last executing test programs: 4.721160301s ago: executing program 2 (id=3124): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f40)={r4, &(0x7f0000001e00)="e006aecda08c", &(0x7f0000001e40)=""/210}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x20000055) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.502608067s ago: executing program 3 (id=3125): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f40)={r5, &(0x7f0000001e00)="e006aecda08c", &(0x7f0000001e40)=""/210}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x20000055) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.321129743s ago: executing program 0 (id=3126): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x5, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r3 = socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000004680)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000004500)=[{&(0x7f0000000680)=""/218, 0xda}, {&(0x7f0000000780)=""/186, 0xba}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000940)=""/5, 0x5}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/53, 0x35}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x8, &(0x7f0000004580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24", 0x12}], 0x1}, 0x2404c880) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8"], 0xfe33) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 3.972516024s ago: executing program 0 (id=3127): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net_cls'}, {0x0, 'cpuacct'}, {0x2d, 'perf_event'}, {0x0, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'blkio'}]}, 0x34) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x100, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x28) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.80497453s ago: executing program 1 (id=3128): bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000140), &(0x7f0000000240)=r8}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000500"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000ac0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @jmp={0x5, 0x0, 0x5, 0x4, 0x5, 0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4ab0eae0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6cd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0x2, 0x3, 0x9, 0x77, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}], &(0x7f0000000c00)='GPL\x00', 0x3d, 0xba, &(0x7f0000000c40)=""/186, 0x0, 0x20, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000d40)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xc, 0x5, 0x1}, 0x10, r10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x38}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', r6, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x16d7, 0x8}, 0x10, r10, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000740)=[{0x4, 0x3, 0x4, 0x6}, {0x3, 0x4, 0xb, 0x9}], 0x10, 0xfe}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000fffffff77b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018ff0000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7040000080000008500000049000000025e0700060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.628058325s ago: executing program 3 (id=3129): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000500000001", @ANYRES32, @ANYBLOB="00000000000000000016000000000000008eb80014fb97649f", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6", 0x9}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0xc, 0x1, 0xff, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1f, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3214}, @map_idx_val={0x18, 0x6}, @call={0x85, 0x0, 0x0, 0x1a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xc060}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0xfff, 0x7c, &(0x7f00000007c0)=""/124, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x1, 0xb, 0x9}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000900)=[{0x3, 0x5, 0x8}, {0x1, 0x3, 0x9, 0xa}, {0x3, 0x3, 0x8, 0x2}, {0x0, 0x1, 0x9, 0x5}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r1, 0xffffffffffffffff, 0x18, 0x4, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}, 0x5744935563dc1402) sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x34000}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) sendmsg(r2, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000ac0)=[{0xe0, 0x101, 0xd7, "8f44bb3dd339f73762a6f9177fe3066c91aeb74ab6fe4077d9174898786524ce0712bcd01c6e34467aa5eb46734381b7773999acb046b169d68efc765a01de5792bee8ac65765c196965b4f6e8b4e96789e9bc3ed262a00aadba0e750aed44c1e622f1554ab67762ec3201125ef18b1ebdaa10b3eaa2c14456a94fd1b8f45fa6cc34078284ae28a45c2c9be22917cebe06db832d5a3130dbc9800244bd3037fee7c8ff7a812066e4f2a9e59d4cb54166efc1d1780cde84adeb7c47ec0dc28a9d97e378317dc123e43f7203504f70"}, {0x90, 0x10d, 0xffff, "2e32a4048ea879bb0c756407c88e1d9dbef584709edffb23fa520bde8b9f8ba151795e55b3eebf6d61a77f5806a5eafb2e4af46d3d433323cc785a23b8440bef2f7368e8abb61da1a0bb24409dbaf3f351c9ec097407c2e5f90d46b487557fde99525b829671a92091e2f101d9f1973c9b3d7a4cc1ed44a397"}], 0x170}, 0x8004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200, 0x0, 0xfffff222}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2a105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r7}, 0xc) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8804) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={0x0, r0}, 0x18) 3.627691985s ago: executing program 4 (id=3130): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338f", 0x42d}, {&(0x7f0000000740)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa9cb227694f5b326544c9c1d4563f937db955e0373639d6292234c292c5615d82c851b91585b7ad8748faf0d8e5d65994adbb137c7851edbb4a3485ffd64e1caf3117861898d4ba6e04c15a94496cc8c23793136c93ba88db52f098b37fcf3f6c16df2f500f5b2005def16d46d96544649249c26098820ed60c94032f6fc134664ae10a613d15d140a948b4b45471dea34c0f527fca192dfa77f262ec22b914476238014687f231fe251b57f7689e4850e2c1eaf49ad1773a1f971ba9d8a900e5e2121370ebf1a0c8af1eca3921046277767b7740008731fdcffcddbc2cb867ea2959a735c164e4c650454d43dd6034dd22e31d94df846ab6d1b1e7c2463e349ffda978a5e783bdda9e6fafb2ca73fb02ccc54ab9309988741fdfbef9000b605a2d3890468834f7d7f705f8da1905283343b78f30bc48c2c3c351e955823ca8e6e82f695252f0aecc64025cf1e26d4be77f4b4f96d9b45226436aa43cc78afe578fe8c44047eb9f66bfbc3f3daeaadda3c088299586d35c7a868a8122428161cff48106cd5529695a27ba78f1d124cab474705be18a40ad26131f48d25f1e1c7a19e23433ff6d6284cf70278d53d12b41a171ec23143601a31732cf143f386a4fdc49bd8f1c10af3a4a3f2d8afdd131cdee0e6aebfdc1fef1831abaa01741cf774eeed7a043d6368c2fd43371633089fa9fa50c7e41185d32cdbc49c0bec369fdd7ab788bbe8cc87676f8597dc626556bbaef0bcd5e1a43bcc4e2c59f310e1c2bf2fea0f360b33408fb2e1a1024e3d88dff19496f384b0b4ea97c0281904010a7eb34a3d6bec959f6d59a0016d28da834b382e6e2c606236dcd17925b95f667e899a6b59ef20c1a96f0053ffb7c5a07b8ac6f20fa791d15c19b814f049e0b2da6f5799daf4d345aa475766367f99c160e8a08fd7f1e42e5b38eacba4f40eed3fccbfb89f4b644afb1e76eb4913e27e1540e2d4ec8ed8748b4756824a65c933d4120d1c2fc7f343ce0958478a97aa352fc2ddaf917fb2ae7bcce4d6f9d4b32387baff970a701ce01a73937cf0f12f6e41b86a06ea1b971d1ad7f92c0562a7778ec6c060000717217834e25b4b25f06134bbfc29f125c36c7e80e92a13127c70b37da8f1be6a3948593a6693fa07a91b00405d8ea47c88ccd02e7a64e0bd31d115c93f7c0dfe1c51d338b08c9825a29802ba8bc5c4655072da6dd2c27ce6684e1c2dd7dc95dcf90f934ade45fe5377a813975aefe4006ddb535f03db5a82f71f50cc7935c6809c73e705e84a959f70ff71df55ecce6a4a182fe3ef45a506fcd0f49b6eb9e9cbc8cd553481b9162a9086bf31c8cab7b1c3c7f703cd26d96b48dee0771b4a6d2513a37fec94a6649cfdbafc26b17a7bb2adb72477d34a74e4165850f76473f41c116e7adec0bdafae8aff515c781092e2d2f70fefebbd36d0e1cf5a01ea61f142756b8195e1fc400ca73162eb51d3a14a1c8ea2be43d3bbc230c7011273c1c9f035895fa45e8ba5eb8bef0660e952f3327720bd3817d098277b01ee0d8394a4d7752866da8f3258f243150df19ddb87ea24bc2f5de0394870e23a0f723013a226caa72e896e9f986e9aa40a6a4a21cfb6cebbbeb334ed7c0996c827c6790bf2323df6ab44f3aaceef33bbf9f89c915eda91a6e2aa5015a68235006cdb7f6759e734dd5368124d72157933add614947339323746ff9fdba836fc39e5cf85c8727d624f52bdf5ccde7b4c94e8989c0b845dd7ee12c7766f9b37d2a7f2439ce7fa05741e9fd4f7ab3c691261913bc3196802f9513b3a87500913f9760dd837b1248550e837e2b4d83c1f557d16a09424d7ca76597d9eb201b43340754acb32dc6b4b8f4c41806dd5436e70bc83f5f97d968d13cd445f3b58fbb2cba65299edda4412a0b8e9274f01fc3f4485e9e72998f74c4ef3eba0e948797023bb49e04ce901785b59782b77e15f1bdd50bae89c43361ea78e1f0b6f6e0b985cc9d1b35c088c08ff17e615572ef52514a71885552d787aff1e1525b9d45800b0497539749a9f7b2c74ef9326e83b591a47bae8a143dcaa5a1f3b362a9f33da53855175a2aa716c38c57225359e3f2fdf0fc140af79c8e058b5ae5699505fc58a9d5161de529c20c1cef3fb021c0f0c37548758305b42341f335166506baa4c9", 0x617}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x5, &(0x7f0000000000)=r5, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r1, 0x34, 0x1, 0x80000000, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x400000, [{0x6, 0x3, 0x1b}]}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000580)=""/250, 0x39, 0xfa, 0x1}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000005c0)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r8, r1, 0x16, 0x20, r1, @void, @void, @void, @value=r9, r7}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8a", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x59}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r6, &(0x7f00000006c0)={[{0x2d, 'memory'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2b, 'cpuset'}, {0x38, 'pids'}, {0x2d, 'hugetlb'}, {0x2d, 'cpuset'}, {0x2b, 'net'}]}, 0x39) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000680)="b9ff03076003008cb89e08f086dd369d30153ae3990a1aedf5bae2adea4fdf9b14fc250a2f55f45b78fd66b3d0039ddef1ed01d0268e", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) 3.270604366s ago: executing program 2 (id=3131): socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff86) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/140, 0x8c}], 0x1}, 0x8000) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000100)={0x4, 0x80, 0xb, 0x8, 0xd6, 0x10, 0x0, 0x1, 0x110, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x5, 0xa}, 0x1040, 0xffffffff, 0x1, 0x1, 0x5, 0x7, 0x2, 0x0, 0x926, 0x0, 0x8}) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x5) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fb, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x3, 0x3, 0x10, 0x0, 0x8, 0xc2174, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0x10d832, 0x200000000000c8, 0x806, 0x9, 0x1, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000800), 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, 0x0) 3.268618926s ago: executing program 1 (id=3141): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x20000055) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.773188292s ago: executing program 0 (id=3132): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x42) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000300), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYBLOB="7fcd2a9c8fef7b0db30314", @ANYRES8, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES64], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 2.772809562s ago: executing program 4 (id=3133): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a00053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000400)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc1, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x541b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7fffffff, 0x81, 0x2, 0x1411, r4, 0x7, '\x00', 0x0, r4, 0x0, 0x2, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x3, 0x2, 0x7, 0xa6, 0x4200, r5, 0x8, '\x00', r3, r4, 0x3, 0x1, 0x5}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f0000000680)=""/63, 0x3f}], 0x2}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a00053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000800)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f0000000180)=r10}, 0x20) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1f, 0x1, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0xff, 0x0, 0x0, 0x0, 0x81, 0x80a44, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x2, 0x0, 0x3997}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x89f1, &(0x7f0000000080)) 2.729732803s ago: executing program 2 (id=3134): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4e}}, 0x0}, 0x94) r4 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000180)={r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 2.600848328s ago: executing program 3 (id=3135): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0x0, 0x200, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0xce883455d26957a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xf}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe27}, 0x48) 2.399845564s ago: executing program 2 (id=3136): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x1000c0, 0x3, 0x800000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="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", 0x151}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x11, &(0x7f0000000000)=r6, 0x8) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.374847575s ago: executing program 4 (id=3137): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x161c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='\\#%[!\'+\'\xc5\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f00000003c0), 0x8, 0x66, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000000000000000000001008500000018000000850000002300000095000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xd, 0x0, &(0x7f0000000800)="0000000000000000606b53cc72", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa8}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000020c0)="cd", 0x1}], 0x1}, 0x8000) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x0, 0x17, 0x2c, &(0x7f0000000680)="f0fb9dfff3321a16e05311fe2ab77916b0adf81ff40f8c", &(0x7f00000006c0)=""/44, 0x8, 0x0, 0x23, 0xe1, &(0x7f0000000700)="a63d46bd47445c745d909cd8a6ac60937d64e3ee3e1841d8c5a2631e1086e4bd6a50d9", &(0x7f0000000840)="851c08d22aa59fe4adf108e3b412cba8be1ac7ae7fc115dd84439f4e7b143f79ac73d402f0842e7304796615f286f28ee5eb4931184c609bbdfebbec3a4da00af311ede783774049b6124b6a505a5fbef325745e4a622791521ab5b23054f12fe478353947dbd67ed2adc21d8ac98557c2130581fdb644c90919e67c863b87c6121af1cefccbefed0732c5ce100678bc9f11a64b038b7950a944e07ad5cdb66a14febcb373bb6ac95d805a64fcb3d61b3f062f1cb933cc12f0d4db4489fd84a2f8979d56f66d2365b395a23b91447032f985814ebc2f9b98c1fb7d7802178c6f77", 0x3, 0x0, 0xfffffffe}, 0x50) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 2.374361645s ago: executing program 1 (id=3138): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xef, 0x5, 0xd, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_bp={0x0}, 0x2, 0x576b, 0x2, 0x8, 0xc6, 0xaed, 0x3, 0x0, 0xfffffff9, 0x0, 0x6}, 0x0, 0x100000000000000f, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f00000000c0)=""/209, 0x26, 0xd1, 0x1}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000011006bec9e3be35c6e17aa31076b876c1d000000a2d0c62c160af36507001ac0043f020234000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010205091febd17d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) r4 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1}, 0x12000) sendmsg$inet(r4, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2.373860435s ago: executing program 0 (id=3139): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f40)={r4, &(0x7f0000001e00)="e006aecda08c", &(0x7f0000001e40)=""/210}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x20000055) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.440417035s ago: executing program 0 (id=3140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00400000000000fdffffbf00000089a9bb8c22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000040000000f"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="18000000140081044e81f782db44b9040a1d", 0x12}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)}, {&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000780)=""/99, 0x63}], 0x8, &(0x7f0000000880)}, 0x101) socketpair(0xf, 0x0, 0x839f, &(0x7f0000000300)) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 1.439899644s ago: executing program 1 (id=3142): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0xb, 0x1, 0xfffff801, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r3, r1, 0x2d, 0x8, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0xc}], 0x10, 0xfffffff6}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x100000000}, 0x116, 0x800000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000061198800000000009500000000000000611d84d2f04e31f7316fc8882727e09b50ce3a17cdc4cd3f17f410e4a0520db00b8e8ade1a62a15f7ab4f3d534c16a4d7b005c5f174625511b1ef8f731d6c7f8376f86af007d9714308e47ce6e402add88399648a1cdd9e171af2443535dd24840468fbc9552288a982a27dfa3aa2424e58e78f332d6d020747e0632be9b091de95b5740b35eae746b83f73ae122350419c85ee7f64cad034575cd772902459e9a2ccb75fe9e006632c4a3b8599aff08db67eeb726db41"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="00ff6f20"], 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r7, &(0x7f0000000380), 0x0, 0x4}, 0xfffffdb2) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x3fe, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000540)=@raw=[@alu={0x7, 0x0, 0x3, 0xa, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x39, &(0x7f00000005c0)=""/57, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, r9, 0x8, &(0x7f0000000640)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r6, 0x2, &(0x7f00000006c0)=[r7], &(0x7f0000000700)=[{0x2, 0x3, 0xa, 0x2}, {0x5, 0x5, 0x8}], 0x10, 0x3}, 0x94) 1.439673095s ago: executing program 2 (id=3143): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r1, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x400d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17fb", 0x2}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000010000001d00000070d856ec23787d5bb9fae19e1f382f1a0c2ecf7cab344857e04e7796230a03630a7768d387c968e55ec31dd2096e23f30e9e92414e2618a2c43ff2943d6b67be6ba077385e1b114dc6130939d8141fd2ee852289eab7da2d4244820164b8242ed5cb41de174e07dba28ae1acd17d37b1a2b72bf253a9507e5431a37beb198f18e4595dda34c38ac54dbed749170381a0f8c793ba581a266e71984a14c66870", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x80}, 0x40000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r5}, &(0x7f0000000980), &(0x7f00000002c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000300)={'veth0_vlan\x00', @multicast}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) close(r0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9, 0x9c6}, 0x40, 0x0, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001400)=""/232, 0xe8}], 0x4}, 0x2000) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 1.439445844s ago: executing program 3 (id=3144): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net_cls'}, {0x0, 'cpuacct'}, {0x2d, 'perf_event'}, {0x0, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'blkio'}]}, 0x34) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x100, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x41}, 0x28) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.439080884s ago: executing program 4 (id=3145): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x3, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) socket$kcm(0xa, 0x3, 0x73) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], &(0x7f0000000140)=""/175, 0x3e, 0xaf, 0x1, 0x0, 0x10000, @value=r1}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c118418f0f000000d6e74703c48f93b8", 0x48}, {&(0x7f0000000440)="82aa39bd8fefa31158a19b0fc25b6004cdbb94a98d9b58e4b29c5bc2827459de16af29c58647008f8583dcbf2c974c8daad386021e4ae02fb11c5e95c317569df5136703612f300bfcf4eeb3ea9543b16dbd42b4c77d6f43f001c59630f57e51b7bcaa25b207383a44c03374964dbb463cb468b29c5e0a357da240b00520c50a1928b64b6508e3d88511f3da4e701050141b785eb8b5c2414b28058a435aaaab45f812bd158eb9635d4df58742ee67d91c2e9d4df8773139328a6719aca716eabbc5974b5d2f5a9396c94f5d301b814c11529b62ef0cd7b3ee1abe61670e232df2e44b2ed7b4d897b0aadcf8822fe295ebf4209ed9efe623964aa922bb7216de814d515272efea350ccc24cfbf5c622b687d3856c7cb0bb6a33ddf446c05f6"}, {&(0x7f0000000200)="edbd9ef1058fc809eab170ca2db7d39ae4cd8ffc2e9fbff56ee684e37172c939ee1d60b3470a3c921873f1b05ce48885cc16cb4818b3b490b3aba7060e054fb2d3"}, {&(0x7f0000000280)="b06aa19c3eacd35cf5f707650a0167cc58d2cbea59945867d3dc20a616117e649bb73ada7fcfe92315ada178ae17565057c54218db3809ba5ad6eab87f5c16f3d51cc2138a1a3573bbbce264c8aaad863cb802c46089d8707defb3c3277329"}]}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='rdma.current\x00', 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0xfc, 0x0, 0x9, 0x9a080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x80000001, 0x1000}, 0x101000, 0x7, 0x0, 0x0, 0x10, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x14}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x14, 0x1, 0x4, 0x0, 0x0, 0x0, 0x21018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x80, 0x1}, 0x610, 0xb, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8000008}, 0xffffffffffffffff, 0x40000000000a, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x134c58d86b541130) socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 903.745041ms ago: executing program 4 (id=3146): socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000010006bcc9e3be35c6e17aa31076b876c1d000000000000000300000304001ac00800120004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c045) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x9}, 0x4c80, 0x6, 0x0, 0x7, 0x201, 0xfffffffc, 0xfffd}, 0x0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x80000001}, 0x120a4, 0xf40, 0x0, 0x0, 0x0, 0xfffffff8, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000761ce898ffd758bd2a8047b49ba7efec4a4becb6448ce3b41c81a71d627ee752360c1805235ee0039cb6752a32fd4817fc776d461e5b4765cfd1273e6eb4dca349c03828051d9fde9da611257463ef38846746b9bc21b0024658439de45d5db47bb106e85632c85c3e311a98bd955cf92d335e224d5b8315fdb057c18230b84210f6ad689375bc94bbf51e0e26bf90ade1d6c35f3d5fd57cd868814cef49848c366e52572710397614d7e332e0f89e7b1b086c44d3159cac1078d9cb01c248e41afe938a1f620ef8b7b406eb", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000007b000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x1, 0x6, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="ea8d5b1a6844babeb89e14f088f7", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000008000000b70500000800000085000000a500000018000000010000000000000000080000"], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, &(0x7f0000000700), 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x5, 0x0, 0xfffeffff, 0x9}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f0000000d80)=[{0x21, 0x1, 0xb, 0xc}], 0x10, 0x101}, 0x94) 784.283315ms ago: executing program 1 (id=3147): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x61, 0x0, 0x2e]}}, 0xffffffffffffffff, 0x1e, 0x0, 0x1}, 0x28) r1 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x0, 0x10000000, 0x7, 0x4, 0x0, 0x1, 0x0, 0xfffffffd}, 0x0, 0xffffffbbffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000eba132cf034876970a272c66f000000000000000000000000000000a2ba63699585510ac8564ef96593d0556ac07f613a5d984998856c29eab214bd4c5c954a0de79d63551d6e8a00127b931d630100000046aedb00955f5440a90776e1088ca7268414c1c2af", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r3, 0x0, 0x0}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000015006b0300224ed85e22000300000000250002000f00000017d34471a1505f5f895081251e6182949a00003d3b48dfd8cdbf9767b4faa9f50a58c9f4060046d88037e786a6d0a5570000001700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r2, 0x0, 0x3c, 0x1000, &(0x7f0000000040)="db6108abb1cabb7205f8de2f17689c284e7657cda9df801ef5ccddd260a19b6385b77c94c886064ca62883bcca27ce7589f40a45cd8e90428c3a4b05", &(0x7f0000000640)=""/4096, 0x4, 0x0, 0x7e, 0xe3, &(0x7f0000001680)="cdcbee030abf0d26ac5b17a64592a5a6548e0813cec8c0078a0ee99f4aef703c5dba217c5eee252d7013161f4eef1a0076351eeed017ff50abb5f5ae5c291b2d86d3bb899e988674883113a68feba6f4b9cc1f96b9a437544d73705f70050c578737cf1216814b164c606c085d52b5b1e1b74ecfbc9621153480f359df49", &(0x7f0000001700)="9eb0e0dea3cb810dc770e97802f69a137ced0abfd5dc84f11d059eaa879641b4d92ed9ef56fe3a65cd7fded6c795068fd8dd560b362b899079ebcd912c6d934c728042def0f373a9b02fe9a9a6c9e55ef20de96e883720877fd149519e14e791e746813438b36d2c64845f8416c7c6be38ff62038d3a62ee9eaaa1377186249069a18f019e0e188f5f76b68992ddd7938d8ef952497794fdd63e7d64081c45605190b8a071df3097ac3f6235d711a38a18db92ededfd47da98f3d13487631346cde532a8f0508fd7347813548ef41dc091e5d48c3a1c359f1275e4c5804f2500000000", 0x1, 0x0, 0x7fe3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x2) close(r5) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x40051) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f0000000300), 0x0}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4001, 0x0, 0x80}, 0x0, 0xff7ffffffffffffb, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x112}) perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x16, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x686, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) close(r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 559.536732ms ago: executing program 3 (id=3148): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r1'], 0x31) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x4e}}, 0x0}, 0x94) r4 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000180)={r6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 558.493372ms ago: executing program 2 (id=3149): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x20000055) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 69.866618ms ago: executing program 1 (id=3150): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x3}, 0x2018, 0x1, 0x2, 0x0, 0x0, 0x81, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x481, 0x400002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00000004000000080f00000000"], 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47b"], &(0x7f0000000000)='GPL\x00', 0x5, 0xd2, &(0x7f0000000740)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x4008804) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x7, 0x80, 0x82, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x9058, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r4, 0x0, &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000040), &(0x7f0000000480)=""/146}, 0x1d) sendmsg(0xffffffffffffffff, 0x0, 0x4040851) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0xffffffb6) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/42, 0x2a}, {0x0}, {&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/113, 0x71}], 0x5}, 0x40000100) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x8000}, 0x22d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) 66.079568ms ago: executing program 0 (id=3151): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x8, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xb, 0x5}, 0x0, 0x0, 0x3, 0x9, 0x0, 0xd, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0xfffffffe}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x401, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xb3, &(0x7f000000cf3d)=""/179}, 0x94) r2 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="ef905a4a7753d30307b6bf0010e3ece8d83e2ebac4963e18ba6529ec4cd62a7c5bb166b1e9e3ad7c65f98516fa923e49398f0730428e000f2a373ce1ae278d4b63d44bad3bfa0669178f7f8dbbed0b1959f3546e7283d49eb9a67e61aa2ec5e28fdaf3b45511d3c52931f7a77ffff0f25560cb85d64fcb89ec6d25", 0x7b}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635dbe490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x49}], 0x2, 0x0, 0x0, 0x7400}, 0x98) r5 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x1) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/25, 0x19}], 0x1}, 0x2002) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a00)={r7, &(0x7f0000001940), &(0x7f0000000880)=""/119}, 0x20) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000900)=""/4105, 0x1009}], 0x1}, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e373a0c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) 771.84µs ago: executing program 3 (id=3152): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080)=0x1000000, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f40)={r4, &(0x7f0000001e00)="e006aecda08c", &(0x7f0000001e40)=""/210}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x20000055) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r2], 0xfe33) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 4 (id=3153): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r4 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00 \x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8 [ 303.269103][ T8141] dump_stack_lvl+0x188/0x250 [ 303.273830][ T8141] ? show_regs_print_info+0x20/0x20 [ 303.279065][ T8141] ? load_image+0x400/0x400 [ 303.283645][ T8141] sysfs_warn_dup+0x8a/0xa0 [ 303.288184][ T8141] sysfs_do_create_link_sd+0xc0/0x110 [ 303.293680][ T8141] device_add+0x7f6/0x1000 [ 303.298151][ T8141] wiphy_register+0x1e81/0x2c30 [ 303.303073][ T8141] ? cfg80211_event_work+0x40/0x40 [ 303.308233][ T8141] ? minstrel_ht_alloc+0x808/0x980 [ 303.313404][ T8141] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 303.319520][ T8141] ieee80211_register_hw+0x2aa1/0x3af0 [ 303.325036][ T8141] ? ieee80211_tasklet_handler+0x20/0x20 [ 303.330716][ T8141] ? rcu_is_watching+0x11/0xa0 [ 303.335522][ T8141] ? memset+0x1e/0x40 [ 303.339528][ T8141] ? hrtimer_init+0x10c/0x220 [ 303.344242][ T8141] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 303.350034][ T8141] hwsim_new_radio_nl+0xa6f/0xc40 [ 303.355196][ T8141] genl_rcv_msg+0xcea/0xf90 [ 303.359744][ T8141] ? genl_bind+0x380/0x380 [ 303.364207][ T8141] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 303.369439][ T8141] ? verify_lock_unused+0x140/0x140 [ 303.374679][ T8141] ? perf_trace_lock_acquire+0xed/0x3e0 [ 303.380266][ T8141] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 303.387115][ T8141] ? kmalloc_large_node+0xf2/0x190 [ 303.392360][ T8141] ? dev_queue_xmit+0x20/0x20 [ 303.397180][ T8141] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 303.403756][ T8141] netlink_rcv_skb+0x1f5/0x440 [ 303.408568][ T8141] ? genl_bind+0x380/0x380 [ 303.413022][ T8141] ? netlink_ack+0xb50/0xb50 [ 303.417650][ T8141] ? __lock_acquire+0x7d10/0x7d10 [ 303.422733][ T8141] ? down_read+0x1aa/0x2e0 [ 303.427189][ T8141] genl_rcv+0x24/0x40 [ 303.431204][ T8141] netlink_unicast+0x774/0x920 [ 303.436017][ T8141] netlink_sendmsg+0x8ba/0xbe0 [ 303.440833][ T8141] ? netlink_getsockopt+0x570/0x570 [ 303.446073][ T8141] ? aa_sock_msg_perm+0x94/0x150 [ 303.451147][ T8141] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 303.456578][ T8141] ? security_socket_sendmsg+0x7c/0xa0 [ 303.462099][ T8141] ? netlink_getsockopt+0x570/0x570 [ 303.467330][ T8141] ____sys_sendmsg+0x5b7/0x8f0 [ 303.472420][ T8141] ? __sys_sendmsg_sock+0x30/0x30 [ 303.477502][ T8141] ? import_iovec+0x6f/0xa0 [ 303.482064][ T8141] ___sys_sendmsg+0x236/0x2e0 [ 303.486798][ T8141] ? __sys_sendmsg+0x2a0/0x2a0 [ 303.491649][ T8141] __se_sys_sendmsg+0x1af/0x290 [ 303.496558][ T8141] ? __x64_sys_sendmsg+0x80/0x80 [ 303.501533][ T8141] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 303.507571][ T8141] ? lockdep_hardirqs_on+0x94/0x140 [ 303.512819][ T8141] do_syscall_64+0x4c/0xa0 [ 303.517268][ T8141] ? clear_bhb_loop+0x30/0x80 [ 303.521984][ T8141] ? clear_bhb_loop+0x30/0x80 [ 303.526697][ T8141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.532802][ T8141] RIP: 0033:0x7fbd317b8e59 [ 303.537257][ T8141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.556891][ T8141] RSP: 002b:00007fbd2f9d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.565449][ T8141] RAX: ffffffffffffffda RBX: 00007fbd31a32180 RCX: 00007fbd317b8e59 [ 303.573471][ T8141] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 303.581568][ T8141] RBP: 00007fbd3184ed6f R08: 0000000000000000 R09: 0000000000000000 [ 303.589582][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.598046][ T8141] R13: 00007fbd31a32218 R14: 00007fbd31a32180 R15: 00007ffd5cd1f938 [ 303.606165][ T8141] [ 304.039158][ T8153] netlink: 'syz.3.1170': attribute type 9 has an invalid length. [ 304.349285][ T8164] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1175'. [ 304.418259][ T8167] netlink: 'syz.0.1187': attribute type 29 has an invalid length. [ 304.476474][ T8167] netlink: 'syz.0.1187': attribute type 29 has an invalid length. [ 304.677189][ T8169] netlink: 'syz.0.1187': attribute type 29 has an invalid length. [ 304.724339][ T8171] netlink: set zone limit has 8 unknown bytes [ 305.063537][ T8174] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 305.095838][ T8174] CPU: 1 PID: 8174 Comm: syz.3.1177 Not tainted syzkaller #0 [ 305.103286][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.113559][ T8174] Call Trace: [ 305.116874][ T8174] [ 305.119840][ T8174] dump_stack_lvl+0x188/0x250 [ 305.124567][ T8174] ? show_regs_print_info+0x20/0x20 [ 305.129814][ T8174] ? load_image+0x400/0x400 [ 305.134387][ T8174] sysfs_warn_dup+0x8a/0xa0 [ 305.138918][ T8174] sysfs_do_create_link_sd+0xc0/0x110 [ 305.144328][ T8174] device_add+0x7f6/0x1000 [ 305.148790][ T8174] wiphy_register+0x1e81/0x2c30 [ 305.153704][ T8174] ? cfg80211_event_work+0x40/0x40 [ 305.158841][ T8174] ? minstrel_ht_alloc+0x808/0x980 [ 305.164001][ T8174] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 305.170107][ T8174] ieee80211_register_hw+0x2aa1/0x3af0 [ 305.175646][ T8174] ? ieee80211_tasklet_handler+0x20/0x20 [ 305.181330][ T8174] ? rcu_is_watching+0x11/0xa0 [ 305.186125][ T8174] ? memset+0x1e/0x40 [ 305.190139][ T8174] ? hrtimer_init+0x10c/0x220 [ 305.194875][ T8174] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 305.200670][ T8174] hwsim_new_radio_nl+0xa6f/0xc40 [ 305.205845][ T8174] genl_rcv_msg+0xcea/0xf90 [ 305.210397][ T8174] ? genl_bind+0x380/0x380 [ 305.214860][ T8174] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 305.220087][ T8174] ? verify_lock_unused+0x140/0x140 [ 305.225341][ T8174] ? kmalloc_large_node+0xf2/0x190 [ 305.230494][ T8174] ? dev_queue_xmit+0x20/0x20 [ 305.235278][ T8174] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 305.241936][ T8174] netlink_rcv_skb+0x1f5/0x440 [ 305.246731][ T8174] ? genl_bind+0x380/0x380 [ 305.251179][ T8174] ? netlink_ack+0xb50/0xb50 [ 305.255802][ T8174] ? __lock_acquire+0x7d10/0x7d10 [ 305.260867][ T8174] ? down_read+0x1aa/0x2e0 [ 305.265320][ T8174] genl_rcv+0x24/0x40 [ 305.269331][ T8174] netlink_unicast+0x774/0x920 [ 305.274152][ T8174] netlink_sendmsg+0x8ba/0xbe0 [ 305.278961][ T8174] ? netlink_getsockopt+0x570/0x570 [ 305.284190][ T8174] ? aa_sock_msg_perm+0x94/0x150 [ 305.289153][ T8174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 305.294460][ T8174] ? security_socket_sendmsg+0x7c/0xa0 [ 305.299950][ T8174] ? netlink_getsockopt+0x570/0x570 [ 305.305171][ T8174] ____sys_sendmsg+0x5b7/0x8f0 [ 305.309986][ T8174] ? __sys_sendmsg_sock+0x30/0x30 [ 305.315056][ T8174] ? import_iovec+0x6f/0xa0 [ 305.319597][ T8174] ___sys_sendmsg+0x236/0x2e0 [ 305.324326][ T8174] ? __sys_sendmsg+0x2a0/0x2a0 [ 305.329202][ T8174] __se_sys_sendmsg+0x1af/0x290 [ 305.334085][ T8174] ? __x64_sys_sendmsg+0x80/0x80 [ 305.339040][ T8174] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 305.345072][ T8174] ? lockdep_hardirqs_on+0x94/0x140 [ 305.350309][ T8174] do_syscall_64+0x4c/0xa0 [ 305.354745][ T8174] ? clear_bhb_loop+0x30/0x80 [ 305.359443][ T8174] ? clear_bhb_loop+0x30/0x80 [ 305.364148][ T8174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.370065][ T8174] RIP: 0033:0x7f99fd9fde59 [ 305.374507][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.394228][ T8174] RSP: 002b:00007f99fbc36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.402686][ T8174] RAX: ffffffffffffffda RBX: 00007f99fdc77090 RCX: 00007f99fd9fde59 [ 305.410680][ T8174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 305.418674][ T8174] RBP: 00007f99fda93d6f R08: 0000000000000000 R09: 0000000000000000 [ 305.426672][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.434665][ T8174] R13: 00007f99fdc77128 R14: 00007f99fdc77090 R15: 00007ffc731241e8 [ 305.442782][ T8174] [ 306.168500][ T8195] __nla_validate_parse: 1 callbacks suppressed [ 306.168538][ T8195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1185'. [ 306.268181][ T8197] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1182'. [ 306.647482][ T8197] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 306.751880][ T8202] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1197'. [ 307.023707][ T8206] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1189'. [ 307.200763][ T8212] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1190'. [ 307.730303][ T8212] netlink: 21648 bytes leftover after parsing attributes in process `syz.0.1190'. [ 307.759262][ T8212] tipc: Started in network mode [ 307.784245][ T8212] tipc: Node identity e, cluster identity 4711 [ 307.822440][ T8212] tipc: Node number set to 14 [ 307.877477][ T8224] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1192'. [ 307.911228][ T8224] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 307.932797][ T8227] netlink: 'syz.4.1193': attribute type 10 has an invalid length. [ 307.954462][ T8227] team0: Port device virt_wifi0 added [ 307.982078][ T8215] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1191'. [ 308.003589][ T8215] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1191'. [ 311.093639][ T8249] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1209'. [ 311.782336][ T8261] syz.3.1202 (8261) used greatest stack depth: 18512 bytes left [ 311.939007][ T8268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1204'. [ 312.333197][ T8279] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 312.429814][ T8279] device virt_wifi0 entered promiscuous mode [ 312.458521][ T8279] team0: Port device virt_wifi0 added [ 315.099314][ T8291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1222'. [ 315.405581][ T8304] netlink: 'syz.2.1213': attribute type 3 has an invalid length. [ 315.413577][ T8304] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1213'. [ 315.487523][ T8305] netlink: 'syz.2.1213': attribute type 9 has an invalid length. [ 315.614128][ T8305] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1213'. [ 315.893541][ T8302] netlink: 'syz.2.1213': attribute type 21 has an invalid length. [ 315.906276][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 316.111909][ T8313] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.623300][ T8313] device syzkaller0 entered promiscuous mode [ 317.500978][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.501955][ T8345] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1228'. [ 317.509171][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.573199][ T8342] netlink: 'syz.1.1227': attribute type 10 has an invalid length. [ 317.613491][ T8342] team0: Port device virt_wifi0 added [ 322.286526][ T8400] netlink: 'syz.0.1244': attribute type 10 has an invalid length. [ 322.349270][ T8400] team0: Port device virt_wifi0 added [ 322.733324][ T8414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1250'. [ 322.999898][ T8416] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1248'. [ 323.132913][ T8419] netlink: 'syz.4.1251': attribute type 3 has an invalid length. [ 323.165577][ T8425] netlink: 'syz.4.1251': attribute type 9 has an invalid length. [ 323.216068][ T8425] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1251'. [ 323.283819][ T8419] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1251'. [ 326.098223][ T8469] device syzkaller0 entered promiscuous mode [ 327.415815][ T8482] netlink: 'syz.2.1266': attribute type 9 has an invalid length. [ 327.544790][ T8482] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1266'. [ 328.805548][ T8501] bridge0: port 3(team0) entered disabled state [ 328.812133][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.820048][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.251302][ T8507] bridge0: port 3(team0) entered disabled state [ 329.546931][ T8507] device bridge_slave_1 left promiscuous mode [ 329.553413][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.715977][ T8507] device bridge_slave_0 left promiscuous mode [ 329.769356][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.546125][ T8537] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1282'. [ 330.561799][ T8538] netlink: 'syz.3.1283': attribute type 9 has an invalid length. [ 330.641432][ T8538] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1283'. [ 332.864531][ T8586] netlink: 'syz.3.1296': attribute type 9 has an invalid length. [ 332.901681][ T8586] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1296'. [ 333.086550][ T8583] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1295'. [ 333.265767][ T8583] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 333.387174][ T8583] CPU: 0 PID: 8583 Comm: syz.2.1295 Not tainted syzkaller #0 [ 333.394639][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.404835][ T8583] Call Trace: [ 333.408149][ T8583] [ 333.411111][ T8583] dump_stack_lvl+0x188/0x250 [ 333.415838][ T8583] ? show_regs_print_info+0x20/0x20 [ 333.421100][ T8583] ? load_image+0x400/0x400 [ 333.425686][ T8583] sysfs_warn_dup+0x8a/0xa0 [ 333.430262][ T8583] sysfs_do_create_link_sd+0xc0/0x110 [ 333.435691][ T8583] device_add+0x7f6/0x1000 [ 333.440349][ T8583] wiphy_register+0x1e81/0x2c30 [ 333.445308][ T8583] ? cfg80211_event_work+0x40/0x40 [ 333.450470][ T8583] ? minstrel_ht_alloc+0x808/0x980 [ 333.455640][ T8583] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 333.461907][ T8583] ieee80211_register_hw+0x2aa1/0x3af0 [ 333.467471][ T8583] ? ieee80211_tasklet_handler+0x20/0x20 [ 333.473180][ T8583] ? rcu_is_watching+0x11/0xa0 [ 333.478084][ T8583] ? memset+0x1e/0x40 [ 333.482111][ T8583] ? hrtimer_init+0x10c/0x220 [ 333.486901][ T8583] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 333.492717][ T8583] hwsim_new_radio_nl+0xa6f/0xc40 [ 333.497841][ T8583] genl_rcv_msg+0xcea/0xf90 [ 333.502423][ T8583] ? genl_bind+0x380/0x380 [ 333.506905][ T8583] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 333.512142][ T8583] ? verify_lock_unused+0x140/0x140 [ 333.517482][ T8583] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 333.523264][ T8583] ? perf_trace_lock+0x301/0x390 [ 333.528252][ T8583] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 333.534912][ T8583] netlink_rcv_skb+0x1f5/0x440 [ 333.539731][ T8583] ? genl_bind+0x380/0x380 [ 333.544190][ T8583] ? netlink_ack+0xb50/0xb50 [ 333.548842][ T8583] ? __lock_acquire+0x7d10/0x7d10 [ 333.553974][ T8583] ? down_read+0x1aa/0x2e0 [ 333.558444][ T8583] genl_rcv+0x24/0x40 [ 333.562475][ T8583] netlink_unicast+0x774/0x920 [ 333.567311][ T8583] netlink_sendmsg+0x8ba/0xbe0 [ 333.572137][ T8583] ? netlink_getsockopt+0x570/0x570 [ 333.577551][ T8583] ? aa_sock_msg_perm+0x94/0x150 [ 333.582726][ T8583] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.588065][ T8583] ? security_socket_sendmsg+0x7c/0xa0 [ 333.593580][ T8583] ? netlink_getsockopt+0x570/0x570 [ 333.598938][ T8583] ____sys_sendmsg+0x5b7/0x8f0 [ 333.603831][ T8583] ? __sys_sendmsg_sock+0x30/0x30 [ 333.609018][ T8583] ? import_iovec+0x6f/0xa0 [ 333.613574][ T8583] ___sys_sendmsg+0x236/0x2e0 [ 333.618315][ T8583] ? __sys_sendmsg+0x2a0/0x2a0 [ 333.623222][ T8583] __se_sys_sendmsg+0x1af/0x290 [ 333.628126][ T8583] ? __x64_sys_sendmsg+0x80/0x80 [ 333.633227][ T8583] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 333.639294][ T8583] ? lockdep_hardirqs_on+0x94/0x140 [ 333.644541][ T8583] do_syscall_64+0x4c/0xa0 [ 333.648991][ T8583] ? clear_bhb_loop+0x30/0x80 [ 333.653787][ T8583] ? clear_bhb_loop+0x30/0x80 [ 333.658509][ T8583] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.664455][ T8583] RIP: 0033:0x7f423e22ae59 [ 333.668927][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.688580][ T8583] RSP: 002b:00007f423c484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.697229][ T8583] RAX: ffffffffffffffda RBX: 00007f423e4a3fa0 RCX: 00007f423e22ae59 [ 333.705257][ T8583] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 333.713286][ T8583] RBP: 00007f423e2c0d6f R08: 0000000000000000 R09: 0000000000000000 [ 333.721412][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.729520][ T8583] R13: 00007f423e4a4038 R14: 00007f423e4a3fa0 R15: 00007fff1d53c618 [ 333.737642][ T8583] [ 334.102824][ T8597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1298'. [ 334.195409][ T8590] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1297'. [ 334.234847][ T8590] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1297'. [ 335.324439][ T8623] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1318'. [ 336.027596][ T8632] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1321'. [ 336.879572][ T8654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1317'. [ 337.249176][ T8658] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1316'. [ 337.971221][ T8680] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 338.126948][ T8680] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 338.145953][ T8680] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1326'. [ 339.038082][ T8692] netlink: 'syz.2.1328': attribute type 4 has an invalid length. [ 339.154650][ T8692] netlink: 183716 bytes leftover after parsing attributes in process `syz.2.1328'. [ 339.309455][ T8696] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1330'. [ 341.200335][ T8725] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 341.262082][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1339'. [ 341.362689][ T8728] netlink: 'syz.2.1338': attribute type 10 has an invalid length. [ 341.501926][ T8728] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 341.915133][ T8737] netlink: 'syz.1.1341': attribute type 11 has an invalid length. [ 341.925680][ T8737] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1341'. [ 342.094407][ T8743] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 342.294501][ T8743] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 342.490733][ T8743] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1342'. [ 342.957096][ T8752] bridge0: port 3(syz_tun) entered disabled state [ 342.963877][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.971725][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.216940][ T8754] device syz_tun left promiscuous mode [ 343.222689][ T8754] bridge0: port 3(syz_tun) entered disabled state [ 343.457454][ T8754] device bridge_slave_1 left promiscuous mode [ 343.477678][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.646809][ T8754] device bridge_slave_0 left promiscuous mode [ 343.662311][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.818772][ T8754] team0: Port device bridge0 removed [ 343.925914][ T8764] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.1346'. [ 344.072368][ T8769] netlink: 'syz.1.1348': attribute type 8 has an invalid length. [ 344.072714][ T8771] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1349'. [ 344.114710][ T8769] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1348'. [ 344.327162][ T8781] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1353'. [ 344.372274][ T8778] netlink: 'syz.4.1351': attribute type 4 has an invalid length. [ 344.792299][ T8793] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 344.815515][ T8793] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 344.838233][ T8793] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1365'. [ 344.886576][ T8794] netlink: 'syz.4.1357': attribute type 11 has an invalid length. [ 344.929821][ T8794] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1357'. [ 345.410525][ T8798] device syzkaller0 entered promiscuous mode [ 345.435382][ T8800] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1358'. [ 346.703228][ T8826] netlink: 'syz.0.1364': attribute type 9 has an invalid length. [ 346.828600][ T8826] __nla_validate_parse: 2 callbacks suppressed [ 346.828619][ T8826] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1364'. [ 347.215576][ T8844] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 347.262004][ T8844] netlink: 'syz.3.1370': attribute type 4 has an invalid length. [ 347.295146][ T8844] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1370'. [ 347.405548][ T8848] netlink: 'syz.2.1372': attribute type 11 has an invalid length. [ 347.414180][ T8848] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1372'. [ 347.503004][ T8853] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1373'. [ 347.638356][ T8862] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 347.706327][ T8862] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1375'. [ 348.371999][ T8872] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1378'. [ 348.937506][ T8877] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1376'. [ 348.948999][ T8881] device hsr0 entered promiscuous mode [ 349.209673][ T8881] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.227967][ T8881] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 349.251457][ T8881] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 349.308734][ T8881] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 349.386476][ T8875] validate_nla: 3 callbacks suppressed [ 349.386498][ T8875] netlink: 'syz.0.1379': attribute type 39 has an invalid length. [ 349.701962][ T8877] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 349.715337][ T8877] CPU: 0 PID: 8877 Comm: syz.1.1376 Not tainted syzkaller #0 [ 349.722781][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.732873][ T8877] Call Trace: [ 349.736205][ T8877] [ 349.739166][ T8877] dump_stack_lvl+0x188/0x250 [ 349.743883][ T8877] ? show_regs_print_info+0x20/0x20 [ 349.749125][ T8877] ? load_image+0x400/0x400 [ 349.753689][ T8877] sysfs_warn_dup+0x8a/0xa0 [ 349.758237][ T8877] sysfs_do_create_link_sd+0xc0/0x110 [ 349.763647][ T8877] device_add+0x7f6/0x1000 [ 349.768127][ T8877] wiphy_register+0x1e81/0x2c30 [ 349.773040][ T8877] ? cfg80211_event_work+0x40/0x40 [ 349.778218][ T8877] ? minstrel_ht_alloc+0x808/0x980 [ 349.783392][ T8877] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 349.789600][ T8877] ieee80211_register_hw+0x2aa1/0x3af0 [ 349.795127][ T8877] ? ieee80211_tasklet_handler+0x20/0x20 [ 349.800898][ T8877] ? rcu_is_watching+0x11/0xa0 [ 349.805793][ T8877] ? memset+0x1e/0x40 [ 349.809914][ T8877] ? hrtimer_init+0x10c/0x220 [ 349.814633][ T8877] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 349.820516][ T8877] hwsim_new_radio_nl+0xa6f/0xc40 [ 349.825690][ T8877] genl_rcv_msg+0xcea/0xf90 [ 349.830328][ T8877] ? genl_bind+0x380/0x380 [ 349.834808][ T8877] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 349.840132][ T8877] ? verify_lock_unused+0x140/0x140 [ 349.845382][ T8877] ? perf_trace_lock_acquire+0xed/0x3e0 [ 349.850974][ T8877] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 349.857796][ T8877] ? kmalloc_large_node+0xf2/0x190 [ 349.862962][ T8877] ? dev_queue_xmit+0x20/0x20 [ 349.867693][ T8877] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 349.874272][ T8877] netlink_rcv_skb+0x1f5/0x440 [ 349.879088][ T8877] ? genl_bind+0x380/0x380 [ 349.883646][ T8877] ? netlink_ack+0xb50/0xb50 [ 349.888334][ T8877] ? __lock_acquire+0x7d10/0x7d10 [ 349.893417][ T8877] ? down_read+0x1aa/0x2e0 [ 349.897880][ T8877] genl_rcv+0x24/0x40 [ 349.901897][ T8877] netlink_unicast+0x774/0x920 [ 349.906697][ T8877] netlink_sendmsg+0x8ba/0xbe0 [ 349.911504][ T8877] ? netlink_getsockopt+0x570/0x570 [ 349.916845][ T8877] ? aa_sock_msg_perm+0x94/0x150 [ 349.921828][ T8877] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 349.927145][ T8877] ? security_socket_sendmsg+0x7c/0xa0 [ 349.932704][ T8877] ? netlink_getsockopt+0x570/0x570 [ 349.937941][ T8877] ____sys_sendmsg+0x5b7/0x8f0 [ 349.942761][ T8877] ? __sys_sendmsg_sock+0x30/0x30 [ 349.947849][ T8877] ? import_iovec+0x6f/0xa0 [ 349.952408][ T8877] ___sys_sendmsg+0x236/0x2e0 [ 349.957150][ T8877] ? __sys_sendmsg+0x2a0/0x2a0 [ 349.962018][ T8877] __se_sys_sendmsg+0x1af/0x290 [ 349.966918][ T8877] ? __x64_sys_sendmsg+0x80/0x80 [ 349.971898][ T8877] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 349.978105][ T8877] ? lockdep_hardirqs_on+0x94/0x140 [ 349.983363][ T8877] do_syscall_64+0x4c/0xa0 [ 349.987929][ T8877] ? clear_bhb_loop+0x30/0x80 [ 349.992819][ T8877] ? clear_bhb_loop+0x30/0x80 [ 349.997543][ T8877] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.003478][ T8877] RIP: 0033:0x7fbd317b8e59 [ 350.008023][ T8877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.027670][ T8877] RSP: 002b:00007fbd2f9f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.036127][ T8877] RAX: ffffffffffffffda RBX: 00007fbd31a32090 RCX: 00007fbd317b8e59 [ 350.044315][ T8877] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 350.052312][ T8877] RBP: 00007fbd3184ed6f R08: 0000000000000000 R09: 0000000000000000 [ 350.060320][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.068432][ T8877] R13: 00007fbd31a32128 R14: 00007fbd31a32090 R15: 00007ffd5cd1f938 [ 350.076552][ T8877] [ 350.501713][ T8905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1386'. [ 350.683375][ T8916] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.1388'. [ 350.864071][ T8909] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1387'. [ 351.134469][ T8907] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 351.381048][ T8923] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 351.486404][ T8923] netlink: 'syz.2.1392': attribute type 4 has an invalid length. [ 351.941293][ T8927] netlink: 'syz.3.1390': attribute type 4 has an invalid length. [ 352.015358][ T8927] __nla_validate_parse: 2 callbacks suppressed [ 352.015376][ T8927] netlink: 183716 bytes leftover after parsing attributes in process `syz.3.1390'. [ 352.188206][ T8931] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1394'. [ 352.297931][ T8936] netlink: 'syz.4.1394': attribute type 9 has an invalid length. [ 352.371414][ T8932] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1393'. [ 352.412845][ T8936] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1394'. [ 352.449703][ T8939] netlink: 'syz.1.1395': attribute type 10 has an invalid length. [ 352.518184][ T8939] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1395'. [ 352.616961][ T8939] device bond0 entered promiscuous mode [ 352.622579][ T8939] device bond_slave_1 entered promiscuous mode [ 352.703569][ T8939] device team0 entered promiscuous mode [ 352.736755][ T8939] device team_slave_1 entered promiscuous mode [ 352.780677][ T8939] device bridge0 entered promiscuous mode [ 352.804949][ T8939] device virt_wifi0 entered promiscuous mode [ 352.907922][ T8939] bridge0: port 5(bond0) entered blocking state [ 353.108230][ T8939] bridge0: port 5(bond0) entered disabled state [ 353.799649][ T8963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1402'. [ 354.169332][ T8964] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 354.339623][ T8964] netlink: 'syz.4.1403': attribute type 4 has an invalid length. [ 354.364915][ T8964] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1403'. [ 354.378689][ T8976] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1404'. [ 354.474005][ T8982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1408'. [ 354.574837][ T8974] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1405'. [ 354.698010][ T8990] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 354.756413][ T8974] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 354.781413][ T8974] CPU: 0 PID: 8974 Comm: syz.0.1405 Not tainted syzkaller #0 [ 354.788858][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.798954][ T8974] Call Trace: [ 354.802271][ T8974] [ 354.805235][ T8974] dump_stack_lvl+0x188/0x250 [ 354.809947][ T8974] ? show_regs_print_info+0x20/0x20 [ 354.815180][ T8974] ? load_image+0x400/0x400 [ 354.819733][ T8974] sysfs_warn_dup+0x8a/0xa0 [ 354.824373][ T8974] sysfs_do_create_link_sd+0xc0/0x110 [ 354.829776][ T8974] device_add+0x7f6/0x1000 [ 354.834239][ T8974] wiphy_register+0x1e81/0x2c30 [ 354.839143][ T8974] ? cfg80211_event_work+0x40/0x40 [ 354.844379][ T8974] ? minstrel_ht_alloc+0x808/0x980 [ 354.849966][ T8974] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 354.856096][ T8974] ieee80211_register_hw+0x2aa1/0x3af0 [ 354.861624][ T8974] ? ieee80211_tasklet_handler+0x20/0x20 [ 354.867306][ T8974] ? rcu_is_watching+0x11/0xa0 [ 354.872121][ T8974] ? memset+0x1e/0x40 [ 354.876150][ T8974] ? hrtimer_init+0x10c/0x220 [ 354.880876][ T8974] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 354.886662][ T8974] hwsim_new_radio_nl+0xa6f/0xc40 [ 354.891747][ T8974] genl_rcv_msg+0xcea/0xf90 [ 354.896299][ T8974] ? genl_bind+0x380/0x380 [ 354.900758][ T8974] ? lock_chain_count+0x20/0x20 [ 354.905649][ T8974] ? verify_lock_unused+0x140/0x140 [ 354.910888][ T8974] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 354.917192][ T8974] ? lockdep_hardirqs_on+0x94/0x140 [ 354.922430][ T8974] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 354.928619][ T8974] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 354.935187][ T8974] netlink_rcv_skb+0x1f5/0x440 [ 354.939987][ T8974] ? genl_bind+0x380/0x380 [ 354.944440][ T8974] ? netlink_ack+0xb50/0xb50 [ 354.949072][ T8974] ? __lock_acquire+0x7d10/0x7d10 [ 354.954158][ T8974] ? down_read+0x1aa/0x2e0 [ 354.958615][ T8974] genl_rcv+0x24/0x40 [ 354.962646][ T8974] netlink_unicast+0x774/0x920 [ 354.967454][ T8974] netlink_sendmsg+0x8ba/0xbe0 [ 354.972257][ T8974] ? netlink_getsockopt+0x570/0x570 [ 354.977572][ T8974] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 354.983161][ T8974] ? aa_sock_msg_perm+0x94/0x150 [ 354.988352][ T8974] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 354.993678][ T8974] ? security_socket_sendmsg+0x7c/0xa0 [ 354.999182][ T8974] ? netlink_getsockopt+0x570/0x570 [ 355.004420][ T8974] ____sys_sendmsg+0x5b7/0x8f0 [ 355.009319][ T8974] ? __sys_sendmsg_sock+0x30/0x30 [ 355.014373][ T8974] ? ___sys_sendmsg+0x21b/0x2e0 [ 355.019248][ T8974] ___sys_sendmsg+0x236/0x2e0 [ 355.023955][ T8974] ? __sys_sendmsg+0x2a0/0x2a0 [ 355.028834][ T8974] ? ktime_get_real_ts64+0x440/0x440 [ 355.034156][ T8974] __se_sys_sendmsg+0x1af/0x290 [ 355.039109][ T8974] ? __x64_sys_sendmsg+0x80/0x80 [ 355.044054][ T8974] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 355.050056][ T8974] ? lockdep_hardirqs_on+0x94/0x140 [ 355.055273][ T8974] do_syscall_64+0x4c/0xa0 [ 355.059798][ T8974] ? clear_bhb_loop+0x30/0x80 [ 355.064483][ T8974] ? clear_bhb_loop+0x30/0x80 [ 355.069173][ T8974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.075071][ T8974] RIP: 0033:0x7fe42891fe59 [ 355.079500][ T8974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.099287][ T8974] RSP: 002b:00007fe426b79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.107716][ T8974] RAX: ffffffffffffffda RBX: 00007fe428b98fa0 RCX: 00007fe42891fe59 [ 355.115873][ T8974] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 355.123849][ T8974] RBP: 00007fe4289b5d6f R08: 0000000000000000 R09: 0000000000000000 [ 355.131826][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.139828][ T8974] R13: 00007fe428b99038 R14: 00007fe428b98fa0 R15: 00007fff811d3138 [ 355.147920][ T8974] [ 355.351732][ T9002] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 355.395243][ T9002] device bond0 entered promiscuous mode [ 355.436337][ T9002] device bond_slave_0 entered promiscuous mode [ 355.454831][ T9002] device bond_slave_1 entered promiscuous mode [ 355.475406][ T9002] device team0 entered promiscuous mode [ 355.491755][ T9002] device team_slave_0 entered promiscuous mode [ 355.516857][ T9002] device team_slave_1 entered promiscuous mode [ 355.532815][ T9002] device geneve1 entered promiscuous mode [ 355.556245][ T9002] device virt_wifi0 entered promiscuous mode [ 356.040247][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.102969][ T9007] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 356.420791][ T9007] device batadv0 left promiscuous mode [ 356.464051][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.505698][ T9007] device batadv0 entered promiscuous mode [ 356.528573][ T9007] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 357.008734][ T9027] netlink: 'syz.4.1417': attribute type 10 has an invalid length. [ 357.097851][ T9027] __nla_validate_parse: 5 callbacks suppressed [ 357.097871][ T9027] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1417'. [ 357.179721][ T9027] device hsr0 entered promiscuous mode [ 357.234526][ T9027] bridge0: port 3(hsr0) entered blocking state [ 357.308490][ T9027] bridge0: port 3(hsr0) entered disabled state [ 357.536319][ T9042] netlink: 'syz.1.1421': attribute type 9 has an invalid length. [ 357.542039][ T9027] bridge0: port 3(hsr0) entered blocking state [ 357.544116][ T9042] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1421'. [ 357.564030][ T9027] bridge0: port 3(hsr0) entered listening state [ 357.597883][ T9037] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1420'. [ 357.656462][ T9040] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1421'. [ 357.905059][ T9048] netlink: 'syz.0.1423': attribute type 10 has an invalid length. [ 357.924744][ T9048] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1423'. [ 358.829966][ T9048] team0: Port device virt_wifi0 removed [ 359.108808][ T9067] netlink: 'syz.3.1428': attribute type 9 has an invalid length. [ 359.200153][ T9067] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1428'. [ 359.488575][ T9073] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1440'. [ 359.782549][ T9076] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 359.866490][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1434'. [ 359.910264][ T9087] netlink: 'syz.2.1432': attribute type 1 has an invalid length. [ 360.054518][ T9087] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 360.119839][ T9087] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1432'. [ 360.180600][ T9088] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 360.192896][ T9088] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1435'. [ 360.230287][ T9088] device hsr0 entered promiscuous mode [ 360.263527][ T9088] bridge0: port 3(hsr0) entered blocking state [ 360.282195][ T9102] netlink: 'syz.1.1437': attribute type 9 has an invalid length. [ 360.282673][ T9088] bridge0: port 3(hsr0) entered disabled state [ 360.754432][ T9112] netlink: 'syz.3.1439': attribute type 2 has an invalid length. [ 360.784290][ T9112] netlink: 'syz.3.1439': attribute type 8 has an invalid length. [ 360.828472][ T9104] netlink: 'syz.3.1439': attribute type 21 has an invalid length. [ 360.884762][ T9104] netlink: 'syz.3.1439': attribute type 2 has an invalid length. [ 360.916324][ T9104] netlink: 'syz.3.1439': attribute type 8 has an invalid length. [ 362.220448][ T9145] __nla_validate_parse: 12 callbacks suppressed [ 362.220487][ T9145] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1447'. [ 362.298516][ T9130] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 362.495583][ T9149] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1450'. [ 363.232551][ T9152] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 363.262536][ T9154] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1451'. [ 363.434533][ T9154] device virt_wifi0 left promiscuous mode [ 363.485524][ T9154] team0: Port device virt_wifi0 removed [ 363.648642][ T9162] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1453'. [ 363.687567][ T9163] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 363.802862][ T9163] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 363.834084][ T9163] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 363.867661][ T9163] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 363.900133][ T9159] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1453'. [ 364.114412][ T9173] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1459'. [ 364.175124][ T9179] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1459'. [ 365.174498][ T9206] validate_nla: 10 callbacks suppressed [ 365.174519][ T9206] netlink: 'syz.4.1468': attribute type 3 has an invalid length. [ 365.254312][ T9206] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1468'. [ 365.592182][ T9215] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1471'. [ 365.652285][ T9213] netlink: 'syz.3.1470': attribute type 29 has an invalid length. [ 365.661758][ T9215] netlink: 'syz.1.1471': attribute type 9 has an invalid length. [ 365.661806][ T9215] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1471'. [ 366.007170][ T9213] netlink: 'syz.3.1470': attribute type 29 has an invalid length. [ 366.397653][ T9220] netlink: 'syz.4.1473': attribute type 9 has an invalid length. [ 366.406163][ T9217] netlink: 'syz.3.1470': attribute type 29 has an invalid length. [ 366.424418][ T9226] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 366.563847][ T9226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.921898][ T9230] netlink: 'syz.1.1474': attribute type 9 has an invalid length. [ 367.378904][ T9241] netlink: 'syz.2.1475': attribute type 10 has an invalid length. [ 367.537723][ T9241] __nla_validate_parse: 7 callbacks suppressed [ 367.537742][ T9241] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1475'. [ 368.165429][ T9241] device virt_wifi0 left promiscuous mode [ 368.229954][ T9241] team0: Port device virt_wifi0 removed [ 368.747407][ T9259] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1483'. [ 369.217062][ T9266] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1485'. [ 369.259362][ T9266] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 369.337486][ T9266] CPU: 1 PID: 9266 Comm: syz.2.1485 Not tainted syzkaller #0 [ 369.344933][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 369.355019][ T9266] Call Trace: [ 369.358333][ T9266] [ 369.361289][ T9266] dump_stack_lvl+0x188/0x250 [ 369.366002][ T9266] ? show_regs_print_info+0x20/0x20 [ 369.371237][ T9266] ? load_image+0x400/0x400 [ 369.375790][ T9266] sysfs_warn_dup+0x8a/0xa0 [ 369.380337][ T9266] sysfs_do_create_link_sd+0xc0/0x110 [ 369.385754][ T9266] device_add+0x7f6/0x1000 [ 369.390220][ T9266] wiphy_register+0x1e81/0x2c30 [ 369.395128][ T9266] ? cfg80211_event_work+0x40/0x40 [ 369.400267][ T9266] ? minstrel_ht_alloc+0x808/0x980 [ 369.405436][ T9266] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 369.411546][ T9266] ieee80211_register_hw+0x2aa1/0x3af0 [ 369.417067][ T9266] ? ieee80211_tasklet_handler+0x20/0x20 [ 369.422752][ T9266] ? rcu_is_watching+0x11/0xa0 [ 369.427553][ T9266] ? memset+0x1e/0x40 [ 369.431571][ T9266] ? hrtimer_init+0x10c/0x220 [ 369.436380][ T9266] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 369.442159][ T9266] hwsim_new_radio_nl+0xa6f/0xc40 [ 369.447242][ T9266] genl_rcv_msg+0xcea/0xf90 [ 369.451801][ T9266] ? genl_bind+0x380/0x380 [ 369.456275][ T9266] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 369.461521][ T9266] ? verify_lock_unused+0x140/0x140 [ 369.466775][ T9266] ? perf_trace_lock+0xe4/0x390 [ 369.471658][ T9266] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 369.478648][ T9266] netlink_rcv_skb+0x1f5/0x440 [ 369.483435][ T9266] ? genl_bind+0x380/0x380 [ 369.487870][ T9266] ? netlink_ack+0xb50/0xb50 [ 369.492486][ T9266] ? __lock_acquire+0x7d10/0x7d10 [ 369.497555][ T9266] ? down_read+0x1aa/0x2e0 [ 369.501997][ T9266] genl_rcv+0x24/0x40 [ 369.505995][ T9266] netlink_unicast+0x774/0x920 [ 369.510784][ T9266] netlink_sendmsg+0x8ba/0xbe0 [ 369.515571][ T9266] ? netlink_getsockopt+0x570/0x570 [ 369.520795][ T9266] ? aa_sock_msg_perm+0x94/0x150 [ 369.525752][ T9266] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 369.531052][ T9266] ? security_socket_sendmsg+0x7c/0xa0 [ 369.536529][ T9266] ? netlink_getsockopt+0x570/0x570 [ 369.541862][ T9266] ____sys_sendmsg+0x5b7/0x8f0 [ 369.546655][ T9266] ? __sys_sendmsg_sock+0x30/0x30 [ 369.551711][ T9266] ? import_iovec+0x6f/0xa0 [ 369.556241][ T9266] ___sys_sendmsg+0x236/0x2e0 [ 369.561039][ T9266] ? __sys_sendmsg+0x2a0/0x2a0 [ 369.565836][ T9266] ? trace_event_raw_event_lock+0x270/0x270 [ 369.571954][ T9266] __se_sys_sendmsg+0x1af/0x290 [ 369.576827][ T9266] ? __x64_sys_sendmsg+0x80/0x80 [ 369.581777][ T9266] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 369.587893][ T9266] ? lockdep_hardirqs_on+0x94/0x140 [ 369.593116][ T9266] do_syscall_64+0x4c/0xa0 [ 369.597546][ T9266] ? clear_bhb_loop+0x30/0x80 [ 369.602266][ T9266] ? clear_bhb_loop+0x30/0x80 [ 369.607056][ T9266] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.612968][ T9266] RIP: 0033:0x7f423e22ae59 [ 369.617455][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.637086][ T9266] RSP: 002b:00007f423c442028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.645647][ T9266] RAX: ffffffffffffffda RBX: 00007f423e4a4180 RCX: 00007f423e22ae59 [ 369.653638][ T9266] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 369.661622][ T9266] RBP: 00007f423e2c0d6f R08: 0000000000000000 R09: 0000000000000000 [ 369.669700][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.677682][ T9266] R13: 00007f423e4a4218 R14: 00007f423e4a4180 R15: 00007fff1d53c618 [ 369.685694][ T9266] [ 369.759676][ T9272] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1488'. [ 369.826977][ T9271] netlink: 'syz.0.1487': attribute type 21 has an invalid length. [ 369.896944][ T9276] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1488'. [ 370.088866][ T9273] device netdevsim0 entered promiscuous mode [ 370.119938][ T9273] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 370.536206][ T9286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1502'. [ 370.727809][ T9296] validate_nla: 2 callbacks suppressed [ 370.727829][ T9296] netlink: 'syz.0.1493': attribute type 9 has an invalid length. [ 370.758147][ T9296] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1493'. [ 371.245919][ T9302] netlink: 'syz.1.1495': attribute type 3 has an invalid length. [ 371.275939][ T9302] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1495'. [ 371.744352][ T9312] netlink: 'syz.2.1498': attribute type 29 has an invalid length. [ 371.766646][ T9319] netlink: 8435 bytes leftover after parsing attributes in process `syz.2.1498'. [ 371.801238][ T9312] netlink: 'syz.2.1498': attribute type 29 has an invalid length. [ 371.963403][ T9312] netlink: 'syz.2.1498': attribute type 29 has an invalid length. [ 372.049693][ T9324] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1503'. [ 372.150096][ T9330] netlink: 'syz.4.1503': attribute type 9 has an invalid length. [ 372.291346][ T9332] netlink: 'syz.1.1504': attribute type 10 has an invalid length. [ 372.342064][ T9332] device netdevsim0 entered promiscuous mode [ 372.370737][ T9332] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 373.522608][ T9345] netlink: 'syz.4.1509': attribute type 9 has an invalid length. [ 373.554360][ T9345] __nla_validate_parse: 2 callbacks suppressed [ 373.597626][ T9359] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 373.605885][ T9345] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1509'. [ 373.617384][ T9359] netlink: 'syz.0.1511': attribute type 4 has an invalid length. [ 373.625996][ T9359] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1511'. [ 373.663984][ T9358] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1513'. [ 374.782207][ T9378] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.1519'. [ 374.816609][ T9373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1518'. [ 374.924469][ T9376] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1519'. [ 375.059359][ T9383] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.1520'. [ 375.279380][ T9385] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1531'. [ 376.471579][ T9404] validate_nla: 7 callbacks suppressed [ 376.471617][ T9404] netlink: 'syz.1.1535': attribute type 29 has an invalid length. [ 376.501512][ T9410] netlink: 8435 bytes leftover after parsing attributes in process `syz.1.1535'. [ 376.520795][ T9404] netlink: 'syz.1.1535': attribute type 29 has an invalid length. [ 376.564456][ T9410] netlink: 'syz.1.1535': attribute type 29 has an invalid length. [ 376.899211][ T9416] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1527'. [ 377.048238][ T9421] netlink: 'syz.3.1528': attribute type 9 has an invalid length. [ 377.368172][ T9423] netlink: 'syz.1.1532': attribute type 21 has an invalid length. [ 377.441567][ T9433] netlink: 'syz.0.1530': attribute type 3 has an invalid length. [ 377.610612][ T9440] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 378.073675][ T9451] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 378.129619][ T9447] netlink: 'syz.0.1550': attribute type 21 has an invalid length. [ 378.566932][ T9461] __nla_validate_parse: 3 callbacks suppressed [ 378.566970][ T9461] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1543'. [ 378.919005][ T9469] netlink: 'syz.4.1556': attribute type 21 has an invalid length. [ 379.075321][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.081732][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.611792][ T9485] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.1549'. [ 379.617692][ T9480] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1548'. [ 379.672140][ T9484] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1548'. [ 379.701104][ T9492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.729383][ T9492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.802980][ T9492] device batadv_slave_0 entered promiscuous mode [ 379.820361][ T9492] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 380.066514][ T9495] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 380.196904][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.259923][ T9497] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 381.229313][ T9525] netlink: 'syz.4.1560': attribute type 11 has an invalid length. [ 381.265188][ T9525] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.1560'. [ 381.446411][ T9525] bridge0: port 3(hsr0) entered disabled state [ 381.484449][ T9525] device bridge_slave_1 left promiscuous mode [ 381.512390][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.538243][ T9531] sctp: [Deprecated]: syz.2.1561 (pid 9531) Use of int in max_burst socket option deprecated. [ 381.538243][ T9531] Use struct sctp_assoc_value instead [ 381.579109][ T9525] device ÿÿÿÿÿÿ left promiscuous mode [ 381.588587][ T9525] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 381.970681][ T9539] validate_nla: 4 callbacks suppressed [ 381.970719][ T9539] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 382.035460][ T9539] netlink: 'syz.0.1573': attribute type 4 has an invalid length. [ 382.142505][ T9539] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1573'. [ 382.168579][ T9548] netlink: 'syz.4.1564': attribute type 9 has an invalid length. [ 382.226103][ T9536] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1564'. [ 382.264763][ T9548] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1564'. [ 382.305668][ T9540] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1565'. [ 382.503466][ T9551] netlink: 'syz.1.1565': attribute type 9 has an invalid length. [ 382.526484][ T9551] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1565'. [ 383.890426][ T9581] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 383.903858][ T9585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1577'. [ 383.918012][ T9581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'. [ 383.990629][ T9581] bond0: (slave team0): Releasing backup interface [ 384.079452][ T9581] bridge0: port 5(team0) entered blocking state [ 384.095061][ T9581] bridge0: port 5(team0) entered disabled state [ 384.136320][ T9581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 384.181098][ T9587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1579'. [ 384.270472][ T9589] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 384.304537][ T9589] netlink: 'syz.0.1578': attribute type 4 has an invalid length. [ 384.327570][ T9589] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1578'. [ 384.488698][ T9597] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1580'. [ 384.619773][ T9601] netlink: 'syz.3.1581': attribute type 9 has an invalid length. [ 384.698979][ T9598] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1581'. [ 384.737239][ T9601] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1581'. [ 384.869318][ T9603] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1582'. [ 384.946354][ T9594] netlink: 'syz.2.1580': attribute type 9 has an invalid length. [ 384.987030][ T9594] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1580'. [ 385.236790][ T9613] netlink: 'syz.3.1583': attribute type 10 has an invalid length. [ 385.283832][ T9613] device batadv_slave_0 entered promiscuous mode [ 385.322148][ T9613] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 385.369372][ T9603] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1582'. [ 385.519641][ T9616] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 387.141872][ T9643] validate_nla: 5 callbacks suppressed [ 387.141892][ T9643] netlink: 'syz.2.1593': attribute type 9 has an invalid length. [ 387.549273][ T9660] netlink: 'syz.0.1597': attribute type 9 has an invalid length. [ 388.155100][ T9662] netlink: 'syz.3.1600': attribute type 11 has an invalid length. [ 388.169394][ T9654] netlink: 'syz.1.1598': attribute type 9 has an invalid length. [ 388.758600][ T9679] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 388.865682][ T9679] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 388.914707][ T9679] __nla_validate_parse: 9 callbacks suppressed [ 388.914754][ T9679] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1604'. [ 389.355744][ T9682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.659701][ T9701] netlink: 'syz.2.1610': attribute type 1 has an invalid length. [ 389.937693][ T9701] netlink: 'syz.2.1610': attribute type 4 has an invalid length. [ 390.069801][ T9701] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1610'. [ 390.271509][ T9720] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1614'. [ 390.290677][ T9717] netlink: 'syz.0.1613': attribute type 11 has an invalid length. [ 390.356904][ T9717] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1613'. [ 390.476967][ T9722] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1615'. [ 390.481405][ T9716] netlink: 'syz.4.1614': attribute type 9 has an invalid length. [ 390.535654][ T9716] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1614'. [ 390.713822][ T9726] bridge0: port 3(hsr0) entered disabled state [ 390.888195][ T9726] device bridge_slave_1 left promiscuous mode [ 390.984231][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.027522][ T9726] device bridge_slave_0 left promiscuous mode [ 391.135948][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.429283][ T9733] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1618'. [ 391.523029][ T9734] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1617'. [ 391.594003][ T9722] netlink: 'syz.3.1615': attribute type 9 has an invalid length. [ 391.612873][ T9722] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1615'. [ 391.967183][ T9747] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1621'. [ 393.662994][ T9770] netlink: 'syz.4.1628': attribute type 9 has an invalid length. [ 394.418121][ T9769] __nla_validate_parse: 3 callbacks suppressed [ 394.418144][ T9769] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1629'. [ 394.666638][ T9775] netlink: 'syz.3.1629': attribute type 9 has an invalid length. [ 394.756953][ T9775] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1629'. [ 394.951950][ T9786] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 395.005665][ T9786] netlink: 'syz.4.1633': attribute type 4 has an invalid length. [ 395.045786][ T9786] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1633'. [ 395.277480][ T9793] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.1634'. [ 395.315099][ T9796] netlink: 'syz.2.1634': attribute type 9 has an invalid length. [ 395.344728][ T9792] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1632'. [ 395.416448][ T9796] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1634'. [ 396.574681][ T9808] netlink: 144452 bytes leftover after parsing attributes in process `syz.1.1636'. [ 396.682179][ T9808] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 396.769166][ T9808] CPU: 1 PID: 9808 Comm: syz.1.1636 Not tainted syzkaller #0 [ 396.776623][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.786723][ T9808] Call Trace: [ 396.790030][ T9808] [ 396.792988][ T9808] dump_stack_lvl+0x188/0x250 [ 396.797715][ T9808] ? show_regs_print_info+0x20/0x20 [ 396.802950][ T9808] ? load_image+0x400/0x400 [ 396.807499][ T9808] sysfs_warn_dup+0x8a/0xa0 [ 396.812030][ T9808] sysfs_do_create_link_sd+0xc0/0x110 [ 396.817437][ T9808] device_add+0x7f6/0x1000 [ 396.821892][ T9808] wiphy_register+0x1e81/0x2c30 [ 396.826894][ T9808] ? cfg80211_event_work+0x40/0x40 [ 396.832036][ T9808] ? minstrel_ht_alloc+0x808/0x980 [ 396.837195][ T9808] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 396.843307][ T9808] ieee80211_register_hw+0x2aa1/0x3af0 [ 396.848817][ T9808] ? ieee80211_tasklet_handler+0x20/0x20 [ 396.854485][ T9808] ? rcu_is_watching+0x11/0xa0 [ 396.859279][ T9808] ? memset+0x1e/0x40 [ 396.863296][ T9808] ? hrtimer_init+0x10c/0x220 [ 396.868014][ T9808] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 396.873793][ T9808] hwsim_new_radio_nl+0xa6f/0xc40 [ 396.878878][ T9808] genl_rcv_msg+0xcea/0xf90 [ 396.883864][ T9808] ? genl_bind+0x380/0x380 [ 396.888552][ T9808] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 396.893881][ T9808] ? verify_lock_unused+0x140/0x140 [ 396.899110][ T9808] ? perf_trace_lock_acquire+0xed/0x3e0 [ 396.904713][ T9808] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 396.911347][ T9808] ? perf_trace_lock+0xe4/0x390 [ 396.916228][ T9808] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 396.922779][ T9808] netlink_rcv_skb+0x1f5/0x440 [ 396.927571][ T9808] ? genl_bind+0x380/0x380 [ 396.932024][ T9808] ? netlink_ack+0xb50/0xb50 [ 396.936649][ T9808] ? __lock_acquire+0x7d10/0x7d10 [ 396.941708][ T9808] ? down_read+0x1aa/0x2e0 [ 396.946152][ T9808] genl_rcv+0x24/0x40 [ 396.950164][ T9808] netlink_unicast+0x774/0x920 [ 396.954967][ T9808] netlink_sendmsg+0x8ba/0xbe0 [ 396.959763][ T9808] ? netlink_getsockopt+0x570/0x570 [ 396.964999][ T9808] ? aa_sock_msg_perm+0x94/0x150 [ 396.969959][ T9808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 396.975356][ T9808] ? security_socket_sendmsg+0x7c/0xa0 [ 396.980851][ T9808] ? netlink_getsockopt+0x570/0x570 [ 396.986055][ T9808] ____sys_sendmsg+0x5b7/0x8f0 [ 396.990842][ T9808] ? __sys_sendmsg_sock+0x30/0x30 [ 396.995880][ T9808] ? import_iovec+0x6f/0xa0 [ 397.000393][ T9808] ___sys_sendmsg+0x236/0x2e0 [ 397.005087][ T9808] ? __sys_sendmsg+0x2a0/0x2a0 [ 397.009871][ T9808] ? trace_event_raw_event_lock+0x270/0x270 [ 397.015799][ T9808] __se_sys_sendmsg+0x1af/0x290 [ 397.020664][ T9808] ? __x64_sys_sendmsg+0x80/0x80 [ 397.025696][ T9808] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 397.031705][ T9808] ? lockdep_hardirqs_on+0x94/0x140 [ 397.036960][ T9808] do_syscall_64+0x4c/0xa0 [ 397.041387][ T9808] ? clear_bhb_loop+0x30/0x80 [ 397.046077][ T9808] ? clear_bhb_loop+0x30/0x80 [ 397.050771][ T9808] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.056759][ T9808] RIP: 0033:0x7fbd317b8e59 [ 397.061269][ T9808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.080892][ T9808] RSP: 002b:00007fbd2f9d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.089325][ T9808] RAX: ffffffffffffffda RBX: 00007fbd31a32180 RCX: 00007fbd317b8e59 [ 397.097307][ T9808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 397.105301][ T9808] RBP: 00007fbd3184ed6f R08: 0000000000000000 R09: 0000000000000000 [ 397.113290][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.121269][ T9808] R13: 00007fbd31a32218 R14: 00007fbd31a32180 R15: 00007ffd5cd1f938 [ 397.129265][ T9808] [ 397.647394][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 397.890395][ T9826] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1643'. [ 398.108572][ T9831] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 398.515992][ T9826] netlink: 'syz.1.1643': attribute type 9 has an invalid length. [ 398.528821][ T9826] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1643'. [ 398.641753][ T9846] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 398.672017][ T9846] netlink: 'syz.3.1648': attribute type 4 has an invalid length. [ 399.778350][ T9870] __nla_validate_parse: 4 callbacks suppressed [ 399.778371][ T9870] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1655'. [ 400.145542][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 400.261817][ T9880] netlink: 'syz.2.1653': attribute type 10 has an invalid length. [ 400.356075][ T9880] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1653'. [ 400.585132][ T9878] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1653'. [ 400.984242][ T9878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.096749][ T9878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.178231][ T9878] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 401.210568][ T9878] bond0 (unregistering): Released all slaves [ 401.236254][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1670'. [ 401.413937][ T9896] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 401.446430][ T9896] netlink: 'syz.0.1672': attribute type 4 has an invalid length. [ 401.566654][ T9896] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1672'. [ 401.659712][ T9900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.023020][ T9916] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 402.135810][ T9916] netlink: 'syz.2.1663': attribute type 4 has an invalid length. [ 402.144035][ T9916] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1663'. [ 403.026890][ T9931] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1679'. [ 403.262560][ T9936] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1668'. [ 403.736139][ T9934] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1666'. [ 405.328588][ T9972] bridge0: port 4(dummy0) entered disabled state [ 405.335240][ T9972] bridge0: port 3(syz_tun) entered disabled state [ 405.341869][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.442597][ T9973] bridge0: port 4(dummy0) entered disabled state [ 405.458992][ T9973] device syz_tun left promiscuous mode [ 405.491359][ T9973] bridge0: port 3(syz_tun) entered disabled state [ 405.516540][ T9973] device bridge_slave_1 left promiscuous mode [ 405.561399][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.630378][ T9973] device ÿÿÿÿÿÿ left promiscuous mode [ 405.646812][ T9973] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 405.734508][ T9973] device bridge0 left promiscuous mode [ 405.768629][ T9973] team0: Port device bridge0 removed [ 405.840856][ T9981] __nla_validate_parse: 2 callbacks suppressed [ 405.840874][ T9981] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1685'. [ 405.972101][ T9978] netlink: 'syz.4.1684': attribute type 1 has an invalid length. [ 406.132884][ T9978] netlink: 'syz.4.1684': attribute type 4 has an invalid length. [ 406.338681][ T9978] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1684'. [ 406.475071][ T9984] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1686'. [ 406.696286][ T9984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.766116][ T9984] device bond_slave_0 left promiscuous mode [ 406.825319][ T9984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.866394][ T9984] device bond_slave_1 left promiscuous mode [ 406.935262][ T9984] bond0 (unregistering): (slave team0): Releasing backup interface [ 406.974158][ T9984] device team0 left promiscuous mode [ 406.979917][ T9984] device team_slave_0 left promiscuous mode [ 407.014797][ T9984] device team_slave_1 left promiscuous mode [ 407.039995][ T9984] device geneve1 left promiscuous mode [ 407.096308][ T9984] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 407.121439][ T9984] device netdevsim0 left promiscuous mode [ 407.158139][ T9984] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 407.187113][ T9984] device batadv_slave_0 left promiscuous mode [ 407.212596][ T9984] bond0 (unregistering): Released all slaves [ 407.469571][ T9993] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1688'. [ 407.632398][T10004] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1689'. [ 407.899588][T10002] netlink: 'syz.0.1697': attribute type 17 has an invalid length. [ 407.969880][T10002] netlink: 'syz.0.1697': attribute type 16 has an invalid length. [ 408.019977][T10002] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1697'. [ 408.093221][T10001] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1687'. [ 408.626580][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 408.739127][T10025] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 408.887663][T10025] netlink: 'syz.1.1704': attribute type 4 has an invalid length. [ 409.063039][T10025] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1704'. [ 409.211851][T10029] netlink: 144452 bytes leftover after parsing attributes in process `syz.2.1691'. [ 409.429694][T10035] netlink: 'syz.0.1692': attribute type 10 has an invalid length. [ 409.715596][T10035] device geneve0 entered promiscuous mode [ 410.197612][T10035] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 410.281308][T10029] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 410.294883][T10029] CPU: 1 PID: 10029 Comm: syz.2.1691 Not tainted syzkaller #0 [ 410.302490][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.312581][T10029] Call Trace: [ 410.315886][T10029] [ 410.318847][T10029] dump_stack_lvl+0x188/0x250 [ 410.323554][T10029] ? show_regs_print_info+0x20/0x20 [ 410.328763][T10029] ? load_image+0x400/0x400 [ 410.333303][T10029] sysfs_warn_dup+0x8a/0xa0 [ 410.337809][T10029] sysfs_do_create_link_sd+0xc0/0x110 [ 410.343206][T10029] device_add+0x7f6/0x1000 [ 410.347661][T10029] wiphy_register+0x1e81/0x2c30 [ 410.352557][T10029] ? cfg80211_event_work+0x40/0x40 [ 410.357770][T10029] ? minstrel_ht_alloc+0x808/0x980 [ 410.362906][T10029] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 410.368992][T10029] ieee80211_register_hw+0x2aa1/0x3af0 [ 410.374476][T10029] ? ieee80211_tasklet_handler+0x20/0x20 [ 410.380124][T10029] ? rcu_is_watching+0x11/0xa0 [ 410.384893][T10029] ? memset+0x1e/0x40 [ 410.388966][T10029] ? hrtimer_init+0x10c/0x220 [ 410.393656][T10029] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 410.399397][T10029] hwsim_new_radio_nl+0xa6f/0xc40 [ 410.404578][T10029] genl_rcv_msg+0xcea/0xf90 [ 410.409128][T10029] ? lock_chain_count+0x20/0x20 [ 410.414034][T10029] ? genl_bind+0x380/0x380 [ 410.418463][T10029] ? mark_lock+0x94/0x320 [ 410.422822][T10029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 410.428811][T10029] ? lock_chain_count+0x20/0x20 [ 410.433681][T10029] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 410.439861][T10029] ? lockdep_hardirqs_on+0x94/0x140 [ 410.445165][T10029] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 410.451693][T10029] netlink_rcv_skb+0x1f5/0x440 [ 410.456470][T10029] ? genl_bind+0x380/0x380 [ 410.460904][T10029] ? netlink_ack+0xb50/0xb50 [ 410.465501][T10029] ? __lock_acquire+0x7d10/0x7d10 [ 410.470543][T10029] ? down_read+0x1aa/0x2e0 [ 410.474968][T10029] genl_rcv+0x24/0x40 [ 410.478954][T10029] netlink_unicast+0x774/0x920 [ 410.483738][T10029] netlink_sendmsg+0x8ba/0xbe0 [ 410.488513][T10029] ? netlink_getsockopt+0x570/0x570 [ 410.493712][T10029] ? audit_tree_destroy_watch+0x20/0x20 [ 410.499276][T10029] ? aa_sock_msg_perm+0x94/0x150 [ 410.504315][T10029] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 410.509606][T10029] ? security_socket_sendmsg+0x7c/0xa0 [ 410.515071][T10029] ? netlink_getsockopt+0x570/0x570 [ 410.520276][T10029] ____sys_sendmsg+0x5b7/0x8f0 [ 410.525058][T10029] ? __sys_sendmsg_sock+0x30/0x30 [ 410.530098][T10029] ? import_iovec+0x6f/0xa0 [ 410.534705][T10029] ___sys_sendmsg+0x236/0x2e0 [ 410.539400][T10029] ? __sys_sendmsg+0x2a0/0x2a0 [ 410.544184][T10029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 410.550193][T10029] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 410.556363][T10029] ? lockdep_hardirqs_on+0x94/0x140 [ 410.561579][T10029] ? __se_sys_sendmsg+0xe8/0x290 [ 410.566524][T10029] ? kasan_check_range+0x84/0x290 [ 410.571563][T10029] __se_sys_sendmsg+0x1af/0x290 [ 410.576435][T10029] ? __x64_sys_sendmsg+0x80/0x80 [ 410.581379][T10029] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 410.587390][T10029] ? lockdep_hardirqs_on+0x94/0x140 [ 410.592605][T10029] do_syscall_64+0x4c/0xa0 [ 410.597040][T10029] ? clear_bhb_loop+0x30/0x80 [ 410.601723][T10029] ? clear_bhb_loop+0x30/0x80 [ 410.606408][T10029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 410.612409][T10029] RIP: 0033:0x7f423e22ae59 [ 410.616834][T10029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.636723][T10029] RSP: 002b:00007f423c463028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.645151][T10029] RAX: ffffffffffffffda RBX: 00007f423e4a4090 RCX: 00007f423e22ae59 [ 410.653134][T10029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 410.661117][T10029] RBP: 00007f423e2c0d6f R08: 0000000000000000 R09: 0000000000000000 [ 410.669106][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.677259][T10029] R13: 00007f423e4a4128 R14: 00007f423e4a4090 R15: 00007fff1d53c618 [ 410.685268][T10029] [ 411.289229][T10044] netlink: 'syz.4.1693': attribute type 9 has an invalid length. [ 411.332622][T10044] __nla_validate_parse: 1 callbacks suppressed [ 411.332644][T10044] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1693'. [ 411.443455][T10070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1705'. [ 411.784403][T10071] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1703'. [ 411.905445][T10079] netlink: 'syz.2.1703': attribute type 9 has an invalid length. [ 411.918788][T10079] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1703'. [ 412.727134][T10085] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 412.754809][T10085] netlink: 'syz.4.1708': attribute type 4 has an invalid length. [ 412.809329][T10085] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1708'. [ 412.904955][T10095] netlink: 'syz.0.1711': attribute type 21 has an invalid length. [ 412.954737][T10095] netlink: 'syz.0.1711': attribute type 7 has an invalid length. [ 412.989197][T10099] netlink: 'syz.2.1710': attribute type 10 has an invalid length. [ 413.451914][T10099] device geneve0 entered promiscuous mode [ 414.644387][T10109] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1712'. [ 414.938716][T10119] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1716'. [ 415.032465][T10119] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 415.161987][T10119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.193908][T10118] netlink: 144452 bytes leftover after parsing attributes in process `syz.3.1715'. [ 415.272658][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 415.339227][T10128] netlink: 'syz.4.1717': attribute type 2 has an invalid length. [ 415.438706][T10118] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 415.474956][T10118] CPU: 0 PID: 10118 Comm: syz.3.1715 Not tainted syzkaller #0 [ 415.482597][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.492695][T10118] Call Trace: [ 415.496008][T10118] [ 415.499015][T10118] dump_stack_lvl+0x188/0x250 [ 415.503738][T10118] ? show_regs_print_info+0x20/0x20 [ 415.508977][T10118] ? load_image+0x400/0x400 [ 415.513535][T10118] sysfs_warn_dup+0x8a/0xa0 [ 415.518076][T10118] sysfs_do_create_link_sd+0xc0/0x110 [ 415.523497][T10118] device_add+0x7f6/0x1000 [ 415.527974][T10118] wiphy_register+0x1e81/0x2c30 [ 415.532895][T10118] ? cfg80211_event_work+0x40/0x40 [ 415.538063][T10118] ? minstrel_ht_alloc+0x808/0x980 [ 415.543244][T10118] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 415.549356][T10118] ieee80211_register_hw+0x2aa1/0x3af0 [ 415.554881][T10118] ? ieee80211_tasklet_handler+0x20/0x20 [ 415.560553][T10118] ? rcu_is_watching+0x11/0xa0 [ 415.565350][T10118] ? memset+0x1e/0x40 [ 415.569453][T10118] ? hrtimer_init+0x10c/0x220 [ 415.574184][T10118] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 415.579973][T10118] hwsim_new_radio_nl+0xa6f/0xc40 [ 415.585059][T10118] genl_rcv_msg+0xcea/0xf90 [ 415.589615][T10118] ? genl_bind+0x380/0x380 [ 415.594065][T10118] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 415.600008][T10118] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 415.605439][T10118] ? verify_lock_unused+0x140/0x140 [ 415.610693][T10118] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 415.616549][T10118] ? perf_trace_lock+0x301/0x390 [ 415.621539][T10118] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 415.628279][T10118] netlink_rcv_skb+0x1f5/0x440 [ 415.633079][T10118] ? genl_bind+0x380/0x380 [ 415.637539][T10118] ? netlink_ack+0xb50/0xb50 [ 415.642158][T10118] ? __lock_acquire+0x7d10/0x7d10 [ 415.647221][T10118] ? down_read+0x1aa/0x2e0 [ 415.651667][T10118] genl_rcv+0x24/0x40 [ 415.655681][T10118] netlink_unicast+0x774/0x920 [ 415.660484][T10118] netlink_sendmsg+0x8ba/0xbe0 [ 415.665301][T10118] ? netlink_getsockopt+0x570/0x570 [ 415.670554][T10118] ? aa_sock_msg_perm+0x94/0x150 [ 415.675527][T10118] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 415.681145][T10118] ? security_socket_sendmsg+0x7c/0xa0 [ 415.686648][T10118] ? netlink_getsockopt+0x570/0x570 [ 415.691878][T10118] ____sys_sendmsg+0x5b7/0x8f0 [ 415.696691][T10118] ? __sys_sendmsg_sock+0x30/0x30 [ 415.701772][T10118] ? import_iovec+0x6f/0xa0 [ 415.706318][T10118] ___sys_sendmsg+0x236/0x2e0 [ 415.711138][T10118] ? __sys_sendmsg+0x2a0/0x2a0 [ 415.715951][T10118] ? trace_event_raw_event_lock+0x270/0x270 [ 415.721909][T10118] __se_sys_sendmsg+0x1af/0x290 [ 415.726798][T10118] ? __x64_sys_sendmsg+0x80/0x80 [ 415.731772][T10118] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 415.738593][T10118] ? lockdep_hardirqs_on+0x94/0x140 [ 415.743921][T10118] do_syscall_64+0x4c/0xa0 [ 415.748373][T10118] ? clear_bhb_loop+0x30/0x80 [ 415.753082][T10118] ? clear_bhb_loop+0x30/0x80 [ 415.757888][T10118] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.763813][T10118] RIP: 0033:0x7f99fd9fde59 [ 415.768266][T10118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.787920][T10118] RSP: 002b:00007f99fbc57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.796384][T10118] RAX: ffffffffffffffda RBX: 00007f99fdc76fa0 RCX: 00007f99fd9fde59 [ 415.804400][T10118] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 415.812409][T10118] RBP: 00007f99fda93d6f R08: 0000000000000000 R09: 0000000000000000 [ 415.820422][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.828516][T10118] R13: 00007f99fdc77038 R14: 00007f99fdc76fa0 R15: 00007ffc731241e8 [ 415.836662][T10118] [ 415.917427][T10130] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1718'. [ 415.991122][T10133] netlink: 'syz.2.1719': attribute type 9 has an invalid length. [ 416.573679][T10141] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 416.619256][T10141] __nla_validate_parse: 2 callbacks suppressed [ 416.619343][T10141] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1722'. [ 416.651616][T10139] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1721'. [ 416.661946][T10137] netlink: 'syz.1.1720': attribute type 9 has an invalid length. [ 416.674719][T10137] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1720'. [ 416.694140][T10141] openvswitch: netlink: Flow key attr not present in new flow. [ 416.808010][T10141] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 416.849215][T10141] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1722'. [ 416.888157][T10141] openvswitch: netlink: Flow key attr not present in new flow. [ 417.156892][T10162] netlink: 'syz.1.1725': attribute type 10 has an invalid length. [ 417.231655][T10162] device geneve0 entered promiscuous mode [ 417.423582][T10162] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 417.476890][T10169] netlink: 'syz.2.1726': attribute type 4 has an invalid length. [ 417.546362][T10166] netlink: 'syz.3.1727': attribute type 2 has an invalid length. [ 417.590517][T10169] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1726'. [ 417.635056][T10166] netlink: 'syz.3.1727': attribute type 8 has an invalid length. [ 417.642930][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1727'. [ 418.257382][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 418.776417][T10190] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 [ 418.937696][T10194] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1734'. [ 419.226079][T10198] netlink: 'syz.3.1735': attribute type 9 has an invalid length. [ 419.311157][T10198] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1735'. [ 419.586197][T10210] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 419.608057][T10210] netlink: 'syz.2.1740': attribute type 4 has an invalid length. [ 419.729520][T10210] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1740'. [ 420.356373][T10219] device geneve0 entered promiscuous mode [ 420.812989][T10234] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 422.128815][T10268] validate_nla: 5 callbacks suppressed [ 422.130048][T10268] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 422.247792][T10268] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 422.331235][T10268] __nla_validate_parse: 6 callbacks suppressed [ 422.331274][T10268] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1756'. [ 422.594242][T10276] netlink: 'syz.3.1757': attribute type 10 has an invalid length. [ 422.664701][T10276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1757'. [ 423.004227][T10286] netlink: 'syz.4.1758': attribute type 10 has an invalid length. [ 423.502206][T10286] device geneve0 entered promiscuous mode [ 423.584507][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 423.760670][T10297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1762'. [ 423.910444][T10305] netlink: 'syz.0.1773': attribute type 1 has an invalid length. [ 423.984072][T10305] netlink: 'syz.0.1773': attribute type 4 has an invalid length. [ 424.041840][T10305] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1773'. [ 424.282970][T10311] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1766'. [ 424.398252][T10313] netlink: 'syz.4.1763': attribute type 4 has an invalid length. [ 424.505108][T10313] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1763'. [ 424.644043][T10325] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 425.288187][T10341] delete_channel: no stack [ 425.296183][T10339] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 425.337653][T10339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1771'. [ 425.588025][T10352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1778'. [ 425.637539][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 426.450820][T10370] netlink: 'syz.4.1786': attribute type 9 has an invalid length. [ 427.394758][T10388] __nla_validate_parse: 3 callbacks suppressed [ 427.394778][T10388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1793'. [ 427.617527][T10396] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1795'. [ 427.712312][T10390] netlink: 'syz.4.1795': attribute type 9 has an invalid length. [ 427.723328][T10390] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1795'. [ 428.099280][T10401] netlink: 'syz.3.1796': attribute type 2 has an invalid length. [ 428.136212][T10402] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1796'. [ 428.375640][T10404] delete_channel: no stack [ 428.557153][T10419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1802'. [ 428.762426][T10421] netlink: 'syz.3.1798': attribute type 4 has an invalid length. [ 428.845305][T10421] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1798'. [ 428.977561][T10423] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1808'. [ 429.043841][T10413] netlink: 'syz.0.1808': attribute type 9 has an invalid length. [ 429.113054][T10429] netlink: 'syz.3.1805': attribute type 39 has an invalid length. [ 429.125139][T10413] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1808'. [ 429.409503][T10436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1807'. [ 429.462513][T10434] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1806'. [ 429.554499][T10439] netlink: 'syz.4.1806': attribute type 9 has an invalid length. [ 429.555934][T10427] netlink: 'syz.2.1803': attribute type 10 has an invalid length. [ 429.726769][T10443] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 429.990414][T10451] netlink: 'syz.4.1814': attribute type 21 has an invalid length. [ 430.009066][T10451] netlink: 'syz.4.1814': attribute type 7 has an invalid length. [ 432.018803][T10488] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 432.443782][T10491] __nla_validate_parse: 8 callbacks suppressed [ 432.443824][T10491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1838'. [ 432.576795][T10495] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1829'. [ 432.773815][T10506] validate_nla: 7 callbacks suppressed [ 432.773843][T10506] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 432.845165][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1836'. [ 433.109015][T10522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1840'. [ 433.155283][T10524] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1839'. [ 433.221284][T10515] netlink: 'syz.1.1837': attribute type 4 has an invalid length. [ 433.309146][T10515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1837'. [ 433.381657][T10529] netlink: 'syz.0.1841': attribute type 9 has an invalid length. [ 433.389506][T10523] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1841'. [ 433.467938][T10529] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1841'. [ 433.548095][T10531] netlink: 'syz.1.1843': attribute type 21 has an invalid length. [ 433.557426][T10531] netlink: 'syz.1.1843': attribute type 7 has an invalid length. [ 433.734885][T10517] netlink: 'syz.2.1839': attribute type 9 has an invalid length. [ 433.742998][T10517] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1839'. [ 434.216504][T10549] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 434.235337][T10549] netlink: 'syz.4.1850': attribute type 4 has an invalid length. [ 434.243783][T10549] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1850'. [ 434.818342][T10558] netlink: 'syz.1.1854': attribute type 4 has an invalid length. [ 435.539910][T10571] netlink: 'syz.3.1857': attribute type 9 has an invalid length. [ 437.739745][T10651] __nla_validate_parse: 10 callbacks suppressed [ 437.739765][T10651] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1888'. [ 437.850586][T10655] validate_nla: 7 callbacks suppressed [ 437.850608][T10655] netlink: 'syz.1.1890': attribute type 21 has an invalid length. [ 437.978279][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 438.083157][T10661] netlink: 'syz.4.1891': attribute type 39 has an invalid length. [ 439.052181][T10663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1894'. [ 439.073112][T10670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1899'. [ 439.099423][T10674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1897'. [ 439.274137][T10684] netlink: 'syz.2.1903': attribute type 27 has an invalid length. [ 439.422495][T10686] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1904'. [ 439.445887][T10686] device veth0_to_bond entered promiscuous mode [ 439.717870][T10706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1913'. [ 439.936984][T10718] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1918'. [ 440.377680][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.384077][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.074013][T10765] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.1936'. [ 441.126745][T10772] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 441.137176][T10771] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1938'. [ 441.664780][T10793] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 441.865228][T10797] netlink: 'syz.1.1951': attribute type 9 has an invalid length. [ 442.848951][T10833] netlink: 'syz.1.1966': attribute type 2 has an invalid length. [ 442.866125][T10836] netlink: 'syz.2.1967': attribute type 29 has an invalid length. [ 442.884507][T10833] __nla_validate_parse: 5 callbacks suppressed [ 442.917467][T10833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1966'. [ 442.962862][T10836] netlink: 'syz.2.1967': attribute type 29 has an invalid length. [ 442.989164][T10839] netlink: 'syz.2.1967': attribute type 29 has an invalid length. [ 443.417506][T10857] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.1976'. [ 443.537475][T10857] netlink: 'syz.1.1976': attribute type 9 has an invalid length. [ 443.584794][T10857] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1976'. [ 444.097484][T10862] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1978'. [ 444.252523][T10866] netlink: 'syz.4.1978': attribute type 9 has an invalid length. [ 444.280805][T10866] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1978'. [ 444.392880][T10877] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1984'. [ 444.436375][T10877] bridge_slave_1: default FDB implementation only supports local addresses [ 445.028816][T10899] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1994'. [ 445.152280][T10905] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1996'. [ 445.186008][T10905] bridge_slave_1: default FDB implementation only supports local addresses [ 445.221507][T10899] netlink: 'syz.3.1994': attribute type 9 has an invalid length. [ 445.270102][T10899] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1994'. [ 445.688919][T10917] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.1999'. [ 445.722503][T10918] netlink: 'syz.4.1999': attribute type 9 has an invalid length. [ 446.397497][T10932] netlink: 'syz.0.2017': attribute type 13 has an invalid length. [ 446.499896][T10932] syz_tun: refused to change device tx_queue_len [ 446.567634][T10932] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 446.789326][T10951] netlink: 'syz.0.2014': attribute type 29 has an invalid length. [ 446.855768][T10951] netlink: 'syz.0.2014': attribute type 29 has an invalid length. [ 448.793059][T11025] __nla_validate_parse: 6 callbacks suppressed [ 448.793080][T11025] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2049'. [ 448.907251][T11025] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 448.943875][T11025] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 451.978315][T11111] tap0: tun_chr_ioctl cmd 1074812118 [ 452.417913][T11127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2088'. [ 454.312748][T11240] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2099'. [ 454.421250][T11240] validate_nla: 3 callbacks suppressed [ 454.421267][T11240] netlink: 'syz.0.2099': attribute type 9 has an invalid length. [ 454.452072][T11240] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2099'. [ 455.076457][T11270] netlink: 'syz.3.2114': attribute type 10 has an invalid length. [ 455.124774][T11270] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2114'. [ 457.538118][T11367] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2152'. [ 457.631623][T11371] netlink: 'syz.4.2152': attribute type 9 has an invalid length. [ 457.694777][T11371] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2152'. [ 457.920373][T11391] netlink: 'syz.2.2163': attribute type 21 has an invalid length. [ 457.949468][T11391] netlink: 'syz.2.2163': attribute type 7 has an invalid length. [ 458.051798][T11403] netlink: 'syz.1.2167': attribute type 29 has an invalid length. [ 458.093901][T11403] netlink: 'syz.1.2167': attribute type 29 has an invalid length. [ 458.140908][T11403] netlink: 'syz.1.2167': attribute type 29 has an invalid length. [ 458.220892][T11414] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2172'. [ 458.548121][T11424] netlink: 'syz.4.2175': attribute type 9 has an invalid length. [ 458.611717][T11424] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2175'. [ 459.150647][T11419] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2175'. [ 459.296932][T11426] IPv6: Can't replace route, no match found [ 459.671714][T11451] netlink: 'syz.4.2188': attribute type 3 has an invalid length. [ 459.709033][T11451] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2188'. [ 460.539652][T11465] netlink: 'syz.4.2194': attribute type 1 has an invalid length. [ 460.562516][T11465] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2194'. [ 460.769185][T11471] netlink: 'syz.2.2197': attribute type 29 has an invalid length. [ 460.781728][T11471] netlink: 'syz.2.2197': attribute type 29 has an invalid length. [ 460.830058][T11471] netlink: 'syz.2.2197': attribute type 29 has an invalid length. [ 461.338244][T11491] IPv6: Can't replace route, no match found [ 461.402484][T11492] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2205'. [ 462.050976][T11520] netlink: 'syz.0.2218': attribute type 21 has an invalid length. [ 462.069823][T11520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2218'. [ 462.089598][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2218'. [ 462.118821][T11522] IPv6: Can't replace route, no match found [ 462.452968][T11532] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2223'. [ 462.526957][T11530] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2222'. [ 462.585380][T11542] netlink: 'syz.1.2222': attribute type 9 has an invalid length. [ 462.597971][T11542] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2222'. [ 462.940342][T11554] netlink: 'syz.1.2232': attribute type 3 has an invalid length. [ 463.047744][T11560] netlink: 'syz.4.2234': attribute type 29 has an invalid length. [ 463.056936][T11554] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2232'. [ 463.106035][T11560] netlink: 'syz.4.2234': attribute type 29 has an invalid length. [ 463.421820][T11570] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2238'. [ 464.587583][T11599] IPv6: Can't replace route, no match found [ 465.919330][T11632] __nla_validate_parse: 6 callbacks suppressed [ 465.919352][T11632] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2263'. [ 465.968304][T11634] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2266'. [ 466.062080][T11638] validate_nla: 7 callbacks suppressed [ 466.062097][T11638] netlink: 'syz.3.2267': attribute type 2 has an invalid length. [ 466.077746][T11638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2267'. [ 466.096463][T11634] netlink: 'syz.4.2266': attribute type 9 has an invalid length. [ 466.140533][T11634] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2266'. [ 466.577394][T11659] netlink: 'syz.4.2276': attribute type 3 has an invalid length. [ 466.634365][T11659] netlink: 'syz.4.2276': attribute type 7 has an invalid length. [ 466.671312][T11659] netlink: 198628 bytes leftover after parsing attributes in process `syz.4.2276'. [ 466.862726][T11662] netlink: 'syz.3.2277': attribute type 2 has an invalid length. [ 466.884630][T11662] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2277'. [ 466.893789][T11668] netlink: 'syz.4.2279': attribute type 2 has an invalid length. [ 466.904708][T11668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2279'. [ 467.276917][T11692] netlink: 'syz.4.2290': attribute type 10 has an invalid length. [ 467.384010][T11692] team0: Device wg1 is of different type [ 467.719871][T11710] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 467.759839][T11707] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2295'. [ 467.819461][T11707] netlink: 'syz.4.2295': attribute type 9 has an invalid length. [ 467.845976][T11707] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2295'. [ 467.858564][T11714] IPv6: Can't replace route, no match found [ 468.332397][T11733] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 469.089243][T11763] netlink: 'syz.0.2322': attribute type 1 has an invalid length. [ 469.160156][T11763] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2322'. [ 469.168023][T11768] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 469.297131][T11775] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 470.058483][T11810] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 470.308808][T11815] device syzkaller0 entered promiscuous mode [ 471.420742][T11852] __nla_validate_parse: 5 callbacks suppressed [ 471.420824][T11852] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.2361'. [ 471.453397][T11838] validate_nla: 3 callbacks suppressed [ 471.453414][T11838] netlink: 'syz.1.2355': attribute type 9 has an invalid length. [ 471.475257][T11838] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2355'. [ 471.801105][T11866] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 471.860606][T11866] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2365'. [ 472.214017][T11878] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2371'. [ 472.640394][T11890] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2374'. [ 472.932080][T11886] netlink: 'syz.3.2374': attribute type 9 has an invalid length. [ 472.978244][T11886] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2374'. [ 473.569145][T11912] device syzkaller0 entered promiscuous mode [ 474.312865][T11941] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2395'. [ 474.358360][T11942] netlink: 'syz.0.2395': attribute type 9 has an invalid length. [ 474.435027][T11942] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2395'. [ 474.916293][T11981] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2413'. [ 474.948142][T11981] netlink: 'syz.0.2413': attribute type 9 has an invalid length. [ 474.952137][T11984] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2416'. [ 475.692496][T12013] netlink: 'syz.3.2428': attribute type 9 has an invalid length. [ 476.867564][T12049] device syzkaller0 entered promiscuous mode [ 476.907788][T12055] __nla_validate_parse: 3 callbacks suppressed [ 476.907806][T12055] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2440'. [ 476.955652][T12055] netlink: 'syz.3.2440': attribute type 9 has an invalid length. [ 476.963446][T12055] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2440'. [ 477.333537][T12077] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2449'. [ 477.402620][T12077] netlink: 'syz.2.2449': attribute type 9 has an invalid length. [ 477.455004][T12077] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2449'. [ 477.980412][T12085] netlink: 'syz.3.2452': attribute type 7 has an invalid length. [ 478.000227][T12085] netlink: 'syz.3.2452': attribute type 6 has an invalid length. [ 478.037364][T12090] ¥: port 1(team0) entered blocking state [ 478.056401][T12090] ¥: port 1(team0) entered disabled state [ 478.606649][T12103] device syzkaller0 entered promiscuous mode [ 479.022752][T12124] netlink: 'syz.2.2469': attribute type 2 has an invalid length. [ 479.083142][T12124] netlink: 'syz.2.2469': attribute type 9 has an invalid length. [ 479.136881][T12124] netlink: 'syz.2.2469': attribute type 10 has an invalid length. [ 479.156448][T12124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2469'. [ 479.191863][T12136] netlink: 'syz.3.2470': attribute type 9 has an invalid length. [ 479.205630][T12125] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2470'. [ 479.230393][T12136] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2470'. [ 479.962427][T12162] netlink: set zone limit has 8 unknown bytes [ 480.057500][T12164] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2483'. [ 480.098966][T12164] netlink: 'syz.1.2483': attribute type 9 has an invalid length. [ 480.148870][T12164] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2483'. [ 481.287267][T12216] netlink: 'syz.0.2500': attribute type 9 has an invalid length. [ 481.319756][T12202] ¥: port 1(team0) entered blocking state [ 481.321766][T12216] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2500'. [ 481.338529][T12202] ¥: port 1(team0) entered disabled state [ 482.532837][T12249] __nla_validate_parse: 1 callbacks suppressed [ 482.532857][T12249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2514'. [ 482.577254][T12251] ¥: port 1(team0) entered blocking state [ 482.594294][T12251] ¥: port 1(team0) entered disabled state [ 482.603322][T12251] device team0 entered promiscuous mode [ 482.609251][T12251] device team_slave_0 entered promiscuous mode [ 482.617226][T12251] device team_slave_1 entered promiscuous mode [ 482.623961][T12251] device geneve1 entered promiscuous mode [ 482.630265][T12251] device virt_wifi0 entered promiscuous mode [ 482.655394][T12253] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2515'. [ 482.672318][T12254] netlink: 'syz.2.2515': attribute type 9 has an invalid length. [ 482.685879][T12254] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2515'. [ 483.161309][T12277] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 483.169732][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2520'. [ 484.105477][T12298] ¥: port 1(team0) entered blocking state [ 484.151917][T12298] ¥: port 1(team0) entered disabled state [ 484.180933][T12298] device team0 entered promiscuous mode [ 484.213297][T12298] device team_slave_0 entered promiscuous mode [ 484.221056][T12298] device team_slave_1 entered promiscuous mode [ 484.230066][T12298] device geneve1 entered promiscuous mode [ 484.247363][T12299] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2537'. [ 484.273660][T12301] netlink: 'syz.1.2530': attribute type 13 has an invalid length. [ 484.309462][T12301] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2530'. [ 484.326025][T12309] netlink: 'syz.2.2537': attribute type 9 has an invalid length. [ 484.344640][T12309] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2537'. [ 484.710644][T12323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 484.766891][T12327] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 484.800426][T12327] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.2539'. [ 484.845431][T12329] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 484.875276][T12329] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2541'. [ 484.931222][T12331] device syzkaller0 entered promiscuous mode [ 485.828672][T12355] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.2549'. [ 485.959923][T12353] netlink: 'syz.4.2549': attribute type 9 has an invalid length. [ 486.739286][T12375] device syzkaller0 entered promiscuous mode [ 486.756797][T12381] netlink: 'syz.3.2557': attribute type 9 has an invalid length. [ 487.021814][T12383] netlink: 'syz.4.2569': attribute type 9 has an invalid length. [ 487.618552][T12400] __nla_validate_parse: 5 callbacks suppressed [ 487.618597][T12400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2576'. [ 488.160173][T12415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 488.335407][T12411] device syzkaller0 entered promiscuous mode [ 488.792653][T12430] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2577'. [ 488.832239][T12430] netlink: 'syz.2.2577': attribute type 9 has an invalid length. [ 488.841650][T12430] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2577'. [ 489.750355][T12450] device syzkaller0 entered promiscuous mode [ 490.239689][T12477] device pim6reg1 entered promiscuous mode [ 490.289537][T12478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2596'. [ 490.483387][T12482] netlink: 'syz.4.2597': attribute type 9 has an invalid length. [ 490.534987][T12482] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2597'. [ 490.935466][T12479] netlink: 'syz.0.2598': attribute type 3 has an invalid length. [ 490.954712][T12481] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2597'. [ 491.195196][T12490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2609'. [ 491.227713][T12493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 491.657479][T12511] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2607'. [ 491.680600][T12511] openvswitch: netlink: Flow key attribute not present in set flow. [ 491.917464][T12516] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2610'. [ 491.983185][T12516] netlink: 'syz.4.2610': attribute type 9 has an invalid length. [ 492.009713][T12516] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2610'. [ 492.965502][T12537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 493.222446][T12535] device syzkaller0 entered promiscuous mode [ 493.266712][T12551] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2624'. [ 493.335899][T12551] openvswitch: netlink: Flow key attribute not present in set flow. [ 494.030289][T12578] netlink: 'syz.4.2633': attribute type 30 has an invalid length. [ 494.232755][T12582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2636'. [ 494.465969][T12588] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2638'. [ 494.584758][T12588] openvswitch: netlink: Flow key attribute not present in set flow. [ 495.718177][T12609] device syzkaller0 entered promiscuous mode [ 496.321455][T12624] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2649'. [ 499.228322][T12631] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2652'. [ 499.622418][T12642] device syzkaller0 entered promiscuous mode [ 499.701255][T12650] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2659'. [ 499.705655][T12638] device syzkaller0 entered promiscuous mode [ 500.144327][T12661] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 500.352288][T12654] device syzkaller0 entered promiscuous mode [ 500.730628][T12674] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2667'. [ 501.025882][T12674] netlink: 'syz.3.2667': attribute type 9 has an invalid length. [ 501.041146][T12674] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2667'. [ 501.847739][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.854539][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.955624][T12693] device syzkaller0 entered promiscuous mode [ 502.077326][T12700] device syzkaller0 entered promiscuous mode [ 504.980105][T12714] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2679'. [ 504.994617][T12705] device syzkaller0 entered promiscuous mode [ 505.006019][T12714] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 505.014451][T12714] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 505.702654][T12721] device syzkaller0 entered promiscuous mode [ 505.774653][T12730] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2682'. [ 505.925334][T12730] netlink: 'syz.2.2682': attribute type 9 has an invalid length. [ 505.946408][T12730] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2682'. [ 506.386002][T12749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2691'. [ 507.185724][T12759] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2693'. [ 507.217870][T12757] device syzkaller0 entered promiscuous mode [ 508.038210][T12780] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2704'. [ 508.102975][T12779] netlink: 'syz.0.2704': attribute type 9 has an invalid length. [ 508.151781][T12779] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2704'. [ 508.700221][T12793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 508.972961][T12797] -1: renamed from syzkaller0 [ 509.542533][T12821] -1: renamed from syzkaller0 [ 509.730813][T12825] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2721'. [ 509.784544][T12825] netlink: 'syz.2.2721': attribute type 9 has an invalid length. [ 509.793194][T12825] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2721'. [ 510.577870][T12829] device syzkaller0 entered promiscuous mode [ 513.178117][T12844] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2728'. [ 513.657725][T12864] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 513.835371][T12868] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 514.248141][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2741'. [ 514.530278][T12889] device syzkaller0 entered promiscuous mode [ 514.772515][T12893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2755'. [ 515.031574][T12902] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2746'. [ 515.176653][T12902] netlink: 'syz.0.2746': attribute type 9 has an invalid length. [ 515.237720][T12902] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2746'. [ 515.378658][T12910] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.294985][T12929] device syzkaller0 entered promiscuous mode [ 516.893243][T12957] netlink: 'syz.0.2761': attribute type 9 has an invalid length. [ 516.944989][T12957] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2761'. [ 517.622329][T12976] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2771'. [ 517.667609][T12982] netlink: 'syz.3.2771': attribute type 9 has an invalid length. [ 517.682083][T12982] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2771'. [ 517.788463][T12981] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2772'. [ 519.944258][T13002] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2781'. [ 519.986009][T13002] netlink: 'syz.0.2781': attribute type 9 has an invalid length. [ 519.994293][T13002] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2781'. [ 520.713001][T13015] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2786'. [ 520.756017][T13019] netlink: 'syz.4.2786': attribute type 9 has an invalid length. [ 520.763905][T13019] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2786'. [ 523.849232][T13031] device syzkaller0 entered promiscuous mode [ 524.149131][T13050] device syzkaller0 entered promiscuous mode [ 524.352506][T13052] IPv6: Can't replace route, no match found [ 524.601590][T13062] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2801'. [ 524.643987][T13059] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2798'. [ 524.702115][T13062] netlink: 'syz.0.2801': attribute type 9 has an invalid length. [ 524.710781][T13062] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2801'. [ 525.378320][T13059] netlink: 'syz.1.2798': attribute type 9 has an invalid length. [ 525.393604][T13059] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2798'. [ 525.801225][T13078] device syzkaller0 entered promiscuous mode [ 525.848243][T13083] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2809'. [ 525.929590][T13088] netlink: 'syz.3.2809': attribute type 9 has an invalid length. [ 525.937711][T13088] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2809'. [ 527.933794][T13090] device syzkaller0 entered promiscuous mode [ 528.226549][T13100] device syzkaller0 entered promiscuous mode [ 528.455237][T13114] device syzkaller0 entered promiscuous mode [ 528.463242][T13116] netlink: 'syz.1.2820': attribute type 10 has an invalid length. [ 528.471908][T13116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2820'. [ 528.725981][T13122] netlink: 'syz.1.2832': attribute type 4 has an invalid length. [ 531.971546][T13134] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2826'. [ 532.153852][T13134] netlink: 'syz.4.2826': attribute type 9 has an invalid length. [ 532.205070][T13134] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2826'. [ 532.907187][T13149] device syzkaller0 entered promiscuous mode [ 533.091627][T13156] device syzkaller0 entered promiscuous mode [ 533.229886][T13169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2836'. [ 533.363320][T13173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2838'. [ 535.596519][T13235] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2856'. [ 535.947937][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2859'. [ 536.292549][T13241] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2858'. [ 536.634361][T13263] netlink: 'syz.4.2876': attribute type 10 has an invalid length. [ 536.648387][T13263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2876'. [ 537.117115][T13286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2875'. [ 537.428946][T13289] device syzkaller0 entered promiscuous mode [ 537.857928][T13303] netlink: 'syz.3.2882': attribute type 10 has an invalid length. [ 537.885136][T13303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2882'. [ 538.671592][T13312] netlink: 'syz.3.2885': attribute type 3 has an invalid length. [ 538.682588][T13312] netlink: 'syz.3.2885': attribute type 6 has an invalid length. [ 538.691321][T13312] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.2885'. [ 538.920780][T13315] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2886'. [ 538.925418][T13320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2889'. [ 539.028028][T13322] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2886'. [ 539.519569][T13322] device team_slave_0 left promiscuous mode [ 539.543880][T13322] team0: Port device team_slave_0 removed [ 539.833747][T13326] netlink: 'syz.4.2886': attribute type 10 has an invalid length. [ 539.845293][T13326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2886'. [ 540.048879][T13332] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2891'. [ 540.090543][T13332] netlink: 'syz.2.2891': attribute type 9 has an invalid length. [ 540.100375][T13332] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2891'. [ 540.413625][T13339] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2904'. [ 540.588215][T13349] tap0: tun_chr_ioctl cmd 1074025675 [ 540.603428][T13341] netlink: 'syz.1.2894': attribute type 9 has an invalid length. [ 540.630252][T13349] tap0: persist enabled [ 540.659104][T13340] tap0: tun_chr_ioctl cmd 1074025675 [ 540.668884][T13340] tap0: persist enabled [ 540.736154][T13348] device syzkaller0 entered promiscuous mode [ 541.911701][T13379] netlink: 'syz.2.2908': attribute type 9 has an invalid length. [ 545.708656][T13434] __nla_validate_parse: 5 callbacks suppressed [ 545.708696][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 545.724793][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 545.734074][T13434] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2924'. [ 545.750300][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 545.853156][T13434] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2924'. [ 545.979453][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'. [ 545.995861][T13434] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2924'. [ 546.127276][T13436] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2925'. [ 546.468022][T13454] netlink: 'syz.0.2934': attribute type 10 has an invalid length. [ 546.477655][T13454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2934'. [ 548.596583][T13475] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2939'. [ 549.807548][T13513] netlink: 'syz.2.2951': attribute type 9 has an invalid length. [ 550.129514][T13523] netlink: 'syz.1.2953': attribute type 29 has an invalid length. [ 550.285643][T13523] netlink: 'syz.1.2953': attribute type 29 has an invalid length. [ 550.293685][T13526] tap0: tun_chr_ioctl cmd 1074025675 [ 550.300048][T13526] tap0: persist enabled [ 550.314589][T13528] netlink: 'syz.1.2953': attribute type 29 has an invalid length. [ 550.680371][T13535] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 550.704781][T13535] CPU: 1 PID: 13535 Comm: syz.3.2958 Not tainted syzkaller #0 [ 550.712317][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.722414][T13535] Call Trace: [ 550.725732][T13535] [ 550.728692][T13535] dump_stack_lvl+0x188/0x250 [ 550.733424][T13535] ? show_regs_print_info+0x20/0x20 [ 550.738668][T13535] ? load_image+0x400/0x400 [ 550.743235][T13535] sysfs_warn_dup+0x8a/0xa0 [ 550.747858][T13535] sysfs_do_create_link_sd+0xc0/0x110 [ 550.753261][T13535] device_add+0x7f6/0x1000 [ 550.757818][T13535] wiphy_register+0x1e81/0x2c30 [ 550.762839][T13535] ? cfg80211_event_work+0x40/0x40 [ 550.768089][T13535] ? minstrel_ht_alloc+0x808/0x980 [ 550.773334][T13535] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 550.779446][T13535] ieee80211_register_hw+0x2aa1/0x3af0 [ 550.784972][T13535] ? ieee80211_tasklet_handler+0x20/0x20 [ 550.790646][T13535] ? rcu_is_watching+0x11/0xa0 [ 550.795439][T13535] ? memset+0x1e/0x40 [ 550.799451][T13535] ? hrtimer_init+0x10c/0x220 [ 550.804253][T13535] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 550.810042][T13535] hwsim_new_radio_nl+0xa6f/0xc40 [ 550.815133][T13535] genl_rcv_msg+0xcea/0xf90 [ 550.819694][T13535] ? genl_bind+0x380/0x380 [ 550.824169][T13535] ? verify_lock_unused+0x140/0x140 [ 550.829770][T13535] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 550.835530][T13535] ? perf_trace_lock+0x301/0x390 [ 550.840515][T13535] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 550.847085][T13535] netlink_rcv_skb+0x1f5/0x440 [ 550.851880][T13535] ? genl_bind+0x380/0x380 [ 550.856421][T13535] ? netlink_ack+0xb50/0xb50 [ 550.861046][T13535] ? __lock_acquire+0x7d10/0x7d10 [ 550.866116][T13535] ? down_read+0x1aa/0x2e0 [ 550.870574][T13535] genl_rcv+0x24/0x40 [ 550.874579][T13535] netlink_unicast+0x774/0x920 [ 550.879391][T13535] netlink_sendmsg+0x8ba/0xbe0 [ 550.884196][T13535] ? netlink_getsockopt+0x570/0x570 [ 550.889438][T13535] ? aa_sock_msg_perm+0x94/0x150 [ 550.894406][T13535] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 550.899722][T13535] ? security_socket_sendmsg+0x7c/0xa0 [ 550.905209][T13535] ? netlink_getsockopt+0x570/0x570 [ 550.910428][T13535] ____sys_sendmsg+0x5b7/0x8f0 [ 550.915239][T13535] ? __sys_sendmsg_sock+0x30/0x30 [ 550.920314][T13535] ? import_iovec+0x6f/0xa0 [ 550.924856][T13535] ___sys_sendmsg+0x236/0x2e0 [ 550.929581][T13535] ? __sys_sendmsg+0x2a0/0x2a0 [ 550.934406][T13535] ? trace_event_raw_event_lock+0x270/0x270 [ 550.940386][T13535] __se_sys_sendmsg+0x1af/0x290 [ 550.945273][T13535] ? __x64_sys_sendmsg+0x80/0x80 [ 550.950235][T13535] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 550.956270][T13535] ? lockdep_hardirqs_on+0x94/0x140 [ 550.961506][T13535] do_syscall_64+0x4c/0xa0 [ 550.965962][T13535] ? clear_bhb_loop+0x30/0x80 [ 550.970664][T13535] ? clear_bhb_loop+0x30/0x80 [ 550.975463][T13535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 550.981380][T13535] RIP: 0033:0x7f99fd9fde59 [ 550.985823][T13535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.005729][T13535] RSP: 002b:00007f99fbc57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.014171][T13535] RAX: ffffffffffffffda RBX: 00007f99fdc76fa0 RCX: 00007f99fd9fde59 [ 551.022171][T13535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 551.030170][T13535] RBP: 00007f99fda93d6f R08: 0000000000000000 R09: 0000000000000000 [ 551.038162][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.046161][T13535] R13: 00007f99fdc77038 R14: 00007f99fdc76fa0 R15: 00007ffc731241e8 [ 551.054190][T13535] [ 551.101864][T13547] __nla_validate_parse: 13 callbacks suppressed [ 551.101883][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.120284][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.130012][T13547] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.141867][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.152149][T13547] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.164013][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.178367][T13547] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2959'. [ 551.696961][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 551.721536][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 551.732066][T13557] netlink: 33 bytes leftover after parsing attributes in process `syz.4.2973'. [ 553.606104][T13589] tap0: tun_chr_ioctl cmd 1074025675 [ 553.611587][T13589] tap0: persist enabled [ 557.656287][T13621] __nla_validate_parse: 5 callbacks suppressed [ 557.656306][T13621] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2977'. [ 558.169117][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.232011][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.256386][T13636] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.268141][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.282015][T13636] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.320578][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.352395][T13636] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2981'. [ 558.367400][T13644] netlink: 'syz.4.2985': attribute type 9 has an invalid length. [ 558.386877][T13635] netlink: 'syz.4.2985': attribute type 3 has an invalid length. [ 558.403808][T13644] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2985'. [ 558.417537][T13635] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2985'. [ 558.759546][T13650] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 559.454773][T13650] device syzkaller0 entered promiscuous mode [ 560.877990][T13673] netlink: 'syz.3.2996': attribute type 4 has an invalid length. [ 561.424168][T13682] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 562.130190][T13682] device syzkaller0 entered promiscuous mode [ 562.146251][T13693] tipc: Started in network mode [ 562.151196][T13693] tipc: Node identity e, cluster identity 4711 [ 562.159338][T13693] tipc: Node number set to 14 [ 562.175990][T13695] netlink: 'syz.0.3001': attribute type 21 has an invalid length. [ 562.203919][T13695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.211680][T13695] IPv6: NLM_F_CREATE should be set when creating new route [ 562.219113][T13695] IPv6: NLM_F_CREATE should be set when creating new route [ 562.226455][T13695] IPv6: NLM_F_CREATE should be set when creating new route [ 563.348619][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.355017][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.610188][T13716] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 563.637630][T13716] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 563.648739][T13716] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 566.897770][T13734] netlink: 'syz.1.3013': attribute type 2 has an invalid length. [ 567.144979][T13743] netlink: 'syz.1.3013': attribute type 10 has an invalid length. [ 567.432580][T13744] __nla_validate_parse: 5 callbacks suppressed [ 567.432601][T13744] netlink: 182 bytes leftover after parsing attributes in process `syz.4.3012'. [ 567.812153][T13755] netlink: 'syz.4.3017': attribute type 39 has an invalid length. [ 567.953861][T13754] netlink: 'syz.2.3018': attribute type 21 has an invalid length. [ 568.359732][T13770] netlink: 'syz.4.3021': attribute type 21 has an invalid length. [ 568.542386][T13770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 568.549809][T13770] IPv6: NLM_F_CREATE should be set when creating new route [ 568.557156][T13770] IPv6: NLM_F_CREATE should be set when creating new route [ 568.564385][T13770] IPv6: NLM_F_CREATE should be set when creating new route [ 569.018619][T13772] device syzkaller0 entered promiscuous mode [ 569.395443][T13779] netlink: 'syz.3.3025': attribute type 21 has an invalid length. [ 569.411597][T13783] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3025'. [ 570.054973][T13798] netlink: 'syz.3.3029': attribute type 9 has an invalid length. [ 570.055185][T13792] netlink: 'syz.3.3029': attribute type 3 has an invalid length. [ 570.072140][T13792] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3029'. [ 570.074229][T13798] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3029'. [ 570.293353][T13804] netlink: 'syz.1.3033': attribute type 4 has an invalid length. [ 570.406585][T13810] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.3032'. [ 570.565187][T13815] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3031'. [ 571.026001][T13808] netlink: 'syz.4.3032': attribute type 9 has an invalid length. [ 571.034785][T13808] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3032'. [ 571.146336][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3036'. [ 571.219260][T13822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.226941][T13822] IPv6: NLM_F_CREATE should be set when creating new route [ 571.234264][T13822] IPv6: NLM_F_CREATE should be set when creating new route [ 571.241605][T13822] IPv6: NLM_F_CREATE should be set when creating new route [ 571.683134][T13842] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3041'. [ 571.736896][T13843] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3041'. [ 571.748104][T13836] device syzkaller0 entered promiscuous mode [ 572.237234][T13853] validate_nla: 3 callbacks suppressed [ 572.237256][T13853] netlink: 'syz.0.3045': attribute type 9 has an invalid length. [ 572.326897][T13849] netlink: 'syz.0.3045': attribute type 3 has an invalid length. [ 572.468152][T13861] __nla_validate_parse: 2 callbacks suppressed [ 572.468174][T13861] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3048'. [ 572.476164][T13864] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.3047'. [ 572.866515][T13873] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3052'. [ 573.207501][T13877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3053'. [ 573.368029][T13882] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 573.676772][T13871] netlink: 'syz.0.3052': attribute type 9 has an invalid length. [ 573.703710][T13871] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3052'. [ 573.959001][T13899] netlink: 'syz.4.3057': attribute type 29 has an invalid length. [ 573.990623][T13896] netlink: 'syz.1.3055': attribute type 21 has an invalid length. [ 574.125105][T13896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.132496][T13896] IPv6: NLM_F_CREATE should be set when creating new route [ 574.139944][T13896] IPv6: NLM_F_CREATE should be set when creating new route [ 574.147317][T13896] IPv6: NLM_F_CREATE should be set when creating new route [ 574.261269][T13899] netlink: 'syz.4.3057': attribute type 29 has an invalid length. Stopping sshd: [ 574.316268][T13893] netlink: 'syz.4.3057': attribute type 29 has an invalid length. stopped /usr/sbin/sshd (pid 3945) OK [ 574.555793][T13908] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3070'. Stopping crond: stopped /usr/sbin/crond (pid 3928) OK [ 575.031663][T13919] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3072'. [ 575.133511][T13923] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 575.166101][T13932] netlink: 'syz.2.3062': attribute type 9 has an invalid length. [ 575.168766][T13927] netlink: 'syz.2.3062': attribute type 3 has an invalid length. [ 575.236760][T13927] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3062'. [ 575.246407][T13932] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3062'. [ 575.401311][T13923] device syzkaller0 entered promiscuous mode Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3853) Stopping network: [ 575.786696][T13919] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3072'. [ 576.918785][T13947] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 576.930539][T13947] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 576.954611][T13947] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 577.301579][T13968] sctp: [Deprecated]: syz.1.3074 (pid 13968) Use of int in max_burst socket option deprecated. [ 577.301579][T13968] Use struct sctp_assoc_value instead [ 577.375601][T13971] validate_nla: 1 callbacks suppressed [ 577.375621][T13971] netlink: 'syz.0.3071': attribute type 4 has an invalid length. [ 577.462396][T13975] netlink: 'syz.2.3073': attribute type 21 has an invalid length. [ 577.484046][T13975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.491428][T13975] IPv6: NLM_F_CREATE should be set when creating new route [ 577.498834][T13975] IPv6: NLM_F_CREATE should be set when creating new route [ 577.506255][T13975] IPv6: NLM_F_CREATE should be set when creating new route [ 577.559412][T13979] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 578.129914][T13996] netlink: 'syz.1.3078': attribute type 3 has an invalid length. [ 578.297359][T13996] __nla_validate_parse: 1 callbacks suppressed [ 578.297381][T13996] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3078'. [ 578.567309][T14002] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.3081'. [ 578.682678][T14002] netlink: 'syz.4.3081': attribute type 9 has an invalid length. [ 578.756434][T14002] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3081'. [ 578.840430][T14005] netlink: 'syz.3.3082': attribute type 39 has an invalid length. OK [ 579.408074][T13992] netlink: 'syz.1.3078': attribute type 9 has an invalid length. [ 579.426431][T13992] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3078'. Stopping iptables: OK [ 579.923251][T14033] netlink: 'syz.4.3087': attribute type 21 has an invalid length. [ 579.952921][T14033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 579.961253][T14030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3088'. Stopping system message bus: [ 580.493836][T14045] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3090'. [ 580.620052][T14045] netlink: 21648 bytes leftover after parsing attributes in process `syz.1.3090'. [ 580.696078][T14045] tipc: Started in network mode [ 580.765833][T14045] tipc: Node identity e, cluster identity 4711 [ 580.785853][T14045] tipc: Node number set to 14 [ 580.798206][T14050] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3091'. [ 580.837749][T14050] netlink: 'syz.0.3091': attribute type 9 has an invalid length. [ 580.874638][T14050] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3091'. done [ 581.810810][T14074] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3096'. [ 582.051021][T14077] netlink: 'syz.0.3097': attribute type 9 has an invalid length. [ 582.558158][T14088] netlink: 'syz.1.3098': attribute type 39 has an invalid length. [ 582.812669][T14096] netlink: 'syz.0.3102': attribute type 21 has an invalid length. [ 582.853176][T14096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.126333][T14105] tipc: Started in network mode [ 583.131300][T14105] tipc: Node identity e, cluster identity 4711 [ 583.174732][T14105] tipc: Node number set to 14 [ 583.412513][T14108] netlink: 'syz.0.3105': attribute type 39 has an invalid length. [ 583.732073][T14121] __nla_validate_parse: 4 callbacks suppressed [ 583.732093][T14121] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3107'. [ 583.790732][T14115] delete_channel: no stack [ 583.837520][T14119] netlink: 'syz.2.3108': attribute type 21 has an invalid length. [ 583.900266][T14123] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3108'. Stopping klogd: [ 584.037357][T14114] netlink: 'syz.1.3107': attribute type 9 has an invalid length. [ 584.068077][T14114] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3107'. OK [ 584.570808][T14129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3111'. Stopping acpid: [ 585.642801][T14162] netlink: 'syz.0.3116': attribute type 10 has an invalid length. [ 585.692597][T14162] team0: Port device geneve1 added [ 585.783749][T14182] netlink: 'syz.1.3123': attribute type 21 has an invalid length. [ 585.821092][T14176] netlink: 'syz.3.3120': attribute type 10 has an invalid length. [ 585.926905][T14188] netlink: 'syz.0.3122': attribute type 10 has an invalid length. OK [ 586.008350][T14188] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3122'. [ 586.045455][T14188] device bond0 entered promiscuous mode [ 586.051071][T14188] device bond_slave_1 entered promiscuous mode [ 586.107211][T14188] device netdevsim0 entered promiscuous mode [ 586.166712][T14192] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3124'. [ 586.177766][T14186] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3123'. Stopping syslogd: stopped /sbin/syslogd (pid 3543) OK [ 586.319332][T14186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.399793][T14186] device bond_slave_1 left promiscuous mode [ 586.499925][T14202] netlink: 'syz.3.3125': attribute type 9 has an invalid length. [ 586.532230][T14202] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3125'. [ 586.555700][T14186] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 586.574644][T14186] device batadv0 left promiscuous mode [ 586.606801][T14186] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 586.621027][T14186] device netdevsim0 left promiscuous mode [ 586.648052][T14186] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 586.667970][T14186] device batadv_slave_0 left promiscuous mode [ 586.676443][T14186] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 586.687869][T14186] bond0 (unregistering): Released all slaves [ 586.732629][T14207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3127'. [ 586.749256][T14199] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.3125'. umount: can't remount debugfs read-only [ 587.823551][T14222] validate_nla: 2 callbacks suppressed [ 587.823573][T14222] netlink: 'syz.1.3141': attribute type 9 has an invalid length. [ 587.837215][T14209] ODEBUG: Out of memory. ODEBUG disabled [ 587.929258][T14228] netlink: 'syz.4.3133': attribute type 10 has an invalid length. [ 587.966030][T14228] openvswitch: netlink: Flow key attr not present in new flow. [ 588.048538][T14228] netlink: 'syz.4.3133': attribute type 10 has an invalid length. [ 588.080435][T14228] openvswitch: netlink: Flow key attr not present in new flow. [ 588.601132][T14251] netlink: 'syz.0.3139': attribute type 9 has an invalid length. [ 588.949744][T14246] __nla_validate_parse: 7 callbacks suppressed [ 588.949767][T14246] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3139'. [ 589.253877][T14261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3144'. [ 589.320336][T14259] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3142'. [ 589.378076][T14268] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3142'. [ 589.416736][T14263] netlink: 'syz.2.3143': attribute type 2 has an invalid length. [ 589.454887][T14263] netlink: 'syz.2.3143': attribute type 8 has an invalid length. [ 589.463164][T14263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3143'. [ 589.541600][T14267] netlink: 'syz.0.3140': attribute type 21 has an invalid length. [ 589.716843][T14267] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3140'. [ 589.863442][T14267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.913905][T14267] device bond_slave_1 left promiscuous mode [ 590.032232][T14267] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 590.050674][T14267] device netdevsim0 left promiscuous mode [ 590.200718][T14267] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 590.311448][T14267] bond0 (unregistering): Released all slaves [ 590.327386][T14279] netlink: 'syz.1.3147': attribute type 10 has an invalid length. [ 590.327969][T14288] netlink: 'syz.2.3149': attribute type 9 has an invalid length. [ 590.327989][T14288] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3149'. [ 590.389602][T14279] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3147'. [ 590.451136][T14277] device wlan1 left promiscuous mode [ 590.509708][T14282] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3149'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.170 closed by remote host. [ 591.414299][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.530749][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.589323][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.639501][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.729315][ T154] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 592.908718][T14297] kvm: exiting hardware virtualization [ 592.923912][T14297] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 592.937046][T14297] ACPI: PM: Preparing to enter system sleep state S5 [ 592.948082][T14297] reboot: Power down serialport: VM disconnected.