last executing test programs: 24.9792635s ago: executing program 3 (id=11784): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) close(r3) recvmsg(r4, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x4}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 23.807881427s ago: executing program 3 (id=11789): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) socketpair(0x1f, 0x0, 0x8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x418000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 23.587194922s ago: executing program 3 (id=11793): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, 0x0, 0x101d0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) r5 = socket$kcm(0x29, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b00c84e21000af32c6e0a0675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) close(0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 22.41739301s ago: executing program 3 (id=11798): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)=r4}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r6}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) socket$kcm(0x10, 0x2, 0x0) 21.393032183s ago: executing program 2 (id=11801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}, {&(0x7f0000000840)=""/133, 0x85}], 0x4, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) 19.924955938s ago: executing program 3 (id=11805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4ae"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 19.213226924s ago: executing program 2 (id=11808): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b850500010000001801000020756c2500000000002020207b1af80000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000184100000000000000000000000000001800000000000080000000000500000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000182a0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)}], 0x1}, 0x4008054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r3, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 19.212718394s ago: executing program 3 (id=11809): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, 0x0, 0x101d0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) r5 = socket$kcm(0x29, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b00c84e21000af32c6e0a0675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) close(0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 18.94838106s ago: executing program 4 (id=11811): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x200000000000ff, 0x3}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40142, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="26000000000000020103605e", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2000003, 0x0, 0x5, 0x0, 0x48e7, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000180)='cpu==0||!') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 13.398679519s ago: executing program 0 (id=11813): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=@raw=[@generic={0xb, 0x5, 0x8, 0x5, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r3, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a9", 0x1}], 0x1}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 13.337097931s ago: executing program 2 (id=11815): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) close(r3) recvmsg(r4, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x4}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 13.300225271s ago: executing program 4 (id=11816): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)=r4}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r6}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) socket$kcm(0x10, 0x2, 0x0) 12.967799899s ago: executing program 1 (id=11817): perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.751387304s ago: executing program 1 (id=11818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 12.653152306s ago: executing program 1 (id=11819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffd02, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e620, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'vxcan1\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18ee76694210da30c2dfffff0100a37045b6e905eeb84f8756940252000000dae79938fb7a42857cb12a4f65f9d3e8c8259d694d45ec28ecab93423361ad53a83ec9cb34b5b4992b023b425ae0d15a4eb665420ae30ed6ebfd5adcafb2be2438714b8b217e5aaf931116ccb41641b85b57795b84156881f3988d868338789d6d648fceed322dfa1e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32, @ANYBLOB="000000005f07000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000183b00000500000000000000000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f00000007c0)='GPL\x00', 0x8, 0x8c, &(0x7f00000002c0)=""/140, 0xbd0fcc6b68963e68, 0x40, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x54, 0xa9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000c80)=[{0x3, 0x2, 0x5, 0x9}, {0x2, 0x3, 0xfffffffd, 0x1}, {0x1, 0x2, 0x6, 0xc}, {0x1, 0x1, 0x2, 0x2}, {0x5, 0x5, 0xb, 0x7}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r1, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="138d61"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) 12.587377338s ago: executing program 4 (id=11820): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x3}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfeb9}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b2, 0x2, @perf_bp={&(0x7f0000000900), 0x1}, 0x200, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) sendmsg$kcm(r1, &(0x7f0000000f00)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)="dc3a1ab138e9da304afeb3a61bb122d615f39f66b240c14226ffef0803527f0c7a64f59ee1f1f441de617c83220843", 0x2f}, {&(0x7f00000005c0)="137ba7c8f7bcc5", 0x7}, {&(0x7f0000000840)="4fdc2f2b15d0c03568de3e36d48e8284a9c0e7d31c66cd684b3b87e0ace841be510ddd65cef51573769cec99b03abd756b6f9129073136a37c150060a6fc7b97b17c8b8cd4b0fc86740439bd2fd712d5c6166b7b022b38ce00ceb78a61ce7fac6bc42335a2e834cdf152e0243313614afe885f4157937154dd8f72f57aa45c6708bc660a31c7f3169555e274332f5ac977b6f3", 0x93}], 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x2a0}, 0x800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x4c, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x1}, 0x2004, 0xc, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040), 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) 12.406098032s ago: executing program 0 (id=11821): socket$kcm(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r1, 0xa, 0x2028}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 6.984977778s ago: executing program 2 (id=11822): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f0000000180)="aced48", 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='*(:+\x00') r3 = socket$kcm(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340), 0x0, 0x2e, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x3b, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07", @ANYRESOCT], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="a43bf3ec5a777bbf61b62654f8e8333be75e1015cd7cbc4f17e0802fc2d6f55e6fb3a4e458167a783030c716e7156cce200749d8fed72bc28c1ca6", 0x3b}], 0x1}, 0x4004082) 6.791495442s ago: executing program 0 (id=11823): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) socketpair(0x1f, 0x0, 0x8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x418000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 6.790713012s ago: executing program 1 (id=11824): socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0cd7ecc1c31b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'net_prio'}, {0x2d, 'perf_event'}, {0x2d, 'cpuacct'}]}, 0x1f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(0x0, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x4, 0x4}, {0x0, 0x1000, 0x3}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, 0x0, 0x14) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) 6.704856904s ago: executing program 4 (id=11825): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000001d0000000500001807000000c1000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r7 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r7) 6.619095846s ago: executing program 0 (id=11826): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=ANY=[@ANYBLOB="0b850500010000001801000020756c2500000000002020207b1af80000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000184100000000000000000000000000001800000000000080000000000500000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000009500000000000000182a0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)}], 0x1}, 0x4008054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r3, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 6.522766478s ago: executing program 1 (id=11827): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r4, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {0x0}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x5}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 6.139395397s ago: executing program 2 (id=11828): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)}], 0x1, &(0x7f0000000780)}, 0x0) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r2, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xd4, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="6a2acaa7e71092243db2d88a5b2c694c8068dd4ceec442120a8771a4ed09fe6cc3d1c9af999de5d74cdb7cb77dd45b5caeedd0efddc111bf63c3ef0ab858e65b60ba1c9dde457562de075fe649389cfe05fb410afacb54167a862082c7893b55d1ffc3a8e583ba0f8a61af810632b2d7c2e1c754f4d6b92bdfa590765a0f234c9ed21f9c620c4a3312d629e50cd73a39876aedd473c09d351807d93af048c566a5ca7420ef421ade0d6c3521104703c62a65663c2006f29ea477e45b4602f560ff17715632f95a6deb79da757b3bc2d4c4642a4c237c044edb", 0xd9}, {&(0x7f0000000640)="9f7801c1bc8a8351489aedfb597ef689ea7bc6b2e602d52e206ad4be939b53929ef416332c0502db16d8c9dd45d248a63c5941def9ff2cf65453c1a50a2b14abceea7acd44461278c649c3910bda6198a9cc08aa85aabc", 0x57}, {&(0x7f00000006c0)="e85e9d733e5c32fa7fd61c2c5fb8c0d7df", 0x11}, {&(0x7f0000000700)}], 0x4}, 0x0) 3.999661577s ago: executing program 32 (id=11809): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, 0x0, 0x101d0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) r5 = socket$kcm(0x29, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b00c84e21000af32c6e0a0675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) close(0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x101d0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 578.883306ms ago: executing program 4 (id=11830): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)=r4}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r7}) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) 554.999707ms ago: executing program 2 (id=11831): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r4, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r4, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x4}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 548.445487ms ago: executing program 0 (id=11832): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r2, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xd4, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) 286.076313ms ago: executing program 0 (id=11833): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) close(r3) recvmsg(r4, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {0x0}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x5}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 26.942859ms ago: executing program 1 (id=11834): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0xa85d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, &(0x7f0000000100)=@raw=[@generic={0xb, 0x5, 0x8, 0x5, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8", 0x1}], 0x1}, 0x4008054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) recvmsg$kcm(r3, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x40000002) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a9", 0x1}], 0x1}, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x4, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 0s ago: executing program 4 (id=11835): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$sock(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@x25, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="6a110bc6a31e1a177424329af18d3150a3cee2ddc6a38a5d8f77db1964d814f6a840390ac6628ff4ba42715cc96c6ffbb9bdb5", 0x33}, {&(0x7f0000000600)="68b1a707402bcbb5c244135a6bb48c5310fb725a82680d4487ef00dcc04531ee54b5909c80be8ec3c42d3ab95ba2c21eb1867fa9779ac48fc3886eb49f297fed6c8743704bde8f0d9ab8b9eb4f56fa3fea7a14f518a3e9173183f94d1a58e2829a", 0x61}], 0x2, &(0x7f0000000400)=[@timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x48}, 0x404800e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010000006ad24175fd8b198824927c6ae267", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x8000000, 0xa, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098e", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r5], 0xfe33) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x20008840) kernel console output (not intermixed with test programs): syz.3.10201': attribute type 10 has an invalid length. [ 2150.480250][ T3622] netlink: 'syz.3.10204': attribute type 1 has an invalid length. [ 2150.510857][ T3622] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10204'. [ 2151.139935][ T3632] netlink: 'syz.1.10206': attribute type 21 has an invalid length. [ 2151.150317][ T3632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10206'. [ 2152.058952][ T3649] netlink: 'syz.3.10214': attribute type 1 has an invalid length. [ 2152.087995][ T3649] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.10214'. [ 2152.978009][ T3676] netlink: 'syz.1.10225': attribute type 1 has an invalid length. [ 2152.999336][ T3676] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10225'. [ 2153.356880][ T3683] netlink: 'syz.0.10226': attribute type 21 has an invalid length. [ 2153.376516][ T3683] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10226'. [ 2153.926911][ T3693] netlink: 'syz.2.10231': attribute type 1 has an invalid length. [ 2153.962434][ T3693] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.10231'. [ 2155.909748][ T3719] netlink: 'syz.1.10239': attribute type 2 has an invalid length. [ 2156.035066][ T3732] netlink: 'syz.0.10242': attribute type 1 has an invalid length. [ 2156.044092][ T3719] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.10239'. [ 2156.081380][ T3732] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10242'. [ 2156.109242][ T3719] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2156.221838][ T3719] syzkaller1: linktype set to 823 [ 2156.368107][ T3730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2156.401186][ T3730] syzkaller1: linktype set to 783 [ 2159.016140][ T3747] netlink: 'syz.3.10245': attribute type 21 has an invalid length. [ 2159.024651][ T3747] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10245'. [ 2159.262929][ T3750] netlink: 'syz.4.10247': attribute type 1 has an invalid length. [ 2159.343704][ T3750] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.10247'. [ 2159.611392][ T3760] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10251'. [ 2159.622819][ T3759] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.10250'. [ 2159.699306][ T3760] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2159.738055][ T3759] tun1: tun_chr_ioctl cmd 1074812118 [ 2159.754831][ T3759] tun1: tun_chr_ioctl cmd 2147767519 [ 2160.350976][ T3763] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10252'. [ 2160.368622][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.375183][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.416419][ T3763] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10252'. [ 2160.456763][ T3764] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10252'. [ 2160.507424][ T3765] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10252'. [ 2160.627845][ T3767] netlink: 'syz.2.10251': attribute type 3 has an invalid length. [ 2161.122894][ T3778] netlink: 'syz.2.10255': attribute type 39 has an invalid length. [ 2161.549286][ T3791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2161.591435][ T3791] device sit0 left promiscuous mode [ 2161.948945][ T3792] device sit0 entered promiscuous mode [ 2162.130194][ T3803] netlink: 'syz.3.10260': attribute type 1 has an invalid length. [ 2162.158640][ T3803] __nla_validate_parse: 1 callbacks suppressed [ 2162.158673][ T3803] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10260'. [ 2162.329890][ T3807] : port 1(ip6gretap0) entered blocking state [ 2162.354029][ T3807] : port 1(ip6gretap0) entered disabled state [ 2162.382950][ T3812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10264'. [ 2162.411516][ T3807] device ip6gretap0 entered promiscuous mode [ 2165.250183][ T3812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10264'. [ 2165.260085][ T3813] device ip6gretap0 left promiscuous mode [ 2165.269371][ T3813] : port 1(ip6gretap0) entered disabled state [ 2165.532759][ T3814] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10264'. [ 2165.554372][ T3822] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.10266'. [ 2165.567967][ T3819] netlink: 'syz.1.10265': attribute type 1 has an invalid length. [ 2165.582404][ T3819] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.10265'. [ 2165.728445][ T3822] tun1: tun_chr_ioctl cmd 1074812118 [ 2165.742426][ T3822] tun1: tun_chr_ioctl cmd 2147767519 [ 2165.807375][ T3826] netlink: 'syz.4.10268': attribute type 16 has an invalid length. [ 2165.818356][ T3826] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10268'. [ 2165.833101][ T3826] netlink: 'syz.4.10268': attribute type 10 has an invalid length. [ 2165.856922][ T3825] delete_channel: no stack [ 2166.015025][ T3833] netlink: 'syz.3.10270': attribute type 39 has an invalid length. [ 2166.133930][ T3839] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10273'. [ 2166.144264][ T3839] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10273'. [ 2166.157302][ T3839] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10273'. [ 2167.471101][ T3844] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2167.484543][ T3844] syzkaller1: linktype set to 823 [ 2167.589028][ T3844] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2167.624900][ T3844] syzkaller1: linktype set to 783 [ 2167.685772][ T3859] __nla_validate_parse: 2 callbacks suppressed [ 2167.685797][ T3859] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2167.709884][ T3859] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2167.732187][ T3858] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2167.747094][ T3858] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2167.760647][ T3858] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2169.847045][ T3873] netlink: 'syz.3.10280': attribute type 1 has an invalid length. [ 2169.913532][ T3873] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.10280'. [ 2170.271788][ T3883] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.10283'. [ 2170.333838][ T3876] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2170.364069][ T3876] syzkaller1: linktype set to 825 [ 2170.375692][ T3889] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10284'. [ 2170.393136][ T3893] tun1: tun_chr_ioctl cmd 1074812118 [ 2170.400321][ T3894] netlink: 'syz.0.10285': attribute type 39 has an invalid length. [ 2170.422710][ T3883] tun1: tun_chr_ioctl cmd 2147767519 [ 2170.489787][ T3896] netlink: 'syz.3.10286': attribute type 46 has an invalid length. [ 2170.508921][ T3896] netlink: 'syz.3.10286': attribute type 46 has an invalid length. [ 2170.679916][ T3901] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10288'. [ 2170.713828][ T3901] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10288'. [ 2171.541500][ T3923] : port 1(ip6gretap0) entered blocking state [ 2171.554052][ T3923] : port 1(ip6gretap0) entered disabled state [ 2171.563166][ T3923] device ip6gretap0 entered promiscuous mode [ 2171.572801][ T3924] device ip6gretap0 left promiscuous mode [ 2171.579809][ T3924] : port 1(ip6gretap0) entered disabled state [ 2172.747225][ T3926] netlink: 'syz.4.10294': attribute type 2 has an invalid length. [ 2172.804358][ T3926] __nla_validate_parse: 9 callbacks suppressed [ 2172.804383][ T3926] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.10294'. [ 2172.887175][ T3942] netlink: 'syz.3.10297': attribute type 1 has an invalid length. [ 2172.924365][ T3942] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.10297'. [ 2173.014801][ T3945] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2173.021116][ T3945] syzkaller1: linktype set to 823 [ 2173.421352][ T3926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2173.455348][ T3926] syzkaller1: linktype set to 783 [ 2173.573552][ T3951] netlink: 'syz.1.10299': attribute type 39 has an invalid length. [ 2173.760241][ T3959] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.10301'. [ 2174.133601][ T3956] tun0: tun_chr_ioctl cmd 1074812118 [ 2174.184657][ T3956] tun0: tun_chr_ioctl cmd 2147767519 [ 2174.544948][ T3975] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10306'. [ 2175.520624][ T3993] netlink: 'syz.0.10310': attribute type 1 has an invalid length. [ 2175.534118][ T3993] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.10310'. [ 2175.553034][ T3994] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10309'. [ 2175.568645][ T3994] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10309'. [ 2175.584126][ T3994] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10309'. [ 2175.619546][ T3994] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10309'. [ 2175.641869][ T3994] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10309'. [ 2176.606183][ T4003] netlink: 'syz.2.10313': attribute type 39 has an invalid length. [ 2176.656339][ T3999] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2176.712080][ T3999] syzkaller1: linktype set to 823 [ 2176.797146][ T4012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2176.817347][ T4012] syzkaller1: linktype set to 783 [ 2178.089947][ T4023] __nla_validate_parse: 1 callbacks suppressed [ 2178.089988][ T4023] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10317'. [ 2179.453519][ T4059] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10324'. [ 2179.767475][ T4071] netlink: 'syz.0.10327': attribute type 39 has an invalid length. [ 2179.885046][ T4056] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2179.891266][ T4056] syzkaller1: linktype set to 825 [ 2180.106477][ T4084] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10330'. [ 2180.155141][ T4079] : port 1(ip6gretap0) entered blocking state [ 2180.162602][ T4079] : port 1(ip6gretap0) entered disabled state [ 2180.198033][ T4079] device ip6gretap0 entered promiscuous mode [ 2180.950328][ T4089] device ip6gretap0 left promiscuous mode [ 2180.956689][ T4089] : port 1(ip6gretap0) entered disabled state [ 2181.115270][ T4100] netlink: 763 bytes leftover after parsing attributes in process `syz.3.10334'. [ 2182.190652][ T4128] netlink: 'syz.2.10342': attribute type 39 has an invalid length. [ 2182.385059][ T4134] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10341'. [ 2182.920307][ T4137] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2182.932905][ T4137] syzkaller1: linktype set to 825 [ 2183.349733][ T4154] : port 1(ip6gretap0) entered blocking state [ 2183.374545][ T4154] : port 1(ip6gretap0) entered disabled state [ 2183.416670][ T4154] device ip6gretap0 entered promiscuous mode [ 2183.533354][ T4159] device ip6gretap0 left promiscuous mode [ 2183.546485][ T4159] : port 1(ip6gretap0) entered disabled state [ 2183.697026][ T4161] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10348'. [ 2184.213661][ T4179] netlink: 'syz.0.10353': attribute type 3 has an invalid length. [ 2184.233105][ T4179] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10353'. [ 2184.594257][ T4176] netlink: 'syz.3.10354': attribute type 39 has an invalid length. [ 2184.617910][ T4171] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10353'. [ 2184.638097][ T4171] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2184.831553][ T4187] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10358'. [ 2184.952557][ T4190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10356'. [ 2185.747220][ T4201] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2185.760451][ T4201] syzkaller1: linktype set to 825 [ 2185.887994][ T4218] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10367'. [ 2186.800188][ T4221] netlink: 'syz.3.10368': attribute type 1 has an invalid length. [ 2186.813521][ T4221] netlink: 'syz.3.10368': attribute type 4 has an invalid length. [ 2186.821924][ T4221] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10368'. [ 2186.845120][ T4228] netlink: 'syz.4.10370': attribute type 39 has an invalid length. [ 2187.069660][ T4241] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10382'. [ 2187.134784][ T4242] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10372'. [ 2188.117981][ T4263] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10377'. [ 2189.590917][ T4299] netlink: 'syz.2.10385': attribute type 39 has an invalid length. [ 2189.904317][ T4303] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2189.927913][ T4303] syzkaller1: linktype set to 825 [ 2190.262568][ T4327] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10392'. [ 2190.357217][ T4332] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10391'. [ 2191.486348][ T4338] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10391'. [ 2191.506860][ T4338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2191.588905][ T4330] netlink: 'syz.0.10390': attribute type 2 has an invalid length. [ 2191.613687][ T4330] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.10390'. [ 2191.634344][ T4346] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2191.640545][ T4346] syzkaller1: linktype set to 823 [ 2191.685411][ T4350] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2191.691640][ T4350] syzkaller1: linktype set to 783 [ 2192.121026][ T4358] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10406'. [ 2192.211835][ T4361] : port 1(ip6gretap0) entered blocking state [ 2192.219874][ T4361] : port 1(ip6gretap0) entered disabled state [ 2192.248169][ T4361] device ip6gretap0 entered promiscuous mode [ 2192.997963][ T4367] device ip6gretap0 left promiscuous mode [ 2193.006785][ T4367] : port 1(ip6gretap0) entered disabled state [ 2193.340412][ T4378] netlink: 'syz.2.10401': attribute type 39 has an invalid length. [ 2193.557075][ T4386] netlink: 'syz.4.10403': attribute type 10 has an invalid length. [ 2193.569381][ T4386] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10403'. [ 2193.601569][ T4386] netlink: 'syz.4.10403': attribute type 10 has an invalid length. [ 2193.974211][ T4402] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.10410'. [ 2196.831272][ T4411] netlink: 'syz.0.10413': attribute type 21 has an invalid length. [ 2197.099870][ T4419] device lo entered promiscuous mode [ 2197.179035][ T4424] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10415'. [ 2197.214945][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2197.431902][ T4431] netlink: 'syz.3.10418': attribute type 39 has an invalid length. [ 2198.513586][ T4465] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10430'. [ 2199.061635][ T4471] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.10434'. [ 2199.284483][ T4467] netlink: 'syz.2.10431': attribute type 2 has an invalid length. [ 2199.293021][ T4467] netlink: 'syz.2.10431': attribute type 8 has an invalid length. [ 2199.303038][ T4467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10431'. [ 2199.318670][ T4474] netlink: 'syz.3.10433': attribute type 39 has an invalid length. [ 2199.645583][ T4483] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10447'. [ 2200.517046][ T4492] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10440'. [ 2201.011787][ T4516] netlink: 'syz.3.10446': attribute type 10 has an invalid length. [ 2201.336905][ T4523] netlink: 'syz.4.10448': attribute type 39 has an invalid length. [ 2201.801098][ T4528] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10451'. [ 2204.858988][ T4548] netlink: 763 bytes leftover after parsing attributes in process `syz.0.10453'. [ 2204.989157][ T4552] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10454'. [ 2205.140037][ T4559] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10456'. [ 2206.160731][ T4580] netlink: 'syz.1.10462': attribute type 39 has an invalid length. [ 2206.440736][ T4585] netlink: 'syz.4.10465': attribute type 21 has an invalid length. [ 2206.455466][ T4589] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10474'. [ 2206.752331][ T4595] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10468'. [ 2209.529972][ T4599] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10470'. [ 2209.847079][ T4609] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10473'. [ 2210.252402][ T4621] netlink: 'syz.2.10476': attribute type 39 has an invalid length. [ 2210.854351][ T4637] device lo entered promiscuous mode [ 2210.880861][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2214.064903][ T4642] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10485'. [ 2214.126747][ T4646] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10486'. [ 2214.324576][ T4655] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10488'. [ 2214.773254][ T4656] netlink: 'syz.2.10487': attribute type 39 has an invalid length. [ 2215.157950][ T4673] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.10494'. [ 2215.992700][ T4684] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10506'. [ 2218.427381][ T4695] netlink: 'syz.3.10497': attribute type 2 has an invalid length. [ 2218.453277][ T4695] netlink: 'syz.3.10497': attribute type 8 has an invalid length. [ 2218.461204][ T4695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10497'. [ 2218.805965][ T4707] netlink: 'syz.3.10501': attribute type 39 has an invalid length. [ 2219.001394][ T4713] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10502'. [ 2221.675945][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.682329][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.957273][ T4723] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.10509'. [ 2222.231710][ T4730] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10510'. [ 2225.084659][ T4746] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10514'. [ 2225.191378][ T4750] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10515'. [ 2229.530140][ T4798] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.10526'. [ 2229.544580][ T4794] netlink: 'syz.4.10525': attribute type 2 has an invalid length. [ 2229.563078][ T4794] netlink: 'syz.4.10525': attribute type 8 has an invalid length. [ 2229.572252][ T4794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10525'. [ 2229.759709][ T4802] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10527'. [ 2236.369648][ T4852] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10540'. [ 2237.317502][ T4875] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10545'. [ 2237.905525][ T4889] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10549'. [ 2238.629008][ T4884] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10548'. [ 2241.045930][ T4904] netlink: 'syz.4.10554': attribute type 39 has an invalid length. [ 2242.361047][ T4930] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10561'. [ 2242.537752][ T4933] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10562'. [ 2243.045474][ T4944] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10565'. [ 2243.091948][ T4935] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.10563'. [ 2243.105042][ T4938] netlink: 'syz.3.10564': attribute type 25 has an invalid length. [ 2243.114015][ T4938] netlink: 'syz.3.10564': attribute type 29 has an invalid length. [ 2243.124671][ T4941] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10564'. [ 2246.533065][ T4969] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10584'. [ 2247.582447][ T4991] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10577'. [ 2247.632587][ T4994] netlink: 'syz.2.10576': attribute type 1 has an invalid length. [ 2247.666380][ T4994] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10576'. [ 2248.683137][ T5000] netlink: 763 bytes leftover after parsing attributes in process `syz.3.10579'. [ 2248.986685][ T5010] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10581'. [ 2249.075655][ T5012] netlink: 'syz.4.10582': attribute type 16 has an invalid length. [ 2249.113534][ T5012] netlink: 'syz.4.10582': attribute type 3 has an invalid length. [ 2249.121793][ T5012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10582'. [ 2249.792606][ T5026] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.10589'. [ 2250.072562][ T5034] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10593'. [ 2250.093538][ T5036] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10592'. [ 2250.389056][ T5045] netlink: 'syz.0.10594': attribute type 1 has an invalid length. [ 2250.397965][ T5045] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10594'. [ 2251.297948][ T5054] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10607'. [ 2251.729893][ T5069] netlink: 'syz.4.10601': attribute type 29 has an invalid length. [ 2252.314486][ T5069] netlink: 'syz.4.10601': attribute type 29 has an invalid length. [ 2252.563341][ T5066] netlink: 'syz.4.10601': attribute type 1 has an invalid length. [ 2252.693254][ T5081] __nla_validate_parse: 4 callbacks suppressed [ 2252.693297][ T5081] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10603'. [ 2252.967124][ T5091] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10608'. [ 2253.910643][ T5107] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10613'. [ 2254.145105][ T5110] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10615'. [ 2254.162238][ T5111] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10624'. [ 2255.099921][ T5129] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10629'. [ 2255.204972][ T5135] netlink: 'syz.1.10618': attribute type 1 has an invalid length. [ 2255.214085][ T5135] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10618'. [ 2255.524886][ T5140] netlink: 763 bytes leftover after parsing attributes in process `syz.1.10621'. [ 2255.624491][ T5146] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.10620'. [ 2256.439956][ T5163] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10628'. [ 2256.635088][ T5159] netlink: 'syz.2.10627': attribute type 10 has an invalid length. [ 2256.937443][ T5174] netlink: 'syz.3.10632': attribute type 39 has an invalid length. [ 2257.604816][ T5183] netlink: 'syz.3.10636': attribute type 1 has an invalid length. [ 2257.753150][ T5186] netlink: 'syz.0.10634': attribute type 2 has an invalid length. [ 2257.761283][ T5186] netlink: 'syz.0.10634': attribute type 8 has an invalid length. [ 2257.793231][ T5186] __nla_validate_parse: 2 callbacks suppressed [ 2257.793252][ T5186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10634'. [ 2257.845603][ T5190] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10638'. [ 2258.378393][ T5208] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10644'. [ 2258.516002][ T5203] netlink: 'syz.2.10643': attribute type 10 has an invalid length. [ 2258.542331][ T5214] netlink: 'syz.0.10645': attribute type 39 has an invalid length. [ 2258.985532][ T5224] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10648'. [ 2259.460659][ T5219] netlink: 'syz.0.10646': attribute type 6 has an invalid length. [ 2259.474225][ T5219] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10646'. [ 2259.958784][ T5235] netlink: 763 bytes leftover after parsing attributes in process `syz.1.10652'. [ 2259.999066][ T5237] netlink: 'syz.4.10651': attribute type 1 has an invalid length. [ 2260.014647][ T5237] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10651'. [ 2260.646803][ T5245] netlink: 'syz.4.10656': attribute type 39 has an invalid length. [ 2260.928831][ T5252] netlink: 'syz.1.10653': attribute type 2 has an invalid length. [ 2260.990503][ T5252] netlink: 'syz.1.10653': attribute type 8 has an invalid length. [ 2261.036083][ T5252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10653'. [ 2263.255079][ T5264] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10661'. [ 2263.321648][ T5273] netlink: 'syz.1.10660': attribute type 10 has an invalid length. [ 2264.363510][ T5281] netlink: 763 bytes leftover after parsing attributes in process `syz.0.10664'. [ 2264.721052][ T5291] netlink: 'syz.2.10666': attribute type 1 has an invalid length. [ 2264.823646][ T5291] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10666'. [ 2265.679825][ T5306] netlink: 'syz.2.10671': attribute type 16 has an invalid length. [ 2265.701764][ T5306] netlink: 'syz.2.10671': attribute type 3 has an invalid length. [ 2265.712534][ T5306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10671'. [ 2265.751000][ T5305] netlink: 'syz.4.10670': attribute type 39 has an invalid length. [ 2266.037308][ T5311] netlink: 'syz.1.10673': attribute type 2 has an invalid length. [ 2266.046475][ T5311] netlink: 'syz.1.10673': attribute type 8 has an invalid length. [ 2266.056214][ T5311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10673'. [ 2269.370125][ T5337] netlink: 'syz.3.10683': attribute type 1 has an invalid length. [ 2269.385404][ T5337] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.10683'. [ 2269.419097][ T5337] netlink: 'syz.3.10683': attribute type 29 has an invalid length. [ 2269.470365][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10683'. [ 2269.486366][ T5337] netlink: 'syz.3.10683': attribute type 29 has an invalid length. [ 2269.505142][ T5340] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10683'. [ 2269.570473][ T5344] netlink: 'syz.4.10685': attribute type 39 has an invalid length. [ 2270.226596][ T5357] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10689'. [ 2271.331691][ T5380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10696'. [ 2274.139229][ T5386] netlink: 'syz.2.10698': attribute type 10 has an invalid length. [ 2274.214356][ T5390] netlink: 'syz.0.10700': attribute type 16 has an invalid length. [ 2274.229442][ T5390] netlink: 'syz.0.10700': attribute type 3 has an invalid length. [ 2274.296754][ T5397] netlink: 'syz.4.10701': attribute type 4 has an invalid length. [ 2274.353537][ T5390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10700'. [ 2274.385748][ T5397] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10701'. [ 2275.507810][ T5423] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10708'. [ 2276.678908][ T5439] netlink: 'syz.3.10712': attribute type 16 has an invalid length. [ 2276.688602][ T5439] netlink: 'syz.3.10712': attribute type 3 has an invalid length. [ 2276.699343][ T5439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10712'. [ 2276.778130][ T5441] netlink: 'syz.4.10713': attribute type 1 has an invalid length. [ 2276.786863][ T5441] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.10713'. [ 2276.805695][ T5441] netlink: 'syz.4.10713': attribute type 29 has an invalid length. [ 2276.818522][ T5441] netlink: 'syz.4.10713': attribute type 29 has an invalid length. [ 2276.832599][ T5441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10713'. [ 2276.869893][ T5441] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10713'. [ 2281.233818][ T5495] netlink: 'syz.1.10729': attribute type 1 has an invalid length. [ 2281.242130][ T5495] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.10729'. [ 2281.421431][ T5495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10729'. [ 2281.570332][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10729'. [ 2283.116509][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.122979][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.014077][ T5476] delete_channel: no stack [ 2284.432693][ T5512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10736'. [ 2285.825773][ T5532] netlink: 'syz.3.10742': attribute type 10 has an invalid length. [ 2285.853587][ T5532] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10742'. [ 2286.365144][ T5546] netlink: 'syz.1.10745': attribute type 4 has an invalid length. [ 2286.413824][ T5546] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10745'. [ 2286.719430][ T5553] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10749'. [ 2287.021838][ T5562] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10752'. [ 2287.138249][ T5560] netlink: 'syz.1.10752': attribute type 10 has an invalid length. [ 2287.147459][ T5560] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10752'. [ 2287.421769][ T5570] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10754'. [ 2287.833616][ T5575] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10757'. [ 2288.342952][ T5590] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10771'. [ 2289.200473][ T5596] netlink: 'syz.4.10761': attribute type 10 has an invalid length. [ 2289.213313][ T5596] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10761'. [ 2291.111322][ T5600] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10763'. [ 2292.295938][ T5616] netlink: 'syz.2.10766': attribute type 1 has an invalid length. [ 2292.323953][ T5616] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.10766'. [ 2292.341334][ T5616] netlink: 'syz.2.10766': attribute type 29 has an invalid length. [ 2292.366690][ T5616] netlink: 'syz.2.10766': attribute type 29 has an invalid length. [ 2292.407488][ T5622] netlink: 'syz.1.10772': attribute type 15 has an invalid length. [ 2292.427810][ T5622] netlink: 'syz.1.10772': attribute type 7 has an invalid length. [ 2292.443992][ T5616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10766'. [ 2292.481581][ T5623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10766'. [ 2292.544916][ T5622] netlink: 'syz.1.10772': attribute type 39 has an invalid length. [ 2292.707143][ T5627] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10774'. [ 2292.762270][ T5629] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10775'. [ 2293.090596][ T5632] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10776'. [ 2293.853084][ T5640] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10780'. [ 2294.041264][ T5642] netlink: 'syz.2.10778': attribute type 10 has an invalid length. [ 2294.053083][ T5642] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10778'. [ 2294.065967][ T5650] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10782'. [ 2294.095577][ T5652] netlink: 'syz.3.10782': attribute type 10 has an invalid length. [ 2294.105839][ T5652] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10782'. [ 2294.406579][ T5608] delete_channel: no stack [ 2294.765889][ T5668] netlink: 'syz.4.10787': attribute type 15 has an invalid length. [ 2294.777604][ T5668] netlink: 'syz.4.10787': attribute type 7 has an invalid length. [ 2297.349020][ T5706] validate_nla: 2 callbacks suppressed [ 2297.349044][ T5706] netlink: 'syz.1.10797': attribute type 10 has an invalid length. [ 2297.365416][ T5706] __nla_validate_parse: 6 callbacks suppressed [ 2297.365435][ T5706] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10797'. [ 2297.840930][ T5720] netlink: 'syz.4.10804': attribute type 15 has an invalid length. [ 2297.854587][ T5720] netlink: 'syz.4.10804': attribute type 7 has an invalid length. [ 2297.924928][ T5723] netlink: 'syz.4.10804': attribute type 39 has an invalid length. [ 2298.031573][ T5731] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.10806'. [ 2298.153923][ T5732] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10807'. [ 2298.866740][ T5748] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10811'. [ 2298.908401][ T5750] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10812'. [ 2299.219135][ T5743] netlink: 'syz.4.10810': attribute type 15 has an invalid length. [ 2299.253352][ T5743] netlink: 'syz.4.10810': attribute type 7 has an invalid length. [ 2299.266259][ T5745] netlink: 'syz.4.10810': attribute type 39 has an invalid length. [ 2300.305302][ T5762] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10816'. [ 2300.354174][ T5768] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10824'. [ 2301.361709][ T5777] netlink: 'syz.4.10818': attribute type 15 has an invalid length. [ 2301.374542][ T5777] netlink: 'syz.4.10818': attribute type 7 has an invalid length. [ 2301.393672][ T5781] netlink: 'syz.4.10818': attribute type 39 has an invalid length. [ 2301.978788][ T5787] bridge0: port 2(netdevsim0) entered disabled state [ 2302.423579][ T5802] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10828'. [ 2303.207033][ T5814] validate_nla: 1 callbacks suppressed [ 2303.207127][ T5814] netlink: 'syz.1.10830': attribute type 3 has an invalid length. [ 2303.276079][ T5814] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10830'. [ 2303.455570][ T5805] netlink: 'syz.3.10827': attribute type 10 has an invalid length. [ 2303.525822][ T5805] device dummy0 left promiscuous mode [ 2303.531627][ T5805] bridge0: port 3(dummy0) entered disabled state [ 2303.864626][ T5830] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10833'. [ 2303.984842][ T5831] netlink: 'syz.1.10834': attribute type 15 has an invalid length. [ 2303.992858][ T5831] netlink: 'syz.1.10834': attribute type 7 has an invalid length. [ 2304.005104][ T5833] netlink: 'syz.1.10834': attribute type 39 has an invalid length. [ 2304.319837][ T5844] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.10838'. [ 2304.786048][ T5837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10837'. [ 2305.127292][ T5849] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10839'. [ 2307.356632][ T5808] delete_channel: no stack [ 2308.172655][ T5867] device syzkaller0 entered promiscuous mode [ 2308.610751][ T5875] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10848'. [ 2308.846544][ T5883] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10850'. [ 2310.702810][ T5877] netlink: 'syz.1.10849': attribute type 15 has an invalid length. [ 2310.710943][ T5877] netlink: 'syz.1.10849': attribute type 7 has an invalid length. [ 2310.720813][ T5881] netlink: 'syz.1.10849': attribute type 39 has an invalid length. [ 2310.869880][ T5891] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10852'. [ 2310.967941][ T5889] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10851'. [ 2310.991268][ T5892] netlink: 'syz.2.10851': attribute type 10 has an invalid length. [ 2311.024019][ T5892] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10851'. [ 2312.169928][ T5920] netlink: 'syz.3.10862': attribute type 15 has an invalid length. [ 2312.180010][ T5920] netlink: 'syz.3.10862': attribute type 7 has an invalid length. [ 2312.188693][ T5921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10861'. [ 2312.212195][ T5920] netlink: 'syz.3.10862': attribute type 39 has an invalid length. [ 2312.441355][ T5926] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10864'. [ 2312.485270][ T5929] netlink: 'syz.1.10863': attribute type 10 has an invalid length. [ 2312.514653][ T5929] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10863'. [ 2313.200576][ T5941] netlink: 'syz.2.10868': attribute type 3 has an invalid length. [ 2313.260868][ T5941] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10868'. [ 2313.681191][ T5947] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10881'. [ 2313.823467][ T5951] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10871'. [ 2313.993487][ T5956] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10873'. [ 2314.537863][ T5964] netlink: 'syz.4.10874': attribute type 15 has an invalid length. [ 2314.782902][ T5971] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2314.797966][ T5971] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2314.813922][ T5971] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2315.502188][ T5984] netlink: 763 bytes leftover after parsing attributes in process `syz.3.10882'. [ 2316.092722][ T5993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10884'. [ 2316.298226][ T6000] validate_nla: 2 callbacks suppressed [ 2316.298263][ T6000] netlink: 'syz.4.10886': attribute type 10 has an invalid length. [ 2316.374751][ T6000] netlink: 'syz.4.10886': attribute type 19 has an invalid length. [ 2316.418387][ T6000] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.10886'. [ 2316.808645][ T6009] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10888'. [ 2318.392868][ T6011] netlink: 'syz.1.10889': attribute type 15 has an invalid length. [ 2318.414421][ T6011] netlink: 'syz.1.10889': attribute type 7 has an invalid length. [ 2318.720708][ T6017] netlink: 'syz.1.10889': attribute type 39 has an invalid length. [ 2319.088101][ T6027] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10892'. [ 2319.288720][ T6032] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10894'. [ 2320.586862][ T6046] netlink: 'syz.2.10898': attribute type 3 has an invalid length. [ 2320.610101][ T6046] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10898'. [ 2321.460484][ T6060] netlink: 'syz.2.10902': attribute type 15 has an invalid length. [ 2321.468952][ T6060] netlink: 'syz.2.10902': attribute type 7 has an invalid length. [ 2321.498010][ T6060] netlink: 'syz.2.10902': attribute type 39 has an invalid length. [ 2321.622724][ T6062] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10903'. [ 2322.709897][ T6069] netlink: 'syz.2.10916': attribute type 15 has an invalid length. [ 2322.724542][ T6069] netlink: 'syz.2.10916': attribute type 7 has an invalid length. [ 2322.737718][ T6071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10906'. [ 2322.768198][ T6076] netlink: 'syz.2.10916': attribute type 39 has an invalid length. [ 2323.051199][ T6093] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10912'. [ 2323.190577][ T6096] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10911'. [ 2323.752093][ T6103] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10924'. [ 2323.977831][ T6105] netlink: 'syz.0.10913': attribute type 3 has an invalid length. [ 2323.997359][ T6105] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.10913'. [ 2325.234600][ T6121] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10918'. [ 2325.615065][ T6130] netlink: 'syz.2.10921': attribute type 15 has an invalid length. [ 2325.643295][ T6130] netlink: 'syz.2.10921': attribute type 7 has an invalid length. [ 2325.699013][ T6131] netlink: 'syz.2.10921': attribute type 39 has an invalid length. [ 2325.872046][ T6137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10923'. [ 2326.386773][ T6151] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.10926'. [ 2326.810773][ T6155] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10927'. [ 2327.836929][ T6159] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10929'. [ 2328.050696][ T6163] netlink: 'syz.4.10931': attribute type 10 has an invalid length. [ 2328.070201][ T6164] netlink: 'syz.3.10930': attribute type 3 has an invalid length. [ 2328.095289][ T6163] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10931'. [ 2328.135049][ T6164] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10930'. [ 2328.821925][ T6172] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10932'. [ 2329.672685][ T6181] netlink: 'syz.2.10937': attribute type 15 has an invalid length. [ 2329.694556][ T6181] netlink: 'syz.2.10937': attribute type 7 has an invalid length. [ 2329.719285][ T6184] netlink: 763 bytes leftover after parsing attributes in process `syz.3.10938'. [ 2329.743877][ T6187] netlink: 'syz.2.10937': attribute type 39 has an invalid length. [ 2330.199554][ T6199] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.10939'. [ 2330.323487][ T6198] netlink: 'syz.0.10949': attribute type 15 has an invalid length. [ 2330.331491][ T6198] netlink: 'syz.0.10949': attribute type 7 has an invalid length. [ 2330.439831][ T6204] netlink: 'syz.0.10949': attribute type 39 has an invalid length. [ 2330.463772][ T6202] netlink: 'syz.4.10941': attribute type 39 has an invalid length. [ 2333.132654][ T6202] device hsr_slave_1 left promiscuous mode [ 2333.371590][ T6212] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10943'. [ 2334.343201][ T6220] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10946'. [ 2334.370321][ T6222] netlink: 'syz.0.10956': attribute type 15 has an invalid length. [ 2334.383261][ T6222] netlink: 'syz.0.10956': attribute type 7 has an invalid length. [ 2335.221471][ T6237] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10951'. [ 2335.434188][ T6225] netlink: 'syz.0.10956': attribute type 39 has an invalid length. [ 2335.959057][ T6247] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10964'. [ 2336.062382][ T6249] netlink: 'syz.0.10953': attribute type 10 has an invalid length. [ 2336.163686][ T6249] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10953'. [ 2336.285572][ T6255] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10967'. [ 2336.561409][ T6261] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10957'. [ 2336.720759][ T6257] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.10955'. [ 2337.393841][ T6282] netlink: 'syz.3.10961': attribute type 29 has an invalid length. [ 2337.441396][ T6282] netlink: 'syz.3.10961': attribute type 29 has an invalid length. [ 2337.457058][ T6284] netlink: 'syz.3.10961': attribute type 29 has an invalid length. [ 2338.131486][ T6286] netlink: 'syz.2.10963': attribute type 15 has an invalid length. [ 2338.163636][ T6286] netlink: 'syz.2.10963': attribute type 7 has an invalid length. [ 2338.188684][ T6293] netlink: 'syz.2.10963': attribute type 39 has an invalid length. [ 2338.641644][ T6301] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10968'. [ 2338.687716][ T6304] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10977'. [ 2338.765923][ T6299] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10969'. [ 2339.158667][ T6313] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10971'. [ 2339.715290][ T6310] validate_nla: 4 callbacks suppressed [ 2339.715329][ T6310] netlink: 'syz.1.10970': attribute type 10 has an invalid length. [ 2339.735958][ T6310] netlink: 'syz.1.10970': attribute type 19 has an invalid length. [ 2339.744831][ T6310] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.10970'. [ 2340.024354][ T6324] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10974'. [ 2340.062364][ T6326] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10975'. [ 2340.140645][ T6329] netlink: 'syz.1.10976': attribute type 10 has an invalid length. [ 2340.150443][ T6329] netlink: 'syz.1.10976': attribute type 19 has an invalid length. [ 2340.161207][ T6329] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.10976'. [ 2341.297651][ T6341] netlink: 'syz.1.10981': attribute type 10 has an invalid length. [ 2341.311789][ T6341] device netdevsim0 entered promiscuous mode [ 2341.662634][ T6345] netlink: 'syz.3.10983': attribute type 15 has an invalid length. [ 2341.730929][ T6345] netlink: 'syz.3.10983': attribute type 7 has an invalid length. [ 2341.866989][ T6345] netlink: 'syz.3.10983': attribute type 39 has an invalid length. [ 2342.328907][ T6349] netlink: 'syz.3.10984': attribute type 10 has an invalid length. [ 2342.338105][ T6349] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10984'. [ 2342.439148][ T6355] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10987'. [ 2343.428058][ T6364] netlink: 'syz.3.10991': attribute type 10 has an invalid length. [ 2343.857672][ T6382] -1: renamed from syzkaller0 [ 2344.556738][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.564098][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.730220][ T6395] __nla_validate_parse: 4 callbacks suppressed [ 2344.730253][ T6395] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10999'. [ 2344.820020][ T6396] validate_nla: 4 callbacks suppressed [ 2344.821654][ T6396] netlink: 'syz.1.11000': attribute type 10 has an invalid length. [ 2344.866412][ T6396] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11000'. [ 2345.330504][ T6408] netlink: 'syz.0.11002': attribute type 10 has an invalid length. [ 2348.305567][ T6414] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11005'. [ 2348.347396][ T6417] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11006'. [ 2348.778652][ T6426] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11010'. [ 2349.233784][ T6431] netlink: 'syz.2.11008': attribute type 15 has an invalid length. [ 2349.242417][ T6431] netlink: 'syz.2.11008': attribute type 7 has an invalid length. [ 2349.448890][ T6431] netlink: 'syz.2.11008': attribute type 39 has an invalid length. [ 2349.568354][ T6434] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11012'. [ 2350.762017][ T6442] device syzkaller0 entered promiscuous mode [ 2352.888316][ T6464] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11019'. [ 2352.971527][ T6461] netlink: 'syz.3.11018': attribute type 39 has an invalid length. [ 2353.056666][ T6469] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.11016'. [ 2353.510493][ T6474] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11021'. [ 2354.173986][ T6485] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11025'. [ 2354.209218][ T6484] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11024'. [ 2354.470764][ T6491] device bridge_slave_0 left promiscuous mode [ 2354.491565][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.625320][ T6496] netlink: 'syz.1.11028': attribute type 29 has an invalid length. [ 2354.683771][ T6495] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11029'. [ 2354.884012][ T6496] netlink: 'syz.1.11028': attribute type 29 has an invalid length. [ 2354.896697][ T6497] netlink: 'syz.1.11028': attribute type 29 has an invalid length. [ 2356.353574][ T6525] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.11036'. [ 2358.404892][ T6537] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11039'. [ 2358.419712][ T6534] netlink: 'syz.0.11038': attribute type 39 has an invalid length. [ 2358.498606][ T6539] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11040'. [ 2358.923808][ T6548] netlink: 'syz.4.11042': attribute type 29 has an invalid length. [ 2359.066427][ T6551] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11044'. [ 2359.089336][ T6548] netlink: 'syz.4.11042': attribute type 29 has an invalid length. [ 2359.102695][ T6549] netlink: 'syz.4.11042': attribute type 29 has an invalid length. [ 2360.436932][ T6558] netlink: 'syz.2.11046': attribute type 15 has an invalid length. [ 2360.447890][ T6558] netlink: 'syz.2.11046': attribute type 7 has an invalid length. [ 2360.478385][ T6564] netlink: 'syz.2.11046': attribute type 39 has an invalid length. [ 2360.503522][ T6565] netlink: 'syz.0.11047': attribute type 2 has an invalid length. [ 2360.512506][ T6565] netlink: 'syz.0.11047': attribute type 8 has an invalid length. [ 2360.531113][ T6565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11047'. [ 2360.554460][ T6568] netlink: 'syz.0.11047': attribute type 2 has an invalid length. [ 2360.593884][ T6568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11047'. [ 2360.679402][ T6574] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.11049'. [ 2360.872465][ T6577] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11050'. [ 2363.639535][ T6583] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11053'. [ 2363.673358][ T6587] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11054'. [ 2363.704567][ T6585] -1: renamed from syzkaller0 [ 2364.165380][ T6596] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11058'. [ 2364.876050][ T6609] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11062'. [ 2365.173367][ T6607] validate_nla: 1 callbacks suppressed [ 2365.173385][ T6607] netlink: 'syz.1.11060': attribute type 15 has an invalid length. [ 2365.193283][ T6607] netlink: 'syz.1.11060': attribute type 7 has an invalid length. [ 2365.213706][ T6612] netlink: 'syz.1.11060': attribute type 39 has an invalid length. [ 2365.233581][ T6609] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.11062'. [ 2365.254803][ T6609] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2365.578160][ T6620] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11064'. [ 2366.276336][ T6630] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11067'. [ 2367.113515][ T6637] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11069'. [ 2368.851084][ T6644] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11072'. [ 2369.042679][ T6651] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11073'. [ 2369.127331][ T6654] netlink: 'syz.3.11075': attribute type 15 has an invalid length. [ 2369.229143][ T6654] netlink: 'syz.3.11075': attribute type 7 has an invalid length. [ 2369.879581][ T6656] netlink: 'syz.3.11075': attribute type 39 has an invalid length. [ 2369.888829][ T6662] netlink: 'syz.2.11086': attribute type 39 has an invalid length. [ 2370.331439][ T6669] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11089'. [ 2370.505250][ T6675] -1: renamed from syzkaller0 [ 2370.685595][ T6678] netlink: 'syz.2.11079': attribute type 1 has an invalid length. [ 2370.713726][ T6678] netlink: 'syz.2.11079': attribute type 3 has an invalid length. [ 2370.722334][ T6678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11079'. [ 2371.263891][ T6673] delete_channel: no stack [ 2371.338063][ T6678] netlink: 'syz.2.11079': attribute type 12 has an invalid length. [ 2371.346488][ T6678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11079'. [ 2371.530239][ T6682] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11082'. [ 2371.542584][ T6685] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.11081'. [ 2371.600125][ T6684] netlink: 'syz.0.11080': attribute type 29 has an invalid length. [ 2372.460381][ T6684] netlink: 'syz.0.11080': attribute type 29 has an invalid length. [ 2372.546417][ T6695] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11085'. [ 2374.688479][ T6699] netlink: 'syz.1.11088': attribute type 15 has an invalid length. [ 2374.696615][ T6696] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11085'. [ 2374.715922][ T6699] netlink: 'syz.1.11088': attribute type 7 has an invalid length. [ 2374.757374][ T6696] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2374.778019][ T6696] CPU: 0 PID: 6696 Comm: syz.0.11085 Not tainted syzkaller #0 [ 2374.785655][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2374.795765][ T6696] Call Trace: [ 2374.799101][ T6696] [ 2374.802072][ T6696] dump_stack_lvl+0x188/0x24e [ 2374.806832][ T6696] ? show_regs_print_info+0x12/0x12 [ 2374.812092][ T6696] ? load_image+0x410/0x410 [ 2374.816660][ T6696] sysfs_warn_dup+0x8a/0xa0 [ 2374.821223][ T6696] sysfs_do_create_link_sd+0xc0/0x110 [ 2374.826652][ T6696] device_add+0x83b/0x1050 [ 2374.831111][ T6696] wiphy_register+0x1d8b/0x2aa0 [ 2374.836015][ T6696] ? cfg80211_event_work+0x40/0x40 [ 2374.841207][ T6696] ? minstrel_ht_alloc+0x894/0xa20 [ 2374.846382][ T6696] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2374.852503][ T6696] ieee80211_register_hw+0x2d48/0x39f0 [ 2374.858038][ T6696] ? ieee80211_register_hw+0xee1/0x39f0 [ 2374.863649][ T6696] ? ieee80211_register_hw+0xee1/0x39f0 [ 2374.869258][ T6696] ? ieee80211_tasklet_handler+0x20/0x20 [ 2374.874943][ T6696] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2374.880894][ T6696] ? __debug_object_init+0xed/0x440 [ 2374.886163][ T6696] ? memset+0x1e/0x40 [ 2374.890196][ T6696] ? __hrtimer_init+0x189/0x270 [ 2374.895101][ T6696] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2374.900891][ T6696] ? memcpy+0x3c/0x60 [ 2374.904938][ T6696] hwsim_new_radio_nl+0xab7/0xc90 [ 2374.910040][ T6696] genl_family_rcv_msg_doit+0x22f/0x350 [ 2374.915647][ T6696] ? end_current_label_crit_section+0x170/0x170 [ 2374.921956][ T6696] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2374.927922][ T6696] ? bpf_lsm_capable+0x5/0x10 [ 2374.932665][ T6696] ? security_capable+0x85/0xb0 [ 2374.937607][ T6696] genl_rcv_msg+0x601/0x790 [ 2374.942187][ T6696] ? genl_bind+0x360/0x360 [ 2374.946661][ T6696] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2374.953074][ T6696] netlink_rcv_skb+0x1ef/0x440 [ 2374.957899][ T6696] ? genl_bind+0x360/0x360 [ 2374.962366][ T6696] ? netlink_ack+0x1160/0x1160 [ 2374.967201][ T6696] ? down_read+0x1a8/0x2d0 [ 2374.971669][ T6696] genl_rcv+0x24/0x40 [ 2374.975700][ T6696] netlink_unicast+0x7ad/0x920 [ 2374.980540][ T6696] netlink_sendmsg+0x8ad/0xbd0 [ 2374.985374][ T6696] ? netlink_getsockopt+0x550/0x550 [ 2374.990632][ T6696] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2374.996233][ T6696] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2375.001569][ T6696] ? security_socket_sendmsg+0x7c/0xa0 [ 2375.007082][ T6696] ? netlink_getsockopt+0x550/0x550 [ 2375.012427][ T6696] ____sys_sendmsg+0x5ed/0x9a0 [ 2375.017263][ T6696] ? __sys_sendmsg_sock+0x30/0x30 [ 2375.022344][ T6696] ? __import_iovec+0x306/0x510 [ 2375.027258][ T6696] ? import_iovec+0x6f/0xa0 [ 2375.031825][ T6696] ___sys_sendmsg+0x2a2/0x360 [ 2375.036571][ T6696] ? __sys_sendmsg+0x2a0/0x2a0 [ 2375.041404][ T6696] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2375.047485][ T6696] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2375.053887][ T6696] ? lockdep_hardirqs_on+0x94/0x140 [ 2375.059148][ T6696] ? __se_sys_sendmsg+0xee/0x2b0 [ 2375.064139][ T6696] ? kasan_check_range+0x62/0x290 [ 2375.069235][ T6696] __se_sys_sendmsg+0x1c3/0x2b0 [ 2375.074136][ T6696] ? ct_nmi_exit+0x145/0x1c0 [ 2375.078777][ T6696] ? __x64_sys_sendmsg+0x80/0x80 [ 2375.083833][ T6696] ? lockdep_hardirqs_on+0x94/0x140 [ 2375.089092][ T6696] do_syscall_64+0x4c/0xa0 [ 2375.093568][ T6696] ? clear_bhb_loop+0x60/0xb0 [ 2375.098300][ T6696] ? clear_bhb_loop+0x60/0xb0 [ 2375.103024][ T6696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2375.108966][ T6696] RIP: 0033:0x7f38be99e0d9 [ 2375.113426][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2375.133087][ T6696] RSP: 002b:00007f38bf8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2375.141554][ T6696] RAX: ffffffffffffffda RBX: 00007f38bec26090 RCX: 00007f38be99e0d9 [ 2375.149575][ T6696] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2375.157595][ T6696] RBP: 00007f38bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 2375.165615][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2375.173627][ T6696] R13: 00007f38bec26128 R14: 00007f38bec26090 R15: 00007ffe579447a8 [ 2375.181653][ T6696] [ 2375.657996][ T6706] netlink: 'syz.1.11088': attribute type 39 has an invalid length. [ 2375.915603][ T6719] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11092'. [ 2376.134380][ T6724] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11094'. [ 2376.871682][ T6723] netlink: 'syz.1.11093': attribute type 39 has an invalid length. [ 2376.960181][ T6723] device hsr_slave_1 left promiscuous mode [ 2377.290550][ T6740] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11109'. [ 2377.736388][ T6753] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11101'. [ 2378.247297][ T6763] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11103'. [ 2378.403916][ T6761] netlink: 'syz.1.11102': attribute type 12 has an invalid length. [ 2378.443557][ T6761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11102'. [ 2378.924239][ T6758] delete_channel: no stack [ 2378.956285][ T6763] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11103'. [ 2379.068315][ T6763] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2379.107623][ T6763] CPU: 0 PID: 6763 Comm: syz.3.11103 Not tainted syzkaller #0 [ 2379.115181][ T6763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2379.125284][ T6763] Call Trace: [ 2379.128622][ T6763] [ 2379.131601][ T6763] dump_stack_lvl+0x188/0x24e [ 2379.136340][ T6763] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2379.142581][ T6763] ? show_regs_print_info+0x12/0x12 [ 2379.147848][ T6763] ? load_image+0x410/0x410 [ 2379.152426][ T6763] ? sysfs_warn_dup+0x61/0xa0 [ 2379.157164][ T6763] sysfs_warn_dup+0x8a/0xa0 [ 2379.161744][ T6763] sysfs_do_create_link_sd+0xc0/0x110 [ 2379.167176][ T6763] device_add+0x83b/0x1050 [ 2379.171679][ T6763] wiphy_register+0x1d8b/0x2aa0 [ 2379.176588][ T6763] ? cfg80211_event_work+0x40/0x40 [ 2379.181738][ T6763] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2379.187959][ T6763] ieee80211_register_hw+0x2d48/0x39f0 [ 2379.193540][ T6763] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2379.199737][ T6763] ? ieee80211_register_hw+0xee1/0x39f0 [ 2379.205315][ T6763] ? ieee80211_register_hw+0xee1/0x39f0 [ 2379.210898][ T6763] ? ieee80211_tasklet_handler+0x20/0x20 [ 2379.216560][ T6763] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2379.222482][ T6763] ? __debug_object_init+0xed/0x440 [ 2379.227717][ T6763] ? memset+0x1e/0x40 [ 2379.231726][ T6763] ? __hrtimer_init+0x189/0x270 [ 2379.236606][ T6763] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2379.242366][ T6763] ? memcpy+0x3c/0x60 [ 2379.246403][ T6763] hwsim_new_radio_nl+0xab7/0xc90 [ 2379.251476][ T6763] genl_family_rcv_msg_doit+0x22f/0x350 [ 2379.257048][ T6763] ? end_current_label_crit_section+0x170/0x170 [ 2379.263327][ T6763] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2379.269255][ T6763] ? bpf_lsm_capable+0x5/0x10 [ 2379.273968][ T6763] ? security_capable+0x85/0xb0 [ 2379.278859][ T6763] genl_rcv_msg+0x601/0x790 [ 2379.283386][ T6763] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2379.289576][ T6763] ? genl_bind+0x360/0x360 [ 2379.294019][ T6763] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2379.300388][ T6763] netlink_rcv_skb+0x1ef/0x440 [ 2379.305188][ T6763] ? genl_bind+0x360/0x360 [ 2379.309636][ T6763] ? netlink_ack+0x1160/0x1160 [ 2379.314445][ T6763] ? down_read+0x1a8/0x2d0 [ 2379.318891][ T6763] genl_rcv+0x24/0x40 [ 2379.322901][ T6763] netlink_unicast+0x7ad/0x920 [ 2379.327709][ T6763] netlink_sendmsg+0x8ad/0xbd0 [ 2379.332513][ T6763] ? netlink_getsockopt+0x550/0x550 [ 2379.337746][ T6763] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2379.343326][ T6763] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2379.348640][ T6763] ? security_socket_sendmsg+0x7c/0xa0 [ 2379.354127][ T6763] ? netlink_getsockopt+0x550/0x550 [ 2379.359367][ T6763] ____sys_sendmsg+0x5ed/0x9a0 [ 2379.364173][ T6763] ? __sys_sendmsg_sock+0x30/0x30 [ 2379.369236][ T6763] ? __import_iovec+0x306/0x510 [ 2379.374140][ T6763] ? import_iovec+0x6f/0xa0 [ 2379.378676][ T6763] ___sys_sendmsg+0x2a2/0x360 [ 2379.383393][ T6763] ? __sys_sendmsg+0x2a0/0x2a0 [ 2379.388194][ T6763] ? ct_nmi_exit+0x145/0x1c0 [ 2379.393262][ T6763] ? ct_irq_exit_irqson+0x113/0x170 [ 2379.398621][ T6763] __se_sys_sendmsg+0x1c3/0x2b0 [ 2379.403506][ T6763] ? __x64_sys_sendmsg+0x80/0x80 [ 2379.408487][ T6763] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2379.414416][ T6763] do_syscall_64+0x4c/0xa0 [ 2379.418873][ T6763] ? clear_bhb_loop+0x60/0xb0 [ 2379.423581][ T6763] ? clear_bhb_loop+0x60/0xb0 [ 2379.428293][ T6763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2379.434219][ T6763] RIP: 0033:0x7fd6f4f9e0d9 [ 2379.438659][ T6763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2379.458300][ T6763] RSP: 002b:00007fd6f5dc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2379.466743][ T6763] RAX: ffffffffffffffda RBX: 00007fd6f5225fa0 RCX: 00007fd6f4f9e0d9 [ 2379.474744][ T6763] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2379.482746][ T6763] RBP: 00007fd6f5035024 R08: 0000000000000000 R09: 0000000000000000 [ 2379.490746][ T6763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2379.498744][ T6763] R13: 00007fd6f5226038 R14: 00007fd6f5225fa0 R15: 00007fff9de2d3c8 [ 2379.506757][ T6763] [ 2379.659649][ T6774] netlink: 'syz.2.11105': attribute type 3 has an invalid length. [ 2379.712148][ T6776] netlink: 'syz.0.11106': attribute type 21 has an invalid length. [ 2379.724129][ T6774] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11105'. [ 2380.004705][ T6784] netlink: 'syz.4.11110': attribute type 39 has an invalid length. [ 2380.267980][ T6791] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11113'. [ 2380.821506][ T6797] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11117'. [ 2381.259133][ T6805] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11119'. [ 2382.353893][ T6823] netlink: 'syz.0.11121': attribute type 1 has an invalid length. [ 2382.483277][ T6823] netlink: 'syz.0.11121': attribute type 3 has an invalid length. [ 2382.543694][ T6823] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11121'. [ 2382.751495][ T6821] netlink: 'syz.3.11123': attribute type 21 has an invalid length. [ 2382.764093][ T6819] netlink: 'syz.0.11121': attribute type 12 has an invalid length. [ 2382.776800][ T6819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11121'. [ 2382.810257][ T6818] delete_channel: no stack [ 2382.944335][ T6832] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11124'. [ 2382.968621][ T6829] netlink: 'syz.4.11126': attribute type 3 has an invalid length. [ 2382.990499][ T6829] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11126'. [ 2383.039531][ T6832] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11124'. [ 2383.150928][ T6832] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 2383.176299][ T6832] CPU: 0 PID: 6832 Comm: syz.1.11124 Not tainted syzkaller #0 [ 2383.183839][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2383.193949][ T6832] Call Trace: [ 2383.197268][ T6832] [ 2383.200233][ T6832] dump_stack_lvl+0x188/0x24e [ 2383.204979][ T6832] ? show_regs_print_info+0x12/0x12 [ 2383.210241][ T6832] ? load_image+0x410/0x410 [ 2383.214801][ T6832] ? memset_erms+0xb/0x10 [ 2383.219239][ T6832] sysfs_warn_dup+0x8a/0xa0 [ 2383.223800][ T6832] sysfs_do_create_link_sd+0xc0/0x110 [ 2383.229225][ T6832] device_add+0x83b/0x1050 [ 2383.233698][ T6832] wiphy_register+0x1d8b/0x2aa0 [ 2383.238615][ T6832] ? cfg80211_event_work+0x40/0x40 [ 2383.243772][ T6832] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2383.249998][ T6832] ? ieee80211_register_hw+0x2981/0x39f0 [ 2383.255776][ T6832] ieee80211_register_hw+0x2d48/0x39f0 [ 2383.261293][ T6832] ? ieee80211_register_hw+0xee1/0x39f0 [ 2383.266886][ T6832] ? ieee80211_register_hw+0xee1/0x39f0 [ 2383.272475][ T6832] ? ieee80211_tasklet_handler+0x20/0x20 [ 2383.278149][ T6832] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2383.284350][ T6832] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2383.290204][ T6832] hwsim_new_radio_nl+0xab7/0xc90 [ 2383.295274][ T6832] genl_family_rcv_msg_doit+0x22f/0x350 [ 2383.300845][ T6832] ? end_current_label_crit_section+0x170/0x170 [ 2383.307154][ T6832] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2383.313347][ T6832] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2383.319276][ T6832] ? bpf_lsm_capable+0x5/0x10 [ 2383.323980][ T6832] ? security_capable+0x85/0xb0 [ 2383.328895][ T6832] genl_rcv_msg+0x601/0x790 [ 2383.333447][ T6832] ? genl_bind+0x360/0x360 [ 2383.337895][ T6832] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2383.344273][ T6832] netlink_rcv_skb+0x1ef/0x440 [ 2383.349070][ T6832] ? genl_bind+0x360/0x360 [ 2383.353521][ T6832] ? netlink_ack+0x1160/0x1160 [ 2383.358328][ T6832] ? down_read+0x1a8/0x2d0 [ 2383.362770][ T6832] genl_rcv+0x24/0x40 [ 2383.366774][ T6832] netlink_unicast+0x7ad/0x920 [ 2383.371579][ T6832] netlink_sendmsg+0x8ad/0xbd0 [ 2383.376391][ T6832] ? netlink_getsockopt+0x550/0x550 [ 2383.381628][ T6832] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2383.387211][ T6832] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2383.392520][ T6832] ? security_socket_sendmsg+0x7c/0xa0 [ 2383.398009][ T6832] ? netlink_getsockopt+0x550/0x550 [ 2383.403245][ T6832] ____sys_sendmsg+0x5ed/0x9a0 [ 2383.408048][ T6832] ? __sys_sendmsg_sock+0x30/0x30 [ 2383.413115][ T6832] ? __import_iovec+0x306/0x510 [ 2383.418007][ T6832] ? import_iovec+0x6f/0xa0 [ 2383.422540][ T6832] ___sys_sendmsg+0x2a2/0x360 [ 2383.427266][ T6832] ? __sys_sendmsg+0x2a0/0x2a0 [ 2383.432121][ T6832] __se_sys_sendmsg+0x1c3/0x2b0 [ 2383.437031][ T6832] ? ct_nmi_exit+0x145/0x1c0 [ 2383.441647][ T6832] ? __x64_sys_sendmsg+0x80/0x80 [ 2383.446632][ T6832] ? lockdep_hardirqs_on+0x94/0x140 [ 2383.451856][ T6832] do_syscall_64+0x4c/0xa0 [ 2383.456306][ T6832] ? clear_bhb_loop+0x60/0xb0 [ 2383.461011][ T6832] ? clear_bhb_loop+0x60/0xb0 [ 2383.465722][ T6832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2383.471646][ T6832] RIP: 0033:0x7f87a4d9e0d9 [ 2383.476094][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2383.495732][ T6832] RSP: 002b:00007f87a5c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2383.504175][ T6832] RAX: ffffffffffffffda RBX: 00007f87a5025fa0 RCX: 00007f87a4d9e0d9 [ 2383.512168][ T6832] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2383.520186][ T6832] RBP: 00007f87a4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2383.528205][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2383.536219][ T6832] R13: 00007f87a5026038 R14: 00007f87a5025fa0 R15: 00007ffd3c9180b8 [ 2383.544231][ T6832] [ 2384.056969][ T6849] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11131'. [ 2385.360919][ T6858] netlink: 'syz.4.11135': attribute type 21 has an invalid length. [ 2385.373613][ T6860] __nla_validate_parse: 1 callbacks suppressed [ 2385.373650][ T6860] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11134'. [ 2385.713737][ T6877] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11137'. [ 2385.808326][ T6872] -1: renamed from syzkaller0 [ 2386.524023][ T6890] netlink: 'syz.3.11141': attribute type 3 has an invalid length. [ 2386.584911][ T6890] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11141'. [ 2386.825516][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11143'. [ 2387.383194][ T6905] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11147'. [ 2387.677698][ T6911] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11149'. [ 2389.590183][ T6926] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11152'. [ 2389.962383][ T6931] -1: renamed from syzkaller0 [ 2390.799329][ T6943] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11158'. [ 2390.923017][ T6948] netlink: 'syz.0.11160': attribute type 3 has an invalid length. [ 2390.986189][ T6948] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11160'. [ 2392.109162][ T6973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11165'. [ 2392.151117][ T6970] netlink: 'syz.0.11163': attribute type 10 has an invalid length. [ 2392.162037][ T6970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11163'. [ 2392.184248][ T6970] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2392.201669][ T6968] netlink: 'syz.4.11164': attribute type 2 has an invalid length. [ 2392.215910][ T6968] netlink: 'syz.4.11164': attribute type 8 has an invalid length. [ 2392.227313][ T6968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11164'. [ 2392.416761][ T6980] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11169'. [ 2392.554645][ T6983] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11168'. [ 2393.949947][ T7005] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11175'. [ 2394.051391][ T7011] netlink: 'syz.1.11176': attribute type 3 has an invalid length. [ 2394.065106][ T7011] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11176'. [ 2395.258791][ T7027] netlink: 'syz.0.11181': attribute type 3 has an invalid length. [ 2395.307211][ T7027] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11181'. [ 2395.376563][ T7031] netlink: 'syz.2.11182': attribute type 10 has an invalid length. [ 2396.466338][ T7041] __nla_validate_parse: 4 callbacks suppressed [ 2396.466360][ T7041] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11185'. [ 2398.362187][ T7061] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11202'. [ 2398.465030][ T7063] netlink: 'syz.4.11191': attribute type 1 has an invalid length. [ 2398.473600][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11190'. [ 2398.492420][ T7063] netlink: 'syz.4.11191': attribute type 3 has an invalid length. [ 2398.504963][ T7063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11191'. [ 2398.540984][ T7065] netlink: 'syz.4.11191': attribute type 12 has an invalid length. [ 2398.563352][ T7065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11191'. [ 2398.587150][ T7062] delete_channel: no stack [ 2399.470331][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11198'. [ 2399.558450][ T7086] -1: renamed from syzkaller0 [ 2399.601942][ T7088] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11199'. [ 2400.125692][ T7096] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11204'. [ 2400.890538][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11206'. [ 2400.907052][ T7110] netlink: 'syz.0.11205': attribute type 3 has an invalid length. [ 2400.935927][ T7110] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11205'. [ 2401.222675][ T7120] netlink: 'syz.2.11209': attribute type 15 has an invalid length. [ 2401.254465][ T7120] netlink: 'syz.2.11209': attribute type 7 has an invalid length. [ 2401.387023][ T7120] netlink: 'syz.2.11209': attribute type 39 has an invalid length. [ 2401.429451][ T7123] netlink: 'syz.3.11207': attribute type 1 has an invalid length. [ 2401.486098][ T7123] netlink: 'syz.3.11207': attribute type 3 has an invalid length. [ 2401.605330][ T7123] __nla_validate_parse: 1 callbacks suppressed [ 2401.605373][ T7123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11207'. [ 2402.048260][ T7119] delete_channel: no stack [ 2402.186781][ T7126] netlink: 'syz.3.11207': attribute type 12 has an invalid length. [ 2402.203213][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11207'. [ 2403.373637][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11220'. [ 2403.529278][ T7168] netlink: 'syz.2.11221': attribute type 10 has an invalid length. [ 2403.552140][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11221'. [ 2403.809178][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11223'. [ 2403.844856][ T7177] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11225'. [ 2403.870622][ T7180] netlink: 'syz.3.11224': attribute type 15 has an invalid length. [ 2403.893644][ T7180] netlink: 'syz.3.11224': attribute type 7 has an invalid length. [ 2404.039322][ T7180] netlink: 'syz.3.11224': attribute type 39 has an invalid length. [ 2404.512730][ T7190] netlink: 'syz.4.11226': attribute type 1 has an invalid length. [ 2404.574717][ T7190] netlink: 'syz.4.11226': attribute type 3 has an invalid length. [ 2404.794043][ T7190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11226'. [ 2405.038887][ T7195] netlink: 'syz.2.11228': attribute type 3 has an invalid length. [ 2405.111369][ T7195] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11228'. [ 2405.148420][ T7183] delete_channel: no stack [ 2405.398681][ T7193] netlink: 'syz.4.11226': attribute type 12 has an invalid length. [ 2405.409277][ T7193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11226'. [ 2406.027256][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.033696][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.738599][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11237'. [ 2406.781160][ T7220] netlink: 'syz.1.11238': attribute type 15 has an invalid length. [ 2406.808856][ T7220] netlink: 'syz.1.11238': attribute type 7 has an invalid length. [ 2406.857182][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11239'. [ 2407.227778][ T7233] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11241'. [ 2407.852012][ T7244] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11244'. [ 2408.858985][ T7240] delete_channel: no stack [ 2409.490774][ T7246] validate_nla: 1 callbacks suppressed [ 2409.490793][ T7246] netlink: 'syz.4.11243': attribute type 12 has an invalid length. [ 2409.552962][ T7246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11243'. [ 2409.626538][ T7255] netlink: 'syz.1.11248': attribute type 3 has an invalid length. [ 2409.655017][ T7255] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11248'. [ 2410.066945][ T7259] netlink: 'syz.3.11249': attribute type 10 has an invalid length. [ 2410.100522][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11249'. [ 2410.301560][ T7261] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11259'. [ 2411.036093][ T7265] netlink: 'syz.3.11250': attribute type 3 has an invalid length. [ 2411.085680][ T7265] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11250'. [ 2411.269146][ T7271] netlink: 'syz.0.11252': attribute type 3 has an invalid length. [ 2411.308536][ T7271] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11252'. [ 2414.589850][ T7276] netlink: 'syz.4.11253': attribute type 15 has an invalid length. [ 2414.602271][ T7276] netlink: 'syz.4.11253': attribute type 7 has an invalid length. [ 2414.612701][ T7280] netlink: 'syz.4.11253': attribute type 39 has an invalid length. [ 2414.676447][ T7272] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11251'. [ 2414.695881][ T7272] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2414.727608][ T7272] CPU: 0 PID: 7272 Comm: syz.1.11251 Not tainted syzkaller #0 [ 2414.735158][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2414.745259][ T7272] Call Trace: [ 2414.748575][ T7272] [ 2414.751545][ T7272] dump_stack_lvl+0x188/0x24e [ 2414.756303][ T7272] ? show_regs_print_info+0x12/0x12 [ 2414.761561][ T7272] ? load_image+0x410/0x410 [ 2414.766136][ T7272] sysfs_warn_dup+0x8a/0xa0 [ 2414.770781][ T7272] sysfs_do_create_link_sd+0xc0/0x110 [ 2414.776213][ T7272] device_add+0x83b/0x1050 [ 2414.780721][ T7272] wiphy_register+0x1d8b/0x2aa0 [ 2414.785640][ T7272] ? cfg80211_event_work+0x40/0x40 [ 2414.790798][ T7272] ? minstrel_ht_alloc+0x894/0xa20 [ 2414.795952][ T7272] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2414.802048][ T7272] ieee80211_register_hw+0x2d48/0x39f0 [ 2414.807560][ T7272] ? ieee80211_register_hw+0xee1/0x39f0 [ 2414.813145][ T7272] ? ieee80211_register_hw+0xee1/0x39f0 [ 2414.818761][ T7272] ? ieee80211_tasklet_handler+0x20/0x20 [ 2414.824430][ T7272] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2414.830358][ T7272] ? __debug_object_init+0xed/0x440 [ 2414.835603][ T7272] ? memset+0x1e/0x40 [ 2414.839609][ T7272] ? __hrtimer_init+0x189/0x270 [ 2414.844487][ T7272] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2414.850251][ T7272] ? memcpy+0x3c/0x60 [ 2414.854259][ T7272] hwsim_new_radio_nl+0xab7/0xc90 [ 2414.859328][ T7272] genl_family_rcv_msg_doit+0x22f/0x350 [ 2414.864907][ T7272] ? end_current_label_crit_section+0x170/0x170 [ 2414.871182][ T7272] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2414.877111][ T7272] ? bpf_lsm_capable+0x5/0x10 [ 2414.881813][ T7272] ? security_capable+0x85/0xb0 [ 2414.886733][ T7272] genl_rcv_msg+0x601/0x790 [ 2414.891267][ T7272] ? genl_bind+0x360/0x360 [ 2414.895702][ T7272] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2414.902066][ T7272] ? lock_chain_count+0x20/0x20 [ 2414.906957][ T7272] netlink_rcv_skb+0x1ef/0x440 [ 2414.911760][ T7272] ? genl_bind+0x360/0x360 [ 2414.916201][ T7272] ? netlink_ack+0x1160/0x1160 [ 2414.921003][ T7272] ? down_read+0x1a8/0x2d0 [ 2414.925447][ T7272] genl_rcv+0x24/0x40 [ 2414.929453][ T7272] netlink_unicast+0x7ad/0x920 [ 2414.934256][ T7272] netlink_sendmsg+0x8ad/0xbd0 [ 2414.939051][ T7272] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2414.945272][ T7272] ? netlink_getsockopt+0x550/0x550 [ 2414.950510][ T7272] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2414.955819][ T7272] ? security_socket_sendmsg+0x7c/0xa0 [ 2414.961305][ T7272] ? netlink_getsockopt+0x550/0x550 [ 2414.966535][ T7272] ____sys_sendmsg+0x5ed/0x9a0 [ 2414.971337][ T7272] ? __sys_sendmsg_sock+0x30/0x30 [ 2414.976387][ T7272] ? __import_iovec+0x306/0x510 [ 2414.981275][ T7272] ? import_iovec+0x6f/0xa0 [ 2414.985822][ T7272] ___sys_sendmsg+0x2a2/0x360 [ 2414.990536][ T7272] ? __sys_sendmsg+0x2a0/0x2a0 [ 2414.995371][ T7272] __se_sys_sendmsg+0x1c3/0x2b0 [ 2415.000255][ T7272] ? __x64_sys_sendmsg+0x80/0x80 [ 2415.005242][ T7272] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2415.011160][ T7272] do_syscall_64+0x4c/0xa0 [ 2415.015606][ T7272] ? clear_bhb_loop+0x60/0xb0 [ 2415.020307][ T7272] ? clear_bhb_loop+0x60/0xb0 [ 2415.025027][ T7272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2415.030948][ T7272] RIP: 0033:0x7f87a4d9e0d9 [ 2415.035385][ T7272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2415.055022][ T7272] RSP: 002b:00007f87a5c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2415.063470][ T7272] RAX: ffffffffffffffda RBX: 00007f87a5026090 RCX: 00007f87a4d9e0d9 [ 2415.071465][ T7272] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2415.079455][ T7272] RBP: 00007f87a4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2415.087448][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2415.095441][ T7272] R13: 00007f87a5026128 R14: 00007f87a5026090 R15: 00007ffd3c9180b8 [ 2415.103485][ T7272] [ 2415.388887][ T7293] netlink: 'syz.4.11261': attribute type 9 has an invalid length. [ 2415.435345][ T7293] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11261'. [ 2415.557022][ T7300] netlink: 'syz.3.11263': attribute type 3 has an invalid length. [ 2415.578290][ T7300] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.11263'. [ 2415.592817][ T7302] netlink: 'syz.1.11258': attribute type 10 has an invalid length. [ 2415.611927][ T7302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11258'. [ 2415.931009][ T7309] netlink: 'syz.4.11265': attribute type 10 has an invalid length. [ 2415.972683][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11265'. [ 2416.121086][ T7316] netlink: 'syz.4.11267': attribute type 15 has an invalid length. [ 2416.129523][ T7316] netlink: 'syz.4.11267': attribute type 7 has an invalid length. [ 2416.211378][ T7316] netlink: 'syz.4.11267': attribute type 39 has an invalid length. [ 2416.355788][ T7320] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11269'. [ 2416.581757][ T7326] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11270'. [ 2418.127029][ T7349] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11288'. [ 2418.366660][ T7345] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11277'. [ 2419.304115][ T7372] device sit0 left promiscuous mode [ 2419.835996][ T7379] device sit0 entered promiscuous mode [ 2420.389010][ T7397] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11291'. [ 2420.544925][ T7402] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11293'. [ 2421.108820][ T7406] validate_nla: 4 callbacks suppressed [ 2421.108835][ T7406] netlink: 'syz.3.11294': attribute type 15 has an invalid length. [ 2421.122435][ T7406] netlink: 'syz.3.11294': attribute type 7 has an invalid length. [ 2421.148566][ T7403] netlink: 'syz.1.11292': attribute type 10 has an invalid length. [ 2421.157383][ T7403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11292'. [ 2421.169192][ T7410] netlink: 'syz.3.11294': attribute type 39 has an invalid length. [ 2421.410289][ T7416] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11296'. [ 2421.717928][ T7423] netlink: 'syz.2.11295': attribute type 3 has an invalid length. [ 2421.741102][ T7423] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11295'. [ 2422.221152][ T7438] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2422.287746][ T7433] netlink: 'syz.1.11301': attribute type 10 has an invalid length. [ 2422.304330][ T7433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11301'. [ 2422.779335][ T7456] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11306'. [ 2422.999435][ T7456] netlink: 'syz.1.11306': attribute type 10 has an invalid length. [ 2423.008940][ T7456] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11306'. [ 2423.075379][ T7461] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11307'. [ 2423.090332][ T7446] netlink: 'syz.4.11303': attribute type 10 has an invalid length. [ 2423.112770][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11303'. [ 2423.849037][ T7470] netlink: 'syz.2.11309': attribute type 15 has an invalid length. [ 2423.863297][ T7470] netlink: 'syz.2.11309': attribute type 7 has an invalid length. [ 2427.239338][ T7507] device syzkaller0 entered promiscuous mode [ 2429.434955][ T7521] validate_nla: 3 callbacks suppressed [ 2429.435010][ T7521] netlink: 'syz.3.11321': attribute type 10 has an invalid length. [ 2429.456112][ T7521] __nla_validate_parse: 4 callbacks suppressed [ 2429.456146][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11321'. [ 2429.767508][ T7528] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11326'. [ 2430.316530][ T7533] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11327'. [ 2430.830228][ T7541] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11330'. [ 2430.830240][ T7542] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11329'. [ 2431.054689][ T7553] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.11332'. [ 2431.136599][ T7549] netlink: 'syz.4.11332': attribute type 10 has an invalid length. [ 2431.146402][ T7549] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11332'. [ 2431.289707][ T7556] delete_channel: no stack [ 2432.631012][ T7585] netlink: 'syz.0.11341': attribute type 10 has an invalid length. [ 2432.707776][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11341'. [ 2432.790337][ T7586] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11343'. [ 2433.196176][ T7591] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11344'. [ 2433.697332][ T7605] netlink: 'syz.0.11346': attribute type 10 has an invalid length. [ 2434.588808][ T7632] netlink: 'syz.1.11355': attribute type 9 has an invalid length. [ 2434.598645][ T7632] __nla_validate_parse: 4 callbacks suppressed [ 2434.598877][ T7632] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11355'. [ 2434.938165][ T7638] device sit0 left promiscuous mode [ 2435.207594][ T7635] device sit0 entered promiscuous mode [ 2435.771982][ T7650] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11369'. [ 2436.532847][ T7658] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11362'. [ 2437.000551][ T7666] delete_channel: no stack [ 2437.627627][ T7676] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.11366'. [ 2437.837233][ T7682] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11368'. [ 2438.339445][ T7689] netlink: 'syz.2.11371': attribute type 9 has an invalid length. [ 2438.349214][ T7689] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11371'. [ 2439.176173][ T7701] device sit0 left promiscuous mode [ 2439.412761][ T7700] device sit0 entered promiscuous mode [ 2439.437118][ T7706] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11376'. [ 2440.490177][ T7723] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11379'. [ 2442.000371][ T7750] delete_channel: no stack [ 2442.220324][ T7754] netlink: 'syz.3.11393': attribute type 10 has an invalid length. [ 2442.267051][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11393'. [ 2442.290793][ T7756] device sit0 left promiscuous mode [ 2443.040360][ T7766] device sit0 entered promiscuous mode [ 2443.528241][ T7778] netlink: 'syz.2.11399': attribute type 1 has an invalid length. [ 2443.547340][ T7778] netlink: 'syz.2.11399': attribute type 4 has an invalid length. [ 2443.569941][ T7778] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11399'. [ 2443.665763][ T7785] netlink: 'syz.3.11401': attribute type 39 has an invalid length. [ 2444.000292][ T7795] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11403'. [ 2444.030418][ T7797] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11413'. [ 2444.976932][ T7806] device syzkaller0 entered promiscuous mode [ 2445.120849][ T7813] delete_channel: no stack [ 2447.131185][ T7816] netlink: 'syz.4.11408': attribute type 10 has an invalid length. [ 2447.139735][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11408'. [ 2447.925857][ T7832] netlink: 'syz.3.11412': attribute type 15 has an invalid length. [ 2447.954586][ T7832] netlink: 'syz.3.11412': attribute type 7 has an invalid length. [ 2447.978033][ T7831] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11421'. [ 2448.153760][ T7832] netlink: 'syz.3.11412': attribute type 39 has an invalid length. [ 2450.906432][ T7838] device sit0 left promiscuous mode [ 2450.999022][ T7839] device sit0 entered promiscuous mode [ 2451.186439][ T7850] netlink: 'syz.3.11416': attribute type 10 has an invalid length. [ 2451.195006][ T7850] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11416'. [ 2451.348203][ T7852] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11417'. [ 2452.074268][ T7862] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11430'. [ 2452.168944][ T7864] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2452.240824][ T7867] netlink: 'syz.3.11419': attribute type 9 has an invalid length. [ 2452.277241][ T7867] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11419'. [ 2453.192265][ T7877] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.11424'. [ 2453.561524][ T7886] netlink: 'syz.1.11438': attribute type 9 has an invalid length. [ 2453.594381][ T7886] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11438'. [ 2453.651682][ T7889] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11428'. [ 2454.246756][ T7899] netlink: 'syz.1.11432': attribute type 1 has an invalid length. [ 2454.311282][ T7899] netlink: 'syz.1.11432': attribute type 4 has an invalid length. [ 2454.348264][ T7899] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11432'. [ 2454.367606][ T7901] delete_channel: no stack [ 2455.019624][ T7910] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11433'. [ 2455.358772][ T7920] netlink: 15119 bytes leftover after parsing attributes in process `syz.4.11437'. [ 2455.669168][ T7925] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11439'. [ 2456.065026][ T7932] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11442'. [ 2456.895057][ T7944] delete_channel: no stack [ 2458.272321][ T7950] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11449'. [ 2459.868166][ T7977] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11456'. [ 2459.883049][ T7979] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11457'. [ 2460.172921][ T7983] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11458'. [ 2461.450170][ T8005] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11464'. [ 2463.428228][ T8032] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11472'. [ 2463.462224][ T8035] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11474'. [ 2463.510208][ T8037] netlink: 'syz.3.11475': attribute type 10 has an invalid length. [ 2464.648558][ T8054] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2464.801408][ T8047] netlink: 'syz.4.11478': attribute type 21 has an invalid length. [ 2464.987423][ T8061] netlink: 'syz.4.11481': attribute type 15 has an invalid length. [ 2464.995667][ T8061] netlink: 'syz.4.11481': attribute type 7 has an invalid length. [ 2465.042249][ T8061] netlink: 'syz.4.11481': attribute type 39 has an invalid length. [ 2465.649969][ T8080] netlink: 'syz.1.11488': attribute type 10 has an invalid length. [ 2465.823729][ T8085] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11489'. [ 2466.668097][ T8088] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11490'. [ 2466.714156][ T8093] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.11491'. [ 2466.876230][ T8098] netlink: 'syz.1.11492': attribute type 39 has an invalid length. [ 2467.031226][ T8101] device syzkaller0 entered promiscuous mode [ 2467.052879][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2467.299338][ T8107] netlink: 'syz.1.11497': attribute type 15 has an invalid length. [ 2467.308028][ T8107] netlink: 'syz.1.11497': attribute type 7 has an invalid length. [ 2467.339547][ T8107] netlink: 'syz.1.11497': attribute type 39 has an invalid length. [ 2467.436541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.443040][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.892932][ T8123] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11512'. [ 2468.389515][ T8131] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11505'. [ 2469.488295][ T8139] netlink: 'syz.3.11508': attribute type 39 has an invalid length. [ 2469.503938][ T8151] netlink: 'syz.1.11510': attribute type 15 has an invalid length. [ 2469.522655][ T8151] netlink: 'syz.1.11510': attribute type 7 has an invalid length. [ 2469.574297][ T8131] ieee80211 phy819: Failed to add default virtual iface [ 2469.606027][ T8151] netlink: 'syz.1.11510': attribute type 39 has an invalid length. [ 2469.779711][ T8149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11509'. [ 2469.807017][ T8149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11509'. [ 2469.825627][ T8153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11509'. [ 2469.860189][ T8149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11509'. [ 2473.242705][ T8175] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11520'. [ 2474.404730][ T8188] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11523'. [ 2474.501166][ T8193] netlink: 'syz.2.11524': attribute type 15 has an invalid length. [ 2474.509421][ T8193] netlink: 'syz.2.11524': attribute type 7 has an invalid length. [ 2474.585041][ T8193] netlink: 'syz.2.11524': attribute type 39 has an invalid length. [ 2475.410808][ T8197] netlink: 'syz.2.11525': attribute type 10 has an invalid length. [ 2475.425422][ T8200] netlink: 'syz.4.11528': attribute type 39 has an invalid length. [ 2476.040282][ T8211] device syzkaller0 entered promiscuous mode [ 2476.069489][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2477.108336][ T8237] netlink: 'syz.1.11536': attribute type 15 has an invalid length. [ 2477.127953][ T8237] netlink: 'syz.1.11536': attribute type 7 has an invalid length. [ 2477.180304][ T8237] netlink: 'syz.1.11536': attribute type 39 has an invalid length. [ 2477.794796][ T8247] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11542'. [ 2478.809379][ T8252] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.11543'. [ 2478.843251][ T8257] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11544'. [ 2478.960929][ T8261] netlink: 'syz.0.11545': attribute type 10 has an invalid length. [ 2480.940310][ T8278] device syzkaller0 entered promiscuous mode [ 2480.988406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2481.172699][ T8284] netlink: 'syz.1.11554': attribute type 2 has an invalid length. [ 2481.190253][ T8284] netlink: 'syz.1.11554': attribute type 8 has an invalid length. [ 2481.213418][ T8284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11554'. [ 2481.552979][ T8294] delete_channel: no stack [ 2481.779569][ T8301] netlink: 'syz.3.11560': attribute type 29 has an invalid length. [ 2481.809266][ T8301] netlink: 'syz.3.11560': attribute type 29 has an invalid length. [ 2481.839386][ T8304] netlink: 'syz.0.11561': attribute type 27 has an invalid length. [ 2481.850108][ T8305] netlink: 'syz.3.11560': attribute type 29 has an invalid length. [ 2482.050745][ T8305] netlink: 'syz.3.11560': attribute type 29 has an invalid length. [ 2482.170112][ T8313] netlink: 'syz.0.11562': attribute type 21 has an invalid length. [ 2482.179142][ T8301] can: request_module (can-proto-0) failed. [ 2482.204770][ T8313] netlink: 'syz.0.11562': attribute type 1 has an invalid length. [ 2482.404611][ T8318] netlink: 'syz.0.11562': attribute type 21 has an invalid length. [ 2482.728144][ T8324] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11564'. [ 2482.950599][ T8328] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11565'. [ 2483.042756][ T8328] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2483.083395][ T8328] CPU: 0 PID: 8328 Comm: syz.2.11565 Not tainted syzkaller #0 [ 2483.090960][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2483.101065][ T8328] Call Trace: [ 2483.104474][ T8328] [ 2483.107447][ T8328] dump_stack_lvl+0x188/0x24e [ 2483.112184][ T8328] ? show_regs_print_info+0x12/0x12 [ 2483.117427][ T8328] ? load_image+0x410/0x410 [ 2483.122057][ T8328] sysfs_warn_dup+0x8a/0xa0 [ 2483.126619][ T8328] sysfs_do_create_link_sd+0xc0/0x110 [ 2483.132026][ T8328] device_add+0x83b/0x1050 [ 2483.136480][ T8328] wiphy_register+0x1d8b/0x2aa0 [ 2483.141379][ T8328] ? cfg80211_event_work+0x40/0x40 [ 2483.146521][ T8328] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2483.152714][ T8328] ? ieee80211_register_hw+0x2914/0x39f0 [ 2483.158381][ T8328] ieee80211_register_hw+0x2d48/0x39f0 [ 2483.163881][ T8328] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2483.170108][ T8328] ? ieee80211_register_hw+0xee1/0x39f0 [ 2483.175685][ T8328] ? ieee80211_register_hw+0xee1/0x39f0 [ 2483.181277][ T8328] ? ieee80211_tasklet_handler+0x20/0x20 [ 2483.186940][ T8328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2483.192863][ T8328] ? __debug_object_init+0xed/0x440 [ 2483.198099][ T8328] ? memset+0x1e/0x40 [ 2483.202106][ T8328] ? __hrtimer_init+0x189/0x270 [ 2483.206985][ T8328] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2483.212764][ T8328] hwsim_new_radio_nl+0xab7/0xc90 [ 2483.217843][ T8328] genl_family_rcv_msg_doit+0x22f/0x350 [ 2483.223420][ T8328] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2483.229350][ T8328] ? bpf_lsm_capable+0x5/0x10 [ 2483.234055][ T8328] ? security_capable+0x85/0xb0 [ 2483.238955][ T8328] genl_rcv_msg+0x601/0x790 [ 2483.243480][ T8328] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2483.249673][ T8328] ? genl_bind+0x360/0x360 [ 2483.254126][ T8328] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2483.260517][ T8328] ? lock_acquire+0x225/0x4a0 [ 2483.265248][ T8328] netlink_rcv_skb+0x1ef/0x440 [ 2483.270057][ T8328] ? genl_bind+0x360/0x360 [ 2483.274516][ T8328] ? netlink_ack+0x1160/0x1160 [ 2483.279320][ T8328] ? down_read+0x1a8/0x2d0 [ 2483.283769][ T8328] genl_rcv+0x24/0x40 [ 2483.287778][ T8328] netlink_unicast+0x7ad/0x920 [ 2483.292587][ T8328] netlink_sendmsg+0x8ad/0xbd0 [ 2483.297395][ T8328] ? aa_sock_msg_perm+0x94/0x150 [ 2483.302412][ T8328] ? netlink_getsockopt+0x550/0x550 [ 2483.307675][ T8328] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2483.313270][ T8328] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2483.318592][ T8328] ? security_socket_sendmsg+0x7c/0xa0 [ 2483.324084][ T8328] ? netlink_getsockopt+0x550/0x550 [ 2483.329497][ T8328] ____sys_sendmsg+0x5ed/0x9a0 [ 2483.334308][ T8328] ? __sys_sendmsg_sock+0x30/0x30 [ 2483.339374][ T8328] ? __import_iovec+0x306/0x510 [ 2483.344290][ T8328] ? import_iovec+0x6f/0xa0 [ 2483.348832][ T8328] ___sys_sendmsg+0x2a2/0x360 [ 2483.353551][ T8328] ? __sys_sendmsg+0x2a0/0x2a0 [ 2483.358366][ T8328] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2483.364143][ T8328] __se_sys_sendmsg+0x1c3/0x2b0 [ 2483.369030][ T8328] ? __x64_sys_sendmsg+0x80/0x80 [ 2483.374015][ T8328] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2483.379943][ T8328] do_syscall_64+0x4c/0xa0 [ 2483.384390][ T8328] ? clear_bhb_loop+0x60/0xb0 [ 2483.389101][ T8328] ? clear_bhb_loop+0x60/0xb0 [ 2483.393809][ T8328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2483.399731][ T8328] RIP: 0033:0x7f35d799e0d9 [ 2483.404170][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2483.423809][ T8328] RSP: 002b:00007f35d8871028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2483.432252][ T8328] RAX: ffffffffffffffda RBX: 00007f35d7c26090 RCX: 00007f35d799e0d9 [ 2483.440249][ T8328] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2483.448244][ T8328] RBP: 00007f35d7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 2483.456242][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2483.464233][ T8328] R13: 00007f35d7c26128 R14: 00007f35d7c26090 R15: 00007fff7d4aa248 [ 2483.472272][ T8328] [ 2484.094944][ T8338] device syzkaller0 entered promiscuous mode [ 2484.115339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2484.424555][ T8349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11570'. [ 2485.222991][ T8367] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11574'. [ 2485.477299][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11576'. [ 2485.508289][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11576'. [ 2485.527866][ T8378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11576'. [ 2485.550318][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11576'. [ 2485.602641][ T8377] netlink: 763 bytes leftover after parsing attributes in process `syz.3.11578'. [ 2485.780583][ T8383] device wlan1 entered promiscuous mode [ 2486.661194][ T8398] delete_channel: no stack [ 2486.691933][ T8394] validate_nla: 2 callbacks suppressed [ 2486.691971][ T8394] netlink: 'syz.0.11584': attribute type 2 has an invalid length. [ 2486.753410][ T8394] netlink: 'syz.0.11584': attribute type 8 has an invalid length. [ 2486.767556][ T8394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11584'. [ 2486.950680][ T8403] netlink: 'syz.2.11586': attribute type 2 has an invalid length. [ 2486.963442][ T8403] netlink: 'syz.2.11586': attribute type 8 has an invalid length. [ 2486.971597][ T8403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11586'. [ 2488.642485][ T8429] __nla_validate_parse: 1 callbacks suppressed [ 2488.642529][ T8429] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11593'. [ 2488.663405][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11591'. [ 2488.768680][ T8426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11591'. [ 2488.896417][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11591'. [ 2488.941460][ T8433] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11591'. [ 2489.389074][ T8441] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11596'. [ 2490.367019][ T8448] netlink: 'syz.3.11598': attribute type 2 has an invalid length. [ 2490.377853][ T8448] netlink: 'syz.3.11598': attribute type 8 has an invalid length. [ 2490.388128][ T8444] delete_channel: no stack [ 2490.392769][ T8448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11598'. [ 2490.643441][ T8456] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11599'. [ 2490.710675][ T8456] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2490.773796][ T8456] CPU: 0 PID: 8456 Comm: syz.1.11599 Not tainted syzkaller #0 [ 2490.781387][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2490.791498][ T8456] Call Trace: [ 2490.794819][ T8456] [ 2490.797794][ T8456] dump_stack_lvl+0x188/0x24e [ 2490.802539][ T8456] ? show_regs_print_info+0x12/0x12 [ 2490.807808][ T8456] ? load_image+0x410/0x410 [ 2490.812383][ T8456] sysfs_warn_dup+0x8a/0xa0 [ 2490.816951][ T8456] sysfs_do_create_link_sd+0xc0/0x110 [ 2490.822388][ T8456] device_add+0x83b/0x1050 [ 2490.826871][ T8456] wiphy_register+0x1d8b/0x2aa0 [ 2490.831800][ T8456] ? cfg80211_event_work+0x40/0x40 [ 2490.836973][ T8456] ? minstrel_ht_alloc+0x894/0xa20 [ 2490.842145][ T8456] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2490.848351][ T8456] ieee80211_register_hw+0x2d48/0x39f0 [ 2490.853871][ T8456] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2490.860106][ T8456] ? ieee80211_register_hw+0xee1/0x39f0 [ 2490.865787][ T8456] ? ieee80211_register_hw+0xee1/0x39f0 [ 2490.871384][ T8456] ? ieee80211_tasklet_handler+0x20/0x20 [ 2490.877158][ T8456] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2490.883108][ T8456] ? __debug_object_init+0xed/0x440 [ 2490.888362][ T8456] ? memset+0x1e/0x40 [ 2490.892404][ T8456] ? __hrtimer_init+0x189/0x270 [ 2490.897303][ T8456] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2490.903083][ T8456] ? memcpy+0x3c/0x60 [ 2490.907119][ T8456] hwsim_new_radio_nl+0xab7/0xc90 [ 2490.912212][ T8456] genl_family_rcv_msg_doit+0x22f/0x350 [ 2490.917820][ T8456] ? end_current_label_crit_section+0x170/0x170 [ 2490.924133][ T8456] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2490.930274][ T8456] ? bpf_lsm_capable+0x5/0x10 [ 2490.935008][ T8456] ? security_capable+0x85/0xb0 [ 2490.940355][ T8456] genl_rcv_msg+0x601/0x790 [ 2490.944919][ T8456] ? genl_bind+0x360/0x360 [ 2490.949382][ T8456] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2490.955780][ T8456] netlink_rcv_skb+0x1ef/0x440 [ 2490.960600][ T8456] ? genl_bind+0x360/0x360 [ 2490.965062][ T8456] ? netlink_ack+0x1160/0x1160 [ 2490.969895][ T8456] ? down_read+0x1a8/0x2d0 [ 2490.974353][ T8456] genl_rcv+0x24/0x40 [ 2490.978373][ T8456] netlink_unicast+0x7ad/0x920 [ 2490.983195][ T8456] netlink_sendmsg+0x8ad/0xbd0 [ 2490.988014][ T8456] ? netlink_getsockopt+0x550/0x550 [ 2490.993265][ T8456] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2490.998973][ T8456] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2491.004317][ T8456] ? security_socket_sendmsg+0x7c/0xa0 [ 2491.009830][ T8456] ? netlink_getsockopt+0x550/0x550 [ 2491.015083][ T8456] ____sys_sendmsg+0x5ed/0x9a0 [ 2491.019914][ T8456] ? __sys_sendmsg_sock+0x30/0x30 [ 2491.024980][ T8456] ? __import_iovec+0x306/0x510 [ 2491.029898][ T8456] ? import_iovec+0x6f/0xa0 [ 2491.034452][ T8456] ___sys_sendmsg+0x2a2/0x360 [ 2491.039203][ T8456] ? __sys_sendmsg+0x2a0/0x2a0 [ 2491.044036][ T8456] ? ktime_get+0x7b/0x270 [ 2491.048460][ T8456] __se_sys_sendmsg+0x1c3/0x2b0 [ 2491.053444][ T8456] ? perf_trace_preemptirq_template+0x268/0x320 [ 2491.059736][ T8456] ? __x64_sys_sendmsg+0x80/0x80 [ 2491.064738][ T8456] ? lockdep_hardirqs_on+0x94/0x140 [ 2491.070000][ T8456] do_syscall_64+0x4c/0xa0 [ 2491.074469][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 2491.079197][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 2491.083928][ T8456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2491.089958][ T8456] RIP: 0033:0x7f87a4d9e0d9 [ 2491.094451][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2491.114110][ T8456] RSP: 002b:00007f87a5c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2491.122564][ T8456] RAX: ffffffffffffffda RBX: 00007f87a5026090 RCX: 00007f87a4d9e0d9 [ 2491.130574][ T8456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2491.138584][ T8456] RBP: 00007f87a4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2491.146598][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2491.154649][ T8456] R13: 00007f87a5026128 R14: 00007f87a5026090 R15: 00007ffd3c9180b8 [ 2491.162682][ T8456] [ 2491.501631][ T8462] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11603'. [ 2491.900443][ T8473] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11606'. [ 2493.101844][ T8495] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 2493.303412][ T8501] can: request_module (can-proto-0) failed. [ 2493.380072][ T8495] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 2493.412248][ T8500] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 2493.439565][ T8505] netlink: 'syz.0.11622': attribute type 29 has an invalid length. [ 2493.451269][ T8497] delete_channel: no stack [ 2493.806649][ T8514] netlink: 'syz.1.11614': attribute type 2 has an invalid length. [ 2493.816571][ T8514] netlink: 'syz.1.11614': attribute type 8 has an invalid length. [ 2493.833533][ T8514] __nla_validate_parse: 3 callbacks suppressed [ 2493.833553][ T8514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11614'. [ 2493.851702][ T8517] netlink: 'syz.4.11615': attribute type 41 has an invalid length. [ 2494.824977][ T8534] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11619'. [ 2494.967497][ T8534] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2494.987255][ T8534] CPU: 0 PID: 8534 Comm: syz.3.11619 Not tainted syzkaller #0 [ 2494.994802][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2495.004907][ T8534] Call Trace: [ 2495.008222][ T8534] [ 2495.011193][ T8534] dump_stack_lvl+0x188/0x24e [ 2495.015920][ T8534] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2495.022112][ T8534] ? show_regs_print_info+0x12/0x12 [ 2495.027345][ T8534] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2495.033545][ T8534] sysfs_warn_dup+0x8a/0xa0 [ 2495.038126][ T8534] sysfs_do_create_link_sd+0xc0/0x110 [ 2495.043545][ T8534] device_add+0x83b/0x1050 [ 2495.047998][ T8534] wiphy_register+0x1d8b/0x2aa0 [ 2495.052892][ T8534] ? cfg80211_event_work+0x40/0x40 [ 2495.058038][ T8534] ? minstrel_ht_alloc+0x894/0xa20 [ 2495.063213][ T8534] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2495.069317][ T8534] ieee80211_register_hw+0x2d48/0x39f0 [ 2495.074811][ T8534] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2495.081005][ T8534] ? ieee80211_register_hw+0xee1/0x39f0 [ 2495.086584][ T8534] ? ieee80211_register_hw+0xee1/0x39f0 [ 2495.092170][ T8534] ? ieee80211_tasklet_handler+0x20/0x20 [ 2495.097835][ T8534] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2495.103760][ T8534] ? __debug_object_init+0xed/0x440 [ 2495.108998][ T8534] ? memset+0x1e/0x40 [ 2495.112999][ T8534] ? __hrtimer_init+0x189/0x270 [ 2495.117877][ T8534] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2495.123644][ T8534] ? memcpy+0x3c/0x60 [ 2495.127656][ T8534] hwsim_new_radio_nl+0xab7/0xc90 [ 2495.132727][ T8534] genl_family_rcv_msg_doit+0x22f/0x350 [ 2495.138300][ T8534] ? end_current_label_crit_section+0x170/0x170 [ 2495.144572][ T8534] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2495.150328][ T8534] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2495.156254][ T8534] ? bpf_lsm_capable+0x5/0x10 [ 2495.160958][ T8534] ? security_capable+0x85/0xb0 [ 2495.165851][ T8534] genl_rcv_msg+0x601/0x790 [ 2495.170386][ T8534] ? genl_bind+0x360/0x360 [ 2495.174827][ T8534] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2495.181196][ T8534] netlink_rcv_skb+0x1ef/0x440 [ 2495.185996][ T8534] ? genl_bind+0x360/0x360 [ 2495.190440][ T8534] ? netlink_ack+0x1160/0x1160 [ 2495.195241][ T8534] ? down_read+0x1a8/0x2d0 [ 2495.199684][ T8534] genl_rcv+0x24/0x40 [ 2495.203685][ T8534] netlink_unicast+0x7ad/0x920 [ 2495.208485][ T8534] netlink_sendmsg+0x8ad/0xbd0 [ 2495.213279][ T8534] ? lockdep_hardirqs_on+0x94/0x140 [ 2495.218511][ T8534] ? netlink_getsockopt+0x550/0x550 [ 2495.223744][ T8534] ? netlink_getsockopt+0x550/0x550 [ 2495.228979][ T8534] ? netlink_getsockopt+0x550/0x550 [ 2495.234212][ T8534] ____sys_sendmsg+0x5ed/0x9a0 [ 2495.239014][ T8534] ? __sys_sendmsg_sock+0x30/0x30 [ 2495.244069][ T8534] ? __import_iovec+0x306/0x510 [ 2495.248958][ T8534] ? import_iovec+0x6f/0xa0 [ 2495.253496][ T8534] ___sys_sendmsg+0x2a2/0x360 [ 2495.258215][ T8534] ? __sys_sendmsg+0x2a0/0x2a0 [ 2495.263031][ T8534] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2495.268808][ T8534] __se_sys_sendmsg+0x1c3/0x2b0 [ 2495.273687][ T8534] ? perf_trace_preemptirq_template+0x268/0x320 [ 2495.279955][ T8534] ? __x64_sys_sendmsg+0x80/0x80 [ 2495.284936][ T8534] ? lockdep_hardirqs_on+0x94/0x140 [ 2495.290166][ T8534] do_syscall_64+0x4c/0xa0 [ 2495.294608][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 2495.299319][ T8534] ? clear_bhb_loop+0x60/0xb0 [ 2495.304025][ T8534] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2495.309947][ T8534] RIP: 0033:0x7fd6f4f9e0d9 [ 2495.314390][ T8534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2495.334020][ T8534] RSP: 002b:00007fd6f5da4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2495.342459][ T8534] RAX: ffffffffffffffda RBX: 00007fd6f5226090 RCX: 00007fd6f4f9e0d9 [ 2495.350449][ T8534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2495.358452][ T8534] RBP: 00007fd6f5035024 R08: 0000000000000000 R09: 0000000000000000 [ 2495.366708][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2495.374702][ T8534] R13: 00007fd6f5226128 R14: 00007fd6f5226090 R15: 00007fff9de2d3c8 [ 2495.382742][ T8534] [ 2495.733341][ T8540] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11623'. [ 2495.861474][ T8553] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11625'. [ 2496.241766][ T8560] : port 1(ip6gretap0) entered blocking state [ 2496.248511][ T8560] : port 1(ip6gretap0) entered disabled state [ 2496.251702][ T8558] delete_channel: no stack [ 2496.261565][ T8560] device ip6gretap0 entered promiscuous mode [ 2496.271076][ T8561] device ip6gretap0 left promiscuous mode [ 2496.277494][ T8561] : port 1(ip6gretap0) entered disabled state [ 2496.599942][ T8566] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11640'. [ 2496.857293][ T8577] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.11639'. [ 2496.885365][ T8577] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2496.901700][ T8577] CPU: 0 PID: 8577 Comm: syz.0.11639 Not tainted syzkaller #0 [ 2496.909359][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2496.919458][ T8577] Call Trace: [ 2496.922761][ T8577] [ 2496.925719][ T8577] dump_stack_lvl+0x188/0x24e [ 2496.930476][ T8577] ? show_regs_print_info+0x12/0x12 [ 2496.935713][ T8577] ? load_image+0x410/0x410 [ 2496.940261][ T8577] sysfs_warn_dup+0x8a/0xa0 [ 2496.944798][ T8577] sysfs_do_create_link_sd+0xc0/0x110 [ 2496.950199][ T8577] device_add+0x83b/0x1050 [ 2496.954648][ T8577] wiphy_register+0x1d8b/0x2aa0 [ 2496.959554][ T8577] ? cfg80211_event_work+0x40/0x40 [ 2496.964700][ T8577] ? minstrel_ht_alloc+0x894/0xa20 [ 2496.969850][ T8577] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2496.975944][ T8577] ieee80211_register_hw+0x2d48/0x39f0 [ 2496.981450][ T8577] ? ieee80211_register_hw+0xee1/0x39f0 [ 2496.987022][ T8577] ? ieee80211_register_hw+0xee1/0x39f0 [ 2496.992607][ T8577] ? ieee80211_tasklet_handler+0x20/0x20 [ 2496.998269][ T8577] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2497.004195][ T8577] ? __debug_object_init+0xed/0x440 [ 2497.009430][ T8577] ? memset+0x1e/0x40 [ 2497.013440][ T8577] ? __hrtimer_init+0x189/0x270 [ 2497.018324][ T8577] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2497.024084][ T8577] ? memcpy+0x3c/0x60 [ 2497.028095][ T8577] hwsim_new_radio_nl+0xab7/0xc90 [ 2497.033164][ T8577] genl_family_rcv_msg_doit+0x22f/0x350 [ 2497.038738][ T8577] ? end_current_label_crit_section+0x170/0x170 [ 2497.045028][ T8577] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2497.050952][ T8577] ? bpf_lsm_capable+0x5/0x10 [ 2497.055654][ T8577] ? security_capable+0x85/0xb0 [ 2497.060553][ T8577] genl_rcv_msg+0x601/0x790 [ 2497.065085][ T8577] ? lock_chain_count+0x20/0x20 [ 2497.069977][ T8577] ? genl_bind+0x360/0x360 [ 2497.074416][ T8577] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2497.080786][ T8577] netlink_rcv_skb+0x1ef/0x440 [ 2497.085585][ T8577] ? genl_bind+0x360/0x360 [ 2497.090027][ T8577] ? netlink_ack+0x1160/0x1160 [ 2497.094828][ T8577] ? down_read+0x1a8/0x2d0 [ 2497.099267][ T8577] genl_rcv+0x24/0x40 [ 2497.103270][ T8577] netlink_unicast+0x7ad/0x920 [ 2497.108077][ T8577] netlink_sendmsg+0x8ad/0xbd0 [ 2497.112880][ T8577] ? netlink_getsockopt+0x550/0x550 [ 2497.118113][ T8577] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2497.123699][ T8577] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2497.129016][ T8577] ? security_socket_sendmsg+0x7c/0xa0 [ 2497.134502][ T8577] ? netlink_getsockopt+0x550/0x550 [ 2497.139829][ T8577] ____sys_sendmsg+0x5ed/0x9a0 [ 2497.144639][ T8577] ? __sys_sendmsg_sock+0x30/0x30 [ 2497.149692][ T8577] ? __import_iovec+0x306/0x510 [ 2497.154584][ T8577] ? import_iovec+0x6f/0xa0 [ 2497.159147][ T8577] ___sys_sendmsg+0x2a2/0x360 [ 2497.163864][ T8577] ? __sys_sendmsg+0x2a0/0x2a0 [ 2497.168727][ T8577] __se_sys_sendmsg+0x1c3/0x2b0 [ 2497.173613][ T8577] ? ct_nmi_exit+0x145/0x1c0 [ 2497.178250][ T8577] ? __x64_sys_sendmsg+0x80/0x80 [ 2497.183245][ T8577] ? lockdep_hardirqs_on+0x94/0x140 [ 2497.188468][ T8577] do_syscall_64+0x4c/0xa0 [ 2497.192922][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 2497.197626][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 2497.202337][ T8577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2497.208262][ T8577] RIP: 0033:0x7f38be99e0d9 [ 2497.212725][ T8577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2497.232358][ T8577] RSP: 002b:00007f38bf875028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2497.240794][ T8577] RAX: ffffffffffffffda RBX: 00007f38bec26270 RCX: 00007f38be99e0d9 [ 2497.248793][ T8577] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2497.256786][ T8577] RBP: 00007f38bea35024 R08: 0000000000000000 R09: 0000000000000000 [ 2497.264775][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2497.272766][ T8577] R13: 00007f38bec26308 R14: 00007f38bec26270 R15: 00007ffe579447a8 [ 2497.280781][ T8577] [ 2497.389634][ T8580] netlink: 'syz.1.11629': attribute type 29 has an invalid length. [ 2497.583561][ T8580] netlink: 'syz.1.11629': attribute type 29 has an invalid length. [ 2497.593029][ T8584] netlink: 'syz.4.11630': attribute type 2 has an invalid length. [ 2497.601593][ T8584] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11630'. [ 2497.694175][ T8585] can: request_module (can-proto-0) failed. [ 2498.108476][ T8595] validate_nla: 3 callbacks suppressed [ 2498.108519][ T8595] netlink: 'syz.1.11633': attribute type 2 has an invalid length. [ 2498.183703][ T8595] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11633'. [ 2498.962465][ T8617] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11642'. [ 2503.245633][ T8599] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11635'. [ 2503.264620][ T8611] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.11641'. [ 2503.357972][ T8621] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11643'. [ 2503.403403][ T8621] openvswitch: netlink: Message has 6 unknown bytes. [ 2503.996114][ T8624] netlink: 'syz.3.11645': attribute type 2 has an invalid length. [ 2504.005827][ T8624] netlink: 'syz.3.11645': attribute type 8 has an invalid length. [ 2504.023005][ T8624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11645'. [ 2504.186721][ T8632] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11646'. [ 2504.694550][ T8635] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11657'. [ 2504.697199][ T8639] netlink: 'syz.4.11647': attribute type 29 has an invalid length. [ 2504.844614][ T8639] netlink: 'syz.4.11647': attribute type 29 has an invalid length. [ 2504.894378][ T8643] netlink: 'syz.4.11647': attribute type 29 has an invalid length. [ 2504.945926][ T8639] netlink: 'syz.4.11647': attribute type 29 has an invalid length. [ 2505.010572][ T8646] can: request_module (can-proto-0) failed. [ 2505.366235][ T8648] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11648'. [ 2505.393696][ T8648] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2505.422051][ T8648] CPU: 0 PID: 8648 Comm: syz.3.11648 Not tainted syzkaller #0 [ 2505.429610][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2505.439715][ T8648] Call Trace: [ 2505.443019][ T8648] [ 2505.445972][ T8648] dump_stack_lvl+0x188/0x24e [ 2505.450690][ T8648] ? show_regs_print_info+0x12/0x12 [ 2505.455922][ T8648] ? load_image+0x410/0x410 [ 2505.460461][ T8648] sysfs_warn_dup+0x8a/0xa0 [ 2505.464999][ T8648] sysfs_do_create_link_sd+0xc0/0x110 [ 2505.470407][ T8648] device_add+0x83b/0x1050 [ 2505.474857][ T8648] wiphy_register+0x1d8b/0x2aa0 [ 2505.479758][ T8648] ? cfg80211_event_work+0x40/0x40 [ 2505.484908][ T8648] ? minstrel_ht_alloc+0x894/0xa20 [ 2505.490052][ T8648] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2505.496174][ T8648] ieee80211_register_hw+0x2d48/0x39f0 [ 2505.501680][ T8648] ? ieee80211_register_hw+0xee1/0x39f0 [ 2505.507347][ T8648] ? ieee80211_register_hw+0xee1/0x39f0 [ 2505.512932][ T8648] ? ieee80211_tasklet_handler+0x20/0x20 [ 2505.518596][ T8648] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2505.524517][ T8648] ? __debug_object_init+0xed/0x440 [ 2505.529754][ T8648] ? memset+0x1e/0x40 [ 2505.533761][ T8648] ? __hrtimer_init+0x189/0x270 [ 2505.538647][ T8648] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2505.544410][ T8648] ? memcpy+0x3c/0x60 [ 2505.548421][ T8648] hwsim_new_radio_nl+0xab7/0xc90 [ 2505.553518][ T8648] genl_family_rcv_msg_doit+0x22f/0x350 [ 2505.559093][ T8648] ? end_current_label_crit_section+0x170/0x170 [ 2505.565374][ T8648] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2505.571304][ T8648] ? bpf_lsm_capable+0x5/0x10 [ 2505.576007][ T8648] ? security_capable+0x85/0xb0 [ 2505.580895][ T8648] genl_rcv_msg+0x601/0x790 [ 2505.585450][ T8648] ? lock_chain_count+0x20/0x20 [ 2505.590341][ T8648] ? genl_bind+0x360/0x360 [ 2505.594780][ T8648] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2505.601151][ T8648] netlink_rcv_skb+0x1ef/0x440 [ 2505.605947][ T8648] ? genl_bind+0x360/0x360 [ 2505.610413][ T8648] ? netlink_ack+0x1160/0x1160 [ 2505.615221][ T8648] ? down_read+0x1a8/0x2d0 [ 2505.619669][ T8648] genl_rcv+0x24/0x40 [ 2505.623673][ T8648] netlink_unicast+0x7ad/0x920 [ 2505.628480][ T8648] netlink_sendmsg+0x8ad/0xbd0 [ 2505.633306][ T8648] ? netlink_getsockopt+0x550/0x550 [ 2505.638543][ T8648] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2505.644123][ T8648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2505.649435][ T8648] ? security_socket_sendmsg+0x7c/0xa0 [ 2505.654949][ T8648] ? netlink_getsockopt+0x550/0x550 [ 2505.660181][ T8648] ____sys_sendmsg+0x5ed/0x9a0 [ 2505.664985][ T8648] ? __sys_sendmsg_sock+0x30/0x30 [ 2505.670036][ T8648] ? __import_iovec+0x306/0x510 [ 2505.674949][ T8648] ? import_iovec+0x6f/0xa0 [ 2505.679511][ T8648] ___sys_sendmsg+0x2a2/0x360 [ 2505.684225][ T8648] ? __sys_sendmsg+0x2a0/0x2a0 [ 2505.689064][ T8648] __se_sys_sendmsg+0x1c3/0x2b0 [ 2505.693943][ T8648] ? ct_nmi_exit+0x145/0x1c0 [ 2505.698582][ T8648] ? __x64_sys_sendmsg+0x80/0x80 [ 2505.703569][ T8648] ? lockdep_hardirqs_on+0x94/0x140 [ 2505.708793][ T8648] do_syscall_64+0x4c/0xa0 [ 2505.713240][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 2505.717951][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 2505.722679][ T8648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2505.728611][ T8648] RIP: 0033:0x7fd6f4f9e0d9 [ 2505.733052][ T8648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.752722][ T8648] RSP: 002b:00007fd6f2df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2505.761178][ T8648] RAX: ffffffffffffffda RBX: 00007fd6f5226270 RCX: 00007fd6f4f9e0d9 [ 2505.769292][ T8648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2505.777313][ T8648] RBP: 00007fd6f5035024 R08: 0000000000000000 R09: 0000000000000000 [ 2505.786127][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2505.794135][ T8648] R13: 00007fd6f5226308 R14: 00007fd6f5226270 R15: 00007fff9de2d3c8 [ 2505.802596][ T8648] [ 2506.190127][ T8672] netlink: 'syz.4.11655': attribute type 3 has an invalid length. [ 2506.209179][ T8672] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11655'. [ 2506.258455][ T8673] netlink: 'syz.0.11652': attribute type 2 has an invalid length. [ 2506.279347][ T8673] netlink: 'syz.0.11652': attribute type 8 has an invalid length. [ 2506.287826][ T8673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11652'. [ 2506.303768][ T8671] netlink: 'syz.1.11656': attribute type 21 has an invalid length. [ 2506.312871][ T8671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11656'. [ 2506.333336][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11656'. [ 2506.551214][ T8679] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11658'. [ 2506.755176][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11660'. [ 2506.789299][ T8685] openvswitch: netlink: Message has 6 unknown bytes. [ 2509.436816][ T8720] validate_nla: 2 callbacks suppressed [ 2509.436841][ T8720] netlink: 'syz.4.11669': attribute type 2 has an invalid length. [ 2509.581295][ T8720] __nla_validate_parse: 4 callbacks suppressed [ 2509.581319][ T8720] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11669'. [ 2509.782956][ T8713] : port 1(ip6gretap0) entered blocking state [ 2509.797636][ T8713] : port 1(ip6gretap0) entered disabled state [ 2509.807831][ T8713] device ip6gretap0 entered promiscuous mode [ 2509.862452][ T8716] device ip6gretap0 left promiscuous mode [ 2509.883346][ T8716] : port 1(ip6gretap0) entered disabled state [ 2510.204783][ T8733] netlink: 'syz.2.11673': attribute type 27 has an invalid length. [ 2510.225580][ T8733] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11673'. [ 2510.305505][ T8737] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.11671'. [ 2515.312333][ T8724] netlink: 'syz.0.11670': attribute type 21 has an invalid length. [ 2515.327180][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11670'. [ 2515.336783][ T8724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11670'. [ 2515.447216][ T8737] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2515.481134][ T8737] CPU: 0 PID: 8737 Comm: syz.1.11671 Not tainted syzkaller #0 [ 2515.488693][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2515.498798][ T8737] Call Trace: [ 2515.502116][ T8737] [ 2515.505089][ T8737] dump_stack_lvl+0x188/0x24e [ 2515.509821][ T8737] ? show_regs_print_info+0x12/0x12 [ 2515.515071][ T8737] ? load_image+0x410/0x410 [ 2515.519642][ T8737] sysfs_warn_dup+0x8a/0xa0 [ 2515.524216][ T8737] sysfs_do_create_link_sd+0xc0/0x110 [ 2515.529688][ T8737] device_add+0x83b/0x1050 [ 2515.534177][ T8737] wiphy_register+0x1d8b/0x2aa0 [ 2515.539199][ T8737] ? cfg80211_event_work+0x40/0x40 [ 2515.544363][ T8737] ? minstrel_ht_alloc+0x894/0xa20 [ 2515.549540][ T8737] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2515.555675][ T8737] ieee80211_register_hw+0x2d48/0x39f0 [ 2515.561218][ T8737] ? ieee80211_register_hw+0xee1/0x39f0 [ 2515.566820][ T8737] ? ieee80211_register_hw+0xee1/0x39f0 [ 2515.572430][ T8737] ? ieee80211_tasklet_handler+0x20/0x20 [ 2515.578140][ T8737] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2515.584093][ T8737] ? __debug_object_init+0xed/0x440 [ 2515.589352][ T8737] ? memset+0x1e/0x40 [ 2515.593379][ T8737] ? __hrtimer_init+0x189/0x270 [ 2515.598286][ T8737] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2515.604106][ T8737] ? memcpy+0x3c/0x60 [ 2515.608127][ T8737] hwsim_new_radio_nl+0xab7/0xc90 [ 2515.613211][ T8737] genl_family_rcv_msg_doit+0x22f/0x350 [ 2515.618827][ T8737] ? end_current_label_crit_section+0x170/0x170 [ 2515.625113][ T8737] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2515.631061][ T8737] ? bpf_lsm_capable+0x5/0x10 [ 2515.635799][ T8737] ? security_capable+0x85/0xb0 [ 2515.640697][ T8737] genl_rcv_msg+0x601/0x790 [ 2515.645239][ T8737] ? genl_bind+0x360/0x360 [ 2515.649678][ T8737] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2515.656051][ T8737] netlink_rcv_skb+0x1ef/0x440 [ 2515.660853][ T8737] ? genl_bind+0x360/0x360 [ 2515.665303][ T8737] ? netlink_ack+0x1160/0x1160 [ 2515.670111][ T8737] ? down_read+0x1a8/0x2d0 [ 2515.674552][ T8737] genl_rcv+0x24/0x40 [ 2515.678570][ T8737] netlink_unicast+0x7ad/0x920 [ 2515.683377][ T8737] netlink_sendmsg+0x8ad/0xbd0 [ 2515.688186][ T8737] ? netlink_getsockopt+0x550/0x550 [ 2515.693432][ T8737] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2515.699012][ T8737] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2515.704325][ T8737] ? security_socket_sendmsg+0x7c/0xa0 [ 2515.709816][ T8737] ? netlink_getsockopt+0x550/0x550 [ 2515.715048][ T8737] ____sys_sendmsg+0x5ed/0x9a0 [ 2515.719856][ T8737] ? __sys_sendmsg_sock+0x30/0x30 [ 2515.724916][ T8737] ? __import_iovec+0x306/0x510 [ 2515.729807][ T8737] ? import_iovec+0x6f/0xa0 [ 2515.734346][ T8737] ___sys_sendmsg+0x2a2/0x360 [ 2515.739069][ T8737] ? __sys_sendmsg+0x2a0/0x2a0 [ 2515.743928][ T8737] __se_sys_sendmsg+0x1c3/0x2b0 [ 2515.748815][ T8737] ? ct_nmi_exit+0x145/0x1c0 [ 2515.753433][ T8737] ? __x64_sys_sendmsg+0x80/0x80 [ 2515.758415][ T8737] ? lockdep_hardirqs_on+0x94/0x140 [ 2515.763645][ T8737] do_syscall_64+0x4c/0xa0 [ 2515.768097][ T8737] ? clear_bhb_loop+0x60/0xb0 [ 2515.772803][ T8737] ? clear_bhb_loop+0x60/0xb0 [ 2515.777517][ T8737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2515.783441][ T8737] RIP: 0033:0x7f87a4d9e0d9 [ 2515.787896][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2515.807533][ T8737] RSP: 002b:00007f87a5c34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2515.815975][ T8737] RAX: ffffffffffffffda RBX: 00007f87a5026270 RCX: 00007f87a4d9e0d9 [ 2515.823972][ T8737] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2515.832247][ T8737] RBP: 00007f87a4e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2515.840248][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2515.848267][ T8737] R13: 00007f87a5026308 R14: 00007f87a5026270 R15: 00007ffd3c9180b8 [ 2515.856279][ T8737] [ 2515.980441][ T8752] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11676'. [ 2516.043877][ T8748] netlink: 'syz.4.11677': attribute type 2 has an invalid length. [ 2516.052520][ T8748] netlink: 'syz.4.11677': attribute type 8 has an invalid length. [ 2516.064409][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11677'. [ 2516.691947][ T8769] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11683'. [ 2517.079986][ T8773] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11684'. [ 2517.561711][ T8781] : port 1(ip6gretap0) entered blocking state [ 2517.568878][ T8781] : port 1(ip6gretap0) entered disabled state [ 2517.577299][ T8781] device ip6gretap0 entered promiscuous mode [ 2517.642819][ T8782] device ip6gretap0 left promiscuous mode [ 2517.649079][ T8782] : port 1(ip6gretap0) entered disabled state [ 2517.862575][ T8786] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11698'. [ 2518.065964][ T8785] netlink: 'syz.2.11686': attribute type 2 has an invalid length. [ 2518.083267][ T8785] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11686'. [ 2523.197751][ T8792] netlink: 'syz.2.11687': attribute type 3 has an invalid length. [ 2523.208992][ T8792] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11687'. [ 2523.700113][ T8796] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11702'. [ 2523.771428][ T8798] netlink: 'syz.2.11689': attribute type 21 has an invalid length. [ 2523.801169][ T8798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11689'. [ 2523.811406][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11689'. [ 2524.769294][ T8815] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11697'. [ 2525.445912][ T8819] netlink: 'syz.2.11700': attribute type 15 has an invalid length. [ 2525.471671][ T8819] netlink: 'syz.2.11700': attribute type 7 has an invalid length. [ 2525.590728][ T8819] netlink: 'syz.2.11700': attribute type 39 has an invalid length. [ 2525.602498][ T8823] : port 1(ip6gretap0) entered blocking state [ 2525.610987][ T8823] : port 1(ip6gretap0) entered disabled state [ 2525.621187][ T8823] device ip6gretap0 entered promiscuous mode [ 2525.646607][ T8823] device ip6gretap0 left promiscuous mode [ 2525.652922][ T8823] : port 1(ip6gretap0) entered disabled state [ 2526.005385][ T8828] netlink: 'syz.1.11704': attribute type 3 has an invalid length. [ 2526.023398][ T8828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11704'. [ 2526.041359][ T8832] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11705'. [ 2526.068384][ T8832] openvswitch: netlink: Message has 6 unknown bytes. [ 2526.412411][ T8838] netlink: 'syz.0.11703': attribute type 2 has an invalid length. [ 2526.508870][ T8838] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11703'. [ 2528.875251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.881605][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2532.066135][ T8852] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.11708'. [ 2532.238763][ T8863] netlink: 'syz.1.11711': attribute type 27 has an invalid length. [ 2532.274250][ T8863] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11711'. [ 2532.383883][ T8865] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11713'. [ 2532.413561][ T8863] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2532.464228][ T8863] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2532.491194][ T8863] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2533.403551][ T8871] netlink: 'syz.4.11715': attribute type 15 has an invalid length. [ 2533.413396][ T8871] netlink: 'syz.4.11715': attribute type 7 has an invalid length. [ 2533.422493][ T8876] netlink: 'syz.4.11715': attribute type 39 has an invalid length. [ 2533.768019][ T8893] netlink: 'syz.3.11722': attribute type 3 has an invalid length. [ 2533.824857][ T8893] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11722'. [ 2534.206683][ T8904] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11725'. [ 2534.442662][ T8913] netlink: 'syz.3.11723': attribute type 2 has an invalid length. [ 2534.636094][ T8913] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11723'. [ 2535.463440][ T8918] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11726'. [ 2535.472701][ T8918] openvswitch: netlink: Message has 6 unknown bytes. [ 2542.271840][ T8938] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11732'. [ 2543.614761][ T8951] : port 1(ip6gretap0) entered blocking state [ 2543.672630][ T8951] : port 1(ip6gretap0) entered disabled state [ 2543.828159][ T8951] device ip6gretap0 entered promiscuous mode [ 2543.961189][ T8960] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11740'. [ 2544.072832][ T8958] device ip6gretap0 left promiscuous mode [ 2544.104581][ T8958] : port 1(ip6gretap0) entered disabled state [ 2544.662251][ T8970] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11743'. [ 2545.841040][ T8986] netlink: 'syz.1.11748': attribute type 27 has an invalid length. [ 2545.904028][ T8988] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11759'. [ 2546.198072][ T8996] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11750'. [ 2546.388887][ T8999] netlink: 'syz.4.11751': attribute type 27 has an invalid length. [ 2546.421027][ T8999] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11751'. [ 2547.463614][ T9007] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.11753'. [ 2547.603859][ T9011] : port 1(ip6gretap0) entered blocking state [ 2547.610593][ T9011] : port 1(ip6gretap0) entered disabled state [ 2547.646771][ T9011] device ip6gretap0 entered promiscuous mode [ 2547.739298][ T9012] device ip6gretap0 left promiscuous mode [ 2547.783381][ T9012] : port 1(ip6gretap0) entered disabled state [ 2548.822158][ T9032] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11761'. [ 2548.853474][ T9031] netlink: 'syz.3.11763': attribute type 27 has an invalid length. [ 2549.164541][ T9035] netlink: 'syz.0.11764': attribute type 2 has an invalid length. [ 2549.172813][ T9035] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11764'. [ 2549.554028][ T9050] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11767'. [ 2554.842536][ T9058] netlink: 'syz.3.11768': attribute type 27 has an invalid length. [ 2554.864314][ T9058] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11768'. [ 2555.524682][ T9070] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11769'. [ 2555.565047][ T9073] : port 1(ip6gretap0) entered blocking state [ 2555.580882][ T9073] : port 1(ip6gretap0) entered disabled state [ 2555.596374][ T9073] device ip6gretap0 entered promiscuous mode [ 2555.679023][ T9074] device ip6gretap0 left promiscuous mode [ 2555.703389][ T9074] : port 1(ip6gretap0) entered disabled state [ 2556.077564][ T9079] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11773'. [ 2556.503226][ T9090] netlink: 'syz.4.11775': attribute type 2 has an invalid length. [ 2556.511134][ T9090] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11775'. [ 2561.998541][ T9097] netlink: 'syz.4.11777': attribute type 27 has an invalid length. [ 2562.217544][ T9102] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11780'. [ 2562.244219][ T9105] netlink: 'syz.4.11781': attribute type 15 has an invalid length. [ 2562.252544][ T9105] netlink: 'syz.4.11781': attribute type 7 has an invalid length. [ 2562.986744][ T9107] netlink: 'syz.4.11781': attribute type 39 has an invalid length. [ 2563.221543][ T9115] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11784'. [ 2563.310836][ T9120] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11785'. [ 2564.507628][ T9130] : port 1(ip6gretap0) entered blocking state [ 2564.534249][ T9130] : port 1(ip6gretap0) entered disabled state [ 2564.582075][ T9130] device ip6gretap0 entered promiscuous mode [ 2564.691404][ T9136] device ip6gretap0 left promiscuous mode [ 2564.707993][ T9136] : port 1(ip6gretap0) entered disabled state [ 2565.161645][ T9149] netlink: 'syz.2.11795': attribute type 15 has an invalid length. [ 2565.174427][ T9149] netlink: 'syz.2.11795': attribute type 7 has an invalid length. [ 2565.246937][ T9149] netlink: 'syz.2.11795': attribute type 39 has an invalid length. [ 2565.625397][ T9151] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11797'. [ 2566.144888][ T9160] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11799'. [ 2566.637492][ T9154] netlink: 'syz.2.11796': attribute type 27 has an invalid length. [ 2566.705661][ T9158] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11800'. [ 2567.577526][ T9179] netlink: 763 bytes leftover after parsing attributes in process `syz.0.11803'. [ 2567.652658][ T9180] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11801'. [ 2567.759060][ T9180] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2567.783152][ T9180] CPU: 0 PID: 9180 Comm: syz.2.11801 Not tainted syzkaller #0 [ 2567.790687][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2567.800777][ T9180] Call Trace: [ 2567.804100][ T9180] [ 2567.807080][ T9180] dump_stack_lvl+0x188/0x24e [ 2567.811864][ T9180] ? show_regs_print_info+0x12/0x12 [ 2567.817126][ T9180] ? load_image+0x410/0x410 [ 2567.821732][ T9180] sysfs_warn_dup+0x8a/0xa0 [ 2567.826327][ T9180] sysfs_do_create_link_sd+0xc0/0x110 [ 2567.831776][ T9180] device_add+0x83b/0x1050 [ 2567.836259][ T9180] wiphy_register+0x1d8b/0x2aa0 [ 2567.841196][ T9180] ? cfg80211_event_work+0x40/0x40 [ 2567.846369][ T9180] ? minstrel_ht_alloc+0x894/0xa20 [ 2567.851543][ T9180] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2567.857759][ T9180] ieee80211_register_hw+0x2d48/0x39f0 [ 2567.863297][ T9180] ? ieee80211_register_hw+0xee1/0x39f0 [ 2567.868900][ T9180] ? ieee80211_register_hw+0xee1/0x39f0 [ 2567.874518][ T9180] ? ieee80211_tasklet_handler+0x20/0x20 [ 2567.880203][ T9180] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2567.886173][ T9180] ? __debug_object_init+0xed/0x440 [ 2567.891432][ T9180] ? memset+0x1e/0x40 [ 2567.895455][ T9180] ? __hrtimer_init+0x189/0x270 [ 2567.900360][ T9180] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2567.906162][ T9180] ? memcpy+0x3c/0x60 [ 2567.910194][ T9180] hwsim_new_radio_nl+0xab7/0xc90 [ 2567.915298][ T9180] genl_family_rcv_msg_doit+0x22f/0x350 [ 2567.920904][ T9180] ? end_current_label_crit_section+0x170/0x170 [ 2567.927263][ T9180] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2567.933216][ T9180] ? bpf_lsm_capable+0x5/0x10 [ 2567.937942][ T9180] ? security_capable+0x85/0xb0 [ 2567.942869][ T9180] genl_rcv_msg+0x601/0x790 [ 2567.947424][ T9180] ? lock_chain_count+0x20/0x20 [ 2567.952339][ T9180] ? genl_bind+0x360/0x360 [ 2567.956802][ T9180] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2567.963201][ T9180] netlink_rcv_skb+0x1ef/0x440 [ 2567.968022][ T9180] ? genl_bind+0x360/0x360 [ 2567.972486][ T9180] ? netlink_ack+0x1160/0x1160 [ 2567.977323][ T9180] ? down_read+0x1a8/0x2d0 [ 2567.981788][ T9180] genl_rcv+0x24/0x40 [ 2567.985822][ T9180] netlink_unicast+0x7ad/0x920 [ 2567.990664][ T9180] netlink_sendmsg+0x8ad/0xbd0 [ 2567.995504][ T9180] ? netlink_getsockopt+0x550/0x550 [ 2568.000768][ T9180] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2568.006368][ T9180] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2568.011700][ T9180] ? security_socket_sendmsg+0x7c/0xa0 [ 2568.017212][ T9180] ? netlink_getsockopt+0x550/0x550 [ 2568.022469][ T9180] ____sys_sendmsg+0x5ed/0x9a0 [ 2568.027300][ T9180] ? __sys_sendmsg_sock+0x30/0x30 [ 2568.032385][ T9180] ? __import_iovec+0x306/0x510 [ 2568.037301][ T9180] ? import_iovec+0x6f/0xa0 [ 2568.041872][ T9180] ___sys_sendmsg+0x2a2/0x360 [ 2568.046620][ T9180] ? __sys_sendmsg+0x2a0/0x2a0 [ 2568.051511][ T9180] __se_sys_sendmsg+0x1c3/0x2b0 [ 2568.056431][ T9180] ? __x64_sys_sendmsg+0x80/0x80 [ 2568.061536][ T9180] ? lockdep_hardirqs_on+0x94/0x140 [ 2568.066789][ T9180] do_syscall_64+0x4c/0xa0 [ 2568.071273][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 2568.076014][ T9180] ? clear_bhb_loop+0x60/0xb0 [ 2568.080755][ T9180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2568.086708][ T9180] RIP: 0033:0x7f35d799e0d9 [ 2568.091212][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2568.110975][ T9180] RSP: 002b:00007f35d880e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2568.119450][ T9180] RAX: ffffffffffffffda RBX: 00007f35d7c26360 RCX: 00007f35d799e0d9 [ 2568.127479][ T9180] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2568.135500][ T9180] RBP: 00007f35d7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 2568.143622][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2568.151645][ T9180] R13: 00007f35d7c263f8 R14: 00007f35d7c26360 R15: 00007fff7d4aa248 [ 2568.159690][ T9180] [ 2568.977244][ T9200] netlink: 'syz.0.11806': attribute type 27 has an invalid length. [ 2568.998724][ T9200] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11806'. [ 2569.396565][ T9194] netlink: 'syz.2.11808': attribute type 2 has an invalid length. [ 2569.413286][ T9194] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11808'. [ 2569.678217][ T9216] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11812'. [ 2574.857477][ T9224] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11815'. [ 2574.967650][ T9231] netlink: 'syz.0.11813': attribute type 2 has an invalid length. [ 2574.993274][ T9231] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11813'. [ 2581.052676][ T9241] netlink: 'syz.1.11819': attribute type 1 has an invalid length. [ 2581.061236][ T9241] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11819'. [ 2581.123128][ T9251] netlink: 'syz.0.11821': attribute type 10 has an invalid length. [ 2581.131119][ T9251] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11821'. [ 2581.173748][ T9246] : port 1(ip6gretap0) entered blocking state [ 2581.180028][ T9246] : port 1(ip6gretap0) entered disabled state [ 2581.212955][ T9246] device ip6gretap0 entered promiscuous mode [ 2581.226081][ T9257] netlink: 763 bytes leftover after parsing attributes in process `syz.2.11822'. [ 2581.503941][ T9264] netlink: 'syz.4.11825': attribute type 27 has an invalid length. [ 2581.536441][ T9264] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11825'. [ 2581.815001][ T9271] netlink: 'syz.0.11826': attribute type 2 has an invalid length. [ 2581.822900][ T9271] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11826'. [ 2581.882111][ T9270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11827'. [ 2584.374176][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2584.382363][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2584.390508][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2584.400026][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2584.407769][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2584.415240][ T9283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2586.473266][ T9283] Bluetooth: hci5: command 0x0409 tx timeout [ 2587.801106][ T9292] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11831'. [ 2587.949031][ T9297] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11833'. [ 2588.282277][ T9308] netlink: 'syz.1.11834': attribute type 2 has an invalid length. [ 2588.321703][ T9308] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11834'. [ 2588.563239][ T9283] Bluetooth: hci5: command 0x041b tx timeout [ 2588.762319][ T9310] netlink: 13183 bytes leftover after parsing attributes in process `syz.4.11835'. [ 2590.314787][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.321164][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.633866][ T9283] Bluetooth: hci5: command 0x040f tx timeout [ 2592.713209][ T9283] Bluetooth: hci5: command 0x0419 tx timeout [ 2594.755043][ T9314] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11837'. [ 2594.764296][ T9316] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11838'. [ 2594.969674][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 2595.055981][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.063966][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2595.072185][ T9282] device bridge_slave_0 entered promiscuous mode [ 2595.084144][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.091400][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.099823][ T9282] device bridge_slave_1 entered promiscuous mode [ 2595.125906][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2595.141034][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2595.172395][ T9282] team0: Port device team_slave_0 added [ 2595.181893][ T9282] team0: Port device team_slave_1 added [ 2595.203910][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2595.210958][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2595.236967][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2595.252912][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2595.260124][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2595.286777][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2595.326590][ T9282] device hsr_slave_0 entered promiscuous mode [ 2595.333876][ T9282] device hsr_slave_1 entered promiscuous mode [ 2595.340670][ T9282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2595.348549][ T9282] Cannot create hsr debugfs directory [ 2595.479569][ T9282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2595.491941][ T9282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2595.502887][ T9282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2595.513619][ T9282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2595.594009][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.601304][ T9282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2595.608804][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.615998][ T9282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2595.715613][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2595.736303][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2595.772119][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 2595.791599][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 2595.802389][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2595.837487][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 2595.850497][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2595.861672][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 2595.868845][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2595.883361][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2595.892060][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 2595.899407][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2595.931889][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2595.947746][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2595.960615][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2595.975469][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2595.985470][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2596.015171][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2596.024721][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2596.037688][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2596.046441][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2596.066153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2596.075917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2596.088341][ T9282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2596.206627][T20877] device 0 left promiscuous mode [ 2596.274692][T20877] device 0 left promiscuous mode [ 2596.357251][T20877] tipc: Left network mode [ 2596.527010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2596.547334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2596.607520][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2597.085449][T20877] device gretap0 left promiscuous mode [ 2597.092797][T20877] Ÿë: port 1(gretap0) entered disabled state [ 2597.179907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2597.191636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2597.249369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2597.264219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2597.275407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2597.289141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2597.326034][ T9282] device veth0_vlan entered promiscuous mode [ 2597.350055][ T9282] device veth1_vlan entered promiscuous mode [ 2597.398283][ T9282] device veth0_macvtap entered promiscuous mode [ 2597.409784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2597.428433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2597.437903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2597.447381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2597.457187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2597.482827][ T9282] device veth1_macvtap entered promiscuous mode [ 2597.527489][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2597.540528][T20876] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2597.556233][T20876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2597.569748][T20876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2597.589883][ T9282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2597.612426][T20876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2597.625938][T20876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2597.649978][ T9282] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.660088][ T9282] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.669848][ T9282] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.679079][ T9282] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2598.089479][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.108711][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.128906][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2598.352795][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.363397][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.371731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2598.635948][ T9380] netlink: 'syz.5.11841': attribute type 27 has an invalid length. [ 2598.644634][ T9380] netlink: 164 bytes leftover after parsing attributes in process `syz.5.11841'. [ 2598.865278][ T9387] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11843'. [ 2598.902233][ T9388] netlink: 'syz.1.11844': attribute type 10 has an invalid length. [ 2608.585278][T20877] device veth0_to_team left promiscuous mode [ 2608.591485][T20877] Ÿë: port 2(veth0_to_team) entered disabled state [ 2651.764979][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.771357][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2710.153201][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 2713.195945][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.202282][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.634894][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.641253][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.075897][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.082312][ T1280] ieee802154 phy1 wpan1: encryption failed: -22