0, 0x5, 0x80002, 0x5c0e7a983a5ededf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 2m39.926498644s ago: executing program 1 (id=4127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa00630916906afb171100000000009500000000000000a7d0b09c7b82c18731be53b92f30b60b573834"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x41, 0x0, 0x8f00) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000700)="90210a613e1699dc1196b4e32162219280727aca6728140bd69eef2d5e4b29bf81", 0x21}, {&(0x7f0000000740)="2259049771af291112b78a0638b71a5f17fbb4d99af7ab3c49e30c0f36be9b0718e21bd108f31dc3a1fb6b56edc5bd012d50e9c8d7221a66780e11edc4b04bc17837dac03b26a49e82c0f6a29d02cb670b2b5aec7a684862a9cd5358cfcb89389e0df6604f59ae99154f209217f4bec2311232c4f873119581f42b6dca4dd2413da170b55ea856ebe6962397229f0f6053608d0a76fba4e2d8f1334c0a135856837b", 0xa2}, {0x0}], 0x3, &(0x7f0000000a40)}, 0x4000001) 2m39.803058558s ago: executing program 1 (id=4132): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r1, 0x4) 2m39.787409838s ago: executing program 1 (id=4134): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 2m39.647011222s ago: executing program 1 (id=4136): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 2m23.712886856s ago: executing program 32 (id=4136): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 4.13646366s ago: executing program 2 (id=6036): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 2.510190751s ago: executing program 3 (id=6061): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.918655519s ago: executing program 5 (id=6071): socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.88018244s ago: executing program 5 (id=6072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.842380472s ago: executing program 3 (id=6073): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.680547237s ago: executing program 5 (id=6075): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.625292189s ago: executing program 0 (id=6076): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xe, 0x2, 0x10000}, 0x10, 0x0, r1, 0x0, &(0x7f0000001300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000900)}], 0x2}, 0x20000804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$tipc(r5, &(0x7f0000000840)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="70919c6e063b1892ac64e37b7083ea212e080766118a64b91020971ba7418772cd7ba3f05a50697d0e75536d4d25b0af532fe97d9b95c79d47b724309b76ae2c9ceadbe4ed87800c524e34cad3b87268c21bab8b1d3fcee9ba28c36a387fb5d4c111b8e4869d4ee28ebca4f68c97317502faf4ce5f75420a906fb499edd858a08f663b0dbba0a6480292e6016f8346126e7293dda4a8aec22226b0dfb45a9b5700980f13eea2f8db2e", 0xa9}, {&(0x7f0000000500)="488cf475b6a9b8fe4f907656a45469ceb2ef91b759c911dc049fc44fe1ee25b29c203ccbfec7c89d0ac55199ae7f522eee98e7439292911dd55d4e0c6df4c41f282f2b6b3139848954aa58d4e0aee9c6351b398a9b1fdf2379d0d4966de2fe40f3058896d56b63bfec403c46629f17da527cf195f78a13d81490488cbcdeca3ff2488a99901640a391a880e7efe738e57a22dd1f2f415e9d9ff3522fdf24c21417e5bf9c716ab2c46b641f46de42085c2ce43462b7242b6071f13e64d5c3b2e2c8f511caa0c033841243b6b77ea26f0deb034de58be5b9a597771e08a8d1459975", 0xe1}, {&(0x7f0000000600)="7617ed4293c489bd384b8aa83cf7c990c1f1d122b702b5ed24332eb2ad44b51f702403c35ee307e9c769ceb5028783a2ebd589c5722073b904d4cf67dfe3c34083ea378fac5a90b06110c82b3054d90b23383b37bc6210be6168328846662d49cc164104c09a4d37a8dceefe1028313b74a4ed46d575d986d6be7914b2e8498141b184616830488820fefe54701cfc47c818d6ca533d2f95dfeabe6bb2ce1572db", 0xa1}, {&(0x7f00000002c0)="c6df4687bc", 0x5}, {&(0x7f00000006c0)}], 0x5, 0x0, 0x0, 0x4000000}, 0x40001) close(r0) 1.58408094s ago: executing program 0 (id=6077): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d"], 0xfe33) 1.472796704s ago: executing program 0 (id=6078): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.304452329s ago: executing program 3 (id=6081): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x89, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.176239493s ago: executing program 3 (id=6083): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.175917573s ago: executing program 4 (id=6084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.088533885s ago: executing program 2 (id=6085): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.005460648s ago: executing program 4 (id=6086): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x1, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94", 0xf}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 1.004281468s ago: executing program 5 (id=6096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 780.599885ms ago: executing program 4 (id=6087): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000dc0)=[0x0], 0x0, 0x1c, &(0x7f0000000e00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0x4, &(0x7f00000011c0)=@raw=[@ringbuf_query], &(0x7f0000001240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xe, 0x2, 0x10000}, 0x10, r5, r1, 0x0, &(0x7f0000001300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000880)="db3d8e877ed58fdd72a035672c334fe89b7db477382a6f67632082a4fb4650e99b0919c1b6aac71b46c4633a80c128710893c900db8366a0924634f14b78c040f07720d407cd512159e02b9a99464512d121a22c0779ac28198bb8614d659a91", 0x60}, {&(0x7f0000000900)}], 0x2, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0x4, 0x3, 0x4, [{@loopback}, {@multicast2, 0xe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@rand_addr=0x64010102, 0x41c0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb1}}], 0x120}, 0x20000804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$tipc(r7, &(0x7f0000000840)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="70919c6e063b1892ac64e37b7083ea212e080766118a64b91020971ba7418772cd7ba3f05a50697d0e75536d4d25b0af532fe97d9b95c79d47b724309b76ae2c9ceadbe4ed87800c524e34cad3b87268c21bab8b1d3fcee9ba28c36a387fb5d4c111b8e4869d4ee28ebca4f68c97317502faf4ce5f75420a906fb499edd858a08f663b0dbba0a6480292e6016f8346126e7293dda4a8aec22226b0dfb45a9b5700980f13eea2f8db2e", 0xa9}, {&(0x7f0000000500)="488cf475b6a9b8fe4f907656a45469ceb2ef91b759c911dc049fc44fe1ee25b29c203ccbfec7c89d0ac55199ae7f522eee98e7439292911dd55d4e0c6df4c41f282f2b6b3139848954aa58d4e0aee9c6351b398a9b1fdf2379d0d4966de2fe40f3058896d56b63bfec403c46629f17da527cf195f78a13d81490488cbcdeca3ff2488a99901640a391a880e7efe738e57a22dd1f2f415e9d9ff3522fdf24c21417e5bf9c716ab2c46b641f46de42085c2ce43462b7242b6071f13e64d5c3b2e2c8f511caa0c033841243b6b77ea26f0deb034de58be5b9a597771e08a8d1459975", 0xe1}, {&(0x7f0000000600)="7617ed4293c489bd384b8aa83cf7c990c1f1d122b702b5ed24332eb2ad44b51f702403c35ee307e9c769ceb5028783a2ebd589c5722073b904d4cf67dfe3c34083ea378fac5a90b06110c82b3054d90b23383b37bc6210be6168328846662d49cc164104c09a4d37a8dceefe1028313b74a4ed46d575d986d6be7914b2e8498141b184616830488820fefe54701cfc47c818d6ca533d2f95dfeabe6bb2ce1572db", 0xa1}, {&(0x7f00000002c0)="c6df4687bc", 0x5}, {&(0x7f00000006c0)}], 0x5, 0x0, 0x0, 0x4000000}, 0x40001) close(r0) 779.416315ms ago: executing program 5 (id=6098): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 724.064437ms ago: executing program 3 (id=6088): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000002c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 721.950137ms ago: executing program 0 (id=6100): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000dc0)=[0x0], 0x0, 0x1c, &(0x7f0000000e00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xe, 0x2, 0x10000}, 0x10, r5, r1, 0x0, &(0x7f0000001300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000880)="db3d8e877ed58fdd72a035672c334fe89b7db477382a6f67632082a4fb4650e99b0919c1b6aac71b46c4633a80c128710893c900db8366a0924634f14b78c040f07720d407cd512159e02b9a99464512d121a22c0779ac28198bb8614d659a91", 0x60}, {0x0}], 0x2, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0x4, 0x3, 0x4, [{@loopback}, {@multicast2, 0xe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@rand_addr=0x64010102, 0x41c0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb1}}], 0x120}, 0x20000804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 660.726769ms ago: executing program 0 (id=6089): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 506.784503ms ago: executing program 2 (id=6090): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xe, 0x2, 0x10000}, 0x10, 0x0, r1, 0x0, &(0x7f0000001300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000900)}], 0x2, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0x4, 0x3, 0x4, [{@loopback}, {@multicast2, 0xe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@rand_addr=0x64010102, 0x41c0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb1}}], 0x120}, 0x20000804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$tipc(r5, &(0x7f0000000840)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="70919c6e063b1892ac64e37b7083ea212e080766118a64b91020971ba7418772cd7ba3f05a50697d0e75536d4d25b0af532fe97d9b95c79d47b724309b76ae2c9ceadbe4ed87800c524e34cad3b87268c21bab8b1d3fcee9ba28c36a387fb5d4c111b8e4869d4ee28ebca4f68c97317502faf4ce5f75420a906fb499edd858a08f663b0dbba0a6480292e6016f8346126e7293dda4a8aec22226b0dfb45a9b5700980f13eea2f8db2e", 0xa9}, {&(0x7f0000000500)="488cf475b6a9b8fe4f907656a45469ceb2ef91b759c911dc049fc44fe1ee25b29c203ccbfec7c89d0ac55199ae7f522eee98e7439292911dd55d4e0c6df4c41f282f2b6b3139848954aa58d4e0aee9c6351b398a9b1fdf2379d0d4966de2fe40f3058896d56b63bfec403c46629f17da527cf195f78a13d81490488cbcdeca3ff2488a99901640a391a880e7efe738e57a22dd1f2f415e9d9ff3522fdf24c21417e5bf9c716ab2c46b641f46de42085c2ce43462b7242b6071f13e64d5c3b2e2c8f511caa0c033841243b6b77ea26f0deb034de58be5b9a597771e08a8d1459975", 0xe1}, {&(0x7f0000000600)="7617ed4293c489bd384b8aa83cf7c990c1f1d122b702b5ed24332eb2ad44b51f702403c35ee307e9c769ceb5028783a2ebd589c5722073b904d4cf67dfe3c34083ea378fac5a90b06110c82b3054d90b23383b37bc6210be6168328846662d49cc164104c09a4d37a8dceefe1028313b74a4ed46d575d986d6be7914b2e8498141b184616830488820fefe54701cfc47c818d6ca533d2f95dfeabe6bb2ce1572db", 0xa1}, {&(0x7f00000002c0)="c6df4687bc", 0x5}, {&(0x7f00000006c0)}], 0x5, 0x0, 0x0, 0x4000000}, 0x40001) close(r0) 504.211624ms ago: executing program 4 (id=6103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xc, &(0x7f00000011c0)=@raw=[@ringbuf_query, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xe, 0x2, 0x10000}, 0x10, 0x0, r1, 0x0, &(0x7f0000001300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000900)}], 0x2}, 0x20000804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$tipc(r5, &(0x7f0000000840)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="70919c6e063b1892ac64e37b7083ea212e080766118a64b91020971ba7418772cd7ba3f05a50697d0e75536d4d25b0af532fe97d9b95c79d47b724309b76ae2c9ceadbe4ed87800c524e34cad3b87268c21bab8b1d3fcee9ba28c36a387fb5d4c111b8e4869d4ee28ebca4f68c97317502faf4ce5f75420a906fb499edd858a08f663b0dbba0a6480292e6016f8346126e7293dda4a8aec22226b0dfb45a9b5700980f13eea2f8db2e", 0xa9}, {&(0x7f0000000500)="488cf475b6a9b8fe4f907656a45469ceb2ef91b759c911dc049fc44fe1ee25b29c203ccbfec7c89d0ac55199ae7f522eee98e7439292911dd55d4e0c6df4c41f282f2b6b3139848954aa58d4e0aee9c6351b398a9b1fdf2379d0d4966de2fe40f3058896d56b63bfec403c46629f17da527cf195f78a13d81490488cbcdeca3ff2488a99901640a391a880e7efe738e57a22dd1f2f415e9d9ff3522fdf24c21417e5bf9c716ab2c46b641f46de42085c2ce43462b7242b6071f13e64d5c3b2e2c8f511caa0c033841243b6b77ea26f0deb034de58be5b9a597771e08a8d1459975", 0xe1}, {&(0x7f0000000600)="7617ed4293c489bd384b8aa83cf7c990c1f1d122b702b5ed24332eb2ad44b51f702403c35ee307e9c769ceb5028783a2ebd589c5722073b904d4cf67dfe3c34083ea378fac5a90b06110c82b3054d90b23383b37bc6210be6168328846662d49cc164104c09a4d37a8dceefe1028313b74a4ed46d575d986d6be7914b2e8498141b184616830488820fefe54701cfc47c818d6ca533d2f95dfeabe6bb2ce1572db", 0xa1}, {&(0x7f00000002c0)="c6df4687bc", 0x5}, {&(0x7f00000006c0)}], 0x5, 0x0, 0x0, 0x4000000}, 0x40001) close(r0) 405.534807ms ago: executing program 2 (id=6091): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x89, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 386.830327ms ago: executing program 4 (id=6092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, 0x0) 284.075781ms ago: executing program 2 (id=6093): socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 230.161983ms ago: executing program 4 (id=6094): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000700)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 166.000104ms ago: executing program 2 (id=6095): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 4.32439ms ago: executing program 0 (id=6097): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.75206ms ago: executing program 5 (id=6099): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000700)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 3 (id=6111): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x10080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000dc0)=[0x0], 0x0, 0x1c, &(0x7f0000000e00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0x8, &(0x7f00000011c0)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x3, 0xe, 0x2, 0x10000}, 0x10, r5, r1, 0x0, &(0x7f0000001300)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000880)="db3d8e877ed58fdd72a035672c334fe89b7db477382a6f67632082a4fb4650e99b0919c1b6aac71b46c4633a80c128710893c900db8366a0924634f14b78c040f07720d407cd512159e02b9a99464512d121a22c0779ac28198bb8614d659a91", 0x60}, {&(0x7f0000000900)}], 0x2, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0x4, 0x3, 0x4, [{@loopback}, {@multicast2, 0xe}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x8}, {@rand_addr=0x64010102, 0x41c0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x74}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfb1}}], 0x120}, 0x20000804) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$tipc(r7, &(0x7f0000000840)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="70919c6e063b1892ac64e37b7083ea212e080766118a64b91020971ba7418772cd7ba3f05a50697d0e75536d4d25b0af532fe97d9b95c79d47b724309b76ae2c9ceadbe4ed87800c524e34cad3b87268c21bab8b1d3fcee9ba28c36a387fb5d4c111b8e4869d4ee28ebca4f68c97317502faf4ce5f75420a906fb499edd858a08f663b0dbba0a6480292e6016f8346126e7293dda4a8aec22226b0dfb45a9b5700980f13eea2f8db2e", 0xa9}, {&(0x7f0000000500)="488cf475b6a9b8fe4f907656a45469ceb2ef91b759c911dc049fc44fe1ee25b29c203ccbfec7c89d0ac55199ae7f522eee98e7439292911dd55d4e0c6df4c41f282f2b6b3139848954aa58d4e0aee9c6351b398a9b1fdf2379d0d4966de2fe40f3058896d56b63bfec403c46629f17da527cf195f78a13d81490488cbcdeca3ff2488a99901640a391a880e7efe738e57a22dd1f2f415e9d9ff3522fdf24c21417e5bf9c716ab2c46b641f46de42085c2ce43462b7242b6071f13e64d5c3b2e2c8f511caa0c033841243b6b77ea26f0deb034de58be5b9a597771e08a8d1459975", 0xe1}, {&(0x7f0000000600)="7617ed4293c489bd384b8aa83cf7c990c1f1d122b702b5ed24332eb2ad44b51f702403c35ee307e9c769ceb5028783a2ebd589c5722073b904d4cf67dfe3c34083ea378fac5a90b06110c82b3054d90b23383b37bc6210be6168328846662d49cc164104c09a4d37a8dceefe1028313b74a4ed46d575d986d6be7914b2e8498141b184616830488820fefe54701cfc47c818d6ca533d2f95dfeabe6bb2ce1572db", 0xa1}, {&(0x7f00000002c0)="c6df4687bc", 0x5}, {&(0x7f00000006c0)}], 0x5, 0x0, 0x0, 0x4000000}, 0x40001) close(r0) kernel console output (not intermixed with test programs): er after parsing attributes in process `syz.1.2760'. [ 446.616244][T11826] batman_adv: batadv0: Removing interface: veth0_vlan [ 446.683374][T11826] batman_adv: batadv0: Removing interface: veth1_vlan [ 446.709009][T11831] device wlan0 left promiscuous mode [ 446.924137][T11861] netlink: 'syz.4.2772': attribute type 3 has an invalid length. [ 446.941067][T11861] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2772'. [ 450.154609][T11885] device wlan0 left promiscuous mode [ 450.189059][T11889] netlink: 'syz.3.2783': attribute type 21 has an invalid length. [ 450.222144][T11889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.230033][T11889] IPv6: NLM_F_CREATE should be set when creating new route [ 450.238942][T11889] IPv6: NLM_F_CREATE should be set when creating new route [ 450.247837][T11889] IPv6: NLM_F_CREATE should be set when creating new route [ 450.333672][T11885] netlink: 'syz.4.2781': attribute type 9 has an invalid length. [ 450.346848][T11885] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2781'. [ 450.581464][T11893] device syzkaller0 entered promiscuous mode [ 451.318182][T11920] netlink: 'syz.3.2792': attribute type 3 has an invalid length. [ 451.367196][T11920] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2792'. [ 451.790867][T11923] netlink: 'syz.1.2795': attribute type 10 has an invalid length. [ 451.846585][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2795'. [ 451.898288][T11923] device ipvlan1 entered promiscuous mode [ 451.933405][T11934] netlink: 'syz.2.2798': attribute type 9 has an invalid length. [ 451.965399][T11923] bridge0: port 2(ipvlan1) entered blocking state [ 451.976793][T11934] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2798'. [ 451.995889][T11923] bridge0: port 2(ipvlan1) entered disabled state [ 452.056587][T11923] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 452.111810][T11931] device wlan0 left promiscuous mode [ 452.198566][T11936] device syzkaller0 entered promiscuous mode [ 452.516293][T11941] device syzkaller0 entered promiscuous mode [ 452.716406][T11958] netlink: 123072 bytes leftover after parsing attributes in process `syz.4.2808'. [ 453.341065][T11977] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 453.380987][T11977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2814'. [ 453.435059][T11977] device ipvlan1 entered promiscuous mode [ 453.457579][T11977] bridge0: port 5(ipvlan1) entered blocking state [ 453.474059][T11977] bridge0: port 5(ipvlan1) entered disabled state [ 453.486136][T11977] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 453.612791][T11980] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2827'. [ 453.761132][T11982] netlink: 'syz.3.2817': attribute type 9 has an invalid length. [ 453.773161][T11989] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2819'. [ 453.826737][T11982] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2817'. [ 453.952198][T11993] bridge0: port 3(gretap0) entered blocking state [ 453.980489][T11993] bridge0: port 3(gretap0) entered disabled state [ 454.031187][T11993] device gretap0 entered promiscuous mode [ 454.331175][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2823'. [ 454.610862][T12004] device syzkaller0 entered promiscuous mode [ 455.433116][T12042] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2832'. [ 455.631401][T12051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2835'. [ 455.780809][T12054] netlink: 'syz.3.2830': attribute type 10 has an invalid length. [ 455.793194][T12054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2830'. [ 456.191988][T12067] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2842'. [ 456.256547][T12069] IPv6: Can't replace route, no match found [ 456.468551][T12069] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.578330][T12082] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2850'. [ 456.821416][T12089] netlink: 'syz.2.2853': attribute type 10 has an invalid length. [ 456.832457][T12089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2853'. [ 456.850043][T12089] bridge0: port 5(ipvlan1) entered blocking state [ 456.864703][T12089] bridge0: port 5(ipvlan1) entered disabled state [ 456.893840][T12089] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 457.161812][T12095] netlink: 'syz.2.2854': attribute type 10 has an invalid length. [ 457.186117][T12095] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2854'. [ 457.809914][T12101] netlink: 'syz.4.2857': attribute type 10 has an invalid length. [ 457.835835][T12101] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2857'. [ 458.228183][T12119] netlink: 'syz.3.2865': attribute type 10 has an invalid length. [ 458.254749][T12119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2865'. [ 458.312947][T12121] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2863'. [ 461.784145][T12145] netlink: 'syz.0.2873': attribute type 10 has an invalid length. [ 461.854706][T12145] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2873'. [ 462.673148][T12149] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2875'. [ 462.703413][T12150] netlink: 'syz.4.2875': attribute type 11 has an invalid length. [ 462.732381][T12155] netlink: 'syz.3.2876': attribute type 10 has an invalid length. [ 462.750940][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2876'. [ 462.889343][T12158] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2877'. [ 464.096764][T12195] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2891'. [ 464.154282][T12197] IPv6: Can't replace route, no match found [ 464.162615][T12200] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 465.263571][T12231] bond0: (slave bridge0): Error: Slave device does not support XDP [ 465.344640][T12231] netlink: 'syz.2.2903': attribute type 10 has an invalid length. [ 465.480842][T12231] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.525599][T12231] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.570090][T12231] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.602277][T12231] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.701855][T12239] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2905'. [ 465.847418][T12246] IPv6: Can't replace route, no match found [ 465.873886][T12247] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 466.230967][T12250] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.2909'. [ 469.068607][T12264] netlink: 'syz.0.2912': attribute type 10 has an invalid length. [ 469.085319][T12264] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2912'. [ 469.242913][T12274] netlink: 'syz.3.2916': attribute type 3 has an invalid length. [ 469.251850][T12274] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2916'. [ 469.671003][T12293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2923'. [ 470.462283][T12309] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.2928'. [ 470.511518][T12312] netlink: 'syz.4.2927': attribute type 10 has an invalid length. [ 470.592837][T12311] netlink: 'syz.2.2929': attribute type 10 has an invalid length. [ 470.605923][T12311] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2929'. [ 470.836097][T12323] netlink: 'syz.4.2933': attribute type 10 has an invalid length. [ 470.858669][T12323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2933'. [ 473.637761][T12336] netlink: 'syz.4.2936': attribute type 3 has an invalid length. [ 473.688408][T12336] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2936'. [ 473.822697][T12348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2940'. [ 473.978120][T12350] netlink: 'syz.1.2943': attribute type 10 has an invalid length. [ 473.987997][T12350] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2943'. [ 475.294633][T12409] netlink: 'syz.3.2959': attribute type 10 has an invalid length. [ 475.336567][T12409] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2959'. [ 475.398560][T12420] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2965'. [ 475.580883][T12422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2966'. [ 475.663707][T12424] netlink: 'syz.4.2967': attribute type 3 has an invalid length. [ 475.726778][T12424] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2967'. [ 475.814412][T12426] netlink: 'syz.1.2969': attribute type 10 has an invalid length. [ 475.909702][T12426] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.967492][T12426] bond0: (slave team0): Enslaving as an active interface with an up link [ 476.432332][T12438] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2974'. [ 476.470270][T12442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2984'. [ 476.527863][T12438] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2974'. [ 476.975053][T12457] netlink: 'syz.2.2979': attribute type 10 has an invalid length. [ 477.008561][T12457] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2979'. [ 477.284937][T12472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2983'. [ 477.414584][T12474] netlink: 'syz.2.2985': attribute type 3 has an invalid length. [ 477.437694][T12474] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2985'. [ 479.130154][T12531] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 479.141419][T12530] netlink: 'syz.1.3001': attribute type 3 has an invalid length. [ 479.319242][T12535] netlink: 'syz.2.3009': attribute type 10 has an invalid length. [ 482.466881][T12558] bond0: (slave bridge0): Error: Slave device does not support XDP [ 482.478133][T12561] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 482.671774][T12573] netlink: 'syz.0.3027': attribute type 10 has an invalid length. [ 482.695462][T12573] __nla_validate_parse: 6 callbacks suppressed [ 482.695502][T12573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3027'. [ 482.882093][T12585] netlink: 'syz.0.3029': attribute type 3 has an invalid length. [ 482.899592][T12587] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 482.909121][T12585] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3029'. [ 482.930316][T12587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3039'. [ 483.058825][T12596] netlink: 'syz.3.3033': attribute type 10 has an invalid length. [ 483.071910][T12596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3033'. [ 483.097289][T12603] netlink: 'syz.0.3035': attribute type 10 has an invalid length. [ 483.107449][T12603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3035'. [ 483.434626][T12624] netlink: 'syz.0.3049': attribute type 10 has an invalid length. [ 483.443312][T12624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3049'. [ 483.457769][T12626] netlink: 'syz.2.3050': attribute type 10 has an invalid length. [ 483.466290][T12626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3050'. [ 483.538577][T12630] netlink: 'syz.0.3051': attribute type 3 has an invalid length. [ 483.551597][T12630] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3051'. [ 483.909923][T12651] netlink: 'syz.0.3058': attribute type 10 has an invalid length. [ 484.046762][T12663] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3061'. [ 484.060187][T12651] bridge0: port 3(team0) entered disabled state [ 484.118131][T12651] device team_slave_1 left promiscuous mode [ 484.171719][T12651] team0 (unregistering): Port device team_slave_1 removed [ 484.179488][T12651] device geneve1 left promiscuous mode [ 484.187962][T12651] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.200724][T12651] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.210105][T12651] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.234728][T12651] team0 (unregistering): Port device geneve1 removed [ 484.258796][T12655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3062'. [ 484.966918][T12698] bridge0: port 2(ipvlan1) entered blocking state [ 484.980835][T12698] bridge0: port 2(ipvlan1) entered disabled state [ 485.022156][T12698] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 485.993236][T12730] bridge0: port 2(ipvlan1) entered blocking state [ 486.039465][T12730] bridge0: port 2(ipvlan1) entered disabled state [ 486.082973][T12730] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 487.567906][T12804] validate_nla: 16 callbacks suppressed [ 487.567940][T12804] netlink: 'syz.1.3122': attribute type 10 has an invalid length. [ 487.613658][T12804] bridge0: port 2(ipvlan1) entered blocking state [ 487.624020][T12804] bridge0: port 2(ipvlan1) entered disabled state [ 487.663275][T12804] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 487.983223][T12819] __nla_validate_parse: 18 callbacks suppressed [ 487.983258][T12819] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3127'. [ 488.038542][T12823] netlink: 'syz.3.3129': attribute type 39 has an invalid length. [ 488.355138][T12838] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 488.403484][T12838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3137'. [ 488.442137][T12838] bridge0: port 2(ipvlan1) entered blocking state [ 488.451202][T12838] bridge0: port 2(ipvlan1) entered disabled state [ 488.483062][T12838] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 488.619239][T12857] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3141'. [ 488.623727][T12855] netlink: 'syz.3.3142': attribute type 3 has an invalid length. [ 488.638965][T12855] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3142'. [ 488.647212][T12853] netlink: 'syz.0.3152': attribute type 10 has an invalid length. [ 488.661652][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3152'. [ 488.689519][T12857] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3141'. [ 489.181351][T12878] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 489.333867][T12886] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 489.397552][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3155'. [ 489.470596][T12888] netlink: 'syz.0.3156': attribute type 10 has an invalid length. [ 489.502016][T12888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3156'. [ 489.551152][T12893] netlink: 'syz.3.3157': attribute type 3 has an invalid length. [ 489.570514][T12893] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3157'. [ 489.584682][T12897] netlink: 'syz.2.3160': attribute type 10 has an invalid length. [ 489.630634][T12897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3160'. [ 489.758454][T12903] netlink: 'syz.0.3173': attribute type 10 has an invalid length. [ 490.200799][T12927] netlink: 'syz.2.3174': attribute type 10 has an invalid length. [ 490.390866][T12939] device team0 entered promiscuous mode [ 490.398963][T12939] device team_slave_1 entered promiscuous mode [ 490.410558][T12939] device geneve1 entered promiscuous mode [ 490.426634][T12939] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 491.757536][T13010] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 492.043523][T13029] bond0: (slave bridge0): Error: Slave device does not support XDP [ 492.443197][T13047] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 492.644696][T13061] validate_nla: 15 callbacks suppressed [ 492.644712][T13061] netlink: 'syz.3.3229': attribute type 10 has an invalid length. [ 493.090111][T13082] netlink: 'syz.3.3237': attribute type 10 has an invalid length. [ 493.116014][T13082] __nla_validate_parse: 18 callbacks suppressed [ 493.116044][T13082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3237'. [ 493.135709][T13079] netlink: 'syz.2.3236': attribute type 10 has an invalid length. [ 493.154011][T13079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3236'. [ 493.272241][T13092] netlink: 'syz.0.3243': attribute type 39 has an invalid length. [ 493.420308][T13101] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 493.433807][T13100] netlink: 'syz.1.3255': attribute type 10 has an invalid length. [ 493.446068][T13100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3255'. [ 493.461005][T13100] bridge0: port 2(ipvlan1) entered blocking state [ 493.468752][T13100] bridge0: port 2(ipvlan1) entered disabled state [ 493.508300][T13100] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 493.749213][T13116] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 493.806157][T13116] netlink: 'syz.3.3247': attribute type 4 has an invalid length. [ 493.839410][T13116] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3247'. [ 493.861677][T13123] netlink: 'syz.1.3253': attribute type 10 has an invalid length. [ 493.903347][T13123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3253'. [ 493.929524][T13123] bridge0: port 2(ipvlan1) entered blocking state [ 493.943665][T13134] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3259'. [ 493.949421][T13133] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.3258'. [ 493.965760][T13123] bridge0: port 2(ipvlan1) entered disabled state [ 494.008959][T13123] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 494.047391][T13130] netlink: 'syz.0.3257': attribute type 10 has an invalid length. [ 494.820493][T13143] netlink: 'syz.4.3264': attribute type 39 has an invalid length. [ 494.889601][T13152] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 494.901361][T13145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3271'. [ 494.911314][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3263'. [ 495.233159][T13174] device syzkaller0 entered promiscuous mode [ 495.294015][T13175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3280'. [ 495.521380][T13190] device syzkaller0 entered promiscuous mode [ 496.699899][T13232] device wlan1 entered promiscuous mode [ 497.141239][T13253] bridge0: port 2(ipvlan1) entered blocking state [ 497.149297][T13253] bridge0: port 2(ipvlan1) entered disabled state [ 497.184997][T13253] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 497.505366][T13267] bond0: (slave bridge0): Error: Slave device does not support XDP [ 497.678012][T13275] validate_nla: 8 callbacks suppressed [ 497.678046][T13275] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 497.899243][T13285] netlink: 'syz.4.3314': attribute type 10 has an invalid length. [ 498.353303][ T4569] tipc: Subscription rejected, illegal request [ 498.520351][T13322] netlink: 'syz.4.3330': attribute type 10 has an invalid length. [ 498.536809][T13322] __nla_validate_parse: 7 callbacks suppressed [ 498.536837][T13322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3330'. [ 498.588574][T13327] bond0: (slave bridge0): Error: Slave device does not support XDP [ 498.650079][T13333] netlink: 'syz.0.3332': attribute type 10 has an invalid length. [ 498.793209][T13341] device syzkaller0 entered promiscuous mode [ 499.188607][T13348] device wlan1 entered promiscuous mode [ 499.327203][T13360] netlink: 'syz.2.3346': attribute type 10 has an invalid length. [ 499.339609][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3346'. [ 499.433433][T13368] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3349'. [ 499.641642][T13381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.650527][T13381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.666189][T13381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.673662][T13381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.709323][T13381] batman_adv: batadv0: Removing interface: netdevsim0 [ 499.818751][T13390] netlink: 'syz.2.3358': attribute type 10 has an invalid length. [ 499.942454][T13393] netlink: 'syz.3.3360': attribute type 10 has an invalid length. [ 499.951403][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3360'. [ 500.142091][T13402] netlink: 'syz.3.3363': attribute type 10 has an invalid length. [ 500.151566][T13402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3363'. [ 500.169875][T13402] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 500.191492][T13406] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3365'. [ 500.793908][T13429] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 500.832616][T13429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3373'. [ 501.489810][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.496224][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.667637][T13459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3383'. [ 501.862334][T13467] device wlan1 entered promiscuous mode [ 502.389211][T13479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3394'. [ 502.769211][T13491] netlink: 'syz.2.3395': attribute type 10 has an invalid length. [ 502.797960][T13491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3395'. [ 502.842532][T13491] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 502.865226][T13499] netlink: 'syz.3.3397': attribute type 10 has an invalid length. [ 503.022008][T13510] netlink: 'syz.0.3410': attribute type 10 has an invalid length. [ 503.520692][T13573] device wlan1 entered promiscuous mode [ 503.672924][T13575] __nla_validate_parse: 2 callbacks suppressed [ 503.672960][T13575] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3404'. [ 503.993986][T13595] netlink: 'syz.4.3413': attribute type 10 has an invalid length. [ 504.077107][T13595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3413'. [ 504.146060][T13595] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 504.355085][T13599] netlink: 'syz.0.3414': attribute type 10 has an invalid length. [ 504.374097][T13599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3414'. [ 504.679772][T13602] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3415'. [ 504.731658][T13612] ÿ: renamed from bond_slave_0 [ 504.902111][T13612] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3419'. [ 504.926864][T13612] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 504.934877][T13612] CPU: 1 PID: 13612 Comm: syz.4.3419 Not tainted syzkaller #0 [ 504.942440][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.952506][T13612] Call Trace: [ 504.955797][T13612] [ 504.958737][T13612] dump_stack_lvl+0x188/0x250 [ 504.963428][T13612] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 504.969607][T13612] ? show_regs_print_info+0x20/0x20 [ 504.974825][T13612] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 504.981009][T13612] ? dump_stack+0x5/0x20 [ 504.985281][T13612] sysfs_warn_dup+0x8a/0xa0 [ 504.989799][T13612] sysfs_do_create_link_sd+0xc0/0x110 [ 504.995182][T13612] device_add+0x7ed/0xfb0 [ 504.999542][T13612] wiphy_register+0x1e81/0x2c30 [ 505.004436][T13612] ? cfg80211_event_work+0x40/0x40 [ 505.009563][T13612] ? minstrel_ht_alloc+0x808/0x980 [ 505.014710][T13612] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 505.020801][T13612] ieee80211_register_hw+0x2aa1/0x3af0 [ 505.026296][T13612] ? ieee80211_tasklet_handler+0x20/0x20 [ 505.031958][T13612] ? rcu_is_watching+0x11/0xa0 [ 505.036761][T13612] ? memset+0x1e/0x40 [ 505.040763][T13612] ? hrtimer_init+0x10c/0x220 [ 505.045459][T13612] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 505.051218][T13612] hwsim_new_radio_nl+0xa6f/0xc40 [ 505.056283][T13612] genl_rcv_msg+0xcea/0xf90 [ 505.060820][T13612] ? genl_bind+0x380/0x380 [ 505.065261][T13612] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 505.070475][T13612] ? verify_lock_unused+0x140/0x140 [ 505.075707][T13612] ? dev_queue_xmit+0x20/0x20 [ 505.080528][T13612] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 505.087070][T13612] netlink_rcv_skb+0x1f5/0x440 [ 505.091851][T13612] ? genl_bind+0x380/0x380 [ 505.096285][T13612] ? netlink_ack+0xb50/0xb50 [ 505.100886][T13612] ? __lock_acquire+0x7d10/0x7d10 [ 505.105928][T13612] ? down_read+0x1aa/0x2e0 [ 505.110368][T13612] genl_rcv+0x24/0x40 [ 505.114359][T13612] netlink_unicast+0x774/0x920 [ 505.119145][T13612] netlink_sendmsg+0x8ba/0xbe0 [ 505.123927][T13612] ? netlink_getsockopt+0x570/0x570 [ 505.129148][T13612] ? aa_sock_msg_perm+0x94/0x150 [ 505.134104][T13612] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 505.139422][T13612] ? security_socket_sendmsg+0x7c/0xa0 [ 505.144894][T13612] ? netlink_getsockopt+0x570/0x570 [ 505.150103][T13612] ____sys_sendmsg+0x5b7/0x8f0 [ 505.154897][T13612] ? __sys_sendmsg_sock+0x30/0x30 [ 505.159947][T13612] ? import_iovec+0x6f/0xa0 [ 505.164490][T13612] ___sys_sendmsg+0x236/0x2e0 [ 505.169190][T13612] ? __sys_sendmsg+0x2a0/0x2a0 [ 505.173983][T13612] ? ktime_get_real_ts64+0x440/0x440 [ 505.179309][T13612] __se_sys_sendmsg+0x1af/0x290 [ 505.184442][T13612] ? __x64_sys_sendmsg+0x80/0x80 [ 505.189417][T13612] ? syscall_enter_from_user_mode+0x2a/0x70 [ 505.195337][T13612] do_syscall_64+0x4c/0xa0 [ 505.199773][T13612] ? clear_bhb_loop+0x30/0x80 [ 505.204474][T13612] ? clear_bhb_loop+0x30/0x80 [ 505.209171][T13612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 505.215097][T13612] RIP: 0033:0x7f99ce538819 [ 505.219529][T13612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.239164][T13612] RSP: 002b:00007f99cc792028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.247699][T13612] RAX: ffffffffffffffda RBX: 00007f99ce7b1fa0 RCX: 00007f99ce538819 [ 505.255683][T13612] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 505.263673][T13612] RBP: 00007f99ce5cec91 R08: 0000000000000000 R09: 0000000000000000 [ 505.271659][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.279731][T13612] R13: 00007f99ce7b2038 R14: 00007f99ce7b1fa0 R15: 00007ffd567bd4b8 [ 505.287738][T13612] [ 505.424299][T13654] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.434582][T13654] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3424'. [ 505.469403][T13658] device wlan1 entered promiscuous mode [ 505.692482][T13665] netlink: 'syz.2.3429': attribute type 10 has an invalid length. [ 505.741533][T13665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3429'. [ 506.477347][T13689] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3436'. [ 506.673484][T13695] netlink: 'syz.4.3437': attribute type 10 has an invalid length. [ 506.683013][T13695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3437'. [ 507.376366][T13718] netlink: 'syz.0.3445': attribute type 10 has an invalid length. [ 507.420986][T13718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3445'. [ 510.440971][T13730] netlink: 'syz.2.3450': attribute type 21 has an invalid length. [ 510.453919][T13730] __nla_validate_parse: 1 callbacks suppressed [ 510.453938][T13730] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3450'. [ 510.489849][T13730] netlink: 'syz.2.3450': attribute type 4 has an invalid length. [ 510.504023][T13730] netlink: 'syz.2.3450': attribute type 5 has an invalid length. [ 510.517717][T13730] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3450'. [ 510.856895][T13743] netlink: 'syz.3.3453': attribute type 10 has an invalid length. [ 510.883756][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3453'. [ 511.158614][T13762] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3458'. [ 511.249853][T13762] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 511.312988][T13762] CPU: 1 PID: 13762 Comm: syz.1.3458 Not tainted syzkaller #0 [ 511.320584][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 511.330661][T13762] Call Trace: [ 511.333960][T13762] [ 511.336911][T13762] dump_stack_lvl+0x188/0x250 [ 511.341615][T13762] ? show_regs_print_info+0x20/0x20 [ 511.346845][T13762] ? load_image+0x400/0x400 [ 511.351391][T13762] sysfs_warn_dup+0x8a/0xa0 [ 511.355927][T13762] sysfs_do_create_link_sd+0xc0/0x110 [ 511.361324][T13762] device_add+0x7ed/0xfb0 [ 511.365688][T13762] wiphy_register+0x1e81/0x2c30 [ 511.370586][T13762] ? cfg80211_event_work+0x40/0x40 [ 511.375720][T13762] ? minstrel_ht_alloc+0x808/0x980 [ 511.380865][T13762] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 511.386967][T13762] ieee80211_register_hw+0x2aa1/0x3af0 [ 511.392476][T13762] ? ieee80211_tasklet_handler+0x20/0x20 [ 511.398172][T13762] ? rcu_is_watching+0x11/0xa0 [ 511.402975][T13762] ? memset+0x1e/0x40 [ 511.406986][T13762] ? hrtimer_init+0x10c/0x220 [ 511.411695][T13762] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 511.417469][T13762] hwsim_new_radio_nl+0xa6f/0xc40 [ 511.422545][T13762] genl_rcv_msg+0xcea/0xf90 [ 511.427087][T13762] ? genl_bind+0x380/0x380 [ 511.431536][T13762] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 511.436756][T13762] ? verify_lock_unused+0x140/0x140 [ 511.441997][T13762] ? perf_trace_lock+0xe4/0x390 [ 511.446873][T13762] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 511.453432][T13762] netlink_rcv_skb+0x1f5/0x440 [ 511.458225][T13762] ? genl_bind+0x380/0x380 [ 511.462662][T13762] ? netlink_ack+0xb50/0xb50 [ 511.467297][T13762] ? __lock_acquire+0x7d10/0x7d10 [ 511.472357][T13762] ? down_read+0x1aa/0x2e0 [ 511.476805][T13762] genl_rcv+0x24/0x40 [ 511.480811][T13762] netlink_unicast+0x774/0x920 [ 511.485607][T13762] netlink_sendmsg+0x8ba/0xbe0 [ 511.490403][T13762] ? netlink_getsockopt+0x570/0x570 [ 511.495622][T13762] ? aa_sock_msg_perm+0x94/0x150 [ 511.500582][T13762] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 511.505886][T13762] ? security_socket_sendmsg+0x7c/0xa0 [ 511.511368][T13762] ? netlink_getsockopt+0x570/0x570 [ 511.516583][T13762] ____sys_sendmsg+0x5b7/0x8f0 [ 511.521387][T13762] ? __sys_sendmsg_sock+0x30/0x30 [ 511.526445][T13762] ? import_iovec+0x6f/0xa0 [ 511.530974][T13762] ___sys_sendmsg+0x236/0x2e0 [ 511.535688][T13762] ? __sys_sendmsg+0x2a0/0x2a0 [ 511.540494][T13762] ? trace_event_raw_event_lock+0x270/0x270 [ 511.546448][T13762] __se_sys_sendmsg+0x1af/0x290 [ 511.551337][T13762] ? __x64_sys_sendmsg+0x80/0x80 [ 511.556300][T13762] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 511.562324][T13762] ? lockdep_hardirqs_on+0x94/0x140 [ 511.567555][T13762] do_syscall_64+0x4c/0xa0 [ 511.571993][T13762] ? clear_bhb_loop+0x30/0x80 [ 511.576694][T13762] ? clear_bhb_loop+0x30/0x80 [ 511.581394][T13762] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 511.587308][T13762] RIP: 0033:0x7f6cc8b8d819 [ 511.591742][T13762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.611364][T13762] RSP: 002b:00007f6cc6dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.619800][T13762] RAX: ffffffffffffffda RBX: 00007f6cc8e07090 RCX: 00007f6cc8b8d819 [ 511.627796][T13762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 511.635782][T13762] RBP: 00007f6cc8c23c91 R08: 0000000000000000 R09: 0000000000000000 [ 511.643764][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.651744][T13762] R13: 00007f6cc8e07128 R14: 00007f6cc8e07090 R15: 00007ffe2a0c4618 [ 511.659756][T13762] [ 511.915575][T13769] netlink: 'syz.3.3461': attribute type 10 has an invalid length. [ 511.924072][T13769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3461'. [ 512.258947][T13785] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3465'. [ 512.270756][T13792] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.295023][T13792] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3469'. [ 512.444862][T13794] netlink: 'syz.0.3470': attribute type 10 has an invalid length. [ 512.488543][T13794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3470'. [ 513.031645][T13816] netlink: 'syz.3.3476': attribute type 10 has an invalid length. [ 513.041600][T13816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3476'. [ 513.352390][T13822] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3480'. [ 513.903441][T13826] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 513.934930][T13826] CPU: 1 PID: 13826 Comm: syz.3.3477 Not tainted syzkaller #0 [ 513.942436][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.952508][T13826] Call Trace: [ 513.955801][T13826] [ 513.958737][T13826] dump_stack_lvl+0x188/0x250 [ 513.963441][T13826] ? show_regs_print_info+0x20/0x20 [ 513.968639][T13826] ? load_image+0x400/0x400 [ 513.973144][T13826] sysfs_warn_dup+0x8a/0xa0 [ 513.977636][T13826] sysfs_do_create_link_sd+0xc0/0x110 [ 513.983002][T13826] device_add+0x7ed/0xfb0 [ 513.987337][T13826] wiphy_register+0x1e81/0x2c30 [ 513.992196][T13826] ? cfg80211_event_work+0x40/0x40 [ 513.997297][T13826] ? minstrel_ht_alloc+0x808/0x980 [ 514.002415][T13826] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 514.008481][T13826] ieee80211_register_hw+0x2aa1/0x3af0 [ 514.013948][T13826] ? ieee80211_tasklet_handler+0x20/0x20 [ 514.019578][T13826] ? rcu_is_watching+0x11/0xa0 [ 514.024335][T13826] ? memset+0x1e/0x40 [ 514.028306][T13826] ? hrtimer_init+0x10c/0x220 [ 514.032976][T13826] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 514.038706][T13826] hwsim_new_radio_nl+0xa6f/0xc40 [ 514.043743][T13826] genl_rcv_msg+0xcea/0xf90 [ 514.048252][T13826] ? genl_bind+0x380/0x380 [ 514.052831][T13826] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 514.058038][T13826] ? verify_lock_unused+0x140/0x140 [ 514.063258][T13826] ? perf_trace_lock+0xe4/0x390 [ 514.068112][T13826] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 514.074622][T13826] netlink_rcv_skb+0x1f5/0x440 [ 514.079377][T13826] ? genl_bind+0x380/0x380 [ 514.083783][T13826] ? netlink_ack+0xb50/0xb50 [ 514.088367][T13826] ? __lock_acquire+0x7d10/0x7d10 [ 514.093387][T13826] ? down_read+0x1aa/0x2e0 [ 514.097795][T13826] genl_rcv+0x24/0x40 [ 514.101768][T13826] netlink_unicast+0x774/0x920 [ 514.106526][T13826] netlink_sendmsg+0x8ba/0xbe0 [ 514.111283][T13826] ? netlink_getsockopt+0x570/0x570 [ 514.116470][T13826] ? aa_sock_msg_perm+0x94/0x150 [ 514.121486][T13826] ? aa_sk_perm+0x1/0x910 [ 514.125802][T13826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 514.131073][T13826] ? security_socket_sendmsg+0x7c/0xa0 [ 514.136517][T13826] ? netlink_getsockopt+0x570/0x570 [ 514.141716][T13826] ____sys_sendmsg+0x5b7/0x8f0 [ 514.146484][T13826] ? __sys_sendmsg_sock+0x30/0x30 [ 514.151525][T13826] ? import_iovec+0x6f/0xa0 [ 514.156029][T13826] ___sys_sendmsg+0x236/0x2e0 [ 514.160705][T13826] ? __sys_sendmsg+0x2a0/0x2a0 [ 514.165618][T13826] __se_sys_sendmsg+0x1af/0x290 [ 514.170473][T13826] ? __x64_sys_sendmsg+0x80/0x80 [ 514.175416][T13826] ? syscall_enter_from_user_mode+0x2a/0x70 [ 514.181327][T13826] do_syscall_64+0x4c/0xa0 [ 514.185757][T13826] ? clear_bhb_loop+0x30/0x80 [ 514.190435][T13826] ? clear_bhb_loop+0x30/0x80 [ 514.195107][T13826] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.200992][T13826] RIP: 0033:0x7fa01b803819 [ 514.205414][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.225021][T13826] RSP: 002b:00007fa019a5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.233452][T13826] RAX: ffffffffffffffda RBX: 00007fa01ba7cfa0 RCX: 00007fa01b803819 [ 514.241414][T13826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 514.249385][T13826] RBP: 00007fa01b899c91 R08: 0000000000000000 R09: 0000000000000000 [ 514.257343][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.265310][T13826] R13: 00007fa01ba7d038 R14: 00007fa01ba7cfa0 R15: 00007ffcbce16308 [ 514.273287][T13826] [ 514.560655][T13843] netlink: 'syz.0.3485': attribute type 10 has an invalid length. [ 514.692962][T13851] bond0: (slave bridge0): Error: Slave device does not support XDP [ 517.524213][T13853] netlink: 'syz.1.3487': attribute type 10 has an invalid length. [ 517.539426][T13853] __nla_validate_parse: 2 callbacks suppressed [ 517.539458][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3487'. [ 517.579259][T13853] bridge0: port 2(ipvlan1) entered blocking state [ 517.591136][T13853] bridge0: port 2(ipvlan1) entered disabled state [ 517.609239][T13853] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 517.749788][T13873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3493'. [ 517.785790][T13878] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3498'. [ 517.838222][T13870] netlink: 'syz.3.3495': attribute type 21 has an invalid length. [ 517.858908][T13870] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3495'. [ 518.068494][T13888] netlink: 'syz.1.3500': attribute type 10 has an invalid length. [ 518.088029][T13888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3500'. [ 518.118287][T13888] bridge0: port 2(ipvlan1) entered blocking state [ 518.141916][T13888] bridge0: port 2(ipvlan1) entered disabled state [ 518.183507][T13888] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 518.324770][T13893] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3499'. [ 518.710264][T13907] netlink: 'syz.0.3507': attribute type 10 has an invalid length. [ 518.733180][T13907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3507'. [ 519.219908][T13917] netlink: 'syz.1.3518': attribute type 10 has an invalid length. [ 519.239149][T13917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3518'. [ 519.276333][T13917] bridge0: port 2(ipvlan1) entered blocking state [ 519.296633][T13917] bridge0: port 2(ipvlan1) entered disabled state [ 519.742379][T13917] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 522.187687][T13934] netlink: 'syz.0.3514': attribute type 10 has an invalid length. [ 522.206318][T13934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3514'. [ 522.256509][T13941] bond0: (slave bridge0): Error: Slave device does not support XDP [ 522.493515][T13947] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3519'. [ 522.683603][T13956] netlink: 'syz.4.3524': attribute type 21 has an invalid length. [ 522.707517][T13956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3524'. [ 523.544966][T13967] netlink: 'syz.1.3527': attribute type 21 has an invalid length. [ 523.565958][T13967] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3527'. [ 523.741299][T13982] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 523.762066][T13982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3529'. [ 523.847116][T13985] bond0: (slave bridge0): Error: Slave device does not support XDP [ 525.114967][T14019] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3546'. [ 525.231874][T14023] netlink: 'syz.3.3548': attribute type 10 has an invalid length. [ 525.251309][T14023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3548'. [ 525.472666][T14030] netlink: 'syz.1.3561': attribute type 10 has an invalid length. [ 525.485745][T14030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3561'. [ 525.498028][T14030] bridge0: port 2(ipvlan1) entered blocking state [ 525.504937][T14030] bridge0: port 2(ipvlan1) entered disabled state [ 525.515657][T14030] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 525.542060][T14033] netlink: 'syz.4.3549': attribute type 21 has an invalid length. [ 525.564254][T14033] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3549'. [ 525.610035][T14040] device erspan0 left promiscuous mode [ 525.621431][T14040] bridge0: port 4(erspan0) entered disabled state [ 525.630949][T14040] bridge0: port 3(dummy0) entered disabled state [ 525.640312][T14040] device bridge_slave_1 left promiscuous mode [ 525.647983][T14040] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.658026][T14040] device bridge_slave_0 left promiscuous mode [ 525.664291][T14040] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.684529][T14040] bond0: (slave bridge0): Releasing backup interface [ 525.710453][T14045] sock: sock_timestamping_bind_phc: sock not bind to device [ 526.868457][T14077] netlink: 'syz.1.3567': attribute type 10 has an invalid length. [ 526.879309][T14077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3567'. [ 526.905767][T14077] bridge0: port 2(ipvlan1) entered blocking state [ 526.912641][T14077] bridge0: port 2(ipvlan1) entered disabled state [ 526.966232][T14077] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 526.990186][T14080] netlink: 'syz.2.3568': attribute type 10 has an invalid length. [ 527.864975][T14111] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3578'. [ 528.228468][T14123] netlink: 'syz.0.3582': attribute type 27 has an invalid length. [ 528.276044][T14123] netlink: 'syz.0.3582': attribute type 4 has an invalid length. [ 528.346282][T14123] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3582'. [ 528.450340][T14122] netlink: 'syz.2.3585': attribute type 21 has an invalid length. [ 528.559683][T14122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3585'. [ 529.168067][T14136] netlink: 'syz.0.3598': attribute type 21 has an invalid length. [ 529.178333][T14140] syz.1.3589[14140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.178437][T14140] syz.1.3589[14140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.192312][T14136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3598'. [ 529.229646][T14140] syz.1.3589[14140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.229936][T14140] syz.1.3589[14140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 530.075791][T14156] netlink: 'syz.4.3594': attribute type 10 has an invalid length. [ 530.148724][T14156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3594'. [ 530.307719][T14160] device sit0 entered promiscuous mode [ 533.684327][T14186] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3603'. [ 533.760681][T14185] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3604'. [ 533.779971][T14186] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3603'. [ 533.892242][T14196] netlink: 'syz.1.3607': attribute type 21 has an invalid length. [ 533.902027][T14196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3607'. [ 534.726550][T14208] netlink: 'syz.3.3611': attribute type 10 has an invalid length. [ 536.998402][T14211] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3612'. [ 537.019976][T14213] netlink: 'syz.4.3613': attribute type 10 has an invalid length. [ 537.033378][T14213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3613'. [ 537.050919][T14215] netlink: 'syz.1.3612': attribute type 2 has an invalid length. [ 537.097172][T14218] netlink: 'syz.2.3614': attribute type 10 has an invalid length. [ 537.130074][T14218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3614'. [ 537.189455][T14218] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 537.371459][T14235] netlink: 'syz.0.3626': attribute type 10 has an invalid length. [ 537.397960][T14235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3626'. [ 537.798397][T14242] netlink: 'syz.4.3621': attribute type 10 has an invalid length. [ 537.807204][T14242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3621'. [ 538.165839][T14262] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3631'. [ 538.185693][T14268] netlink: 'syz.3.3633': attribute type 10 has an invalid length. [ 538.360624][T14271] netlink: 'syz.2.3634': attribute type 10 has an invalid length. [ 538.500345][T14278] netlink: 'syz.3.3637': attribute type 10 has an invalid length. [ 538.534994][T14280] device sit0 entered promiscuous mode [ 538.845280][T14292] __nla_validate_parse: 3 callbacks suppressed [ 538.845297][T14292] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3643'. [ 538.894050][T14293] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3642'. [ 538.914732][T14292] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 538.979697][T14297] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3645'. [ 539.038670][T14297] netlink: 'syz.4.3645': attribute type 2 has an invalid length. [ 539.132510][T14302] netlink: 'syz.3.3648': attribute type 10 has an invalid length. [ 539.141148][T14302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3648'. [ 539.221070][T14309] netlink: 'syz.2.3650': attribute type 10 has an invalid length. [ 539.246243][T14309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3650'. [ 539.288880][T14315] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3654'. [ 539.537246][T14332] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3660'. [ 539.773560][T14337] netlink: 'syz.3.3662': attribute type 10 has an invalid length. [ 539.783366][T14337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3662'. [ 539.795508][T14339] device sit0 entered promiscuous mode [ 539.941056][T14346] netlink: 'syz.1.3674': attribute type 10 has an invalid length. [ 539.951215][T14346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3674'. [ 539.961862][T14346] bridge0: port 2(ipvlan1) entered blocking state [ 539.968921][T14346] bridge0: port 2(ipvlan1) entered disabled state [ 539.978191][T14346] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 539.997617][T14344] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3664'. [ 540.205584][T14351] netlink: 'syz.1.3667': attribute type 10 has an invalid length. [ 540.235901][T14351] bridge0: port 2(ipvlan1) entered blocking state [ 540.250571][T14351] bridge0: port 2(ipvlan1) entered disabled state [ 540.282436][T14351] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 540.503193][T14376] device sit0 entered promiscuous mode [ 540.775524][T14391] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 541.442585][T14407] netlink: 'syz.4.3692': attribute type 39 has an invalid length. [ 541.482661][T14403] netlink: 'syz.0.3688': attribute type 2 has an invalid length. [ 541.518247][T14408] netlink: 'syz.1.3689': attribute type 10 has an invalid length. [ 541.589003][T14408] bridge0: port 2(ipvlan1) entered blocking state [ 541.608549][T14408] bridge0: port 2(ipvlan1) entered disabled state [ 541.653852][T14408] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 541.683832][T14422] netlink: 'syz.4.3696': attribute type 10 has an invalid length. [ 544.841586][T14490] validate_nla: 3 callbacks suppressed [ 544.841604][T14490] netlink: 'syz.0.3735': attribute type 39 has an invalid length. [ 544.992046][T14504] syz.0.3734[14504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.992140][T14504] syz.0.3734[14504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.097912][T14552] __nla_validate_parse: 6 callbacks suppressed [ 548.097933][T14552] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3756'. [ 548.330001][T14574] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3765'. [ 548.347992][T14576] netlink: 'syz.0.3766': attribute type 17 has an invalid length. [ 548.356374][T14576] netlink: 'syz.0.3766': attribute type 16 has an invalid length. [ 548.364312][T14576] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3766'. [ 548.471031][T14584] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3770'. [ 548.541750][T14592] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3773'. [ 549.075462][T14619] netlink: 'syz.2.3784': attribute type 6 has an invalid length. [ 549.405955][T14642] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3798'. [ 549.416241][T14642] bridge_slave_1: default FDB implementation only supports local addresses [ 549.508436][T14650] netlink: 'syz.0.3802': attribute type 29 has an invalid length. [ 549.517482][T14650] netlink: 'syz.0.3802': attribute type 29 has an invalid length. [ 549.527290][T14650] netlink: 'syz.0.3802': attribute type 29 has an invalid length. [ 549.772831][T14668] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3811'. [ 550.116547][T14698] netlink: 'syz.2.3827': attribute type 21 has an invalid length. [ 550.124898][T14698] netlink: 'syz.2.3827': attribute type 20 has an invalid length. [ 550.133410][T14698] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.508099][T14731] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3842'. [ 550.525320][T14731] openvswitch: netlink: Key type 4112 is out of range max 29 [ 550.687514][T14742] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3848'. [ 550.884074][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3855'. [ 551.542582][T14772] netlink: 'syz.4.3861': attribute type 10 has an invalid length. [ 552.004205][T14799] netlink: 'syz.3.3873': attribute type 10 has an invalid length. [ 552.229551][T14814] netlink: 'syz.3.3879': attribute type 16 has an invalid length. [ 552.579722][T14822] netlink: 'syz.3.3883': attribute type 10 has an invalid length. [ 552.814635][T14834] netlink: 'syz.4.3886': attribute type 6 has an invalid length. [ 554.914343][T14840] netlink: 'syz.0.3889': attribute type 10 has an invalid length. [ 554.922633][T14840] __nla_validate_parse: 10 callbacks suppressed [ 554.922648][T14840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3889'. [ 555.168651][T14848] netlink: 'syz.3.3890': attribute type 29 has an invalid length. [ 555.237226][T14848] netlink: 'syz.3.3890': attribute type 29 has an invalid length. [ 555.255600][T14851] netlink: 'syz.3.3890': attribute type 29 has an invalid length. [ 555.277541][T14848] netlink: 'syz.3.3890': attribute type 29 has an invalid length. [ 555.334250][T14860] netlink: 'syz.4.3899': attribute type 16 has an invalid length. [ 555.382516][T14860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3899'. [ 555.417680][T14866] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3902'. [ 555.460712][T14864] netlink: 'syz.1.3901': attribute type 10 has an invalid length. [ 555.475728][T14864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3901'. [ 555.492798][T14864] bridge0: port 2(ipvlan1) entered blocking state [ 555.502120][T14864] bridge0: port 2(ipvlan1) entered disabled state [ 555.544255][T14864] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 555.627207][T14876] netlink: 'syz.3.3907': attribute type 10 has an invalid length. [ 555.654053][T14876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3907'. [ 555.823831][T14900] netlink: 'syz.1.3917': attribute type 16 has an invalid length. [ 555.832002][T14900] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3917'. [ 556.070319][T14918] netlink: 'syz.0.3928': attribute type 3 has an invalid length. [ 556.102633][T14918] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3928'. [ 556.144499][T14922] netlink: 'syz.1.3926': attribute type 10 has an invalid length. [ 556.157789][T14922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3926'. [ 556.170136][T14922] bridge0: port 2(ipvlan1) entered blocking state [ 556.177318][T14922] bridge0: port 2(ipvlan1) entered disabled state [ 556.200713][T14922] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 557.486981][T14963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3946'. [ 557.517098][T14963] bridge0: port 2(ipvlan1) entered blocking state [ 557.535742][T14963] bridge0: port 2(ipvlan1) entered disabled state [ 557.574056][T14963] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 557.741071][T14980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3964'. [ 560.382471][T15098] bridge0: port 4(hsr_slave_1) entered blocking state [ 560.389932][T15098] bridge0: port 4(hsr_slave_1) entered disabled state [ 562.384443][T15117] validate_nla: 3 callbacks suppressed [ 562.384459][T15117] netlink: 'syz.0.4014': attribute type 29 has an invalid length. [ 562.427363][T15117] netlink: 'syz.0.4014': attribute type 29 has an invalid length. [ 562.524663][T15122] netlink: 'syz.1.4016': attribute type 10 has an invalid length. [ 562.553182][T15122] __nla_validate_parse: 3 callbacks suppressed [ 562.553215][T15122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4016'. [ 562.583554][T15122] bridge0: port 2(ipvlan1) entered blocking state [ 562.592837][T15122] bridge0: port 2(ipvlan1) entered disabled state [ 562.726659][T15122] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 562.918829][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.925156][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.622166][T15154] netlink: 'syz.1.4032': attribute type 10 has an invalid length. [ 565.634222][T15154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4032'. [ 565.648071][T15154] bridge0: port 2(ipvlan1) entered blocking state [ 565.655129][T15154] bridge0: port 2(ipvlan1) entered disabled state [ 565.684888][T15154] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 568.864820][T15193] -: renamed from syzkaller0 [ 568.933965][T15197] netlink: 'syz.2.4050': attribute type 10 has an invalid length. [ 568.947617][T15197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4050'. [ 568.983510][T15201] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4061'. [ 572.194042][T15230] netlink: 'syz.0.4064': attribute type 10 has an invalid length. [ 572.205763][T15230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4064'. [ 572.216349][T15233] -: renamed from syzkaller0 [ 572.243228][T15237] delete_channel: no stack [ 578.432914][T15274] netlink: 'syz.1.4081': attribute type 10 has an invalid length. [ 578.458028][T15274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4081'. [ 578.472539][T15274] bridge0: port 2(ipvlan1) entered blocking state [ 578.482890][T15274] bridge0: port 2(ipvlan1) entered disabled state [ 578.600900][T15274] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 578.622898][T15282] netlink: 'syz.2.4086': attribute type 28 has an invalid length. [ 578.651111][T15290] netlink: 'syz.0.4090': attribute type 17 has an invalid length. [ 578.680326][T15290] netlink: 'syz.0.4090': attribute type 16 has an invalid length. [ 578.721700][T15290] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4090'. [ 582.852429][T15322] device syzkaller0 entered promiscuous mode [ 582.863022][T15329] netlink: 'syz.4.4104': attribute type 10 has an invalid length. [ 582.871724][T15329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4104'. [ 583.342210][T15362] netlink: 'syz.0.4118': attribute type 10 has an invalid length. [ 583.354324][T15362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4118'. [ 583.617601][T15373] netlink: 'syz.0.4131': attribute type 10 has an invalid length. [ 583.626934][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4131'. [ 584.072621][T15397] netlink: 'syz.0.4133': attribute type 10 has an invalid length. [ 584.087565][T15401] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4135'. [ 584.087642][T15397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4133'. [ 584.557368][T15431] device syzkaller0 entered promiscuous mode [ 584.651599][T15434] netlink: 'syz.0.4149': attribute type 10 has an invalid length. [ 584.661226][T15434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4149'. [ 584.958398][T15457] netlink: 'syz.0.4159': attribute type 3 has an invalid length. [ 584.968335][T15457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4159'. [ 585.130134][T15466] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4163'. [ 585.139819][T15466] openvswitch: netlink: Tunnel attr 159 out of range max 16 [ 585.170720][T15465] netlink: 'syz.0.4162': attribute type 10 has an invalid length. [ 585.180531][T15465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4162'. [ 585.663005][T15492] netlink: 'syz.3.4176': attribute type 10 has an invalid length. [ 585.671380][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4176'. [ 587.225309][T15522] netlink: 'syz.2.4190': attribute type 10 has an invalid length. [ 587.235373][T15522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4190'. [ 588.258018][T15553] netlink: 'syz.0.4204': attribute type 4 has an invalid length. [ 588.266366][T15553] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4204'. [ 588.284688][T15551] netlink: 'syz.2.4203': attribute type 2 has an invalid length. [ 588.339865][T15555] netlink: 'syz.3.4205': attribute type 10 has an invalid length. [ 589.361112][T15579] netlink: 'syz.0.4216': attribute type 10 has an invalid length. [ 589.370355][T15579] __nla_validate_parse: 2 callbacks suppressed [ 589.370388][T15579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4216'. [ 589.443129][T15584] netlink: 'syz.3.4218': attribute type 10 has an invalid length. [ 589.451707][T15584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4218'. [ 590.595412][T15602] netlink: 'syz.2.4227': attribute type 10 has an invalid length. [ 590.622538][T15602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4227'. [ 590.678652][T15610] netlink: 'syz.3.4229': attribute type 10 has an invalid length. [ 590.687060][T15610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4229'. [ 590.717161][T15613] netlink: 'syz.2.4231': attribute type 10 has an invalid length. [ 590.813056][T15622] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4235'. [ 600.266723][T15639] netlink: 'syz.2.4242': attribute type 10 has an invalid length. [ 600.276666][T15639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4242'. [ 600.468886][ T4187] device syz_tun left promiscuous mode [ 600.474428][ T4187] Ÿë: port 1(syz_tun) entered disabled state [ 600.585968][T15654] netlink: 'syz.2.4247': attribute type 10 has an invalid length. [ 600.615756][T15654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4247'. [ 600.647227][T15662] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4249'. [ 600.676475][T15662] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.4249'. [ 600.696222][T15664] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.4250'. [ 600.712946][T15662] netlink: 'syz.0.4249': attribute type 1 has an invalid length. [ 600.788700][T13558] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.685298][T12034] Bluetooth: hci1: command 0x0409 tx timeout [ 602.951060][T13558] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.967437][T15686] netlink: 'syz.4.4257': attribute type 10 has an invalid length. [ 602.975749][T15686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4257'. [ 603.072213][T13558] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.126035][T15693] netlink: 'syz.2.4261': attribute type 10 has an invalid length. [ 603.134102][T15693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4261'. [ 603.237239][T13558] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.310667][T15658] chnl_net:caif_netlink_parms(): no params data found [ 603.672923][T15721] netlink: 'syz.3.4271': attribute type 10 has an invalid length. [ 603.687935][T15721] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4271'. [ 603.698196][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.709106][T15658] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.718444][T15658] device bridge_slave_0 entered promiscuous mode [ 603.753516][T15658] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.770551][T15658] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.794498][T15658] device bridge_slave_1 entered promiscuous mode [ 603.807505][T13558] tipc: Left network mode [ 603.884172][T15658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.910885][T15738] netlink: 'syz.0.4275': attribute type 10 has an invalid length. [ 603.921489][T15738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4275'. [ 603.937223][T15658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.040591][T15658] team0: Port device team_slave_0 added [ 604.098201][T15658] team0: Port device team_slave_1 added [ 604.104321][T15748] netlink: 'syz.0.4286': attribute type 10 has an invalid length. [ 604.115827][T15748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4286'. [ 604.153018][T15658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.170401][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.202521][T15658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.245640][T15658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.252619][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.321276][T15658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.519777][T15658] device hsr_slave_0 entered promiscuous mode [ 604.557573][T15658] device hsr_slave_1 entered promiscuous mode [ 604.564611][T15658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.574600][T15658] Cannot create hsr debugfs directory [ 604.755758][T11820] Bluetooth: hci1: command 0x041b tx timeout [ 604.834782][T15778] netlink: 'syz.4.4287': attribute type 10 has an invalid length. [ 605.083597][T15789] netlink: 'syz.2.4289': attribute type 10 has an invalid length. [ 605.310826][T15658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 605.351230][T15658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 605.369159][T15658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 605.423572][T15658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 605.740126][T15829] netlink: 'syz.0.4300': attribute type 10 has an invalid length. [ 605.775389][T15829] __nla_validate_parse: 3 callbacks suppressed [ 605.775422][T15829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4300'. [ 606.162842][T15842] netlink: 'syz.0.4303': attribute type 10 has an invalid length. [ 606.210974][T15842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4303'. [ 606.252597][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.364852][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.388020][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.421386][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.459719][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.487178][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.521758][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.528917][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.615645][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.668936][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.752749][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.768543][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.775808][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.836720][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 606.883459][ T239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.928201][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.967827][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 607.020499][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 607.125402][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 607.133677][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 607.249828][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 607.531808][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.546533][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.657179][T15874] device syzkaller0 entered promiscuous mode [ 608.292107][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 608.347239][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.363271][T15658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 608.492024][T15902] netlink: 'syz.4.4319': attribute type 10 has an invalid length. [ 608.510485][T15902] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4319'. [ 608.681137][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.693033][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.707982][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.881352][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.891914][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.915700][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 608.935055][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 608.944399][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.956774][T15658] device veth0_vlan entered promiscuous mode [ 608.969770][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.984546][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.014183][T15658] device veth1_vlan entered promiscuous mode [ 609.041425][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 609.054607][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 609.063260][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.072506][T13555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.085772][T15658] device veth0_macvtap entered promiscuous mode [ 609.133591][T13558] device bridge_slave_0 left promiscuous mode [ 609.142886][T13558] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.161251][T13558] device veth1_vlan left promiscuous mode [ 609.329824][T13558] team0 (unregistering): Port device geneve1 removed [ 609.340161][T13558] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 609.379278][T13558] team0 (unregistering): Port device hsr_slave_0 removed [ 609.397289][T13558] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 609.413279][T13558] team0 (unregistering): Port device team_slave_1 removed [ 609.433313][T13558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.448603][T13558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.464089][T13558] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 609.500062][T13558] bond0 (unregistering): (slave team0): Releasing backup interface [ 609.522966][T13558] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 609.531812][T13558] bond0 (unregistering): Released all slaves [ 609.626877][T15658] device veth1_macvtap entered promiscuous mode [ 609.726774][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 609.743917][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 609.792171][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.866587][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 609.882493][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.924563][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.941595][T15658] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.953275][T15658] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.963602][T15658] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.973866][T15658] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.987348][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.998895][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.022187][T15952] netlink: 'syz.4.4326': attribute type 25 has an invalid length. [ 610.243131][ T4569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.256741][ T4569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.281661][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.344954][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.361606][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.392361][T13548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 611.052239][T15993] netlink: 'syz.3.4337': attribute type 10 has an invalid length. [ 611.076148][T15993] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4337'. [ 611.638148][T16028] netlink: 'syz.3.4348': attribute type 1 has an invalid length. [ 611.649677][T16011] device syzkaller0 entered promiscuous mode [ 611.665390][T16028] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4348'. [ 611.674990][T16022] netlink: 'syz.4.4346': attribute type 10 has an invalid length. [ 611.695025][T16022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4346'. [ 612.299569][T16048] netlink: 'syz.5.4352': attribute type 10 has an invalid length. [ 612.356207][T16048] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4352'. [ 612.386757][T16048] device ipvlan1 entered promiscuous mode [ 612.460778][T16048] bridge0: port 3(ipvlan1) entered blocking state [ 612.474429][T16048] bridge0: port 3(ipvlan1) entered disabled state [ 612.503773][T16048] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 612.712918][T16071] device syzkaller0 entered promiscuous mode [ 612.764696][T16077] netlink: 'syz.4.4361': attribute type 1 has an invalid length. [ 612.774980][T16077] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.4361'. [ 612.969090][T16088] netlink: 163260 bytes leftover after parsing attributes in process `syz.2.4364'. [ 612.983417][T16085] device syzkaller0 entered promiscuous mode [ 613.272800][T16100] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4367'. [ 613.670474][T16116] netlink: 'syz.2.4371': attribute type 10 has an invalid length. [ 613.714675][T16116] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4371'. [ 613.749264][T16128] netlink: 'syz.5.4374': attribute type 1 has an invalid length. [ 613.796813][T16128] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4374'. [ 614.132744][T16142] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4381'. [ 614.154097][T16142] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 614.750385][T16167] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 614.775112][T16166] netlink: 'syz.5.4388': attribute type 10 has an invalid length. [ 614.831250][T16166] bridge0: port 3(ipvlan1) entered blocking state [ 614.867801][T16166] bridge0: port 3(ipvlan1) entered disabled state [ 615.164766][T16166] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 615.213523][T16185] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 615.743509][T16215] device syzkaller0 entered promiscuous mode [ 616.553780][T16244] __nla_validate_parse: 6 callbacks suppressed [ 616.553818][T16244] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.4431'. [ 616.559923][T16243] validate_nla: 2 callbacks suppressed [ 616.559958][T16243] netlink: 'syz.4.4421': attribute type 3 has an invalid length. [ 616.571386][T16244] netlink: 'syz.5.4431': attribute type 1 has an invalid length. [ 616.578342][T16243] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4421'. [ 616.585796][T16244] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4431'. [ 617.936540][T16248] netlink: 'syz.5.4423': attribute type 10 has an invalid length. [ 617.963630][T16248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.993626][T16248] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 618.033126][T16251] device syzkaller0 entered promiscuous mode [ 618.502793][T16273] netlink: 'syz.5.4434': attribute type 10 has an invalid length. [ 618.704114][T16273] batman_adv: batadv0: Adding interface: netdevsim0 [ 618.720285][T16273] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.791116][T16273] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 618.976317][T16276] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4435'. [ 619.503889][T16292] netlink: 'syz.5.4439': attribute type 10 has an invalid length. [ 619.514355][T16292] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4439'. [ 619.526031][T16292] bridge0: port 3(ipvlan1) entered blocking state [ 619.532968][T16292] bridge0: port 3(ipvlan1) entered disabled state [ 619.611929][T16292] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 619.728359][T16295] device wlan0 left promiscuous mode [ 619.883330][T16312] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4449'. [ 620.371682][T16343] netlink: 'syz.0.4458': attribute type 10 has an invalid length. [ 620.652357][T16358] netlink: 'syz.0.4460': attribute type 10 has an invalid length. [ 620.661124][T16358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4460'. [ 620.757304][T16365] netlink: 'syz.0.4462': attribute type 10 has an invalid length. [ 620.824369][T16369] netlink: 'syz.3.4475': attribute type 10 has an invalid length. [ 620.876201][T16371] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4464'. [ 621.081442][T16382] delete_channel: no stack [ 621.100456][T16382] delete_channel: no stack [ 621.244952][T16385] netlink: 'syz.4.4471': attribute type 4 has an invalid length. [ 621.254838][T16385] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4471'. [ 621.365940][T16392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4473'. [ 622.774174][T16416] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4483'. [ 624.359947][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.366407][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.760322][T16453] validate_nla: 2 callbacks suppressed [ 624.760353][T16453] netlink: 'syz.5.4488': attribute type 10 has an invalid length. [ 624.786787][T16453] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4488'. [ 624.796868][T16453] bridge0: port 3(ipvlan1) entered blocking state [ 624.803448][T16453] bridge0: port 3(ipvlan1) entered disabled state [ 624.830412][T16453] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 625.024460][T16472] netlink: 'syz.2.4491': attribute type 10 has an invalid length. [ 628.099060][T16566] netlink: 'syz.3.4504': attribute type 21 has an invalid length. [ 628.108804][T16567] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4501'. [ 628.297113][T16574] netlink: 'syz.0.4506': attribute type 10 has an invalid length. [ 628.307200][T16574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4506'. [ 631.901375][T16615] netlink: 'syz.5.4523': attribute type 10 has an invalid length. [ 631.942708][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4523'. [ 631.954433][T16615] bridge0: port 3(ipvlan1) entered blocking state [ 631.974224][T16615] bridge0: port 3(ipvlan1) entered disabled state [ 631.990067][T16615] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 633.890054][T16654] netlink: 'syz.2.4539': attribute type 10 has an invalid length. [ 633.909123][T16654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4539'. [ 633.926429][T16652] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4538'. [ 634.192171][T16675] pim6reg: tun_chr_ioctl cmd 1074812117 [ 634.224739][T16675] pim6reg: tun_chr_ioctl cmd 1074025677 [ 634.233984][T16675] pim6reg: linktype set to 776 [ 635.441795][T16695] netlink: 'syz.5.4555': attribute type 10 has an invalid length. [ 635.474644][T16695] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4555'. [ 635.492457][T16695] bridge0: port 3(ipvlan1) entered blocking state [ 635.500123][T16695] bridge0: port 3(ipvlan1) entered disabled state [ 635.523400][T16695] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 635.837797][T16713] netlink: 'syz.5.4572': attribute type 10 has an invalid length. [ 635.855780][T16713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4572'. [ 635.868651][T16713] bridge0: port 3(ipvlan1) entered blocking state [ 635.877827][T16713] bridge0: port 3(ipvlan1) entered disabled state [ 635.894946][T16713] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 636.056230][T16724] netlink: 'syz.5.4564': attribute type 21 has an invalid length. [ 636.168910][T16728] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4567'. [ 638.554090][T16761] netlink: 'syz.3.4580': attribute type 10 has an invalid length. [ 638.626472][T16761] team0: Device hsr_slave_0 failed to register rx_handler [ 638.680619][T16760] netlink: 'syz.4.4582': attribute type 10 has an invalid length. [ 638.690316][T16760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4582'. [ 640.033642][T16799] pim6reg: tun_chr_ioctl cmd 1074812117 [ 640.042415][T16799] pim6reg: tun_chr_ioctl cmd 1074025677 [ 640.049025][T16799] pim6reg: linktype set to 776 [ 641.260197][T16823] netlink: 'syz.3.4602': attribute type 10 has an invalid length. [ 641.268551][T16823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4602'. [ 641.442729][T16828] netlink: 'syz.0.4614': attribute type 10 has an invalid length. [ 641.460795][T16828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4614'. [ 641.617574][T16841] netlink: 'syz.0.4609': attribute type 21 has an invalid length. [ 641.627564][T16841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.047725][T16865] netlink: 'syz.5.4619': attribute type 10 has an invalid length. [ 642.107948][T16865] team0: Device hsr_slave_0 failed to register rx_handler [ 642.142456][T16867] netlink: 'syz.3.4620': attribute type 10 has an invalid length. [ 642.154885][T16867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4620'. [ 643.313888][T16902] netlink: 'syz.3.4633': attribute type 10 has an invalid length. [ 643.333189][T16902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4633'. [ 643.496849][T16917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4639'. [ 643.664720][T16927] netlink: 'syz.5.4642': attribute type 21 has an invalid length. [ 643.700205][T16927] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.722470][T16927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.729999][T16927] IPv6: NLM_F_CREATE should be set when creating new route [ 643.737883][T16927] IPv6: NLM_F_CREATE should be set when creating new route [ 643.745413][T16927] IPv6: NLM_F_CREATE should be set when creating new route [ 643.763635][T16928] netlink: 'syz.3.4644': attribute type 11 has an invalid length. [ 643.786913][T16932] netlink: 'syz.3.4644': attribute type 10 has an invalid length. [ 643.804467][T16932] device wlan1 left promiscuous mode [ 643.840373][T16932] device wlan1 entered promiscuous mode [ 643.878824][T16932] team0: Port device wlan1 added [ 644.138592][T16946] netlink: 'syz.2.4652': attribute type 10 has an invalid length. [ 645.337161][T16986] netlink: 'syz.4.4665': attribute type 10 has an invalid length. [ 645.420511][T16990] netlink: 'syz.5.4666': attribute type 10 has an invalid length. [ 645.436787][T16990] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4666'. [ 645.468160][T16990] bridge0: port 3(ipvlan1) entered blocking state [ 645.477416][T16990] bridge0: port 3(ipvlan1) entered disabled state [ 645.549852][T16990] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 645.839881][T17006] device veth0_vlan left promiscuous mode [ 645.869754][T17006] device veth0_vlan entered promiscuous mode [ 649.199313][T17034] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4684'. [ 649.252734][T17034] netlink: 'syz.0.4684': attribute type 11 has an invalid length. [ 649.303246][T17034] netlink: 'syz.0.4684': attribute type 10 has an invalid length. [ 649.336864][T17034] device wlan1 left promiscuous mode [ 650.592336][T17092] netlink: 'syz.2.4705': attribute type 11 has an invalid length. [ 650.676250][T17092] netlink: 'syz.2.4705': attribute type 10 has an invalid length. [ 650.719893][T17092] device wlan1 left promiscuous mode [ 650.782550][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4708'. [ 650.815833][T17097] device lo entered promiscuous mode [ 650.887431][T17097] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 651.324842][T17122] netlink: 'syz.3.4717': attribute type 2 has an invalid length. [ 652.564907][T17163] netlink: 'syz.0.4732': attribute type 10 has an invalid length. [ 652.752529][T17167] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4734'. [ 653.777496][T17196] netlink: 'syz.3.4746': attribute type 1 has an invalid length. [ 653.816808][T17196] netlink: 'syz.3.4746': attribute type 4 has an invalid length. [ 653.841504][T17196] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4746'. [ 654.041581][T17203] netlink: 'syz.0.4749': attribute type 10 has an invalid length. [ 654.075606][T17203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4749'. [ 654.205141][T17201] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4748'. [ 654.532649][T17216] -: renamed from syzkaller0 [ 654.949814][T17235] netlink: 'syz.5.4762': attribute type 10 has an invalid length. [ 654.966938][T17235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4762'. [ 654.995087][T17235] bridge0: port 3(ipvlan1) entered blocking state [ 655.021265][T17235] bridge0: port 3(ipvlan1) entered disabled state [ 655.067393][T17235] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 655.279328][T17250] ip6gretap0: refused to change device tx_queue_len [ 655.321669][T17252] netlink: 'syz.0.4767': attribute type 7 has an invalid length. [ 655.427067][T17262] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4771'. [ 655.474027][T17259] ip6gretap0: refused to change device tx_queue_len [ 655.969656][T17283] netlink: 'syz.5.4778': attribute type 10 has an invalid length. [ 656.004089][T17283] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4778'. [ 656.024769][T17283] bridge0: port 3(ipvlan1) entered blocking state [ 656.049246][T17283] bridge0: port 3(ipvlan1) entered disabled state [ 656.100167][T17283] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 656.434709][T17298] ip6gretap0: refused to change device tx_queue_len [ 656.638738][T17314] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4790'. [ 656.807039][T17321] netlink: 'syz.3.4793': attribute type 10 has an invalid length. [ 656.826619][T17321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4793'. [ 656.843617][T17324] netlink: 'syz.5.4794': attribute type 10 has an invalid length. [ 656.853296][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4794'. [ 656.866056][T17324] bridge0: port 3(ipvlan1) entered blocking state [ 656.883808][T17324] bridge0: port 3(ipvlan1) entered disabled state [ 656.926883][T17324] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 657.452021][T17344] ip6gretap0: refused to change device tx_queue_len [ 657.553430][T17348] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4804'. [ 657.789175][T17358] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4807'. [ 657.843062][T17360] netlink: 'syz.5.4808': attribute type 2 has an invalid length. [ 657.859514][T17360] netlink: 'syz.5.4808': attribute type 8 has an invalid length. [ 657.869881][T17360] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4808'. [ 658.222787][T17374] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4812'. [ 658.400467][T17382] netlink: 'syz.3.4815': attribute type 17 has an invalid length. [ 658.502892][T17377] netlink: 'syz.5.4813': attribute type 10 has an invalid length. [ 658.584957][T17382] netlink: 'syz.3.4815': attribute type 3 has an invalid length. [ 658.764477][T17377] team0: Device wg1 is of different type [ 659.070878][T17401] syz.2.4821[17401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.071261][T17401] syz.2.4821[17401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.438665][T17417] ip6gretap0: refused to change device tx_queue_len [ 659.970882][T17432] validate_nla: 2 callbacks suppressed [ 659.970917][T17432] netlink: 'syz.4.4831': attribute type 10 has an invalid length. [ 660.016222][T17432] __nla_validate_parse: 5 callbacks suppressed [ 660.016268][T17432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4831'. [ 660.229105][T17434] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4833'. [ 660.433146][T17446] netlink: 'syz.4.4836': attribute type 10 has an invalid length. [ 660.465685][T17446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4836'. [ 660.507639][T17453] netlink: 'syz.2.4839': attribute type 27 has an invalid length. [ 660.536954][T17453] netlink: 'syz.2.4839': attribute type 4 has an invalid length. [ 660.544776][T17453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4839'. [ 660.676214][T17457] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4840'. [ 660.888968][T17464] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4842'. [ 661.044208][T17464] netlink: 'syz.2.4842': attribute type 10 has an invalid length. [ 661.666978][T17483] syz.5.4848[17483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.667081][T17483] syz.5.4848[17483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.770397][T17483] syz.5.4848[17483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.792808][T17483] syz.5.4848[17483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.829762][T17489] netlink: 'syz.4.4851': attribute type 10 has an invalid length. [ 661.949440][T17489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4851'. [ 662.033862][T17497] netlink: 'syz.0.4852': attribute type 10 has an invalid length. [ 662.516452][T17503] netlink: 'syz.4.4853': attribute type 2 has an invalid length. [ 662.548426][T17503] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4853'. [ 662.910473][T17507] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4856'. [ 663.003044][T17507] netlink: 'syz.3.4856': attribute type 10 has an invalid length. [ 663.073555][T17517] delete_channel: no stack [ 663.127790][T17517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.135306][T17517] IPv6: NLM_F_CREATE should be set when creating new route [ 663.142867][T17517] IPv6: NLM_F_CREATE should be set when creating new route [ 663.151002][T17517] IPv6: NLM_F_CREATE should be set when creating new route [ 663.185686][T17524] netlink: 'syz.5.4859': attribute type 10 has an invalid length. [ 663.207557][T17524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4859'. [ 663.234872][T17524] device dummy0 entered promiscuous mode [ 663.253301][T17524] bridge0: port 3(dummy0) entered blocking state [ 663.298517][T17524] bridge0: port 3(dummy0) entered disabled state [ 663.318401][T17524] bridge0: port 3(dummy0) entered blocking state [ 663.324971][T17524] bridge0: port 3(dummy0) entered forwarding state [ 663.558555][T17537] bridge0: port 4(ipvlan1) entered blocking state [ 663.646304][T17537] bridge0: port 4(ipvlan1) entered disabled state [ 663.680254][T17537] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 664.112814][T17556] device syzkaller0 entered promiscuous mode [ 667.653198][T17598] validate_nla: 3 callbacks suppressed [ 667.653214][T17598] netlink: 'syz.3.4893': attribute type 10 has an invalid length. [ 667.769198][T17603] __nla_validate_parse: 5 callbacks suppressed [ 667.769253][T17603] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4885'. [ 667.980691][T17608] netlink: 'syz.3.4889': attribute type 2 has an invalid length. [ 668.008819][T17608] netlink: 'syz.3.4889': attribute type 8 has an invalid length. [ 668.017506][T17608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4889'. [ 668.344745][T17626] netlink: 'syz.3.4895': attribute type 10 has an invalid length. [ 668.486309][T17631] device syzkaller0 entered promiscuous mode [ 668.761947][T17640] netlink: 'syz.0.4900': attribute type 10 has an invalid length. [ 668.920820][T17644] netlink: 'syz.0.4912': attribute type 9 has an invalid length. [ 668.928953][T17644] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4912'. [ 668.937717][T17646] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4901'. [ 669.352929][T17657] netlink: 'syz.0.4905': attribute type 10 has an invalid length. [ 669.389453][T17657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4905'. [ 671.317221][T17680] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4916'. [ 671.338430][T17680] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4916'. [ 671.433700][T17683] netlink: 'syz.4.4917': attribute type 9 has an invalid length. [ 671.441938][T17683] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4917'. [ 672.027510][T17708] netlink: 'syz.2.4928': attribute type 9 has an invalid length. [ 672.036927][T17708] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4928'. [ 672.280395][T17719] netlink: 'syz.5.4935': attribute type 9 has an invalid length. [ 672.289549][T17719] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4935'. [ 672.382918][T17724] device syzkaller0 entered promiscuous mode [ 674.325693][T17756] netlink: 'syz.0.4949': attribute type 9 has an invalid length. [ 674.333614][T17756] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4949'. [ 674.621860][T17771] netlink: 'syz.0.4956': attribute type 9 has an invalid length. [ 674.631014][T17771] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4956'. [ 675.184902][T17781] netlink: 'syz.0.4969': attribute type 9 has an invalid length. [ 675.193665][T17781] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4969'. [ 675.466065][T17797] netlink: 'syz.0.4965': attribute type 10 has an invalid length. [ 675.474382][T17797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4965'. [ 675.581721][T17802] netlink: 'syz.0.4967': attribute type 9 has an invalid length. [ 675.590055][T17802] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4967'. [ 675.684440][T17806] netlink: 'syz.0.4970': attribute type 9 has an invalid length. [ 675.695676][T17806] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4970'. [ 675.862747][T17814] netlink: 'syz.3.4974': attribute type 9 has an invalid length. [ 675.871241][T17814] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4974'. [ 676.141852][T17828] netlink: 'syz.5.4981': attribute type 9 has an invalid length. [ 676.163494][T17828] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4981'. [ 676.177093][T17832] netlink: 'syz.2.4982': attribute type 9 has an invalid length. [ 676.185332][T17832] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4982'. [ 676.523449][T17853] netlink: 'syz.5.4991': attribute type 9 has an invalid length. [ 676.532341][T17853] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.4991'. [ 677.597817][T17899] bridge0: port 4(ipvlan1) entered blocking state [ 677.604866][T17899] bridge0: port 4(ipvlan1) entered disabled state [ 677.626876][T17899] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 679.509963][T17934] validate_nla: 6 callbacks suppressed [ 679.509993][T17934] netlink: 'syz.4.5029': attribute type 10 has an invalid length. [ 679.529873][T17934] __nla_validate_parse: 6 callbacks suppressed [ 679.529903][T17934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5029'. [ 679.733933][T17945] netlink: 'syz.3.5034': attribute type 9 has an invalid length. [ 679.743494][T17945] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5034'. [ 679.764953][T17949] netlink: 'syz.2.5036': attribute type 9 has an invalid length. [ 679.773567][T17949] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5036'. [ 680.034710][T17962] netlink: 'syz.4.5043': attribute type 10 has an invalid length. [ 680.044249][T17962] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5043'. [ 680.120715][T17968] netlink: 'syz.2.5055': attribute type 10 has an invalid length. [ 680.129275][T17968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5055'. [ 680.175044][T17972] netlink: 'syz.4.5046': attribute type 9 has an invalid length. [ 680.183179][T17972] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5046'. [ 680.272851][T17976] netlink: 'syz.4.5048': attribute type 9 has an invalid length. [ 680.286578][T17976] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5048'. [ 680.745877][T17995] netlink: 'syz.0.5058': attribute type 10 has an invalid length. [ 680.789355][T17995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5058'. [ 681.477649][T18038] netlink: 'syz.2.5077': attribute type 9 has an invalid length. [ 681.486293][T18038] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5077'. [ 682.618903][T18094] netlink: 'syz.2.5102': attribute type 9 has an invalid length. [ 682.628022][T18094] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5102'. [ 684.549000][T18178] validate_nla: 1 callbacks suppressed [ 684.549032][T18178] netlink: 'syz.4.5142': attribute type 9 has an invalid length. [ 684.563474][T18178] __nla_validate_parse: 1 callbacks suppressed [ 684.563496][T18178] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.5142'. [ 685.314348][T18202] netlink: 'syz.3.5153': attribute type 9 has an invalid length. [ 685.324257][T18202] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5153'. [ 685.568693][T18214] netlink: 'syz.0.5157': attribute type 9 has an invalid length. [ 685.576593][T18214] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5157'. [ 685.807239][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.813753][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.009519][T18228] netlink: 'syz.5.5165': attribute type 9 has an invalid length. [ 686.019004][T18228] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.5165'. [ 687.571222][T18285] netlink: 'syz.2.5191': attribute type 10 has an invalid length. [ 687.579815][T18285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5191'. [ 688.161603][T18317] netlink: 'syz.2.5204': attribute type 10 has an invalid length. [ 688.169752][T18317] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5204'. [ 688.271764][T18321] netlink: 'syz.0.5217': attribute type 10 has an invalid length. [ 688.295461][T18321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5217'. [ 688.499234][T18334] netlink: 'syz.0.5224': attribute type 10 has an invalid length. [ 688.508383][T18334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5224'. [ 688.690997][T18349] netlink: 'syz.0.5216': attribute type 9 has an invalid length. [ 688.708664][T18349] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.5216'. [ 688.944788][T18364] netlink: 'syz.3.5226': attribute type 9 has an invalid length. [ 688.955446][T18364] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5226'. [ 689.647579][T18391] validate_nla: 3 callbacks suppressed [ 689.647625][T18391] netlink: 'syz.0.5239': attribute type 9 has an invalid length. [ 689.661900][T18391] __nla_validate_parse: 3 callbacks suppressed [ 689.661944][T18391] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5239'. [ 689.752061][T18395] netlink: 'syz.2.5241': attribute type 10 has an invalid length. [ 689.762026][T18395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5241'. [ 689.817591][T18393] netlink: 'syz.4.5240': attribute type 9 has an invalid length. [ 689.827452][T18393] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5240'. [ 689.990509][T18404] netlink: 'syz.3.5244': attribute type 9 has an invalid length. [ 689.998769][T18404] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5244'. [ 690.322655][T18418] netlink: 'syz.3.5249': attribute type 9 has an invalid length. [ 690.334944][T18418] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.5249'. [ 690.437811][T18424] netlink: 'syz.4.5254': attribute type 9 has an invalid length. [ 690.446580][T18424] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5254'. [ 690.561733][T18427] netlink: 'syz.2.5266': attribute type 9 has an invalid length. [ 690.570142][T18427] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5266'. [ 690.720050][T18434] netlink: 'syz.2.5258': attribute type 9 has an invalid length. [ 690.729567][T18434] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5258'. [ 690.866543][T18436] netlink: 'syz.4.5260': attribute type 10 has an invalid length. [ 690.887243][T18438] netlink: 'syz.0.5261': attribute type 9 has an invalid length. [ 690.896559][T18438] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5261'. [ 691.242780][T18449] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5267'. [ 691.961689][T18470] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.981026][T18470] bond0: (slave team0): Enslaving as an active interface with an up link [ 694.703335][T18602] validate_nla: 29 callbacks suppressed [ 694.703366][T18602] netlink: 'syz.3.5333': attribute type 10 has an invalid length. [ 694.725623][T18602] __nla_validate_parse: 25 callbacks suppressed [ 694.725659][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5333'. [ 694.962401][T18611] netlink: 'syz.3.5337': attribute type 10 has an invalid length. [ 695.017381][T18611] device team0 left promiscuous mode [ 695.023474][T18611] device team_slave_1 left promiscuous mode [ 695.034032][T18611] device geneve1 left promiscuous mode [ 695.046700][T18611] device wlan1 left promiscuous mode [ 695.064572][T18623] netlink: 'syz.0.5340': attribute type 9 has an invalid length. [ 695.082283][T18623] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5340'. [ 695.137151][T18611] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.153366][T18611] bond0: (slave team0): Enslaving as an active interface with an up link [ 695.212598][T18624] netlink: 'syz.0.5340': attribute type 9 has an invalid length. [ 695.221527][T18624] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5340'. [ 695.362831][T18633] netlink: 'syz.2.5347': attribute type 9 has an invalid length. [ 695.377710][T18633] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5347'. [ 695.453388][T18636] netlink: 'syz.0.5348': attribute type 10 has an invalid length. [ 695.465530][T18636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5348'. [ 695.491809][T18637] netlink: 'syz.2.5347': attribute type 9 has an invalid length. [ 695.500077][T18637] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5347'. [ 695.591635][T18640] netlink: 'syz.5.5349': attribute type 9 has an invalid length. [ 695.605592][T18640] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5349'. [ 695.720358][T18641] netlink: 'syz.5.5349': attribute type 9 has an invalid length. [ 695.735556][T18641] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5349'. [ 695.863363][T18653] netlink: 'syz.0.5355': attribute type 9 has an invalid length. [ 695.898212][T18653] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5355'. [ 695.963874][T18658] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5355'. [ 697.665833][T18739] bridge0: port 4(ipvlan1) entered blocking state [ 697.674961][T18739] bridge0: port 4(ipvlan1) entered disabled state [ 697.686008][T18739] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 699.716479][T18820] validate_nla: 41 callbacks suppressed [ 699.716495][T18820] netlink: 'syz.0.5418': attribute type 9 has an invalid length. [ 699.803920][T18819] netlink: 'syz.2.5419': attribute type 9 has an invalid length. [ 699.818293][T18819] __nla_validate_parse: 37 callbacks suppressed [ 699.818330][T18819] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5419'. [ 699.892482][T18818] netlink: 'syz.5.5430': attribute type 9 has an invalid length. [ 699.905430][T18818] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5430'. [ 699.917466][T18825] netlink: 'syz.0.5420': attribute type 10 has an invalid length. [ 699.969444][T18821] netlink: 'syz.2.5419': attribute type 9 has an invalid length. [ 699.979222][T18821] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5419'. [ 700.071092][T18822] netlink: 'syz.5.5430': attribute type 9 has an invalid length. [ 700.079292][T18822] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5430'. [ 700.172334][T18829] netlink: 'syz.5.5422': attribute type 9 has an invalid length. [ 700.180362][T18829] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5422'. [ 700.243326][T18831] netlink: 'syz.0.5423': attribute type 9 has an invalid length. [ 700.252523][T18831] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5423'. [ 700.332834][T18835] netlink: 'syz.0.5423': attribute type 9 has an invalid length. [ 700.341526][T18835] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5423'. [ 700.352914][T18832] netlink: 'syz.5.5422': attribute type 9 has an invalid length. [ 700.369604][T18832] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5422'. [ 700.454927][T18837] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5426'. [ 700.577108][T18842] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5426'. [ 704.842215][T18981] validate_nla: 42 callbacks suppressed [ 704.842232][T18981] netlink: 'syz.0.5485': attribute type 9 has an invalid length. [ 704.858785][T18981] __nla_validate_parse: 41 callbacks suppressed [ 704.858802][T18981] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5485'. [ 705.067776][T19004] netlink: 'syz.0.5496': attribute type 9 has an invalid length. [ 705.075627][T19004] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5496'. [ 705.132159][T19007] netlink: 'syz.0.5496': attribute type 9 has an invalid length. [ 705.140571][T19007] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5496'. [ 705.251412][T19010] netlink: 'syz.2.5498': attribute type 10 has an invalid length. [ 705.348696][T19013] netlink: 'syz.0.5509': attribute type 10 has an invalid length. [ 705.434423][T19016] netlink: 'syz.2.5500': attribute type 10 has an invalid length. [ 705.444269][T19016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5500'. [ 705.444703][T19019] netlink: 'syz.0.5501': attribute type 9 has an invalid length. [ 705.463874][T19019] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5501'. [ 705.518222][T19020] netlink: 'syz.0.5501': attribute type 9 has an invalid length. [ 705.526694][T19020] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5501'. [ 705.744491][T19028] netlink: 'syz.2.5516': attribute type 10 has an invalid length. [ 705.771216][T19030] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.5505'. [ 705.999319][T19038] netlink: 'syz.3.5510': attribute type 10 has an invalid length. [ 706.481874][T19063] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5522'. [ 707.708095][T19084] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5531'. [ 707.769802][T19088] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5532'. [ 709.915836][T19179] validate_nla: 32 callbacks suppressed [ 709.915856][T19179] netlink: 'syz.3.5571': attribute type 9 has an invalid length. [ 709.931058][T19179] __nla_validate_parse: 20 callbacks suppressed [ 709.931074][T19179] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5571'. [ 710.000652][T19178] netlink: 'syz.5.5569': attribute type 9 has an invalid length. [ 710.009139][T19178] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5569'. [ 710.020779][T19182] netlink: 'syz.4.5574': attribute type 9 has an invalid length. [ 710.035497][T19182] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5574'. [ 710.159237][T19183] netlink: 'syz.4.5574': attribute type 9 has an invalid length. [ 710.170602][T19183] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5574'. [ 710.246686][T19187] netlink: 'syz.5.5577': attribute type 9 has an invalid length. [ 710.255462][T19187] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5577'. [ 710.320906][T19188] netlink: 'syz.5.5577': attribute type 9 has an invalid length. [ 710.329097][T19188] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5577'. [ 710.539035][T19196] netlink: 'syz.4.5581': attribute type 9 has an invalid length. [ 710.548765][T19196] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5581'. [ 710.610930][T19194] netlink: 'syz.5.5578': attribute type 9 has an invalid length. [ 710.622323][T19194] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5578'. [ 710.717091][T19200] netlink: 'syz.5.5578': attribute type 9 has an invalid length. [ 710.725892][T19200] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5578'. [ 710.736144][T19199] netlink: 'syz.4.5581': attribute type 9 has an invalid length. [ 710.743971][T19199] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5581'. [ 714.943642][T19365] validate_nla: 59 callbacks suppressed [ 714.943685][T19365] netlink: 'syz.4.5647': attribute type 9 has an invalid length. [ 714.958118][T19365] __nla_validate_parse: 55 callbacks suppressed [ 714.958153][T19365] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5647'. [ 715.020415][T19368] netlink: 'syz.3.5646': attribute type 9 has an invalid length. [ 715.036481][T19368] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5646'. [ 715.090121][T19371] netlink: 'syz.3.5646': attribute type 9 has an invalid length. [ 715.098312][T19371] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5646'. [ 715.108673][T19372] netlink: 'syz.4.5647': attribute type 9 has an invalid length. [ 715.117821][T19372] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5647'. [ 715.186581][T19375] netlink: 'syz.2.5649': attribute type 9 has an invalid length. [ 715.205727][T19375] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5649'. [ 715.303112][T19376] netlink: 'syz.2.5649': attribute type 9 has an invalid length. [ 715.311237][T19376] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5649'. [ 715.383492][T19383] netlink: 'syz.3.5652': attribute type 9 has an invalid length. [ 715.407037][T19383] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5652'. [ 715.559385][T19386] netlink: 'syz.3.5652': attribute type 9 has an invalid length. [ 715.576412][T19386] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5652'. [ 715.661723][T19392] netlink: 'syz.4.5657': attribute type 9 has an invalid length. [ 715.674149][T19392] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5657'. [ 715.727096][T19396] netlink: 'syz.0.5658': attribute type 10 has an invalid length. [ 715.753282][T19395] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5657'. [ 718.684409][T19514] bridge0: port 4(ipvlan1) entered blocking state [ 718.696484][T19514] bridge0: port 4(ipvlan1) entered disabled state [ 718.764398][T19514] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 720.184077][T19596] validate_nla: 45 callbacks suppressed [ 720.184101][T19596] netlink: 'syz.5.5739': attribute type 9 has an invalid length. [ 720.206833][T19596] __nla_validate_parse: 41 callbacks suppressed [ 720.206869][T19596] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5739'. [ 720.408253][T19598] netlink: 'syz.5.5739': attribute type 9 has an invalid length. [ 720.418888][T19598] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5739'. [ 720.431342][T19599] netlink: 'syz.0.5742': attribute type 9 has an invalid length. [ 720.432061][T19609] netlink: 'syz.2.5744': attribute type 10 has an invalid length. [ 720.446745][T19599] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5742'. [ 720.532470][T19602] netlink: 'syz.0.5742': attribute type 9 has an invalid length. [ 720.548199][T19602] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5742'. [ 720.855537][T19619] netlink: 'syz.4.5752': attribute type 10 has an invalid length. [ 720.864401][T19619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5752'. [ 720.892424][T19627] netlink: 'syz.2.5754': attribute type 9 has an invalid length. [ 720.911435][T19627] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5754'. [ 721.063199][T19631] netlink: 'syz.2.5754': attribute type 9 has an invalid length. [ 721.078660][T19631] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5754'. [ 721.178198][T19639] netlink: 'syz.4.5760': attribute type 9 has an invalid length. [ 721.189728][T19639] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5760'. [ 721.245055][T19641] netlink: 'syz.5.5761': attribute type 9 has an invalid length. [ 721.255759][T19641] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5761'. [ 721.331373][T19642] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5760'. [ 723.715446][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 725.203209][T19796] validate_nla: 43 callbacks suppressed [ 725.203226][T19796] netlink: 'syz.2.5822': attribute type 9 has an invalid length. [ 725.231210][T19796] __nla_validate_parse: 42 callbacks suppressed [ 725.231228][T19796] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5822'. [ 725.324327][T19795] netlink: 'syz.3.5824': attribute type 9 has an invalid length. [ 725.334509][T19795] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5824'. [ 725.440231][T19811] netlink: 'syz.4.5832': attribute type 10 has an invalid length. [ 725.445297][T19799] netlink: 'syz.3.5824': attribute type 9 has an invalid length. [ 725.455947][T19799] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5824'. [ 725.458084][T19811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5832'. [ 725.544641][T19813] netlink: 'syz.2.5831': attribute type 9 has an invalid length. [ 725.563057][T19813] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5831'. [ 725.689842][T19815] netlink: 'syz.2.5831': attribute type 9 has an invalid length. [ 725.707754][T19815] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5831'. [ 725.793914][T19819] netlink: 'syz.4.5834': attribute type 9 has an invalid length. [ 725.803004][T19819] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5834'. [ 725.910655][T19822] netlink: 'syz.4.5834': attribute type 9 has an invalid length. [ 725.922048][T19822] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5834'. [ 726.003687][T19824] netlink: 'syz.3.5836': attribute type 9 has an invalid length. [ 726.014052][T19824] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5836'. [ 726.113120][T19826] netlink: 'syz.0.5837': attribute type 9 has an invalid length. [ 726.132342][T19826] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5837'. [ 730.244824][T19980] validate_nla: 52 callbacks suppressed [ 730.244841][T19980] netlink: 'syz.5.5897': attribute type 9 has an invalid length. [ 730.262909][T19980] __nla_validate_parse: 50 callbacks suppressed [ 730.262925][T19980] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5897'. [ 730.350684][T19991] netlink: 'syz.2.5904': attribute type 10 has an invalid length. [ 730.400353][T19982] netlink: 'syz.4.5900': attribute type 9 has an invalid length. [ 730.409556][T19982] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5900'. [ 730.524406][T19985] netlink: 'syz.4.5900': attribute type 9 has an invalid length. [ 730.535126][T19985] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5900'. [ 730.616656][T19993] netlink: 'syz.0.5905': attribute type 9 has an invalid length. [ 730.641132][T19993] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5905'. [ 730.871909][T19994] netlink: 'syz.0.5905': attribute type 9 has an invalid length. [ 730.890234][T19994] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5905'. [ 730.944140][T20014] netlink: 'syz.4.5912': attribute type 10 has an invalid length. [ 730.953474][T20014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5912'. [ 730.980462][T20010] netlink: 'syz.2.5919': attribute type 9 has an invalid length. [ 730.989036][T20010] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5919'. [ 731.041984][T20005] netlink: 'syz.2.5919': attribute type 9 has an invalid length. [ 731.050224][T20005] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5919'. [ 731.154307][T20017] netlink: 'syz.5.5913': attribute type 9 has an invalid length. [ 731.162494][T20017] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5913'. [ 731.286604][T20018] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5913'. [ 735.271433][T20180] validate_nla: 48 callbacks suppressed [ 735.271456][T20180] netlink: 'syz.3.5988': attribute type 9 has an invalid length. [ 735.285864][T20180] __nla_validate_parse: 39 callbacks suppressed [ 735.285906][T20180] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5988'. [ 735.392634][T20178] netlink: 'syz.0.5975': attribute type 9 has an invalid length. [ 735.420868][T20178] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5975'. [ 735.471611][T20175] netlink: 'syz.0.5975': attribute type 9 has an invalid length. [ 735.480060][T20175] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5975'. [ 735.491566][T20182] netlink: 'syz.2.5978': attribute type 9 has an invalid length. [ 735.500402][T20182] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5978'. [ 735.613591][T20183] netlink: 'syz.3.5988': attribute type 9 has an invalid length. [ 735.622535][T20183] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5988'. [ 735.633291][T20186] netlink: 'syz.2.5978': attribute type 9 has an invalid length. [ 735.645601][T20186] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5978'. [ 735.665580][T20190] netlink: 'syz.5.5981': attribute type 9 has an invalid length. [ 735.673596][T20190] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5981'. [ 735.877148][T20193] netlink: 'syz.5.5981': attribute type 9 has an invalid length. [ 735.897549][T20199] netlink: 'syz.2.5985': attribute type 10 has an invalid length. [ 735.904582][T20193] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5981'. [ 735.972011][T20196] netlink: 'syz.0.5984': attribute type 9 has an invalid length. [ 735.980247][T20196] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5984'. [ 736.117200][T20200] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5984'. [ 740.340810][T20352] validate_nla: 50 callbacks suppressed [ 740.340854][T20352] netlink: 'syz.0.6044': attribute type 9 has an invalid length. [ 740.358431][T20352] __nla_validate_parse: 46 callbacks suppressed [ 740.358463][T20352] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6044'. [ 740.553997][T20372] netlink: 'syz.4.6050': attribute type 9 has an invalid length. [ 740.575398][T20372] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6050'. [ 740.689014][T20374] netlink: 'syz.5.6052': attribute type 10 has an invalid length. [ 740.713594][T20356] netlink: 'syz.0.6044': attribute type 9 has an invalid length. [ 740.722461][T20356] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6044'. [ 740.791153][T20359] netlink: 'syz.3.6047': attribute type 9 has an invalid length. [ 740.805588][T20359] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6047'. [ 740.931021][T20379] netlink: 'syz.5.6054': attribute type 10 has an invalid length. [ 740.961853][T20363] netlink: 'syz.3.6047': attribute type 9 has an invalid length. [ 740.971152][T20363] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6047'. [ 741.060480][T20375] netlink: 'syz.4.6050': attribute type 9 has an invalid length. [ 741.071519][T20375] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6050'. [ 741.083906][T20382] netlink: 'syz.0.6065': attribute type 9 has an invalid length. [ 741.094657][T20382] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6065'. [ 741.327953][T20387] netlink: 'syz.0.6065': attribute type 9 has an invalid length. [ 741.344599][T20387] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6065'. [ 741.421917][T20394] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6058'. [ 741.474002][T20391] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6058'. [ 744.035426][ T27] INFO: task syz.1.4136:15404 blocked for more than 143 seconds. [ 744.043453][ T27] Not tainted syzkaller #0 [ 744.048929][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 744.058204][ T27] task:syz.1.4136 state:D stack:25136 pid:15404 ppid: 4187 flags:0x00004006 [ 744.067870][ T27] Call Trace: [ 744.071382][ T27] [ 744.074459][ T27] __schedule+0x11ef/0x43c0 [ 744.080241][ T27] ? __mutex_trylock_common+0x155/0x260 [ 744.086330][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 744.091543][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 744.106663][ T27] ? release_firmware_map_entry+0x190/0x190 [ 744.112802][ T27] ? perf_mmap+0x13e0/0x13e0 [ 744.117842][ T27] schedule+0x11b/0x1e0 [ 744.122084][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 744.127855][ T27] ? perf_mmap+0x13e0/0x13e0 [ 744.132528][ T27] _free_event+0x34/0xe60 [ 744.137172][ T27] ? perf_mmap+0x13e0/0x13e0 [ 744.141870][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 744.147855][ T27] ? __might_sleep+0xf0/0xf0 [ 744.152551][ T27] ? calc_timer_values+0x410/0x410 [ 744.158099][ T27] ? perf_mmap+0x13e0/0x13e0 [ 744.162796][ T27] perf_release+0x37/0x40 [ 744.167513][ T27] __fput+0x234/0x930 [ 744.171581][ T27] task_work_run+0x125/0x1a0 [ 744.177510][ T27] do_exit+0x626/0x20c0 [ 744.181752][ T27] ? put_task_struct+0x80/0x80 [ 744.187261][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 744.193519][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 744.200174][ T27] do_group_exit+0x12e/0x300 [ 744.204804][ T27] get_signal+0x6ca/0x12c0 [ 744.209289][ T27] arch_do_signal_or_restart+0xe7/0x12c0 [ 744.214997][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 744.221480][ T27] ? get_sigframe_size+0x10/0x10 [ 744.226546][ T27] ? __fget_files+0x40f/0x480 [ 744.231236][ T27] ? ksys_write+0x1fd/0x260 [ 744.235767][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 744.241229][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 744.246562][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 744.252120][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 744.257648][ T27] do_syscall_64+0x58/0xa0 [ 744.262188][ T27] ? clear_bhb_loop+0x30/0x80 [ 744.266974][ T27] ? clear_bhb_loop+0x30/0x80 [ 744.271653][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 744.277712][ T27] RIP: 0033:0x7f6cc8b8d819 [ 744.282131][ T27] RSP: 002b:00007f6cc6de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 744.290574][ T27] RAX: 0000000000000012 RBX: 00007f6cc8e06fa0 RCX: 00007f6cc8b8d819 [ 744.299024][ T27] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000007 [ 744.307035][ T27] RBP: 00007f6cc8c23c91 R08: 0000000000000000 R09: 0000000000000000 [ 744.315011][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.323019][ T27] R13: 00007f6cc8e07038 R14: 00007f6cc8e06fa0 R15: 00007ffe2a0c4618 [ 744.331730][ T27] [ 744.334942][ T27] [ 744.334942][ T27] Showing all locks held in the system: [ 744.342746][ T27] 1 lock held by khungtaskd/27: [ 744.347649][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 744.357262][ T27] 2 locks held by getty/3948: [ 744.362051][ T27] #0: ffff88802be7f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 744.371868][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 744.382030][ T27] 2 locks held by kworker/1:3/4227: [ 744.387252][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 744.397667][ T27] #1: ffffc9000318fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 744.409534][ T27] 5 locks held by syz.5.6099/20495: [ 744.414719][ T27] #0: ffffffff8d4994f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 744.422925][ T27] #1: ffffffff8d499348 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xf90 [ 744.431941][ T27] #2: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x220 [ 744.442603][ T27] #3: ffff88807c2686c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x7cc/0x11b0 [ 744.453717][ T27] #4: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 744.464748][ T27] 2 locks held by syz.0.6097/20496: [ 744.469984][ T27] #0: ffffffff8d4994f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 744.478206][ T27] #1: ffffffff8d499348 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xf90 [ 744.487222][ T27] [ 744.489546][ T27] ============================================= [ 744.489546][ T27] [ 744.498143][ T27] NMI backtrace for cpu 0 [ 744.502468][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 744.509647][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.519891][ T27] Call Trace: [ 744.523164][ T27] [ 744.526086][ T27] dump_stack_lvl+0x188/0x250 [ 744.530765][ T27] ? show_regs_print_info+0x20/0x20 [ 744.535949][ T27] ? load_image+0x400/0x400 [ 744.540438][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 744.545555][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 744.550517][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 744.556668][ T27] ? _printk+0xda/0x130 [ 744.560844][ T27] ? load_image+0x400/0x400 [ 744.565338][ T27] ? load_image+0x400/0x400 [ 744.569832][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 744.576065][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 744.582048][ T27] watchdog+0xe0f/0xe50 [ 744.586223][ T27] kthread+0x436/0x520 [ 744.590274][ T27] ? hungtask_pm_notify+0x40/0x40 [ 744.595283][ T27] ? kthread_blkcg+0xd0/0xd0 [ 744.599883][ T27] ret_from_fork+0x1f/0x30 [ 744.604288][ T27] [ 744.607595][ T27] Sending NMI from CPU 0 to CPUs 1: [ 744.612825][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 744.614831][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 744.629525][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 744.636711][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.646771][ T27] Call Trace: [ 744.650044][ T27] [ 744.652959][ T27] dump_stack_lvl+0x188/0x250 [ 744.657623][ T27] ? show_regs_print_info+0x20/0x20 [ 744.662810][ T27] ? load_image+0x400/0x400 [ 744.667393][ T27] panic+0x2e5/0x810 [ 744.671291][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 744.676962][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 744.681457][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 744.687600][ T27] watchdog+0xe4e/0xe50 [ 744.691751][ T27] kthread+0x436/0x520 [ 744.695810][ T27] ? hungtask_pm_notify+0x40/0x40 [ 744.700815][ T27] ? kthread_blkcg+0xd0/0xd0 [ 744.705389][ T27] ret_from_fork+0x1f/0x30 [ 744.709816][ T27] [ 744.713130][ T27] Kernel Offset: disabled [ 744.717449][ T27] Rebooting in 86400 seconds..