last executing test programs: 2.633273362s ago: executing program 2 (id=10526): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008000000400000", @ANYRES32, @ANYBLOB="000000000000000000000000dd00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr'], 0xa) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x20e2b81}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000300)=""/242, 0x28, 0xf2, 0x1}, 0x28) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0) 2.380812158s ago: executing program 4 (id=10528): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101}, 0x90, 0x0, 0x33e00000, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unlink(&(0x7f00000000c0)='./file0\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r4, &(0x7f0000000c00)={&(0x7f0000000000)=@phonet={0x23, 0x5, 0x2, 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000900)=[{0x10, 0x10e, 0x1ff}, {0x10, 0x84}], 0x20}, 0x4040080) openat$cgroup(r3, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a"], 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)=r7}, 0x20) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) 2.380228208s ago: executing program 0 (id=10530): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x800) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x10766, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0x5}, 0x8414, 0x6, 0x5, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x10000, 0x0, 0x850}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) 2.213394591s ago: executing program 2 (id=10533): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000000000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c7b95a9f63f208b30000b2da00000000000000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b000000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 2.138401203s ago: executing program 0 (id=10534): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xf, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, r3, 0x2f, 0x4000, r3, @void, @value=r3, @void, @void, r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pi6 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@map=r5, 0xffffffffffffffff, 0x11, 0x24, 0xffffffffffffffff, @void, @void, @void, @value=r6, r4}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047437, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/255, 0xff}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x1) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r7) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="766574b60d0ac1"], 0x12) r8 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f00000001c0)="18895d8922b617b30ce14a2363c35ed620eccb17db72d1948887ae2e9ce8709fd58b742aa79d1e81efdd8e36015041d8551f98626e21cac18fcfa27df71f0ddf2ddad60e020c79b1d572cd70d7045cfa280d64b8", 0x0, 0x1390, 0x0, 0x0, 0x4, &(0x7f0000001180), &(0x7f0000001200)="afe562a5", 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, 0x0, 0x0, 0x4}, 0x94) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c00000000000000"], 0x68}, 0x0) 2.137927993s ago: executing program 4 (id=10535): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000060000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r5, 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000005", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x4, 0x3, 0x10, 0xb}, {0x3, 0x3, 0x2, 0x7}, {0x4, 0x5, 0xc, 0x7}, {0x2, 0x3, 0xc, 0x8a8c18bcfd5e2ba6}, {0x3, 0x4, 0x7, 0xc}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.057841365s ago: executing program 3 (id=10536): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 1.887483878s ago: executing program 0 (id=10537): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000005000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00H\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="100000000000000000e900000000008c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x10000002f, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$kcm(0x11, 0x3, 0x0) 1.83395223s ago: executing program 2 (id=10538): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000018000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x15, &(0x7f0000000cc0)=@raw=[@call={0x85, 0x0, 0x0, 0x5a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xe18}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000d80)='GPL\x00', 0x80, 0x7b, &(0x7f0000000dc0)=""/123, 0x41000, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000e80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0x5, 0x9, 0xfffffff1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[r1, r1], &(0x7f0000000f40)=[{0x4, 0x2, 0x5, 0x8}, {0x1, 0x2, 0x8, 0x7}, {0x4, 0x2, 0x10}, {0x5, 0x2, 0x1, 0x1}, {0x3, 0x2, 0x7, 0x3}], 0x10, 0xa}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x8, 0x8, 0xfff, 0x5, 0x4000, r6, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x80, r7, 0x0, 0x7}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000bc0)=r8) 1.628560864s ago: executing program 4 (id=10539): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000000000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c7b95a9f63f208b30000b2da00000000000000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b000000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 1.583227756s ago: executing program 1 (id=10540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f325, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1ff}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x79, 0x1}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x5f, 0x30, 0x61, 0x0]}}, &(0x7f0000000300)=""/170, 0x3e, 0xaa, 0x1, 0x0, 0x10000, @value=r3}, 0x28) setsockopt$sock_attach_bpf(r4, 0x6, 0x6, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@xdp={0x2c, 0x11, 0x0, 0x17}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x20004050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 1.38173494s ago: executing program 4 (id=10541): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00') setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x200000000006f5}, 0x8, 0x7, 0x0, 0x0, 0x13ffd, 0x83}, 0x0, 0x5, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000540)='(pu&00\t||') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="14000000320081024e19b8f7f30cb9e717e643eb", 0x14}], 0x1}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xcb}], 0x1}, 0x0) 1.38088635s ago: executing program 2 (id=10551): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000000000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c7b95a9f63f208b30000b2da00000000000000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b000000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 1.282769242s ago: executing program 1 (id=10542): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000023066a7bbd"], 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, &(0x7f0000000000), 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000dfffffff00183400000500"/48], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x2a, &(0x7f0000000100)=""/42, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r1}) close(r2) r4 = socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000012c0)="48000000140081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)}, 0x20) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="b0bf0255ace20c6865a98e4c65cb00f064b297c2d1345a04b6d0b7e8f796d7a435c12b6b8506c31533ea2d0be5e548e1217f5e4a607903befa20dd4f154ff1dc4edd58c2ad004333", 0x48}, {&(0x7f0000000480)="707655aff8c5657f195ecb0314eba9b15487d4c2f6a4d24fdf7ec78fafb002e848b53432fa8a9bf6173323fbac41e029eec402b4e5d7a930bd6a26d3b72d1ad82cee5c273c3690c6f0a583df6e3896ffe5860fe6a28b44472216ec0fa7b230cd12f40935ab377eef1484eaf2ce64d5b87952fe13b9014039b22c87381765dbee3caaa6022b214962b8dc515943ccf599eebe297bd057536286cb49e9a673ee7e8c8280b3ee4a01456c8721dcd30328f7c4fb4a897743a5c20a189a18b061468847742f2393a64d9819ad524be45e0eb08eb00dce224363c10e1ca71e35c3d96fd43d", 0xe2}], 0x2, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x74a}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x48}, 0x45) gettid() 1.215592243s ago: executing program 3 (id=10543): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r2 = syz_clone(0x24050000, &(0x7f0000000380), 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000580)) perf_event_open(0x0, r2, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) syz_clone(0x51004600, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f00000000c0), 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 873.515141ms ago: executing program 2 (id=10544): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 828.453862ms ago: executing program 0 (id=10545): socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x9}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0x1d, 0x1, 0x300000, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r0, r2, 0x5, 0x0, 0x0, @void, @value, @void, @void, r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x2, 0x6, 0x4000, 0xffffffffffffffff, 0x8d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x8}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x7fff}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6c7, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r4}, 0x38) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f9, &(0x7f0000000080)) 795.283853ms ago: executing program 1 (id=10546): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 593.432877ms ago: executing program 1 (id=10547): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101}, 0x90, 0x0, 0x33e00000, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unlink(&(0x7f00000000c0)='./file0\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r4, &(0x7f0000000c00)={&(0x7f0000000000)=@phonet={0x23, 0x5, 0x2, 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000900)=[{0x10, 0x10e, 0x1ff}, {0x10, 0x84}], 0x20}, 0x4040080) openat$cgroup(r3, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a"], 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)=r7}, 0x20) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) 593.147397ms ago: executing program 3 (id=10548): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000000000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c7b95a9f63f208b30000b2da00000000000000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b000000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 592.294157ms ago: executing program 0 (id=10558): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 450.04537ms ago: executing program 1 (id=10549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000980)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="331b372e", 0x4}, {&(0x7f0000000540)="50322d4cca03a4cd14a9e054836b17dfa27803d68b44ba366c98686cea0db9e7b6dea444f76ac49eefba17734d0b85af76948606be74d7f21ca57c716f1f3d43aa4313a162fc167a72d5237e7e29f35ab4d70d2a505b270ebe4e40ff5ce011164fccad9dd953fd1c4067cea4f99fa03aad796b85bef606345bb45bc32d5b0e15b1266ba1c998184a82b27f28212fc29a85eade6467410a0b9db16cea1135ae2aff1e5801811be4f8548f4944f2f7", 0xae}, {&(0x7f0000000880)}], 0x4, 0x0, 0x0, 0x10}, 0x14008000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8940) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x4004010) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 449.78866ms ago: executing program 2 (id=10550): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x0, 0x0, 0xc}]}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="c7a751900acf81658badb5d287b4", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 449.44535ms ago: executing program 3 (id=10552): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000018000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x15, &(0x7f0000000cc0)=@raw=[@call={0x85, 0x0, 0x0, 0x5a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xe18}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000d80)='GPL\x00', 0x80, 0x7b, &(0x7f0000000dc0)=""/123, 0x41000, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000e80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x2, 0x5, 0x9, 0xfffffff1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[r1, r1], &(0x7f0000000f40)=[{0x4, 0x2, 0x5, 0x8}, {0x1, 0x2, 0x8, 0x7}, {0x4, 0x2, 0x10}, {0x5, 0x2, 0x1, 0x1}, {0x3, 0x2, 0x7, 0x3}], 0x10, 0xa}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x8, 0x8, 0xfff, 0x5, 0x4000, r6, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x80, r7, 0x0, 0x7}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000bc0)=r8) 449.14843ms ago: executing program 4 (id=10553): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x009'], 0x38}, 0x0) close(0x3) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 369.696142ms ago: executing program 0 (id=10554): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x2, 0x37a0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 268.396904ms ago: executing program 3 (id=10555): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000000000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000c7b95a9f63f208b30000b2da00000000000000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b000000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 156.701217ms ago: executing program 1 (id=10556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) socket$kcm(0xa, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x7, &(0x7f0000000000)=r7, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) 156.462177ms ago: executing program 4 (id=10557): bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@generic={0x0, 0x2000000, 0x18}, 0x18) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5411, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 0s ago: executing program 3 (id=10559): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x800) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x10766, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0x5}, 0x8414, 0x6, 0x5, 0x9, 0x0, 0x0, 0x8000, 0x0, 0x10000, 0x0, 0x850}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) kernel console output (not intermixed with test programs): link: 'syz.4.8218': attribute type 16 has an invalid length. [ 1519.368909][T26809] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8218'. [ 1519.436101][T26810] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1519.659078][T26810] device syzkaller0 entered promiscuous mode [ 1520.390357][T26831] netlink: 'syz.0.8227': attribute type 29 has an invalid length. [ 1520.631910][T26833] can: request_module (can-proto-0) failed. [ 1522.726341][T26853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8233'. [ 1522.781903][T26852] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8232'. [ 1522.963619][T26859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8237'. [ 1522.989658][T26861] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8236'. [ 1523.107819][T26864] validate_nla: 5 callbacks suppressed [ 1523.107837][T26864] netlink: 'syz.4.8239': attribute type 29 has an invalid length. [ 1523.151427][T26864] netlink: 'syz.4.8239': attribute type 29 has an invalid length. [ 1523.173145][T26870] netlink: 'syz.4.8239': attribute type 29 has an invalid length. [ 1523.760258][T26864] can: request_module (can-proto-0) failed. [ 1524.091422][T26870] netlink: 'syz.4.8239': attribute type 29 has an invalid length. [ 1524.343538][T26891] netlink: 'syz.0.8255': attribute type 4 has an invalid length. [ 1524.352770][T26891] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8255'. [ 1525.374355][T26904] netlink: 'syz.2.8246': attribute type 16 has an invalid length. [ 1525.401561][T26904] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8246'. [ 1525.442926][T26906] netlink: 'syz.4.8250': attribute type 16 has an invalid length. [ 1525.475142][T26906] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8250'. [ 1525.612491][T26910] netlink: 'syz.3.8252': attribute type 16 has an invalid length. [ 1525.623933][T26910] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8252'. [ 1525.637115][T26908] netlink: 'syz.0.8251': attribute type 16 has an invalid length. [ 1525.647528][T26908] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8251'. [ 1525.860862][T26916] netlink: 'syz.1.8266': attribute type 16 has an invalid length. [ 1525.869009][T26916] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8266'. [ 1525.878791][T26918] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8267'. [ 1526.690519][T26928] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8271'. [ 1526.703233][T26930] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8269'. [ 1527.636429][T26953] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8265'. [ 1528.180405][T26968] validate_nla: 5 callbacks suppressed [ 1528.180423][T26968] netlink: 'syz.2.8274': attribute type 16 has an invalid length. [ 1528.311490][T26969] netlink: 'syz.4.8275': attribute type 16 has an invalid length. [ 1528.809849][T26985] netlink: 'syz.4.8280': attribute type 29 has an invalid length. [ 1528.849249][T26985] netlink: 'syz.4.8280': attribute type 29 has an invalid length. [ 1528.906865][T26988] netlink: 'syz.1.8282': attribute type 16 has an invalid length. [ 1529.059448][T26992] netlink: 'syz.4.8280': attribute type 29 has an invalid length. [ 1529.266463][T26998] netlink: 'syz.1.8285': attribute type 16 has an invalid length. [ 1529.410255][T27002] netlink: 'syz.4.8286': attribute type 16 has an invalid length. [ 1529.455028][T27002] __nla_validate_parse: 5 callbacks suppressed [ 1529.455058][T27002] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8286'. [ 1529.531034][T27006] netlink: 'syz.1.8290': attribute type 16 has an invalid length. [ 1529.554540][T27006] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8290'. [ 1530.304112][T27025] netlink: 'syz.1.8296': attribute type 16 has an invalid length. [ 1530.322297][T27025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8296'. [ 1530.770898][T27039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8300'. [ 1531.112417][T27043] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8303'. [ 1531.521399][T27055] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8308'. [ 1531.566577][T27058] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8305'. [ 1532.060390][T27075] syz.0.8313[27075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.103907][T27071] device veth0_vlan entered promiscuous mode [ 1532.499415][T27080] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8315'. [ 1532.759388][T27087] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8318'. [ 1532.857411][T27094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8327'. [ 1533.914773][T27107] validate_nla: 7 callbacks suppressed [ 1533.914805][T27107] netlink: 'syz.4.8325': attribute type 16 has an invalid length. [ 1534.189450][T27115] netlink: 'syz.3.8328': attribute type 10 has an invalid length. [ 1536.091530][T27144] netlink: 'syz.1.8340': attribute type 16 has an invalid length. [ 1536.102339][T27144] __nla_validate_parse: 2 callbacks suppressed [ 1536.102370][T27144] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1536.171068][T27149] netlink: 'syz.1.8342': attribute type 29 has an invalid length. [ 1536.183218][T27149] netlink: 'syz.1.8342': attribute type 29 has an invalid length. [ 1536.251899][T27149] netlink: 'syz.1.8342': attribute type 29 has an invalid length. [ 1538.126883][T27170] netlink: 'syz.3.8352': attribute type 16 has an invalid length. [ 1538.141501][T27170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1538.600122][T27180] netlink: 'syz.3.8355': attribute type 16 has an invalid length. [ 1538.610642][T27180] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8355'. [ 1538.800626][T27188] netlink: 'syz.3.8358': attribute type 29 has an invalid length. [ 1538.817744][T27188] netlink: 'syz.3.8358': attribute type 29 has an invalid length. [ 1538.962453][T27192] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1539.835644][T27202] syz.3.8363[27202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1539.910097][T27203] validate_nla: 1 callbacks suppressed [ 1539.910154][T27203] netlink: 'syz.2.8365': attribute type 16 has an invalid length. [ 1539.939349][T27203] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1540.281167][T27214] netlink: 'syz.1.8377': attribute type 16 has an invalid length. [ 1540.307537][T27214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8377'. [ 1540.533468][T27218] netlink: 'syz.4.8369': attribute type 16 has an invalid length. [ 1540.564222][T27218] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8369'. [ 1540.617541][T27220] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1541.704872][T27220] device syzkaller0 entered promiscuous mode [ 1542.916380][T27244] syz.2.8378[27244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1543.994224][ T6838] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1544.872186][T27238] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1544.884484][T27238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1544.895466][T27238] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1544.926817][T27254] device wlan1 left promiscuous mode [ 1544.943706][T27254] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8380'. [ 1545.163717][T27263] netlink: 'syz.4.8384': attribute type 16 has an invalid length. [ 1545.175745][T27263] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8384'. [ 1545.505184][T27274] netlink: 'syz.0.8390': attribute type 29 has an invalid length. [ 1545.562697][T27274] netlink: 'syz.0.8390': attribute type 29 has an invalid length. [ 1545.599569][T27279] netlink: 'syz.0.8390': attribute type 29 has an invalid length. [ 1545.812070][T27284] syz.1.8392[27284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1545.921211][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.940254][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.533394][T27294] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1547.549751][T27294] device syzkaller0 entered promiscuous mode [ 1549.705733][T27306] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1549.710338][T27307] netlink: 'syz.3.8397': attribute type 16 has an invalid length. [ 1549.715202][T27306] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1549.723448][T27307] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8397'. [ 1549.732630][T27306] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1549.789508][T27310] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8409'. [ 1549.944744][T27318] netlink: 'syz.1.8399': attribute type 4 has an invalid length. [ 1550.237087][T27331] netlink: 'syz.2.8403': attribute type 29 has an invalid length. [ 1550.248908][T27330] netlink: 'syz.0.8414': attribute type 16 has an invalid length. [ 1550.249026][T27330] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8414'. [ 1550.277808][T27331] netlink: 'syz.2.8403': attribute type 29 has an invalid length. [ 1550.402854][T27331] netlink: 'syz.2.8403': attribute type 29 has an invalid length. [ 1552.587439][T27355] netlink: 'syz.2.8413': attribute type 16 has an invalid length. [ 1552.600869][T27355] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8413'. [ 1552.825594][T27362] bond0: (slave wlan1): Error: Slave device does not support XDP [ 1552.891176][T27367] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.8419'. [ 1552.901547][T27362] netlink: 'syz.2.8416': attribute type 10 has an invalid length. [ 1552.923533][T27362] device bridge_slave_1 entered promiscuous mode [ 1552.948325][T27362] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1553.238853][T27375] netlink: 'syz.0.8420': attribute type 16 has an invalid length. [ 1553.267915][T27375] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8420'. [ 1553.294490][T27379] device sit0 left promiscuous mode [ 1553.491743][T27379] device sit0 entered promiscuous mode [ 1554.737048][T27396] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8428'. [ 1558.530382][T27402] netlink: 'syz.4.8430': attribute type 4 has an invalid length. [ 1559.175649][T27431] netlink: 'syz.3.8435': attribute type 16 has an invalid length. [ 1559.183612][T27431] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8435'. [ 1560.006078][T27457] netlink: 'syz.4.8445': attribute type 3 has an invalid length. [ 1560.034144][T27457] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8445'. [ 1560.119644][T27458] device sit0 entered promiscuous mode [ 1561.317662][T25433] Bluetooth: hci0: unexpected event 0x14 length: 151 > 6 [ 1562.219217][T27476] netlink: 'syz.0.8452': attribute type 16 has an invalid length. [ 1562.239078][T27476] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1563.858452][T27490] netlink: 'syz.1.8457': attribute type 16 has an invalid length. [ 1563.877907][T27490] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8457'. [ 1563.899462][T27492] netlink: 'syz.4.8458': attribute type 16 has an invalid length. [ 1563.939889][T27492] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8458'. [ 1564.169364][T27505] netlink: 'syz.0.8464': attribute type 11 has an invalid length. [ 1564.194266][T27505] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8464'. [ 1564.232164][T27505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1564.501808][T27515] netlink: 'syz.3.8466': attribute type 16 has an invalid length. [ 1564.518330][T27515] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8466'. [ 1564.667151][T27520] netlink: 'syz.1.8468': attribute type 3 has an invalid length. [ 1564.676996][T27520] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8468'. [ 1567.340184][T27536] netlink: 'syz.3.8484': attribute type 10 has an invalid length. [ 1567.415940][T27536] ¥: port 1(syz_tun) entered disabled state [ 1567.510031][T27535] netlink: 'syz.4.8472': attribute type 16 has an invalid length. [ 1567.562828][T27535] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8472'. [ 1567.651189][T27538] netlink: 'syz.2.8473': attribute type 16 has an invalid length. [ 1567.681801][T27538] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8473'. [ 1568.249561][T27558] netlink: 'syz.2.8481': attribute type 16 has an invalid length. [ 1568.261846][T27558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8481'. [ 1568.347837][T27566] netlink: 'syz.0.8482': attribute type 3 has an invalid length. [ 1568.381485][T27566] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1570.274347][T27571] netlink: 'syz.3.8488': attribute type 16 has an invalid length. [ 1570.287050][T27571] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8488'. [ 1570.996512][T27593] netlink: 'syz.3.8491': attribute type 16 has an invalid length. [ 1571.106409][T27593] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8491'. [ 1571.151031][T27591] netlink: 'syz.1.8501': attribute type 16 has an invalid length. [ 1571.160440][T27591] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8501'. [ 1572.818317][T27608] netlink: 'syz.0.8510': attribute type 10 has an invalid length. [ 1572.889886][T27608] ¥: port 1(syz_tun) entered disabled state [ 1572.920118][T27613] netlink: 'syz.3.8499': attribute type 3 has an invalid length. [ 1572.944212][T27613] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8499'. [ 1573.717794][T27637] netlink: 'syz.1.8508': attribute type 16 has an invalid length. [ 1573.735145][T27637] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8508'. [ 1574.271917][T27655] netlink: 'syz.2.8517': attribute type 10 has an invalid length. [ 1574.299421][T27655] ¥: port 1(syz_tun) entered disabled state [ 1574.311899][T27655] ¥: port 1(syz_tun) entered disabled state [ 1574.329872][T27655] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1575.207371][T27682] netlink: 'syz.2.8524': attribute type 3 has an invalid length. [ 1575.239010][T27682] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8524'. [ 1575.309412][T27681] netlink: 'syz.4.8525': attribute type 16 has an invalid length. [ 1575.323793][T27681] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8525'. [ 1578.685222][T27706] netlink: 'syz.1.8537': attribute type 10 has an invalid length. [ 1578.740009][T27706] ¥: port 1(syz_tun) entered disabled state [ 1578.783889][T27712] netlink: 'syz.2.8536': attribute type 1 has an invalid length. [ 1578.836842][T27712] netlink: 'syz.2.8536': attribute type 1 has an invalid length. [ 1578.895553][T27706] ¥: port 1(syz_tun) entered disabled state [ 1578.918154][T27712] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.8536'. [ 1579.543775][T27707] delete_channel: no stack [ 1579.645148][T27706] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1579.872715][T27728] netlink: 'syz.2.8540': attribute type 16 has an invalid length. [ 1579.881121][T27728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8540'. [ 1582.016040][T27735] netlink: 'syz.2.8544': attribute type 1 has an invalid length. [ 1582.024101][T27735] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.8544'. [ 1582.707045][T27765] netlink: 'syz.4.8554': attribute type 16 has an invalid length. [ 1582.719363][T27765] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8554'. [ 1582.899840][T27775] netlink: 'syz.2.8557': attribute type 39 has an invalid length. [ 1583.812654][T27792] netlink: 'syz.2.8565': attribute type 16 has an invalid length. [ 1583.826878][T27792] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8565'. [ 1584.365019][T27815] netlink: 'syz.1.8575': attribute type 1 has an invalid length. [ 1584.373147][T27815] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.8575'. [ 1584.612457][T27822] netlink: 'syz.1.8578': attribute type 16 has an invalid length. [ 1584.649164][T27822] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8578'. [ 1584.795537][T27829] netlink: 'syz.2.8581': attribute type 16 has an invalid length. [ 1584.812562][T27829] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8581'. [ 1585.268287][T27849] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1585.275852][T27849] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1585.821917][T27855] netlink: 'syz.3.8590': attribute type 1 has an invalid length. [ 1585.852413][T27855] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1585.973120][T27859] netlink: 'syz.1.8593': attribute type 16 has an invalid length. [ 1586.023887][T27859] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8593'. [ 1586.128389][T27865] netlink: 'syz.2.8595': attribute type 16 has an invalid length. [ 1586.155875][T27865] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8595'. [ 1587.177226][T27895] netlink: 'syz.4.8608': attribute type 1 has an invalid length. [ 1587.256286][T27895] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.8608'. [ 1587.330204][T27899] netlink: 'syz.3.8607': attribute type 16 has an invalid length. [ 1587.354252][T27899] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8607'. [ 1587.772200][T27903] netlink: 'syz.1.8609': attribute type 16 has an invalid length. [ 1587.804310][T27903] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1587.869558][T27907] netlink: 'syz.4.8612': attribute type 16 has an invalid length. [ 1587.914193][T27907] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8612'. [ 1588.493749][T27927] netlink: 'syz.4.8620': attribute type 2 has an invalid length. [ 1588.541104][T27927] device 4 entered promiscuous mode [ 1588.678588][T27929] netlink: 'syz.2.8621': attribute type 16 has an invalid length. [ 1588.709511][T27929] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8621'. [ 1589.089516][T27941] netlink: 'syz.0.8625': attribute type 16 has an invalid length. [ 1589.099174][T27941] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1589.158704][T27945] netlink: 'syz.4.8628': attribute type 16 has an invalid length. [ 1589.209185][T27945] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8628'. [ 1589.243460][T27948] netlink: 'syz.1.8627': attribute type 2 has an invalid length. [ 1589.889999][T27972] netlink: 'syz.1.8637': attribute type 16 has an invalid length. [ 1589.932531][T27972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8637'. [ 1590.228217][T27983] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8642'. [ 1590.239711][T27984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8641'. [ 1592.319174][T28049] validate_nla: 6 callbacks suppressed [ 1592.319212][T28049] netlink: 'syz.3.8670': attribute type 1 has an invalid length. [ 1592.342978][T28049] netlink: 'syz.3.8670': attribute type 1 has an invalid length. [ 1592.351363][T28049] __nla_validate_parse: 4 callbacks suppressed [ 1592.351393][T28049] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1592.903899][T28048] delete_channel: no stack [ 1593.350558][T28077] netlink: 'syz.2.8680': attribute type 16 has an invalid length. [ 1593.362205][T28077] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8680'. [ 1593.461424][T28079] netlink: 'syz.0.8681': attribute type 16 has an invalid length. [ 1593.502761][T28079] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8681'. [ 1594.595245][T28118] netlink: 'syz.1.8692': attribute type 1 has an invalid length. [ 1594.624647][T28118] netlink: 'syz.1.8692': attribute type 1 has an invalid length. [ 1594.649311][T28118] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.8692'. [ 1594.689325][T28122] netlink: 'syz.0.8695': attribute type 16 has an invalid length. [ 1594.716279][T28122] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1594.779240][T28128] netlink: 'syz.2.8699': attribute type 16 has an invalid length. [ 1594.821727][T28128] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8699'. [ 1595.256732][T28117] delete_channel: no stack [ 1596.217923][T28161] netlink: 'syz.3.8713': attribute type 16 has an invalid length. [ 1596.244128][T28161] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8713'. [ 1596.416919][T28163] netlink: 'syz.4.8715': attribute type 16 has an invalid length. [ 1596.459200][T28163] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8715'. [ 1597.982890][T28201] netlink: 'syz.3.8730': attribute type 16 has an invalid length. [ 1598.014819][T28201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8730'. [ 1598.151191][T28204] netlink: 'syz.1.8729': attribute type 16 has an invalid length. [ 1598.181662][T28204] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8729'. [ 1598.521615][T28220] netlink: 'syz.0.8745': attribute type 16 has an invalid length. [ 1598.534240][T28220] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8745'. [ 1598.604717][T28212] device wlan1 entered promiscuous mode [ 1598.783793][T28230] netlink: 'syz.2.8740': attribute type 29 has an invalid length. [ 1598.827012][T28230] netlink: 'syz.2.8740': attribute type 29 has an invalid length. [ 1598.884424][T28230] netlink: 'syz.2.8740': attribute type 29 has an invalid length. [ 1598.915136][T28230] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8740'. [ 1598.961237][T28237] netlink: 'syz.1.8743': attribute type 39 has an invalid length. [ 1599.044846][T28237] bond0: (slave syz_tun): Releasing backup interface [ 1599.490855][T28235] netlink: 'syz.0.8742': attribute type 16 has an invalid length. [ 1599.504458][T28235] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1599.862655][T28251] netlink: 'syz.1.8750': attribute type 16 has an invalid length. [ 1599.872787][T28251] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8750'. [ 1600.281330][T28261] netlink: 'syz.1.8762': attribute type 16 has an invalid length. [ 1600.299704][T28261] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8762'. [ 1601.674117][T28297] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8766'. [ 1602.939622][T28332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8779'. [ 1604.309797][T28341] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8781'. [ 1605.604407][T28365] bond0: (slave syz_tun): Releasing backup interface [ 1605.784967][T28374] validate_nla: 2 callbacks suppressed [ 1605.784981][T28374] netlink: 'syz.0.8794': attribute type 16 has an invalid length. [ 1605.814792][T28374] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8794'. [ 1605.910481][T28373] netlink: 'syz.1.8796': attribute type 16 has an invalid length. [ 1605.921227][T28373] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8796'. [ 1606.143926][T28385] netlink: 'syz.4.8801': attribute type 16 has an invalid length. [ 1606.161868][T28385] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1606.419662][T28396] netlink: 'syz.3.8816': attribute type 16 has an invalid length. [ 1606.427943][T28396] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8816'. [ 1606.956664][T28411] netlink: 'syz.4.8810': attribute type 16 has an invalid length. [ 1606.976179][T28411] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8810'. [ 1607.158590][T28420] netlink: 'syz.1.8813': attribute type 16 has an invalid length. [ 1607.175204][T28420] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1607.185809][T28422] netlink: 'syz.2.8817': attribute type 16 has an invalid length. [ 1607.204225][T28422] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8817'. [ 1607.356705][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.363106][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.541025][T28437] netlink: 'syz.0.8821': attribute type 16 has an invalid length. [ 1607.567765][T28437] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8821'. [ 1607.946112][T28456] netlink: 'syz.3.8829': attribute type 2 has an invalid length. [ 1608.005205][T28450] netlink: 'syz.0.8828': attribute type 16 has an invalid length. [ 1608.013283][T28450] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8828'. [ 1608.961753][T28484] device syz_tun left promiscuous mode [ 1608.971295][T28484] ¥: port 1(syz_tun) entered disabled state [ 1609.343644][T28495] __nla_validate_parse: 6 callbacks suppressed [ 1609.343673][T28495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8845'. [ 1609.747282][T28514] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8863'. [ 1610.081478][T28528] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8858'. [ 1610.370945][T28537] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8862'. [ 1610.399399][T28535] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8861'. [ 1610.691084][T28547] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8868'. [ 1610.946948][T28559] validate_nla: 16 callbacks suppressed [ 1610.946963][T28559] netlink: 'syz.0.8881': attribute type 16 has an invalid length. [ 1611.007512][T28559] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8881'. [ 1611.355729][T28570] netlink: 'syz.0.8878': attribute type 16 has an invalid length. [ 1611.369350][T28570] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1611.451367][T28572] netlink: 'syz.4.8879': attribute type 16 has an invalid length. [ 1611.476510][T28572] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8879'. [ 1611.776046][T28585] device wlan1 entered promiscuous mode [ 1611.983946][T28591] netlink: 'syz.3.8889': attribute type 16 has an invalid length. [ 1612.006371][T28591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1613.168299][T28610] netlink: 'syz.0.8895': attribute type 16 has an invalid length. [ 1613.438094][T28616] netlink: 'syz.0.8898': attribute type 16 has an invalid length. [ 1613.450020][T28618] netlink: 'syz.2.8899': attribute type 16 has an invalid length. [ 1613.819780][T28624] netlink: 'syz.2.8902': attribute type 16 has an invalid length. [ 1614.129553][T28639] netlink: 'syz.4.8910': attribute type 16 has an invalid length. [ 1614.298747][T28644] netlink: 'syz.4.8912': attribute type 16 has an invalid length. [ 1616.560383][T28659] netlink: 'syz.4.8916': attribute type 2 has an invalid length. [ 1616.902588][T28665] netlink: 'syz.1.8919': attribute type 16 has an invalid length. [ 1616.912674][T28665] __nla_validate_parse: 6 callbacks suppressed [ 1616.912694][T28665] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8919'. [ 1616.929876][T28670] netlink: 'syz.0.8922': attribute type 16 has an invalid length. [ 1616.950241][T28670] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8922'. [ 1616.974825][T28667] netlink: 'syz.4.8921': attribute type 16 has an invalid length. [ 1616.985232][T28667] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8921'. [ 1617.166089][T28677] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1617.219391][T28677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1617.317573][T28682] netlink: 'syz.3.8926': attribute type 16 has an invalid length. [ 1617.326297][T28682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1618.578190][T28698] netlink: 'syz.0.8942': attribute type 16 has an invalid length. [ 1618.616312][T28698] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8942'. [ 1618.661404][T28697] netlink: 'syz.1.8935': attribute type 16 has an invalid length. [ 1618.680452][T28697] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8935'. [ 1618.720795][T28704] netlink: 'syz.2.8932': attribute type 2 has an invalid length. [ 1618.768637][T28708] netlink: 'syz.4.8937': attribute type 16 has an invalid length. [ 1618.784798][T28708] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8937'. [ 1618.932591][T28710] netlink: 'syz.0.8938': attribute type 16 has an invalid length. [ 1618.966541][T28710] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1619.061746][T28713] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8950'. [ 1619.345396][T28728] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1622.966792][T28773] device wlan1 entered promiscuous mode [ 1624.291110][T28779] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1624.356084][T28779] __nla_validate_parse: 8 callbacks suppressed [ 1624.356118][T28779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1624.387881][T28783] validate_nla: 6 callbacks suppressed [ 1624.387911][T28783] netlink: 'syz.2.8966': attribute type 16 has an invalid length. [ 1624.414294][T28783] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8966'. [ 1624.496345][T28785] netlink: 'syz.1.8967': attribute type 16 has an invalid length. [ 1624.509175][T28785] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8967'. [ 1624.733235][T28789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8968'. [ 1627.083447][T28820] netlink: 'syz.2.8984': attribute type 16 has an invalid length. [ 1627.124229][T28820] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8984'. [ 1627.166933][T28825] device wlan1 entered promiscuous mode [ 1627.205392][T28824] netlink: 'syz.4.8982': attribute type 16 has an invalid length. [ 1627.213248][T28824] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8982'. [ 1629.086992][T28850] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1629.099367][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8993'. [ 1629.212243][T28854] netlink: 'syz.2.8998': attribute type 16 has an invalid length. [ 1629.247622][T28854] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8998'. [ 1629.268302][T28856] netlink: 'syz.1.8997': attribute type 16 has an invalid length. [ 1629.294152][T28856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8997'. [ 1630.160491][T28878] netlink: 'syz.2.9006': attribute type 16 has an invalid length. [ 1630.175469][T28878] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9006'. [ 1631.123635][T28884] netlink: 'syz.1.9019': attribute type 2 has an invalid length. [ 1631.160027][T28887] netlink: 'syz.4.9010': attribute type 16 has an invalid length. [ 1631.169783][T28884] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9019'. [ 1631.179986][T28887] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1631.297417][T28892] netlink: 'syz.0.9012': attribute type 16 has an invalid length. [ 1631.306046][T28892] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9012'. [ 1631.483294][T28904] netlink: 'syz.0.9027': attribute type 16 has an invalid length. [ 1631.491971][T28904] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9027'. [ 1631.992180][T28918] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9022'. [ 1632.304784][T28924] netlink: 'syz.1.9026': attribute type 16 has an invalid length. [ 1632.345620][T28924] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9026'. [ 1632.472541][T28929] netlink: 'syz.2.9025': attribute type 16 has an invalid length. [ 1632.495351][T28929] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9025'. [ 1632.642462][T28932] netlink: 'syz.1.9028': attribute type 16 has an invalid length. [ 1632.653056][T28932] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9028'. [ 1633.626723][T28934] netlink: 'syz.3.9029': attribute type 16 has an invalid length. [ 1633.649436][T28934] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9029'. [ 1633.788171][T28944] netlink: 'syz.4.9043': attribute type 16 has an invalid length. [ 1634.123472][T28956] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1635.210716][T28972] validate_nla: 1 callbacks suppressed [ 1635.210748][T28972] netlink: 'syz.0.9041': attribute type 16 has an invalid length. [ 1635.229892][T28972] __nla_validate_parse: 4 callbacks suppressed [ 1635.229924][T28972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9041'. [ 1635.363050][T28977] netlink: 'syz.3.9045': attribute type 16 has an invalid length. [ 1635.375435][T28977] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1635.413685][T28980] netlink: 'syz.4.9047': attribute type 16 has an invalid length. [ 1635.422191][T28980] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9047'. [ 1635.569737][T28983] netlink: 'syz.0.9058': attribute type 16 has an invalid length. [ 1635.584582][T28983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9058'. [ 1635.919758][T28992] netlink: 'syz.0.9061': attribute type 16 has an invalid length. [ 1635.934372][T28992] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9061'. [ 1635.979657][T28997] netlink: 'syz.4.9052': attribute type 7 has an invalid length. [ 1636.028481][T28997] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.9052'. [ 1636.100191][T28998] netlink: 'syz.4.9052': attribute type 21 has an invalid length. [ 1636.130077][T28998] netlink: 'syz.4.9052': attribute type 6 has an invalid length. [ 1636.201089][T28998] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9052'. [ 1636.423423][T29004] netlink: 'syz.2.9053': attribute type 2 has an invalid length. [ 1636.442221][T29004] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9053'. [ 1636.692930][T29011] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9055'. [ 1637.127182][T29024] netlink: 'syz.3.9060': attribute type 16 has an invalid length. [ 1637.184216][T29024] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9060'. [ 1639.602518][T29112] can: request_module (can-proto-0) failed. [ 1640.539850][T29138] validate_nla: 14 callbacks suppressed [ 1640.542320][T29138] netlink: 'syz.4.9106': attribute type 2 has an invalid length. [ 1640.597061][T29138] __nla_validate_parse: 16 callbacks suppressed [ 1640.597094][T29138] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9106'. [ 1640.830468][T29140] netlink: 'syz.3.9107': attribute type 16 has an invalid length. [ 1640.868667][T29140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1640.926058][T29144] netlink: 'syz.1.9109': attribute type 16 has an invalid length. [ 1640.954946][T29144] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9109'. [ 1641.293363][T29155] netlink: 'syz.2.9111': attribute type 21 has an invalid length. [ 1641.301948][T29155] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1641.317250][T29155] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9111'. [ 1645.158677][T29267] netlink: 'syz.2.9153': attribute type 1 has an invalid length. [ 1645.166774][T29267] netlink: 'syz.2.9153': attribute type 3 has an invalid length. [ 1645.254074][T29267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1645.407482][T29274] netlink: 'syz.3.9156': attribute type 16 has an invalid length. [ 1645.427320][T29274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9156'. [ 1646.313331][T29292] can: request_module (can-proto-0) failed. [ 1646.721485][T29314] netlink: 'syz.1.9169': attribute type 16 has an invalid length. [ 1646.732872][T29314] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9169'. [ 1647.033735][T29328] netlink: 'syz.1.9175': attribute type 1 has an invalid length. [ 1647.049705][T29328] netlink: 'syz.1.9175': attribute type 3 has an invalid length. [ 1647.058057][T29328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9175'. [ 1647.803810][T29344] netlink: 'syz.0.9181': attribute type 16 has an invalid length. [ 1647.826847][T29344] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1648.750330][T29372] netlink: 'syz.2.9191': attribute type 16 has an invalid length. [ 1648.782051][T29372] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1648.881852][T29373] can: request_module (can-proto-0) failed. [ 1649.210575][T29391] netlink: 'syz.0.9198': attribute type 16 has an invalid length. [ 1649.222847][T29391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9198'. [ 1650.280903][T29415] netlink: 'syz.1.9206': attribute type 16 has an invalid length. [ 1650.299825][T29415] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9206'. [ 1651.561477][T29439] can: request_module (can-proto-0) failed. [ 1651.951561][T29449] netlink: 'syz.0.9227': attribute type 16 has an invalid length. [ 1651.960144][T29449] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9227'. [ 1652.230568][T29460] netlink: 'syz.2.9221': attribute type 16 has an invalid length. [ 1652.238924][T29460] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9221'. [ 1652.906734][T29479] netlink: 'syz.0.9231': attribute type 16 has an invalid length. [ 1652.926305][T29479] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1653.173422][T29488] netlink: 'syz.0.9246': attribute type 16 has an invalid length. [ 1653.200122][T29489] netlink: 'syz.3.9234': attribute type 4 has an invalid length. [ 1653.214606][T29488] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9246'. [ 1653.214826][T29489] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9234'. [ 1653.347647][T29494] netlink: 'syz.1.9237': attribute type 16 has an invalid length. [ 1653.380112][T29494] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9237'. [ 1655.977170][T29524] netlink: 'syz.4.9250': attribute type 16 has an invalid length. [ 1656.057013][T29524] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9250'. [ 1656.469887][T29537] can: request_module (can-proto-0) failed. [ 1657.198968][T29549] netlink: 'syz.1.9256': attribute type 16 has an invalid length. [ 1657.234519][T29549] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9256'. [ 1657.299966][T29555] netlink: 'syz.4.9259': attribute type 4 has an invalid length. [ 1657.321159][T29555] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1658.892782][T29560] netlink: 'syz.2.9260': attribute type 1 has an invalid length. [ 1659.272712][T29572] netlink: 'syz.4.9264': attribute type 16 has an invalid length. [ 1659.284184][T29572] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9264'. [ 1659.298082][T29565] netlink: 'syz.2.9263': attribute type 16 has an invalid length. [ 1659.308269][T29565] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9263'. [ 1660.337458][T29603] netlink: 'syz.0.9272': attribute type 4 has an invalid length. [ 1660.359507][T29603] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9272'. [ 1661.868212][T29610] netlink: 'syz.1.9275': attribute type 2 has an invalid length. [ 1661.922496][T29610] netlink: 'syz.1.9275': attribute type 8 has an invalid length. [ 1661.966461][T29610] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9275'. [ 1661.978086][T29614] netlink: 'syz.0.9277': attribute type 16 has an invalid length. [ 1661.995984][T29620] sock: sock_set_timeout: `syz.3.9278' (pid 29620) tries to set negative timeout [ 1662.003162][T29614] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1662.030653][T29616] netlink: 'syz.4.9276': attribute type 16 has an invalid length. [ 1662.059440][T29616] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1662.106225][T29620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9278'. [ 1662.141989][T29620] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1662.554475][T29633] validate_nla: 1 callbacks suppressed [ 1662.554491][T29633] netlink: 'syz.4.9280': attribute type 29 has an invalid length. [ 1662.576891][T29628] netlink: 'syz.0.9289': attribute type 16 has an invalid length. [ 1662.585050][T29628] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9289'. [ 1662.771574][T29633] netlink: 'syz.4.9280': attribute type 29 has an invalid length. [ 1665.007096][T29660] netlink: 'syz.2.9288': attribute type 4 has an invalid length. [ 1665.033744][T29660] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9288'. [ 1665.415776][T29664] netlink: 'syz.3.9290': attribute type 16 has an invalid length. [ 1665.423667][T29664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9290'. [ 1666.497087][T29671] netlink: 'syz.2.9295': attribute type 16 has an invalid length. [ 1666.518077][T29671] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9295'. [ 1666.542739][T29678] netlink: 'syz.3.9298': attribute type 21 has an invalid length. [ 1666.596122][T29678] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1666.642749][T29678] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9298'. [ 1667.050640][T29690] netlink: 'syz.3.9302': attribute type 2 has an invalid length. [ 1667.062011][T29690] netlink: 'syz.3.9302': attribute type 8 has an invalid length. [ 1667.070857][T29690] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9302'. [ 1667.105448][T29695] netlink: 'syz.0.9304': attribute type 16 has an invalid length. [ 1667.113507][T29695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9304'. [ 1668.549017][T29716] netlink: 'syz.1.9309': attribute type 4 has an invalid length. [ 1668.597501][T29716] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9309'. [ 1668.680217][T29717] netlink: 'syz.4.9311': attribute type 16 has an invalid length. [ 1668.691829][T29717] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9311'. [ 1668.797171][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.803606][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.574834][T29727] netlink: 'syz.4.9313': attribute type 21 has an invalid length. [ 1671.583258][T29727] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1671.598480][T29727] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1671.625754][T29730] netlink: 'syz.3.9324': attribute type 16 has an invalid length. [ 1671.633907][T29730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1671.851761][T29737] netlink: 'syz.3.9316': attribute type 16 has an invalid length. [ 1671.916586][T29737] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9316'. [ 1672.090057][T29742] netlink: 'syz.0.9317': attribute type 2 has an invalid length. [ 1672.106297][T29742] netlink: 'syz.0.9317': attribute type 8 has an invalid length. [ 1672.132341][T29742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9317'. [ 1673.548592][T29775] netlink: 'syz.4.9329': attribute type 16 has an invalid length. [ 1673.564477][T29775] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9329'. [ 1673.579688][T29778] netlink: 'syz.2.9331': attribute type 21 has an invalid length. [ 1673.594777][T29778] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9331'. [ 1673.615830][T29778] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9331'. [ 1673.873632][T29784] netlink: 'syz.0.9332': attribute type 16 has an invalid length. [ 1673.893428][T29787] sock: sock_set_timeout: `syz.4.9334' (pid 29787) tries to set negative timeout [ 1673.917802][T29784] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9332'. [ 1674.125965][T29787] netlink: 'syz.4.9334': attribute type 10 has an invalid length. [ 1674.147307][T29787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9334'. [ 1675.499520][T29818] netlink: 'syz.2.9344': attribute type 16 has an invalid length. [ 1675.519754][T29818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9344'. [ 1675.911731][T29827] netlink: 'syz.1.9347': attribute type 16 has an invalid length. [ 1675.979309][T29827] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9347'. [ 1676.296699][T29840] sock: sock_set_timeout: `syz.1.9351' (pid 29840) tries to set negative timeout [ 1676.352932][T29840] netlink: 'syz.1.9351': attribute type 10 has an invalid length. [ 1676.378581][T29840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9351'. [ 1676.411762][T29840] device veth0_vlan left promiscuous mode [ 1676.440652][T29840] device veth0_vlan entered promiscuous mode [ 1676.528391][T29840] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1676.636004][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1676.667020][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1677.519686][T29850] netlink: 'syz.3.9353': attribute type 21 has an invalid length. [ 1677.572943][T29850] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1677.601960][T29850] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1678.055126][T29862] netlink: 'syz.1.9358': attribute type 16 has an invalid length. [ 1678.063560][T29862] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9358'. [ 1678.757425][T29872] netlink: 'syz.1.9361': attribute type 16 has an invalid length. [ 1678.768528][T29872] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9361'. [ 1679.234977][T29890] netlink: 'syz.1.9377': attribute type 16 has an invalid length. [ 1679.252533][T29890] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9377'. [ 1680.442556][T29919] netlink: 'syz.1.9372': attribute type 16 has an invalid length. [ 1680.450820][T29919] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9372'. [ 1681.690795][T29930] netlink: 'syz.3.9382': attribute type 16 has an invalid length. [ 1681.701277][T29930] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9382'. [ 1681.757895][T29938] netlink: 'syz.0.9392': attribute type 16 has an invalid length. [ 1681.776300][T29938] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9392'. [ 1682.281196][T29954] netlink: 'syz.4.9390': attribute type 16 has an invalid length. [ 1682.306469][T29954] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9390'. [ 1682.472309][T29958] netlink: 'syz.0.9404': attribute type 16 has an invalid length. [ 1682.508958][T29958] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1682.536380][T29967] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1682.599941][T29967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1682.777822][T25433] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1682.992603][T29974] netlink: 'syz.0.9398': attribute type 16 has an invalid length. [ 1683.001768][T29974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9398'. [ 1683.697282][T29980] netlink: 'syz.3.9401': attribute type 16 has an invalid length. [ 1683.742668][T29980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9401'. [ 1684.556514][T30005] netlink: 'syz.3.9410': attribute type 16 has an invalid length. [ 1684.576898][T30005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9410'. [ 1684.723228][T30011] netlink: 'syz.1.9412': attribute type 16 has an invalid length. [ 1684.743297][T30011] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9412'. [ 1684.794222][T25433] Bluetooth: hci0: command 0x2067 tx timeout [ 1684.807547][T30016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1685.140538][T30029] netlink: 'syz.0.9429': attribute type 16 has an invalid length. [ 1685.182356][T30029] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9429'. [ 1686.091190][T30047] netlink: 'syz.3.9426': attribute type 16 has an invalid length. [ 1686.139435][T30047] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9426'. [ 1686.577032][T30060] netlink: 'syz.0.9440': attribute type 16 has an invalid length. [ 1686.608352][T30060] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9440'. [ 1686.672111][T30067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1686.945258][T30076] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1686.979006][T30076] openvswitch: netlink: Flow actions attr not present in new flow. [ 1687.002407][T30074] netlink: 'syz.1.9435': attribute type 16 has an invalid length. [ 1687.012617][T30080] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9437'. [ 1687.027017][T30074] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9435'. [ 1687.048626][T30080] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1687.084212][T30080] CPU: 1 PID: 30080 Comm: syz.2.9437 Not tainted syzkaller #0 [ 1687.091824][T30080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1687.101905][T30080] Call Trace: [ 1687.105209][T30080] [ 1687.108173][T30080] dump_stack_lvl+0x188/0x24e [ 1687.112983][T30080] ? show_regs_print_info+0x12/0x12 [ 1687.118240][T30080] ? load_image+0x410/0x410 [ 1687.122969][T30080] sysfs_warn_dup+0x8a/0xa0 [ 1687.127695][T30080] sysfs_do_create_link_sd+0xc0/0x110 [ 1687.133116][T30080] device_add+0x83b/0x1050 [ 1687.137600][T30080] wiphy_register+0x1d8b/0x2aa0 [ 1687.142519][T30080] ? cfg80211_event_work+0x40/0x40 [ 1687.147699][T30080] ? minstrel_ht_alloc+0x894/0xa20 [ 1687.152847][T30080] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1687.158928][T30080] ieee80211_register_hw+0x2d48/0x39f0 [ 1687.164404][T30080] ? ieee80211_register_hw+0xf61/0x39f0 [ 1687.169948][T30080] ? ieee80211_register_hw+0xf61/0x39f0 [ 1687.175512][T30080] ? ieee80211_tasklet_handler+0x20/0x20 [ 1687.181172][T30080] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1687.187073][T30080] ? __debug_object_init+0xed/0x440 [ 1687.192279][T30080] ? memset+0x1e/0x40 [ 1687.196258][T30080] ? __hrtimer_init+0x189/0x270 [ 1687.201111][T30080] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1687.206847][T30080] ? memcpy+0x3c/0x60 [ 1687.210830][T30080] hwsim_new_radio_nl+0xab7/0xc90 [ 1687.215865][T30080] genl_family_rcv_msg_doit+0x22f/0x350 [ 1687.221424][T30080] ? end_current_label_crit_section+0x170/0x170 [ 1687.227671][T30080] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1687.233574][T30080] ? bpf_lsm_capable+0x5/0x10 [ 1687.238258][T30080] ? security_capable+0x85/0xb0 [ 1687.243120][T30080] genl_rcv_msg+0x601/0x790 [ 1687.247644][T30080] ? genl_bind+0x360/0x360 [ 1687.252066][T30080] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1687.258410][T30080] netlink_rcv_skb+0x1ef/0x440 [ 1687.263182][T30080] ? genl_bind+0x360/0x360 [ 1687.267611][T30080] ? netlink_ack+0x1160/0x1160 [ 1687.272418][T30080] ? down_read+0x1a8/0x2d0 [ 1687.276840][T30080] genl_rcv+0x24/0x40 [ 1687.280821][T30080] netlink_unicast+0x7ad/0x920 [ 1687.285651][T30080] netlink_sendmsg+0x8ad/0xbd0 [ 1687.290433][T30080] ? netlink_getsockopt+0x550/0x550 [ 1687.295637][T30080] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1687.301261][T30080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1687.306562][T30080] ? security_socket_sendmsg+0x7c/0xa0 [ 1687.312024][T30080] ? netlink_getsockopt+0x550/0x550 [ 1687.317248][T30080] ____sys_sendmsg+0x5ed/0x9a0 [ 1687.322197][T30080] ? __sys_sendmsg_sock+0x30/0x30 [ 1687.327398][T30080] ? __import_iovec+0x306/0x510 [ 1687.332383][T30080] ? import_iovec+0x6f/0xa0 [ 1687.336925][T30080] ___sys_sendmsg+0x2a2/0x360 [ 1687.341616][T30080] ? __sys_sendmsg+0x2a0/0x2a0 [ 1687.346435][T30080] __se_sys_sendmsg+0x1c3/0x2b0 [ 1687.351302][T30080] ? ct_nmi_exit+0x145/0x1c0 [ 1687.355902][T30080] ? __x64_sys_sendmsg+0x80/0x80 [ 1687.360881][T30080] ? lockdep_hardirqs_on+0x94/0x140 [ 1687.366090][T30080] do_syscall_64+0x4c/0xa0 [ 1687.370512][T30080] ? clear_bhb_loop+0x60/0xb0 [ 1687.375198][T30080] ? clear_bhb_loop+0x60/0xb0 [ 1687.380049][T30080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1687.385942][T30080] RIP: 0033:0x7f3be0d9de99 [ 1687.390354][T30080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.409964][T30080] RSP: 002b:00007f3be1b9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.418409][T30080] RAX: ffffffffffffffda RBX: 00007f3be1026090 RCX: 00007f3be0d9de99 [ 1687.426379][T30080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1687.434347][T30080] RBP: 00007f3be0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1687.442314][T30080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.450281][T30080] R13: 00007f3be1026128 R14: 00007f3be1026090 R15: 00007ffd2c9a1fa8 [ 1687.458288][T30080] [ 1687.649347][T30084] netlink: 'syz.1.9439': attribute type 21 has an invalid length. [ 1687.658712][T30084] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9439'. [ 1687.675057][T30084] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9439'. [ 1688.483097][T30107] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1688.551179][T30107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1688.738364][T30118] netlink: 'syz.1.9451': attribute type 16 has an invalid length. [ 1688.985373][T30126] netlink: 'syz.0.9454': attribute type 21 has an invalid length. [ 1689.820446][T30139] netlink: 'syz.3.9458': attribute type 16 has an invalid length. [ 1689.859423][T30139] __nla_validate_parse: 3 callbacks suppressed [ 1689.859457][T30139] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9458'. [ 1689.885344][T30144] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1689.897446][T30144] openvswitch: netlink: Flow actions attr not present in new flow. [ 1689.916693][T30144] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1689.966748][T30137] can: request_module (can-proto-0) failed. [ 1689.991994][T30144] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1690.095632][T30144] CPU: 1 PID: 30144 Comm: syz.4.9459 Not tainted syzkaller #0 [ 1690.103140][T30144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1690.113205][T30144] Call Trace: [ 1690.116490][T30144] [ 1690.119422][T30144] dump_stack_lvl+0x188/0x24e [ 1690.124112][T30144] ? show_regs_print_info+0x12/0x12 [ 1690.129343][T30144] ? load_image+0x410/0x410 [ 1690.133851][T30144] sysfs_warn_dup+0x8a/0xa0 [ 1690.138373][T30144] sysfs_do_create_link_sd+0xc0/0x110 [ 1690.143786][T30144] device_add+0x83b/0x1050 [ 1690.148245][T30144] wiphy_register+0x1d8b/0x2aa0 [ 1690.153244][T30144] ? cfg80211_event_work+0x40/0x40 [ 1690.158398][T30144] ? minstrel_ht_alloc+0x894/0xa20 [ 1690.163556][T30144] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1690.169655][T30144] ieee80211_register_hw+0x2d48/0x39f0 [ 1690.175135][T30144] ? ieee80211_register_hw+0xf61/0x39f0 [ 1690.180683][T30144] ? ieee80211_register_hw+0xf61/0x39f0 [ 1690.186234][T30144] ? ieee80211_tasklet_handler+0x20/0x20 [ 1690.191866][T30144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1690.197761][T30144] ? __debug_object_init+0xed/0x440 [ 1690.202964][T30144] ? memset+0x1e/0x40 [ 1690.206943][T30144] ? __hrtimer_init+0x189/0x270 [ 1690.211803][T30144] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1690.217569][T30144] ? memcpy+0x3c/0x60 [ 1690.221552][T30144] hwsim_new_radio_nl+0xab7/0xc90 [ 1690.226592][T30144] genl_family_rcv_msg_doit+0x22f/0x350 [ 1690.232144][T30144] ? end_current_label_crit_section+0x170/0x170 [ 1690.238397][T30144] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1690.244302][T30144] ? bpf_lsm_capable+0x5/0x10 [ 1690.248984][T30144] ? security_capable+0x85/0xb0 [ 1690.253859][T30144] genl_rcv_msg+0x601/0x790 [ 1690.258390][T30144] ? lockdep_hardirqs_on+0x94/0x140 [ 1690.263609][T30144] ? genl_bind+0x360/0x360 [ 1690.268041][T30144] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1690.274383][T30144] netlink_rcv_skb+0x1ef/0x440 [ 1690.279148][T30144] ? genl_bind+0x360/0x360 [ 1690.283595][T30144] ? netlink_ack+0x1160/0x1160 [ 1690.288373][T30144] ? down_read+0x1a8/0x2d0 [ 1690.292878][T30144] genl_rcv+0x24/0x40 [ 1690.296875][T30144] netlink_unicast+0x7ad/0x920 [ 1690.301654][T30144] netlink_sendmsg+0x8ad/0xbd0 [ 1690.306428][T30144] ? netlink_getsockopt+0x550/0x550 [ 1690.311637][T30144] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1690.317190][T30144] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1690.322476][T30144] ? security_socket_sendmsg+0x7c/0xa0 [ 1690.327935][T30144] ? netlink_getsockopt+0x550/0x550 [ 1690.333135][T30144] ____sys_sendmsg+0x5ed/0x9a0 [ 1690.337907][T30144] ? __sys_sendmsg_sock+0x30/0x30 [ 1690.342933][T30144] ? __import_iovec+0x306/0x510 [ 1690.347795][T30144] ? import_iovec+0x6f/0xa0 [ 1690.352311][T30144] ___sys_sendmsg+0x2a2/0x360 [ 1690.357004][T30144] ? __sys_sendmsg+0x2a0/0x2a0 [ 1690.361786][T30144] ? ktime_get+0x7b/0x270 [ 1690.366198][T30144] __se_sys_sendmsg+0x1c3/0x2b0 [ 1690.371075][T30144] ? ct_nmi_exit+0x145/0x1c0 [ 1690.375696][T30144] ? __x64_sys_sendmsg+0x80/0x80 [ 1690.380659][T30144] ? lockdep_hardirqs_on+0x94/0x140 [ 1690.385855][T30144] do_syscall_64+0x4c/0xa0 [ 1690.390270][T30144] ? clear_bhb_loop+0x60/0xb0 [ 1690.394943][T30144] ? clear_bhb_loop+0x60/0xb0 [ 1690.399627][T30144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1690.405528][T30144] RIP: 0033:0x7f0e9f99de99 [ 1690.409961][T30144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.429654][T30144] RSP: 002b:00007f0ea08b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.438066][T30144] RAX: ffffffffffffffda RBX: 00007f0e9fc25fa0 RCX: 00007f0e9f99de99 [ 1690.446035][T30144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1690.454004][T30144] RBP: 00007f0e9fa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1690.461970][T30144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.469937][T30144] R13: 00007f0e9fc26038 R14: 00007f0e9fc25fa0 R15: 00007fffaa904108 [ 1690.477933][T30144] [ 1691.032418][T30161] netlink: 'syz.1.9465': attribute type 16 has an invalid length. [ 1691.049831][T30161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9465'. [ 1691.191334][T30168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1691.280474][T30168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1691.707292][T30179] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1691.785322][T30179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1692.992896][T30216] netlink: 'syz.0.9480': attribute type 16 has an invalid length. [ 1693.024131][T30216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9480'. [ 1693.041470][T30217] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1693.103134][T30220] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1693.147615][T30217] openvswitch: netlink: Flow actions attr not present in new flow. [ 1693.231284][T30220] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1693.287451][T30220] CPU: 1 PID: 30220 Comm: syz.3.9479 Not tainted syzkaller #0 [ 1693.294989][T30220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1693.305081][T30220] Call Trace: [ 1693.308377][T30220] [ 1693.311323][T30220] dump_stack_lvl+0x188/0x24e [ 1693.316036][T30220] ? show_regs_print_info+0x12/0x12 [ 1693.321263][T30220] ? load_image+0x410/0x410 [ 1693.325806][T30220] sysfs_warn_dup+0x8a/0xa0 [ 1693.330331][T30220] sysfs_do_create_link_sd+0xc0/0x110 [ 1693.335739][T30220] device_add+0x83b/0x1050 [ 1693.340191][T30220] wiphy_register+0x1d8b/0x2aa0 [ 1693.345087][T30220] ? cfg80211_event_work+0x40/0x40 [ 1693.350228][T30220] ? minstrel_ht_alloc+0x894/0xa20 [ 1693.355375][T30220] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1693.361475][T30220] ieee80211_register_hw+0x2d48/0x39f0 [ 1693.366980][T30220] ? ieee80211_register_hw+0xf61/0x39f0 [ 1693.372556][T30220] ? ieee80211_register_hw+0xf61/0x39f0 [ 1693.378137][T30220] ? ieee80211_tasklet_handler+0x20/0x20 [ 1693.383803][T30220] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1693.389725][T30220] ? __debug_object_init+0xed/0x440 [ 1693.394952][T30220] ? memset+0x1e/0x40 [ 1693.399049][T30220] ? __hrtimer_init+0x189/0x270 [ 1693.403936][T30220] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1693.409705][T30220] ? memcpy+0x3c/0x60 [ 1693.413720][T30220] hwsim_new_radio_nl+0xab7/0xc90 [ 1693.418792][T30220] genl_family_rcv_msg_doit+0x22f/0x350 [ 1693.424374][T30220] ? end_current_label_crit_section+0x170/0x170 [ 1693.430659][T30220] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1693.436592][T30220] ? bpf_lsm_capable+0x5/0x10 [ 1693.441386][T30220] ? security_capable+0x85/0xb0 [ 1693.446283][T30220] genl_rcv_msg+0x601/0x790 [ 1693.450837][T30220] ? genl_bind+0x360/0x360 [ 1693.455285][T30220] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1693.461687][T30220] netlink_rcv_skb+0x1ef/0x440 [ 1693.466534][T30220] ? genl_bind+0x360/0x360 [ 1693.470991][T30220] ? netlink_ack+0x1160/0x1160 [ 1693.475830][T30220] ? down_read+0x1a8/0x2d0 [ 1693.480290][T30220] genl_rcv+0x24/0x40 [ 1693.484313][T30220] netlink_unicast+0x7ad/0x920 [ 1693.489124][T30220] netlink_sendmsg+0x8ad/0xbd0 [ 1693.494011][T30220] ? netlink_getsockopt+0x550/0x550 [ 1693.499244][T30220] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1693.504822][T30220] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1693.510125][T30220] ? security_socket_sendmsg+0x7c/0xa0 [ 1693.515611][T30220] ? netlink_getsockopt+0x550/0x550 [ 1693.520849][T30220] ____sys_sendmsg+0x5ed/0x9a0 [ 1693.525826][T30220] ? __sys_sendmsg_sock+0x30/0x30 [ 1693.530880][T30220] ? __import_iovec+0x306/0x510 [ 1693.536689][T30220] ? import_iovec+0x6f/0xa0 [ 1693.541669][T30220] ___sys_sendmsg+0x2a2/0x360 [ 1693.546475][T30220] ? __sys_sendmsg+0x2a0/0x2a0 [ 1693.551330][T30220] __se_sys_sendmsg+0x1c3/0x2b0 [ 1693.556219][T30220] ? __x64_sys_sendmsg+0x80/0x80 [ 1693.561224][T30220] ? lockdep_hardirqs_on+0x94/0x140 [ 1693.566461][T30220] do_syscall_64+0x4c/0xa0 [ 1693.570908][T30220] ? clear_bhb_loop+0x60/0xb0 [ 1693.575613][T30220] ? clear_bhb_loop+0x60/0xb0 [ 1693.580322][T30220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1693.586244][T30220] RIP: 0033:0x7ff05299de99 [ 1693.590681][T30220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1693.610408][T30220] RSP: 002b:00007ff05384b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1693.618865][T30220] RAX: ffffffffffffffda RBX: 00007ff052c26180 RCX: 00007ff05299de99 [ 1693.626870][T30220] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1693.634967][T30220] RBP: 00007ff052a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1693.643327][T30220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1693.651503][T30220] R13: 00007ff052c26218 R14: 00007ff052c26180 R15: 00007ffdc6a9d028 [ 1693.659533][T30220] [ 1694.465914][T30238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1694.503360][T30238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1695.670067][T30254] netlink: 'syz.1.9494': attribute type 16 has an invalid length. [ 1695.680112][T30254] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1696.447745][T30272] can: request_module (can-proto-0) failed. [ 1699.659827][T30310] netlink: 'syz.2.9509': attribute type 16 has an invalid length. [ 1699.694070][T30310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9509'. [ 1700.276412][T30327] netlink: 'syz.4.9517': attribute type 10 has an invalid length. [ 1700.886554][T30345] can: request_module (can-proto-0) failed. [ 1701.341779][T30358] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1701.520596][T30359] netlink: 'syz.1.9525': attribute type 16 has an invalid length. [ 1701.535656][T30359] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9525'. [ 1701.591922][T30358] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1701.600797][T30358] CPU: 1 PID: 30358 Comm: syz.3.9526 Not tainted syzkaller #0 [ 1701.608298][T30358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1701.618378][T30358] Call Trace: [ 1701.621674][T30358] [ 1701.624623][T30358] dump_stack_lvl+0x188/0x24e [ 1701.629330][T30358] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1701.635524][T30358] ? show_regs_print_info+0x12/0x12 [ 1701.640779][T30358] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1701.646971][T30358] sysfs_warn_dup+0x8a/0xa0 [ 1701.651523][T30358] sysfs_do_create_link_sd+0xc0/0x110 [ 1701.656916][T30358] device_add+0x83b/0x1050 [ 1701.661457][T30358] wiphy_register+0x1d8b/0x2aa0 [ 1701.666364][T30358] ? cfg80211_event_work+0x40/0x40 [ 1701.671508][T30358] ? minstrel_ht_alloc+0x894/0xa20 [ 1701.676659][T30358] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1701.682750][T30358] ieee80211_register_hw+0x2d48/0x39f0 [ 1701.688225][T30358] ? ieee80211_register_hw+0xf61/0x39f0 [ 1701.693782][T30358] ? ieee80211_register_hw+0xf61/0x39f0 [ 1701.699353][T30358] ? ieee80211_tasklet_handler+0x20/0x20 [ 1701.705026][T30358] ? __hrtimer_init+0x189/0x270 [ 1701.709895][T30358] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 1701.715465][T30358] ? __hrtimer_init+0x189/0x270 [ 1701.720353][T30358] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1701.726089][T30358] ? memcpy+0x3c/0x60 [ 1701.730084][T30358] hwsim_new_radio_nl+0xab7/0xc90 [ 1701.735157][T30358] genl_family_rcv_msg_doit+0x22f/0x350 [ 1701.740755][T30358] ? end_current_label_crit_section+0x170/0x170 [ 1701.747125][T30358] ? trace_call_bpf+0xbf/0x6b0 [ 1701.751965][T30358] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1701.757875][T30358] ? bpf_lsm_capable+0x5/0x10 [ 1701.762592][T30358] ? security_capable+0x85/0xb0 [ 1701.767494][T30358] genl_rcv_msg+0x601/0x790 [ 1701.772020][T30358] ? genl_bind+0x360/0x360 [ 1701.776455][T30358] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1701.783145][T30358] netlink_rcv_skb+0x1ef/0x440 [ 1701.787936][T30358] ? genl_bind+0x360/0x360 [ 1701.792420][T30358] ? netlink_ack+0x1160/0x1160 [ 1701.797197][T30358] ? down_read+0x1a8/0x2d0 [ 1701.801703][T30358] genl_rcv+0x24/0x40 [ 1701.805687][T30358] netlink_unicast+0x7ad/0x920 [ 1701.810462][T30358] netlink_sendmsg+0x8ad/0xbd0 [ 1701.815257][T30358] ? netlink_getsockopt+0x550/0x550 [ 1701.820675][T30358] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1701.826257][T30358] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1701.831654][T30358] ? security_socket_sendmsg+0x7c/0xa0 [ 1701.837158][T30358] ? netlink_getsockopt+0x550/0x550 [ 1701.842401][T30358] ____sys_sendmsg+0x5ed/0x9a0 [ 1701.847213][T30358] ? __sys_sendmsg_sock+0x30/0x30 [ 1701.852271][T30358] ? __import_iovec+0x306/0x510 [ 1701.857145][T30358] ? import_iovec+0x6f/0xa0 [ 1701.861719][T30358] ___sys_sendmsg+0x2a2/0x360 [ 1701.866443][T30358] ? __sys_sendmsg+0x2a0/0x2a0 [ 1701.871235][T30358] ? irqentry_enter+0x33/0x50 [ 1701.875923][T30358] ? rcu_is_watching+0x11/0xa0 [ 1701.880811][T30358] ? __se_sys_sendmsg+0xd4/0x2b0 [ 1701.885760][T30358] __se_sys_sendmsg+0x1c3/0x2b0 [ 1701.890622][T30358] ? __x64_sys_sendmsg+0x80/0x80 [ 1701.895581][T30358] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1701.901478][T30358] do_syscall_64+0x4c/0xa0 [ 1701.905919][T30358] ? clear_bhb_loop+0x60/0xb0 [ 1701.910592][T30358] ? clear_bhb_loop+0x60/0xb0 [ 1701.915279][T30358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1701.921176][T30358] RIP: 0033:0x7ff05299de99 [ 1701.926198][T30358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.945808][T30358] RSP: 002b:00007ff05386c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.954223][T30358] RAX: ffffffffffffffda RBX: 00007ff052c26090 RCX: 00007ff05299de99 [ 1701.962190][T30358] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1701.970160][T30358] RBP: 00007ff052a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1701.978125][T30358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1701.986091][T30358] R13: 00007ff052c26128 R14: 00007ff052c26090 R15: 00007ffdc6a9d028 [ 1701.994076][T30358] [ 1702.211965][T30375] netlink: 'syz.3.9532': attribute type 10 has an invalid length. [ 1702.861630][T30389] netlink: 'syz.4.9539': attribute type 16 has an invalid length. [ 1702.880541][T30389] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9539'. [ 1703.129721][T30400] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9543'. [ 1703.181755][T30400] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1703.198353][T30400] CPU: 0 PID: 30400 Comm: syz.2.9543 Not tainted syzkaller #0 [ 1703.205877][T30400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1703.215960][T30400] Call Trace: [ 1703.219259][T30400] [ 1703.222212][T30400] dump_stack_lvl+0x188/0x24e [ 1703.226934][T30400] ? show_regs_print_info+0x12/0x12 [ 1703.232172][T30400] ? load_image+0x410/0x410 [ 1703.236718][T30400] sysfs_warn_dup+0x8a/0xa0 [ 1703.241258][T30400] sysfs_do_create_link_sd+0xc0/0x110 [ 1703.246675][T30400] device_add+0x83b/0x1050 [ 1703.251139][T30400] wiphy_register+0x1d8b/0x2aa0 [ 1703.256049][T30400] ? cfg80211_event_work+0x40/0x40 [ 1703.261198][T30400] ? minstrel_ht_alloc+0x894/0xa20 [ 1703.266317][T30400] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.272396][T30400] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1703.278470][T30400] ieee80211_register_hw+0x2d48/0x39f0 [ 1703.283951][T30400] ? ieee80211_register_hw+0xf61/0x39f0 [ 1703.289498][T30400] ? ieee80211_register_hw+0xf61/0x39f0 [ 1703.295049][T30400] ? ieee80211_tasklet_handler+0x20/0x20 [ 1703.300955][T30400] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1703.306873][T30400] ? __debug_object_init+0xed/0x440 [ 1703.312086][T30400] ? memset+0x1e/0x40 [ 1703.316067][T30400] ? __hrtimer_init+0x189/0x270 [ 1703.320922][T30400] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1703.326650][T30400] ? memcpy+0x3c/0x60 [ 1703.330632][T30400] hwsim_new_radio_nl+0xab7/0xc90 [ 1703.335670][T30400] genl_family_rcv_msg_doit+0x22f/0x350 [ 1703.341221][T30400] ? end_current_label_crit_section+0x170/0x170 [ 1703.347468][T30400] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1703.353369][T30400] ? bpf_lsm_capable+0x5/0x10 [ 1703.358047][T30400] ? security_capable+0x85/0xb0 [ 1703.362935][T30400] genl_rcv_msg+0x601/0x790 [ 1703.367564][T30400] ? genl_bind+0x360/0x360 [ 1703.372093][T30400] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1703.378486][T30400] netlink_rcv_skb+0x1ef/0x440 [ 1703.383260][T30400] ? genl_bind+0x360/0x360 [ 1703.387681][T30400] ? netlink_ack+0x1160/0x1160 [ 1703.392453][T30400] ? down_read+0x1a8/0x2d0 [ 1703.396870][T30400] genl_rcv+0x24/0x40 [ 1703.400860][T30400] netlink_unicast+0x7ad/0x920 [ 1703.405637][T30400] netlink_sendmsg+0x8ad/0xbd0 [ 1703.410403][T30400] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1703.416565][T30400] ? netlink_getsockopt+0x550/0x550 [ 1703.421775][T30400] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1703.427412][T30400] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1703.432705][T30400] ? security_socket_sendmsg+0x7c/0xa0 [ 1703.438169][T30400] ? netlink_getsockopt+0x550/0x550 [ 1703.443376][T30400] ____sys_sendmsg+0x5ed/0x9a0 [ 1703.448153][T30400] ? __sys_sendmsg_sock+0x30/0x30 [ 1703.453174][T30400] ? __import_iovec+0x306/0x510 [ 1703.458039][T30400] ? import_iovec+0x6f/0xa0 [ 1703.462551][T30400] ___sys_sendmsg+0x2a2/0x360 [ 1703.467239][T30400] ? __sys_sendmsg+0x2a0/0x2a0 [ 1703.472020][T30400] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1703.477791][T30400] __se_sys_sendmsg+0x1c3/0x2b0 [ 1703.482648][T30400] ? __x64_sys_sendmsg+0x80/0x80 [ 1703.487594][T30400] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1703.493487][T30400] do_syscall_64+0x4c/0xa0 [ 1703.497903][T30400] ? clear_bhb_loop+0x60/0xb0 [ 1703.502577][T30400] ? clear_bhb_loop+0x60/0xb0 [ 1703.507254][T30400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.513145][T30400] RIP: 0033:0x7f3be0d9de99 [ 1703.517567][T30400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.537259][T30400] RSP: 002b:00007f3be1b9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.545669][T30400] RAX: ffffffffffffffda RBX: 00007f3be1026090 RCX: 00007f3be0d9de99 [ 1703.553637][T30400] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1703.561607][T30400] RBP: 00007f3be0e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1703.569578][T30400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.577542][T30400] R13: 00007f3be1026128 R14: 00007f3be1026090 R15: 00007ffd2c9a1fa8 [ 1703.585522][T30400] [ 1703.633902][T30408] netlink: 'syz.4.9554': attribute type 16 has an invalid length. [ 1703.649774][T30408] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9554'. [ 1703.762013][T30413] netlink: 'syz.0.9545': attribute type 10 has an invalid length. [ 1706.980319][T30437] can: request_module (can-proto-0) failed. [ 1707.646548][T30450] netlink: 'syz.4.9557': attribute type 16 has an invalid length. [ 1707.664576][T30450] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9557'. [ 1707.780256][T30456] netlink: 'syz.2.9558': attribute type 16 has an invalid length. [ 1707.796071][T30456] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9558'. [ 1708.041867][T25433] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 1708.213743][T30476] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9565'. [ 1708.346865][T30476] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1711.448355][T30497] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.9569'. [ 1711.448787][T30503] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9569'. [ 1711.524557][T30502] netlink: 'syz.4.9572': attribute type 16 has an invalid length. [ 1711.549814][T30497] openvswitch: netlink: Flow actions attr not present in new flow. [ 1711.568287][T30502] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9572'. [ 1711.600467][T30503] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1711.620449][T30503] CPU: 1 PID: 30503 Comm: syz.1.9569 Not tainted syzkaller #0 [ 1711.627984][T30503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1711.638065][T30503] Call Trace: [ 1711.641366][T30503] [ 1711.644318][T30503] dump_stack_lvl+0x188/0x24e [ 1711.649041][T30503] ? show_regs_print_info+0x12/0x12 [ 1711.654278][T30503] ? load_image+0x410/0x410 [ 1711.658808][T30503] sysfs_warn_dup+0x8a/0xa0 [ 1711.663311][T30503] sysfs_do_create_link_sd+0xc0/0x110 [ 1711.668704][T30503] device_add+0x83b/0x1050 [ 1711.673171][T30503] wiphy_register+0x1d8b/0x2aa0 [ 1711.678083][T30503] ? cfg80211_event_work+0x40/0x40 [ 1711.683231][T30503] ? minstrel_ht_alloc+0x894/0xa20 [ 1711.688370][T30503] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1711.694454][T30503] ieee80211_register_hw+0x2d48/0x39f0 [ 1711.699949][T30503] ? ieee80211_register_hw+0xf61/0x39f0 [ 1711.705498][T30503] ? ieee80211_register_hw+0xf61/0x39f0 [ 1711.711053][T30503] ? ieee80211_tasklet_handler+0x20/0x20 [ 1711.716688][T30503] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1711.722590][T30503] ? __debug_object_init+0xed/0x440 [ 1711.727993][T30503] ? memset+0x1e/0x40 [ 1711.731985][T30503] ? __hrtimer_init+0x189/0x270 [ 1711.736842][T30503] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1711.742585][T30503] ? memcpy+0x3c/0x60 [ 1711.746575][T30503] hwsim_new_radio_nl+0xab7/0xc90 [ 1711.751611][T30503] genl_family_rcv_msg_doit+0x22f/0x350 [ 1711.757159][T30503] ? end_current_label_crit_section+0x170/0x170 [ 1711.763402][T30503] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1711.769303][T30503] ? bpf_lsm_capable+0x5/0x10 [ 1711.773974][T30503] ? security_capable+0x85/0xb0 [ 1711.778828][T30503] genl_rcv_msg+0x601/0x790 [ 1711.783338][T30503] ? genl_bind+0x360/0x360 [ 1711.787754][T30503] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1711.794093][T30503] netlink_rcv_skb+0x1ef/0x440 [ 1711.798877][T30503] ? genl_bind+0x360/0x360 [ 1711.803293][T30503] ? netlink_ack+0x1160/0x1160 [ 1711.808063][T30503] ? down_read+0x1a8/0x2d0 [ 1711.812477][T30503] genl_rcv+0x24/0x40 [ 1711.816488][T30503] netlink_unicast+0x7ad/0x920 [ 1711.821309][T30503] netlink_sendmsg+0x8ad/0xbd0 [ 1711.826100][T30503] ? netlink_getsockopt+0x550/0x550 [ 1711.831333][T30503] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1711.836912][T30503] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1711.842203][T30503] ? security_socket_sendmsg+0x7c/0xa0 [ 1711.847663][T30503] ? netlink_getsockopt+0x550/0x550 [ 1711.852872][T30503] ____sys_sendmsg+0x5ed/0x9a0 [ 1711.857648][T30503] ? __sys_sendmsg_sock+0x30/0x30 [ 1711.862673][T30503] ? __import_iovec+0x306/0x510 [ 1711.867537][T30503] ? import_iovec+0x6f/0xa0 [ 1711.872045][T30503] ___sys_sendmsg+0x2a2/0x360 [ 1711.876741][T30503] ? __sys_sendmsg+0x2a0/0x2a0 [ 1711.881549][T30503] __se_sys_sendmsg+0x1c3/0x2b0 [ 1711.886403][T30503] ? ct_nmi_exit+0x145/0x1c0 [ 1711.890997][T30503] ? __x64_sys_sendmsg+0x80/0x80 [ 1711.895949][T30503] ? lockdep_hardirqs_on+0x94/0x140 [ 1711.901156][T30503] do_syscall_64+0x4c/0xa0 [ 1711.905571][T30503] ? clear_bhb_loop+0x60/0xb0 [ 1711.910248][T30503] ? clear_bhb_loop+0x60/0xb0 [ 1711.914928][T30503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1711.920843][T30503] RIP: 0033:0x7f0138d9de99 [ 1711.925266][T30503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.944875][T30503] RSP: 002b:00007f0139bd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.953284][T30503] RAX: ffffffffffffffda RBX: 00007f0139026090 RCX: 00007f0138d9de99 [ 1711.961254][T30503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1711.969225][T30503] RBP: 00007f0138e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1711.977196][T30503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.985161][T30503] R13: 00007f0139026128 R14: 00007f0139026090 R15: 00007ffe6155e308 [ 1711.993144][T30503] [ 1712.722495][T30534] tipc: Started in network mode [ 1712.727816][T30534] tipc: Node identity 9215a268, cluster identity 4711 [ 1712.751709][T30534] tipc: Node number set to 2450891368 [ 1713.205263][T30552] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1713.260098][T30552] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1713.520812][T30557] can: request_module (can-proto-0) failed. [ 1715.198266][T30578] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9593'. [ 1715.446081][T30587] netlink: 'syz.0.9595': attribute type 4 has an invalid length. [ 1715.463204][T30587] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1715.663435][T30588] can: request_module (can-proto-0) failed. [ 1716.848186][T30610] netlink: 'syz.2.9606': attribute type 16 has an invalid length. [ 1716.857233][T30610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9606'. [ 1717.189865][T30620] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9607'. [ 1717.863354][T30623] netlink: 'syz.4.9621': attribute type 16 has an invalid length. [ 1717.920476][T30623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9621'. [ 1717.933232][T30620] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1717.945183][T30620] CPU: 1 PID: 30620 Comm: syz.0.9607 Not tainted syzkaller #0 [ 1717.952692][T30620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1717.962776][T30620] Call Trace: [ 1717.966080][T30620] [ 1717.969043][T30620] dump_stack_lvl+0x188/0x24e [ 1717.973763][T30620] ? show_regs_print_info+0x12/0x12 [ 1717.979002][T30620] ? load_image+0x410/0x410 [ 1717.983563][T30620] sysfs_warn_dup+0x8a/0xa0 [ 1717.988109][T30620] sysfs_do_create_link_sd+0xc0/0x110 [ 1717.993523][T30620] device_add+0x83b/0x1050 [ 1717.997989][T30620] wiphy_register+0x1d8b/0x2aa0 [ 1718.002908][T30620] ? cfg80211_event_work+0x40/0x40 [ 1718.008064][T30620] ? minstrel_ht_alloc+0x894/0xa20 [ 1718.013225][T30620] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1718.019339][T30620] ieee80211_register_hw+0x2d48/0x39f0 [ 1718.024872][T30620] ? ieee80211_register_hw+0xf61/0x39f0 [ 1718.030450][T30620] ? ieee80211_register_hw+0xf61/0x39f0 [ 1718.036033][T30620] ? ieee80211_tasklet_handler+0x20/0x20 [ 1718.041753][T30620] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1718.047674][T30620] ? __debug_object_init+0xed/0x440 [ 1718.052890][T30620] ? memset+0x1e/0x40 [ 1718.056886][T30620] ? __hrtimer_init+0x189/0x270 [ 1718.061760][T30620] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1718.067517][T30620] ? memcpy+0x3c/0x60 [ 1718.071543][T30620] hwsim_new_radio_nl+0xab7/0xc90 [ 1718.076597][T30620] genl_family_rcv_msg_doit+0x22f/0x350 [ 1718.082155][T30620] ? end_current_label_crit_section+0x170/0x170 [ 1718.088401][T30620] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1718.094310][T30620] ? bpf_lsm_capable+0x5/0x10 [ 1718.098988][T30620] ? security_capable+0x85/0xb0 [ 1718.103857][T30620] genl_rcv_msg+0x601/0x790 [ 1718.108409][T30620] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1718.114145][T30620] ? genl_bind+0x360/0x360 [ 1718.118565][T30620] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1718.124906][T30620] netlink_rcv_skb+0x1ef/0x440 [ 1718.129671][T30620] ? genl_bind+0x360/0x360 [ 1718.134093][T30620] ? netlink_ack+0x1160/0x1160 [ 1718.138876][T30620] ? down_read+0x1a8/0x2d0 [ 1718.143293][T30620] genl_rcv+0x24/0x40 [ 1718.147275][T30620] netlink_unicast+0x7ad/0x920 [ 1718.152048][T30620] netlink_sendmsg+0x8ad/0xbd0 [ 1718.156818][T30620] ? netlink_getsockopt+0x550/0x550 [ 1718.162020][T30620] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1718.167575][T30620] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1718.172860][T30620] ? security_socket_sendmsg+0x7c/0xa0 [ 1718.178317][T30620] ? netlink_getsockopt+0x550/0x550 [ 1718.183525][T30620] ____sys_sendmsg+0x5ed/0x9a0 [ 1718.188304][T30620] ? __sys_sendmsg_sock+0x30/0x30 [ 1718.193330][T30620] ? __import_iovec+0x306/0x510 [ 1718.198302][T30620] ? import_iovec+0x6f/0xa0 [ 1718.202815][T30620] ___sys_sendmsg+0x2a2/0x360 [ 1718.207499][T30620] ? __sys_sendmsg+0x2a0/0x2a0 [ 1718.212304][T30620] __se_sys_sendmsg+0x1c3/0x2b0 [ 1718.217156][T30620] ? perf_trace_preemptirq_template+0x268/0x320 [ 1718.223433][T30620] ? __x64_sys_sendmsg+0x80/0x80 [ 1718.228392][T30620] ? lockdep_hardirqs_on+0x94/0x140 [ 1718.233602][T30620] do_syscall_64+0x4c/0xa0 [ 1718.238018][T30620] ? clear_bhb_loop+0x60/0xb0 [ 1718.242694][T30620] ? clear_bhb_loop+0x60/0xb0 [ 1718.247371][T30620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1718.253266][T30620] RIP: 0033:0x7f2c7cd9de99 [ 1718.257678][T30620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.277297][T30620] RSP: 002b:00007f2c7dd2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.285713][T30620] RAX: ffffffffffffffda RBX: 00007f2c7d026090 RCX: 00007f2c7cd9de99 [ 1718.293690][T30620] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1718.301660][T30620] RBP: 00007f2c7ce33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1718.309627][T30620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1718.317601][T30620] R13: 00007f2c7d026128 R14: 00007f2c7d026090 R15: 00007ffdefaea968 [ 1718.325594][T30620] [ 1718.356716][T30636] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9613'. [ 1718.610164][T30644] netlink: 'syz.1.9615': attribute type 10 has an invalid length. [ 1718.649600][T30644] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9615'. [ 1718.831151][T30657] device pim6reg1 entered promiscuous mode [ 1719.246580][T30669] netlink: 'syz.3.9626': attribute type 16 has an invalid length. [ 1719.255100][T30669] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9626'. [ 1720.078896][T30676] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9629'. [ 1720.504879][T30697] netlink: 'syz.2.9638': attribute type 10 has an invalid length. [ 1720.513389][T30697] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9638'. [ 1720.782002][T30700] netlink: 'syz.2.9640': attribute type 16 has an invalid length. [ 1720.790717][T30700] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9640'. [ 1721.097275][T30707] can: request_module (can-proto-0) failed. [ 1721.991542][T30720] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9646'. [ 1722.167492][T30727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9659'. [ 1722.189925][T30724] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9648'. [ 1722.204481][T30727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9659'. [ 1722.578151][T30736] netlink: 'syz.1.9651': attribute type 10 has an invalid length. [ 1722.622119][T30736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1722.652711][T30736] device hsr0 entered promiscuous mode [ 1722.661306][T30736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1722.670534][T30736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1722.678225][T30736] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1722.713745][T30738] netlink: 'syz.4.9654': attribute type 16 has an invalid length. [ 1722.962640][T30751] netlink: 'syz.2.9666': attribute type 16 has an invalid length. [ 1722.982414][T30747] device pim6reg1 entered promiscuous mode [ 1724.260157][T30770] device pim6reg1 entered promiscuous mode [ 1725.161804][T30793] netlink: 'syz.3.9680': attribute type 16 has an invalid length. [ 1725.183724][T30793] __nla_validate_parse: 8 callbacks suppressed [ 1725.183756][T30793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9680'. [ 1726.588883][T30814] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9678'. [ 1726.717108][T30820] netlink: 'syz.3.9681': attribute type 10 has an invalid length. [ 1726.875821][T30822] netlink: 'syz.0.9683': attribute type 16 has an invalid length. [ 1726.892614][T30822] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9683'. [ 1727.399469][T30842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.412444][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.422741][T30842] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.440784][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.474739][T30842] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.521413][T30842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.555617][T30842] netlink: 33 bytes leftover after parsing attributes in process `syz.1.9692'. [ 1727.917246][T30847] netlink: 'syz.2.9694': attribute type 16 has an invalid length. [ 1728.603773][T30859] netlink: 'syz.0.9699': attribute type 10 has an invalid length. [ 1728.668676][T30859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1728.742632][T30860] netlink: 'syz.3.9698': attribute type 16 has an invalid length. [ 1729.162181][T30876] device pim6reg1 entered promiscuous mode [ 1729.342592][T30878] device wlan1 left promiscuous mode [ 1730.236732][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.243127][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.041789][T30941] __nla_validate_parse: 3 callbacks suppressed [ 1731.041823][T30941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.064642][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.074677][T30941] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.085906][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.117004][T30941] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.164323][T30941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.204943][T30941] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1731.258258][T30945] device pim6reg1 entered promiscuous mode [ 1731.762106][T30963] netlink: 'syz.4.9736': attribute type 16 has an invalid length. [ 1731.772648][T30963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1732.103304][T30975] netlink: 'syz.0.9744': attribute type 16 has an invalid length. [ 1732.121906][T30975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9744'. [ 1732.278119][T30985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9749'. [ 1732.470950][T30986] device wlan1 left promiscuous mode [ 1732.679391][T30993] netlink: 'syz.1.9751': attribute type 16 has an invalid length. [ 1733.088811][T31012] netlink: 'syz.3.9761': attribute type 16 has an invalid length. [ 1733.653767][T31019] netlink: 'syz.1.9766': attribute type 16 has an invalid length. [ 1733.662395][T31029] netlink: 'syz.4.9769': attribute type 16 has an invalid length. [ 1734.035907][T31045] netlink: 'syz.4.9777': attribute type 10 has an invalid length. [ 1734.175805][T31047] netlink: 'syz.3.9778': attribute type 16 has an invalid length. [ 1734.263886][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1734.300269][T31051] netlink: 'syz.2.9781': attribute type 16 has an invalid length. [ 1734.574414][T31062] netlink: 'syz.3.9783': attribute type 16 has an invalid length. [ 1736.098708][T31089] __nla_validate_parse: 16 callbacks suppressed [ 1736.098738][T31089] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9795'. [ 1736.124849][T31094] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9796'. [ 1736.154195][T31098] device pim6reg1 entered promiscuous mode [ 1736.356193][T31109] mac80211_hwsim hwsim14 ªªªªªª: renamed from wlan0 [ 1737.033391][T31129] validate_nla: 5 callbacks suppressed [ 1737.033422][T31129] netlink: 'syz.1.9807': attribute type 16 has an invalid length. [ 1737.087998][T31129] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9807'. [ 1737.319721][T31137] netlink: 'syz.1.9810': attribute type 3 has an invalid length. [ 1737.325172][T31135] netlink: 'syz.3.9809': attribute type 16 has an invalid length. [ 1737.367589][T31135] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9809'. [ 1737.638153][T31144] netlink: 'syz.4.9813': attribute type 29 has an invalid length. [ 1737.663730][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9813'. [ 1737.685118][T31144] netlink: 'syz.4.9813': attribute type 29 has an invalid length. [ 1737.693400][T31144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9813'. [ 1737.742851][T31146] device pim6reg1 entered promiscuous mode [ 1737.872237][T31148] netlink: 'syz.1.9815': attribute type 2 has an invalid length. [ 1738.230951][T31162] netlink: 'syz.3.9820': attribute type 16 has an invalid length. [ 1738.255171][T31162] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9820'. [ 1738.273450][T31170] netlink: 'syz.2.9822': attribute type 16 has an invalid length. [ 1738.302597][T31170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9822'. [ 1738.578453][T31178] netlink: 'syz.0.9825': attribute type 3 has an invalid length. [ 1739.450356][T31193] netlink: 'syz.0.9830': attribute type 10 has an invalid length. [ 1739.472266][T31191] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9831'. [ 1739.974373][T31207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9837'. [ 1741.419699][T31230] __nla_validate_parse: 2 callbacks suppressed [ 1741.419729][T31230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9846'. [ 1741.755782][T31246] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9852'. [ 1742.032782][T31253] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9855'. [ 1742.308877][T31262] validate_nla: 9 callbacks suppressed [ 1742.308906][T31262] netlink: 'syz.0.9869': attribute type 16 has an invalid length. [ 1742.339883][T31262] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9869'. [ 1742.410776][T31263] netlink: 'syz.3.9860': attribute type 16 has an invalid length. [ 1742.446324][T31263] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9860'. [ 1742.779225][T31274] netlink: 'syz.1.9862': attribute type 16 has an invalid length. [ 1742.792384][T31274] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9862'. [ 1743.352771][T31288] netlink: 'syz.2.9866': attribute type 16 has an invalid length. [ 1743.384801][T31288] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9866'. [ 1743.526584][T31298] netlink: 'syz.3.9871': attribute type 2 has an invalid length. [ 1743.671873][T31300] netlink: 'syz.0.9872': attribute type 16 has an invalid length. [ 1743.694192][T31300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9872'. [ 1743.868048][T31304] device pim6reg1 entered promiscuous mode [ 1744.021565][T31306] netlink: 'syz.1.9875': attribute type 16 has an invalid length. [ 1744.037337][T31306] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9875'. [ 1744.562579][T31313] device pim6reg1 entered promiscuous mode [ 1744.609562][T31319] netlink: 'syz.1.9879': attribute type 10 has an invalid length. [ 1744.866999][T31330] netlink: 'syz.1.9883': attribute type 16 has an invalid length. [ 1744.878381][T31330] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9883'. [ 1744.889953][T31326] netlink: 'syz.3.9881': attribute type 29 has an invalid length. [ 1745.370879][T31351] device pim6reg1 entered promiscuous mode [ 1746.517220][T31362] __nla_validate_parse: 3 callbacks suppressed [ 1746.517246][T31362] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9895'. [ 1746.567415][T31366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9898'. [ 1746.592110][T31366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9898'. [ 1746.639296][T31370] device pim6reg1 entered promiscuous mode [ 1746.802522][T31373] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9900'. [ 1747.230236][T31383] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9904'. [ 1747.460441][T31388] validate_nla: 8 callbacks suppressed [ 1747.460479][T31388] netlink: 'syz.2.9905': attribute type 2 has an invalid length. [ 1747.740831][T31393] device pim6reg1 entered promiscuous mode [ 1747.853026][T31395] netlink: 'syz.2.9911': attribute type 16 has an invalid length. [ 1747.864437][T31395] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9911'. [ 1748.419045][T31400] netlink: 'syz.0.9912': attribute type 16 has an invalid length. [ 1748.427581][T31400] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1748.437556][T31402] netlink: 'syz.2.9914': attribute type 16 has an invalid length. [ 1748.447771][T31402] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9914'. [ 1748.464283][T31408] netlink: 'syz.1.9917': attribute type 16 has an invalid length. [ 1748.475090][T31408] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9917'. [ 1749.006982][T31426] netlink: 'syz.4.9923': attribute type 10 has an invalid length. [ 1749.015565][T31426] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9923'. [ 1749.087489][T31427] netlink: 'syz.3.9924': attribute type 16 has an invalid length. [ 1749.581993][T31438] netlink: 'syz.2.9929': attribute type 16 has an invalid length. [ 1749.687689][T31440] netlink: 'syz.0.9931': attribute type 16 has an invalid length. [ 1749.731644][T31442] netlink: 'syz.3.9932': attribute type 16 has an invalid length. [ 1751.608991][T31474] __nla_validate_parse: 4 callbacks suppressed [ 1751.609026][T31474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9944'. [ 1752.015937][T31479] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9946'. [ 1752.071839][T31482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9947'. [ 1752.403942][T31494] device pim6reg1 entered promiscuous mode [ 1753.352854][T31514] validate_nla: 4 callbacks suppressed [ 1753.352885][T31514] netlink: 'syz.0.9959': attribute type 16 has an invalid length. [ 1753.414204][T31514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9959'. [ 1753.479296][T31516] device pim6reg1 entered promiscuous mode [ 1753.598102][T31518] netlink: 'syz.4.9961': attribute type 16 has an invalid length. [ 1753.620782][T31518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9961'. [ 1754.673048][T31554] device pim6reg1 entered promiscuous mode [ 1754.891737][T31559] netlink: 'syz.1.9974': attribute type 16 has an invalid length. [ 1754.923603][T31559] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9974'. [ 1754.962997][T31566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9977'. [ 1755.181471][T31577] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9977'. [ 1755.348771][T31574] device syzkaller0 left promiscuous mode [ 1755.365635][T31575] device pim6reg1 entered promiscuous mode [ 1755.613416][T31587] netlink: 'syz.1.9982': attribute type 16 has an invalid length. [ 1755.632806][T31587] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9982'. [ 1756.309286][T31602] netlink: 'syz.2.9989': attribute type 16 has an invalid length. [ 1756.328301][T31602] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9989'. [ 1757.280955][T31627] netlink: 'syz.1.9997': attribute type 16 has an invalid length. [ 1757.290151][T31627] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9997'. [ 1757.793975][T31634] device pim6reg1 entered promiscuous mode [ 1758.517314][T31646] netlink: 'syz.4.10004': attribute type 16 has an invalid length. [ 1758.547267][T31646] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10004'. [ 1758.966065][T31656] netlink: 'syz.3.10010': attribute type 16 has an invalid length. [ 1758.994248][T31656] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10010'. [ 1759.366892][T31664] netlink: 'syz.0.10021': attribute type 16 has an invalid length. [ 1759.402534][T31664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10021'. [ 1759.763673][T31672] device pim6reg1 entered promiscuous mode [ 1760.425222][T31699] netlink: 'syz.1.10022': attribute type 16 has an invalid length. [ 1760.433400][T31699] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10022'. [ 1760.510535][T31701] device pim6reg1 entered promiscuous mode [ 1761.310898][T31705] netlink: 'syz.3.10026': attribute type 16 has an invalid length. [ 1761.323367][T31705] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10026'. [ 1761.651383][T31727] device pim6reg1 entered promiscuous mode [ 1762.622608][T31754] netlink: 'syz.4.10042': attribute type 16 has an invalid length. [ 1762.641494][T31754] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10042'. [ 1762.677944][T31759] netlink: 'syz.3.10044': attribute type 16 has an invalid length. [ 1762.716735][T31759] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1763.506626][T31773] device pim6reg1 entered promiscuous mode [ 1764.161731][T31794] netlink: 'syz.2.10056': attribute type 16 has an invalid length. [ 1764.188725][T31794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10056'. [ 1764.335844][T31797] netlink: 'syz.3.10057': attribute type 16 has an invalid length. [ 1764.380775][T31797] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10057'. [ 1764.642257][T31810] netlink: 'syz.1.10072': attribute type 16 has an invalid length. [ 1764.664285][T31810] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10072'. [ 1765.186125][T31830] netlink: 'syz.1.10078': attribute type 16 has an invalid length. [ 1765.216771][T31830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10078'. [ 1765.508707][T31842] netlink: 'syz.1.10071': attribute type 16 has an invalid length. [ 1765.524565][T31842] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1765.606838][T31845] device pim6reg1 entered promiscuous mode [ 1766.151444][T31853] netlink: 'syz.2.10076': attribute type 16 has an invalid length. [ 1766.184133][T31853] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10076'. [ 1766.555739][T31865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10081'. [ 1766.697097][T31868] netlink: 'syz.3.10083': attribute type 16 has an invalid length. [ 1766.730989][T31868] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10083'. [ 1766.791620][T31865] device syzkaller0 left promiscuous mode [ 1767.216606][T31879] netlink: 'syz.4.10086': attribute type 16 has an invalid length. [ 1767.509493][T31886] device pim6reg1 entered promiscuous mode [ 1767.900886][T31891] netlink: 'syz.1.10091': attribute type 16 has an invalid length. [ 1767.925424][T31891] __nla_validate_parse: 2 callbacks suppressed [ 1767.925455][T31891] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10091'. [ 1768.225758][T31898] device pim6reg1 entered promiscuous mode [ 1768.319098][T31912] netlink: 'syz.1.10098': attribute type 16 has an invalid length. [ 1768.333973][T31912] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1768.611397][T31921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10100'. [ 1769.038153][T31937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10103'. [ 1769.079949][T31937] device syzkaller0 left promiscuous mode [ 1769.129932][T31937] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10103'. [ 1769.189028][T31931] validate_nla: 1 callbacks suppressed [ 1769.189062][T31931] netlink: 'syz.2.10113': attribute type 7 has an invalid length. [ 1769.695075][T31957] netlink: 'syz.0.10108': attribute type 16 has an invalid length. [ 1769.796788][T31957] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10108'. [ 1769.978166][T31958] netlink: 'syz.4.10112': attribute type 16 has an invalid length. [ 1770.002457][T31958] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10112'. [ 1770.167267][T31961] netlink: 'syz.2.10115': attribute type 16 has an invalid length. [ 1770.189542][T31961] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10115'. [ 1771.279165][T31991] netlink: 'syz.0.10126': attribute type 7 has an invalid length. [ 1771.327901][T32003] netlink: 'syz.1.10130': attribute type 16 has an invalid length. [ 1771.344140][T32003] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10130'. [ 1771.698520][T32015] netlink: 'syz.4.10134': attribute type 16 has an invalid length. [ 1771.734514][T32015] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10134'. [ 1771.976996][T32026] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1772.022129][T32026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1772.209226][T32035] netlink: 'syz.2.10144': attribute type 16 has an invalid length. [ 1772.297261][T32039] netlink: 'syz.4.10146': attribute type 16 has an invalid length. [ 1772.603564][T32043] netlink: 'syz.1.10148': attribute type 7 has an invalid length. [ 1773.223601][T32067] __nla_validate_parse: 4 callbacks suppressed [ 1773.223637][T32067] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10158'. [ 1773.251972][T32067] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1773.326045][T32067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1773.690491][T32080] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10161'. [ 1773.730089][T32075] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10160'. [ 1774.079374][T32089] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10165'. [ 1774.992463][T32117] validate_nla: 4 callbacks suppressed [ 1774.992480][T32117] netlink: 'syz.1.10175': attribute type 16 has an invalid length. [ 1775.034712][T32117] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10175'. [ 1775.063366][T32102] netlink: 'syz.3.10170': attribute type 7 has an invalid length. [ 1775.449057][T32125] netlink: 'syz.4.10176': attribute type 16 has an invalid length. [ 1775.473227][T32125] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10176'. [ 1775.489291][T32124] device pim6reg1 entered promiscuous mode [ 1775.692103][T32130] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1775.712290][T32134] netlink: 'syz.4.10182': attribute type 16 has an invalid length. [ 1775.746905][T32134] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10182'. [ 1775.781891][T32132] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10179'. [ 1776.349843][T32153] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10187'. [ 1776.369947][T32153] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1776.438028][T32153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1778.613964][T32150] netlink: 'syz.4.10188': attribute type 16 has an invalid length. [ 1778.621923][T32150] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10188'. [ 1778.853150][T32160] netlink: 'syz.4.10192': attribute type 16 has an invalid length. [ 1778.869200][T32160] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10192'. [ 1779.193138][T32171] device pim6reg1 entered promiscuous mode [ 1779.267177][T32175] device pim6reg1 entered promiscuous mode [ 1779.738285][T32192] netlink: 'syz.0.10202': attribute type 16 has an invalid length. [ 1779.746371][T32192] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10202'. [ 1780.029687][T32197] netlink: 'syz.0.10213': attribute type 16 has an invalid length. [ 1780.064156][T32197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10213'. [ 1780.348668][T32205] netlink: 'syz.4.10203': attribute type 7 has an invalid length. [ 1780.420355][T32208] netlink: 'syz.2.10207': attribute type 16 has an invalid length. [ 1780.442719][T32208] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10207'. [ 1780.520415][T32218] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10211'. [ 1780.539730][T32218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1780.667632][T32225] device pim6reg1 entered promiscuous mode [ 1780.822764][T32228] device pim6reg1 entered promiscuous mode [ 1781.190794][T32242] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10221'. [ 1781.473798][T32252] netlink: 'syz.1.10226': attribute type 16 has an invalid length. [ 1781.482318][T32252] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10226'. [ 1781.570928][T32255] netlink: 'syz.2.10225': attribute type 7 has an invalid length. [ 1781.893428][T32268] device pim6reg1 entered promiscuous mode [ 1782.013775][T32267] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10231'. [ 1782.046372][T32267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1782.310958][T32282] netlink: 'syz.0.10238': attribute type 16 has an invalid length. [ 1782.330798][T32282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10238'. [ 1782.620887][T32285] device pim6reg1 entered promiscuous mode [ 1782.986558][T32302] netlink: 'syz.4.10246': attribute type 7 has an invalid length. [ 1783.235291][T32320] netlink: 'syz.2.10252': attribute type 16 has an invalid length. [ 1783.296956][T32324] device pim6reg1 entered promiscuous mode [ 1783.561595][T32338] device pim6reg1 entered promiscuous mode [ 1784.066524][T32355] __nla_validate_parse: 6 callbacks suppressed [ 1784.066559][T32355] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10265'. [ 1784.307012][T32363] netlink: 'syz.3.10267': attribute type 16 has an invalid length. [ 1784.324355][T32363] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10267'. [ 1784.992681][T32373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10272'. [ 1785.153745][T32382] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10272'. [ 1785.407311][T32381] netlink: 'syz.2.10274': attribute type 16 has an invalid length. [ 1785.417042][T32381] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10274'. [ 1785.429888][T32385] netlink: 'syz.1.10276': attribute type 33 has an invalid length. [ 1785.440594][T32385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10276'. [ 1785.530526][T32390] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1787.739687][T32401] netlink: 'syz.0.10280': attribute type 16 has an invalid length. [ 1787.749831][T32401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10280'. [ 1787.931062][T32416] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10284'. [ 1788.170460][T32421] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10286'. [ 1788.257011][T32431] netlink: 'syz.2.10290': attribute type 16 has an invalid length. [ 1788.280297][T32431] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10290'. [ 1788.485449][T32440] netlink: 'syz.0.10293': attribute type 2 has an invalid length. [ 1788.514335][T32441] netlink: 'syz.1.10294': attribute type 16 has an invalid length. [ 1788.568863][T32443] device pim6reg1 entered promiscuous mode [ 1788.993842][T32452] device pim6reg1 entered promiscuous mode [ 1789.074698][T32455] device pim6reg1 entered promiscuous mode [ 1789.474877][T32474] __nla_validate_parse: 2 callbacks suppressed [ 1789.474913][T32474] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10304'. [ 1789.496733][T32469] netlink: 'syz.4.10303': attribute type 16 has an invalid length. [ 1789.505077][T32469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10303'. [ 1789.515920][T32475] netlink: 'syz.3.10306': attribute type 16 has an invalid length. [ 1789.527455][T32475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10306'. [ 1789.566193][T32477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1789.713969][T32477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1789.731927][T32482] netlink: 'syz.4.10309': attribute type 2 has an invalid length. [ 1789.811488][T32479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1789.824262][T32486] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10308'. [ 1789.857220][T32481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10307'. [ 1790.099833][T32493] device pim6reg1 entered promiscuous mode [ 1790.309156][T32504] device pim6reg1 entered promiscuous mode [ 1790.546844][T32510] netlink: 'syz.3.10319': attribute type 16 has an invalid length. [ 1790.555930][T32510] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10319'. [ 1790.567753][T32507] netlink: 'syz.0.10318': attribute type 16 has an invalid length. [ 1790.577536][T32507] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10318'. [ 1790.774228][T32516] netlink: 'syz.3.10321': attribute type 33 has an invalid length. [ 1790.790718][T32516] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1790.802603][T32519] netlink: 'syz.1.10322': attribute type 2 has an invalid length. [ 1790.815017][T32517] device pim6reg1 entered promiscuous mode [ 1791.656998][T32539] netlink: 'syz.4.10330': attribute type 16 has an invalid length. [ 1791.699051][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.705432][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.738268][T32541] netlink: 'syz.0.10331': attribute type 16 has an invalid length. [ 1791.817901][T32544] device pim6reg1 entered promiscuous mode [ 1791.953394][T32547] device pim6reg1 entered promiscuous mode [ 1792.071724][T32556] device hsr_slave_0 left promiscuous mode [ 1792.087699][T32556] device hsr_slave_1 left promiscuous mode [ 1792.247175][T32558] netlink: 'syz.3.10335': attribute type 2 has an invalid length. [ 1792.295319][T32551] netlink: 'syz.4.10345': attribute type 16 has an invalid length. [ 1792.820306][T32582] netlink: 'syz.4.10342': attribute type 33 has an invalid length. [ 1792.862958][T32582] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1792.927561][T32584] netlink: 'syz.1.10346': attribute type 16 has an invalid length. [ 1792.956498][T32586] device pim6reg1 entered promiscuous mode [ 1793.248027][T32595] device pim6reg1 entered promiscuous mode [ 1793.696825][T32600] device pim6reg1 entered promiscuous mode [ 1794.477287][T32644] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1794.588655][T32648] device pim6reg1 entered promiscuous mode [ 1795.082428][T32662] device pim6reg1 entered promiscuous mode [ 1795.180651][T32667] device pim6reg1 entered promiscuous mode [ 1795.619665][T32680] __nla_validate_parse: 17 callbacks suppressed [ 1795.619690][T32680] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10377'. [ 1795.637629][T32676] validate_nla: 5 callbacks suppressed [ 1795.637657][T32676] netlink: 'syz.0.10375': attribute type 16 has an invalid length. [ 1795.653098][T32676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10375'. [ 1795.666849][T32678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10376'. [ 1795.725399][T32678] device hsr_slave_0 left promiscuous mode [ 1795.753289][T32678] device hsr_slave_1 left promiscuous mode [ 1795.871307][T32686] netlink: 'syz.2.10378': attribute type 33 has an invalid length. [ 1795.882480][T32686] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10378'. [ 1795.897221][T32691] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1795.912647][T32688] netlink: 'syz.0.10388': attribute type 16 has an invalid length. [ 1795.931147][T32688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10388'. [ 1796.181992][T32698] device pim6reg1 entered promiscuous mode [ 1796.325145][T32709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10394'. [ 1796.338386][T32700] device pim6reg1 entered promiscuous mode [ 1796.381194][T32703] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10383'. [ 1796.715397][T32716] netlink: 'syz.0.10384': attribute type 10 has an invalid length. [ 1796.732966][T32716] device wlan1 left promiscuous mode [ 1797.048804][T32725] device pim6reg1 entered promiscuous mode [ 1797.186489][T32734] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10393'. [ 1797.199171][T32731] netlink: 'syz.4.10391': attribute type 16 has an invalid length. [ 1797.208598][T32731] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10391'. [ 1797.220416][T32730] netlink: 'syz.0.10392': attribute type 33 has an invalid length. [ 1797.232058][T32730] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10392'. [ 1797.368512][T32739] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1797.468198][T32746] device pim6reg1 entered promiscuous mode [ 1797.669769][T32750] device pim6reg1 entered promiscuous mode [ 1798.793073][ T306] netlink: 'syz.2.10406': attribute type 16 has an invalid length. [ 1798.802327][ T311] netlink: 'syz.4.10407': attribute type 16 has an invalid length. [ 1799.006938][ T313] device pim6reg1 entered promiscuous mode [ 1799.143305][ T315] netlink: 'syz.0.10410': attribute type 33 has an invalid length. [ 1799.188077][ T322] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1799.549933][ T329] netlink: 'syz.1.10413': attribute type 10 has an invalid length. [ 1799.600986][ T329] bond0: (slave wlan1): Releasing backup interface [ 1799.997333][ T349] device pim6reg1 entered promiscuous mode [ 1800.742616][ T368] device pim6reg1 entered promiscuous mode [ 1801.171863][ T379] __nla_validate_parse: 7 callbacks suppressed [ 1801.171938][ T379] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10431'. [ 1801.372313][ T386] validate_nla: 2 callbacks suppressed [ 1801.372348][ T386] netlink: 'syz.2.10433': attribute type 10 has an invalid length. [ 1801.425828][ T386] bond0: (slave wlan1): Releasing backup interface [ 1802.162768][ T396] netlink: 'syz.2.10435': attribute type 16 has an invalid length. [ 1802.264442][ T396] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10435'. [ 1802.399396][ T398] netlink: 'syz.1.10436': attribute type 16 has an invalid length. [ 1802.429303][ T398] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10436'. [ 1802.712105][ T408] netlink: 'syz.0.10437': attribute type 16 has an invalid length. [ 1802.759134][ T408] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10437'. [ 1803.011852][ T417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10442'. [ 1803.089736][ T420] netlink: 'syz.3.10453': attribute type 16 has an invalid length. [ 1803.133995][ T420] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10453'. [ 1803.439152][ T423] device pim6reg1 entered promiscuous mode [ 1803.703604][ T430] device pim6reg1 entered promiscuous mode [ 1804.053992][T25433] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1804.062013][T25433] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1804.071749][T25433] CPU: 1 PID: 25433 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1804.079440][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1804.089557][T25433] Workqueue: hci0 hci_rx_work [ 1804.094293][T25433] Call Trace: [ 1804.097609][T25433] [ 1804.100576][T25433] dump_stack_lvl+0x188/0x24e [ 1804.105319][T25433] ? show_regs_print_info+0x12/0x12 [ 1804.110566][T25433] ? load_image+0x410/0x410 [ 1804.115160][T25433] sysfs_create_dir_ns+0x26a/0x290 [ 1804.120319][T25433] ? __lock_acquire+0x7c40/0x7c40 [ 1804.125416][T25433] ? sysfs_warn_dup+0xa0/0xa0 [ 1804.130163][T25433] ? do_raw_spin_unlock+0x11d/0x230 [ 1804.135418][T25433] kobject_add_internal+0x617/0xca0 [ 1804.140700][T25433] kobject_add+0x160/0x230 [ 1804.145194][T25433] ? kobject_init+0x1c0/0x1c0 [ 1804.149925][T25433] ? __raw_spin_lock_init+0x41/0x100 [ 1804.155246][T25433] ? klist_children_get+0x50/0x50 [ 1804.160321][T25433] ? get_device_parent+0x121/0x3e0 [ 1804.165492][T25433] device_add+0x470/0x1050 [ 1804.169977][T25433] hci_conn_add_sysfs+0xd1/0x1e0 [ 1804.174980][T25433] le_conn_complete_evt+0xf69/0x1560 [ 1804.180351][T25433] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1804.186640][T25433] ? rcu_is_watching+0x11/0xa0 [ 1804.191463][T25433] ? asm_sysvec_call_function_single+0x16/0x20 [ 1804.197687][T25433] ? lockdep_hardirqs_on+0x94/0x140 [ 1804.202936][T25433] ? asm_sysvec_call_function_single+0x16/0x20 [ 1804.209138][T25433] ? hci_remote_host_features_evt+0x230/0x230 [ 1804.215274][T25433] hci_le_conn_complete_evt+0x183/0x440 [ 1804.220897][T25433] ? hci_remote_host_features_evt+0x230/0x230 [ 1804.227025][T25433] hci_event_packet+0x7b3/0x1290 [ 1804.232044][T25433] ? __lock_acquire+0x7c40/0x7c40 [ 1804.237125][T25433] ? bis_list+0x280/0x280 [ 1804.241498][T25433] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1804.247459][T25433] ? kcov_remote_start+0x4b0/0x7e0 [ 1804.252637][T25433] ? mt_dump_node+0x1330/0x1900 [ 1804.257550][T25433] ? hci_send_to_monitor+0x9c/0x4a0 [ 1804.262805][T25433] hci_rx_work+0x3eb/0xd40 [ 1804.267275][T25433] ? _raw_spin_unlock+0x40/0x40 [ 1804.272202][T25433] ? process_one_work+0x7b4/0x1160 [ 1804.277369][T25433] process_one_work+0x8ab/0x1160 [ 1804.282399][T25433] ? worker_detach_from_pool+0x240/0x240 [ 1804.288078][T25433] ? _raw_spin_lock_irq+0x86/0xf0 [ 1804.293166][T25433] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1804.298244][T25433] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1804.303850][T25433] ? wq_worker_running+0x97/0x190 [ 1804.308940][T25433] worker_thread+0xaf5/0x12a0 [ 1804.313725][T25433] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1804.319709][T25433] kthread+0x29d/0x330 [ 1804.323822][T25433] ? worker_clr_flags+0x1a0/0x1a0 [ 1804.328894][T25433] ? kthread_blkcg+0xd0/0xd0 [ 1804.333537][T25433] ret_from_fork+0x1f/0x30 [ 1804.338072][T25433] [ 1804.343057][T25433] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1804.356667][T25433] Bluetooth: hci0: failed to register connection device [ 1804.607425][ T443] netlink: 'syz.3.10452': attribute type 16 has an invalid length. [ 1804.630371][ T443] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10452'. [ 1805.043685][ T452] netlink: 'syz.4.10455': attribute type 10 has an invalid length. [ 1805.229392][ T453] device pim6reg1 entered promiscuous mode [ 1805.474529][ T466] netlink: 'syz.3.10458': attribute type 16 has an invalid length. [ 1805.482501][ T466] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10458'. [ 1805.989806][ T472] netlink: 'syz.3.10460': attribute type 10 has an invalid length. [ 1806.282834][ T482] device pim6reg1 entered promiscuous mode [ 1806.299456][ T484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10462'. [ 1806.570327][ T494] device pim6reg1 entered promiscuous mode [ 1807.066656][ T504] netlink: 'syz.3.10469': attribute type 1 has an invalid length. [ 1807.095905][ T504] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.10469'. [ 1808.226668][ T520] device pim6reg1 entered promiscuous mode [ 1809.194216][ T544] device pim6reg1 entered promiscuous mode [ 1809.362532][ T532] device pim6reg1 entered promiscuous mode [ 1810.151111][ T565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10486'. [ 1811.038224][ T585] device pim6reg1 entered promiscuous mode [ 1811.641870][ T606] device pim6reg1 entered promiscuous mode [ 1812.212868][ T601] device pim6reg1 entered promiscuous mode [ 1813.291366][ T632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10504'. [ 1814.653692][ T649] device pim6reg1 entered promiscuous mode [ 1814.877753][ T660] device syzkaller0 entered promiscuous mode [ 1815.616215][ T676] device pim6reg1 entered promiscuous mode [ 1816.987763][ T693] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10524'. [ 1817.015691][ T700] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1817.038066][ T701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10523'. [ 1817.861411][ T719] device pim6reg1 entered promiscuous mode [ 1819.638580][ T777] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1819.648462][ T6842] wlan1: Created IBSS using preconfigured BSSID ff:ff:ff:ff:00:00 [ 1819.683969][ T6842] wlan1: Creating new IBSS network, BSSID ff:ff:ff:ff:00:00 [ 1819.705960][ T780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10557'. [ 1819.706734][ T6840] ------------[ cut here ]------------ [ 1819.720940][ T6840] WARNING: CPU: 0 PID: 6840 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1819.730999][ T6840] Modules linked in: [ 1819.735012][ T6840] CPU: 0 PID: 6840 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 1819.742679][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1819.752946][ T6840] Workqueue: cfg80211 cfg80211_event_work [ 1819.759721][ T6840] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1819.765965][ T6840] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f [ 1819.785657][ T6840] RSP: 0018:ffffc900050cfac0 EFLAGS: 00010293 [ 1819.791775][ T6840] RAX: ffffffff89979bd9 RBX: 1ffff92000a19f5c RCX: ffff888023f13c00 [ 1819.799844][ T6840] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1819.807911][ T6840] RBP: ffffc900050cfb70 R08: ffffffff90b102a7 R09: 1ffffffff2162054 [ 1819.815963][ T6840] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff88807cdd35f8 [ 1819.824005][ T6840] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88802f534c90 [ 1819.832022][ T6840] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1819.841040][ T6840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1819.847696][ T6840] CR2: 0000001b2fc16ff8 CR3: 00000000761aa000 CR4: 00000000003506f0 [ 1819.855752][ T6840] DR0: 0000200000000300 DR1: 0100000000000000 DR2: 0000000000000000 [ 1819.863764][ T6840] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1819.871828][ T6840] Call Trace: [ 1819.875177][ T6840] [ 1819.878150][ T6840] ? trace_rdev_return_void+0x240/0x240 [ 1819.883757][ T6840] cfg80211_process_wdev_events+0x359/0x4d0 [ 1819.889740][ T6840] ? process_one_work+0x7b4/0x1160 [ 1819.894961][ T6840] cfg80211_process_rdev_events+0x9d/0x110 [ 1819.899386][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1819.900787][ T6840] cfg80211_event_work+0x2b/0x40 [ 1819.900823][ T6840] process_one_work+0x8ab/0x1160 [ 1819.918043][ T6840] ? worker_detach_from_pool+0x240/0x240 [ 1819.923721][ T6840] ? _raw_spin_lock_irq+0x86/0xf0 [ 1819.928843][ T6840] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1819.933940][ T6840] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1819.939544][ T6840] ? wq_worker_running+0x97/0x190 [ 1819.944669][ T6840] worker_thread+0xaf5/0x12a0 [ 1819.949415][ T6840] kthread+0x29d/0x330 [ 1819.953519][ T6840] ? worker_clr_flags+0x1a0/0x1a0 [ 1819.957689][ T779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10556'. [ 1819.958609][ T6840] ? kthread_blkcg+0xd0/0xd0 [ 1819.972477][ T6840] ret_from_fork+0x1f/0x30 [ 1819.977010][ T6840] [ 1819.980079][ T6840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1819.987371][ T6840] CPU: 0 PID: 6840 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 1819.995023][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1820.005098][ T6840] Workqueue: cfg80211 cfg80211_event_work [ 1820.010955][ T6840] Call Trace: [ 1820.014245][ T6840] [ 1820.017200][ T6840] dump_stack_lvl+0x188/0x24e [ 1820.021910][ T6840] ? memcpy+0x3c/0x60 [ 1820.025917][ T6840] ? show_regs_print_info+0x12/0x12 [ 1820.031141][ T6840] ? load_image+0x410/0x410 [ 1820.035683][ T6840] panic+0x2d3/0x710 [ 1820.039610][ T6840] ? bpf_jit_dump+0xd0/0xd0 [ 1820.044147][ T6840] ? ret_from_fork+0x1f/0x30 [ 1820.048766][ T6840] __warn+0x2f8/0x4f0 [ 1820.052762][ T6840] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1820.058333][ T6840] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1820.063891][ T6840] report_bug+0x2ba/0x4f0 [ 1820.068348][ T6840] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1820.073908][ T6840] handle_bug+0x3a/0x70 [ 1820.078068][ T6840] exc_invalid_op+0x16/0x40 [ 1820.082572][ T6840] asm_exc_invalid_op+0x16/0x20 [ 1820.087417][ T6840] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1820.093574][ T6840] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f [ 1820.113177][ T6840] RSP: 0018:ffffc900050cfac0 EFLAGS: 00010293 [ 1820.119242][ T6840] RAX: ffffffff89979bd9 RBX: 1ffff92000a19f5c RCX: ffff888023f13c00 [ 1820.127208][ T6840] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1820.135193][ T6840] RBP: ffffc900050cfb70 R08: ffffffff90b102a7 R09: 1ffffffff2162054 [ 1820.143161][ T6840] R10: dffffc0000000000 R11: fffffbfff2162055 R12: ffff88807cdd35f8 [ 1820.151134][ T6840] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88802f534c90 [ 1820.159114][ T6840] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1820.164677][ T6840] ? trace_rdev_return_void+0x240/0x240 [ 1820.170231][ T6840] cfg80211_process_wdev_events+0x359/0x4d0 [ 1820.176129][ T6840] ? process_one_work+0x7b4/0x1160 [ 1820.181239][ T6840] cfg80211_process_rdev_events+0x9d/0x110 [ 1820.187049][ T6840] cfg80211_event_work+0x2b/0x40 [ 1820.191983][ T6840] process_one_work+0x8ab/0x1160 [ 1820.196935][ T6840] ? worker_detach_from_pool+0x240/0x240 [ 1820.202562][ T6840] ? _raw_spin_lock_irq+0x86/0xf0 [ 1820.207586][ T6840] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1820.212601][ T6840] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1820.218139][ T6840] ? wq_worker_running+0x97/0x190 [ 1820.223163][ T6840] worker_thread+0xaf5/0x12a0 [ 1820.227857][ T6840] kthread+0x29d/0x330 [ 1820.231921][ T6840] ? worker_clr_flags+0x1a0/0x1a0 [ 1820.236938][ T6840] ? kthread_blkcg+0xd0/0xd0 [ 1820.241522][ T6840] ret_from_fork+0x1f/0x30 [ 1820.245941][ T6840] [ 1820.249093][ T6840] Kernel Offset: disabled [ 1820.253480][ T6840] Rebooting in 86400 seconds..