last executing test programs: 13.142653506s ago: executing program 4 (id=43145): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0x9, 0x0, 0x2, 0x4, 0x0, 0x5, 0x80, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3a, 0x2a}, 0x8, 0x7, 0x2, 0x0, 0xf, 0x1, 0xa9a, 0x0, 0x6, 0x0, 0x1ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', 0x0, r0, 0x0, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x4, @perf_bp={0x0}, 0x688, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x311b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r2, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 13.136629166s ago: executing program 1 (id=43146): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.074454779s ago: executing program 4 (id=43147): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) socketpair(0x2, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f00000002c0)={'wlan1\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 12.275692906s ago: executing program 3 (id=43150): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 10.096096623s ago: executing program 0 (id=43151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f5}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 10.037516806s ago: executing program 3 (id=43153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f5}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x23, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 9.995454739s ago: executing program 4 (id=43156): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000000400)=""/89, 0x59}, {0x0}], 0x3}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) write$cgroup_type(r7, &(0x7f00000002c0), 0x9) 9.98018186s ago: executing program 1 (id=43157): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.961426461s ago: executing program 0 (id=43158): socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000040000000000fb6c3b80c05b8f9aec742cc7791c077bd22d5e47a0b99157c08402dc74887107ea43687eb49d9d384c4227e58f65731668af2eefd51428337ec13ced2d01d54fe09b5c33cf48940bb4493365f6afad46cb4fa0a2baa7aafeb7b8b09037e00b11f27fd19591ca28b22f366869fbeb7b3dd08b90f5d90ad44943e000"/156, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa9}, 0x10}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x41, 0x0, 0x8f00) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000c63f1de100000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 9.80846616s ago: executing program 1 (id=43159): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xb831}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a000000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x20000802) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x6, 0x3fe, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0xffffffffffffff78, &(0x7f00000006c0)}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8917, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, 0x0) socketpair(0x10, 0x1, 0x10, &(0x7f0000000080)) 9.273024661s ago: executing program 1 (id=43160): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.242109003s ago: executing program 0 (id=43162): r0 = gettid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9344366d758da30744e73fc0000", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100c, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @local, 0x101}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x25, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 9.040489844s ago: executing program 3 (id=43163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) 6.199799s ago: executing program 3 (id=43165): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0x5}, 0x48) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000d400000010000000350000000000000095000000000000005727f060e0b274e73dbd0f85d0cd2a1fc5c546297f000000d870402345f4cd32986892c237bec9e7604d0ffcf86e2f89820d233697b0f0a23c7aa27429916b566f48ced9dba83f1d32743dfadedcb674e0a75cacbbc0df8d43627b0bacfed05f3df0f47d5114c516c44048712b753711651d760ccfd477785226b6e714aaa5c94145e2c8061d1b877a4831fc946568a845c36344c25056aecc0d902c9fc6b03e0f5d7d28"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005200338f65277b9b108b4ab51c"], 0xfe33) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x120) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53}, 0x0) 6.198710429s ago: executing program 4 (id=43166): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x18, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x43c, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x4, 0x81, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x1], &(0x7f00000007c0)=[{0x1, 0x3, 0x8, 0xa}, {0x1, 0x2, 0xf, 0x9}], 0x10, 0xeb8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500020001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xdc0, 0x0, &(0x7f0000000240)="259a534f6577119472ae1206", 0x0, 0xf25, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB="000100000000000000ddbd0e1500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r6, &(0x7f0000000000)="32a34ce0ebecf5d2d39b93f3eba56153fc542fd574d78f959917fcbd3c99e6a4bb66b40c9df9e3788c1c66cc32fcf6905d5a18ede58b13d642dea124cb82a31e991915a90bf5e95ddc75c12e157cb535e08dd12b54c2702187ae7fa7fd13de7623a8bbd3c2d8cfde687dc81367b27fc91f0e7b5ff7abf24282e6c441a1", &(0x7f0000000500)=""/214, 0x4}, 0x20) 6.172541002s ago: executing program 1 (id=43168): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.140984223s ago: executing program 0 (id=43169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f5}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 6.124216974s ago: executing program 2 (id=43170): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6.071046167s ago: executing program 2 (id=43171): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x16') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x2, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 5.977444333s ago: executing program 0 (id=43172): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f00000002c0)={'wlan1\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.126562049s ago: executing program 3 (id=43173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f5}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x23, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 3.10260845s ago: executing program 4 (id=43174): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) socketpair(0x2, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b20, &(0x7f00000002c0)={'wlan1\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @broadcast}) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 3.070707062s ago: executing program 0 (id=43175): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.044483503s ago: executing program 2 (id=43176): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f5}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2.265488279s ago: executing program 2 (id=43177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.264188579s ago: executing program 1 (id=43187): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.200083243s ago: executing program 2 (id=43178): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x15}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888035", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.179300524s ago: executing program 3 (id=43179): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000000400)=""/89, 0x59}, {0x0}], 0x3}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f089021bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) write$cgroup_type(r7, &(0x7f00000002c0), 0x9) 12.52354ms ago: executing program 4 (id=43180): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)}], 0x1}, 0x40f0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000005d31, 0x30231, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 2 (id=43181): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x15, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='\r,-\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), 0x0, 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xfffdffdfffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 39085][T26429] ? minstrel_ht_alloc+0x808/0x980 [ 3133.344245][T26429] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3133.350365][T26429] ieee80211_register_hw+0x2aa1/0x3af0 [ 3133.355897][T26429] ? ieee80211_tasklet_handler+0x20/0x20 [ 3133.361583][T26429] ? rcu_is_watching+0x11/0xa0 [ 3133.366402][T26429] ? memset+0x1e/0x40 [ 3133.370434][T26429] ? hrtimer_init+0x10c/0x220 [ 3133.375163][T26429] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3133.380953][T26429] hwsim_new_radio_nl+0xa6f/0xc40 [ 3133.386058][T26429] genl_rcv_msg+0xcea/0xf90 [ 3133.390635][T26429] ? genl_bind+0x380/0x380 [ 3133.395141][T26429] ? mark_lock+0x94/0x320 [ 3133.399521][T26429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3133.405564][T26429] ? lock_chain_count+0x20/0x20 [ 3133.410469][T26429] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3133.416690][T26429] ? lockdep_hardirqs_on+0x94/0x140 [ 3133.421938][T26429] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3133.428505][T26429] netlink_rcv_skb+0x1f5/0x440 [ 3133.433314][T26429] ? genl_bind+0x380/0x380 [ 3133.437786][T26429] ? netlink_ack+0xb50/0xb50 [ 3133.442427][T26429] ? __lock_acquire+0x7d10/0x7d10 [ 3133.447505][T26429] ? down_read+0x1aa/0x2e0 [ 3133.451985][T26429] genl_rcv+0x24/0x40 [ 3133.456026][T26429] netlink_unicast+0x774/0x920 [ 3133.460850][T26429] netlink_sendmsg+0x8ba/0xbe0 [ 3133.465655][T26429] ? lockdep_hardirqs_on+0x94/0x140 [ 3133.471050][T26429] ? netlink_getsockopt+0x570/0x570 [ 3133.476298][T26429] ? bpf_lsm_socket_accept+0x10/0x10 [ 3133.481630][T26429] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3133.486961][T26429] ? security_socket_sendmsg+0x7c/0xa0 [ 3133.492459][T26429] ? netlink_getsockopt+0x570/0x570 [ 3133.497785][T26429] ____sys_sendmsg+0x5b7/0x8f0 [ 3133.502615][T26429] ? __sys_sendmsg_sock+0x30/0x30 [ 3133.507692][T26429] ? import_iovec+0x6f/0xa0 [ 3133.512240][T26429] ___sys_sendmsg+0x236/0x2e0 [ 3133.516973][T26429] ? __sys_sendmsg+0x2a0/0x2a0 [ 3133.521794][T26429] ? ktime_get_real_ts64+0x440/0x440 [ 3133.527152][T26429] __se_sys_sendmsg+0x1af/0x290 [ 3133.532051][T26429] ? __x64_sys_sendmsg+0x80/0x80 [ 3133.537026][T26429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3133.543068][T26429] ? lockdep_hardirqs_on+0x94/0x140 [ 3133.548319][T26429] do_syscall_64+0x4c/0xa0 [ 3133.552773][T26429] ? clear_bhb_loop+0x30/0x80 [ 3133.557495][T26429] ? clear_bhb_loop+0x30/0x80 [ 3133.562210][T26429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3133.568146][T26429] RIP: 0033:0x7f61b4581cb9 [ 3133.572603][T26429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3133.592247][T26429] RSP: 002b:00007f61b27dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3133.600726][T26429] RAX: ffffffffffffffda RBX: 00007f61b47fcfa0 RCX: 00007f61b4581cb9 [ 3133.608744][T26429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3133.616759][T26429] RBP: 00007f61b45efbf7 R08: 0000000000000000 R09: 0000000000000000 [ 3133.624783][T26429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3133.632805][T26429] R13: 00007f61b47fd038 R14: 00007f61b47fcfa0 R15: 00007ffeb7a460a8 [ 3133.640851][T26429] [ 3134.277089][T26438] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.39186'. [ 3134.536483][T26438] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 3134.545175][T26438] CPU: 1 PID: 26438 Comm: syz.4.39186 Not tainted syzkaller #0 [ 3134.552760][T26438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3134.562833][T26438] Call Trace: [ 3134.566134][T26438] [ 3134.569084][T26438] dump_stack_lvl+0x188/0x250 [ 3134.573802][T26438] ? show_regs_print_info+0x20/0x20 [ 3134.579017][T26438] ? load_image+0x400/0x400 [ 3134.583555][T26438] sysfs_warn_dup+0x8a/0xa0 [ 3134.588086][T26438] sysfs_do_create_link_sd+0xc0/0x110 [ 3134.593483][T26438] device_add+0x7ed/0xfb0 [ 3134.597843][T26438] wiphy_register+0x1e81/0x2c30 [ 3134.602739][T26438] ? cfg80211_event_work+0x40/0x40 [ 3134.607869][T26438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3134.614050][T26438] ieee80211_register_hw+0x2aa1/0x3af0 [ 3134.619550][T26438] ? ieee80211_tasklet_handler+0x20/0x20 [ 3134.625220][T26438] ? rcu_is_watching+0x11/0xa0 [ 3134.630009][T26438] ? memset+0x1e/0x40 [ 3134.634023][T26438] ? hrtimer_init+0x10c/0x220 [ 3134.638740][T26438] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3134.644502][T26438] hwsim_new_radio_nl+0xa6f/0xc40 [ 3134.649573][T26438] genl_rcv_msg+0xcea/0xf90 [ 3134.654103][T26438] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3134.660299][T26438] ? genl_bind+0x380/0x380 [ 3134.664742][T26438] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3134.670749][T26438] ? lock_chain_count+0x20/0x20 [ 3134.675625][T26438] ? mark_lock+0x94/0x320 [ 3134.679968][T26438] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3134.685981][T26438] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3134.692505][T26438] ? lock_chain_count+0x20/0x20 [ 3134.697390][T26438] netlink_rcv_skb+0x1f5/0x440 [ 3134.702178][T26438] ? genl_bind+0x380/0x380 [ 3134.706609][T26438] ? netlink_ack+0xb50/0xb50 [ 3134.711257][T26438] ? kasan_check_range+0x7d/0x290 [ 3134.716311][T26438] ? down_read+0x1aa/0x2e0 [ 3134.720763][T26438] genl_rcv+0x24/0x40 [ 3134.724763][T26438] netlink_unicast+0x774/0x920 [ 3134.729569][T26438] netlink_sendmsg+0x8ba/0xbe0 [ 3134.734366][T26438] ? netlink_getsockopt+0x570/0x570 [ 3134.739585][T26438] ? aa_sock_msg_perm+0x94/0x150 [ 3134.744543][T26438] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3134.749851][T26438] ? security_socket_sendmsg+0x7c/0xa0 [ 3134.755323][T26438] ? netlink_getsockopt+0x570/0x570 [ 3134.760532][T26438] ____sys_sendmsg+0x5b7/0x8f0 [ 3134.765502][T26438] ? __sys_sendmsg_sock+0x30/0x30 [ 3134.770576][T26438] ? import_iovec+0x6f/0xa0 [ 3134.775108][T26438] ___sys_sendmsg+0x236/0x2e0 [ 3134.779822][T26438] ? __sys_sendmsg+0x2a0/0x2a0 [ 3134.784620][T26438] ? trace_event_raw_event_lock+0x270/0x270 [ 3134.790558][T26438] __se_sys_sendmsg+0x1af/0x290 [ 3134.795468][T26438] ? __x64_sys_sendmsg+0x80/0x80 [ 3134.800452][T26438] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3134.806488][T26438] ? lockdep_hardirqs_on+0x94/0x140 [ 3134.811725][T26438] do_syscall_64+0x4c/0xa0 [ 3134.816179][T26438] ? clear_bhb_loop+0x30/0x80 [ 3134.820877][T26438] ? clear_bhb_loop+0x30/0x80 [ 3134.825593][T26438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3134.831506][T26438] RIP: 0033:0x7f8104838cb9 [ 3134.835949][T26438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3134.855576][T26438] RSP: 002b:00007f8102a94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3134.864102][T26438] RAX: ffffffffffffffda RBX: 00007f8104ab3fa0 RCX: 00007f8104838cb9 [ 3134.872099][T26438] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3134.880088][T26438] RBP: 00007f81048a6bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3134.888086][T26438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3134.896073][T26438] R13: 00007f8104ab4038 R14: 00007f8104ab3fa0 R15: 00007ffc43304f88 [ 3134.904084][T26438] [ 3136.156036][T26479] netlink: 'syz.0.39187': attribute type 1 has an invalid length. [ 3141.728744][T26544] netlink: 'syz.3.39215': attribute type 1 has an invalid length. [ 3141.820245][T26544] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.39215'. [ 3143.331753][T26568] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.39224'. [ 3143.366661][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.373251][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.420413][T26564] netlink: 'syz.0.39222': attribute type 28 has an invalid length. [ 3143.798399][T26583] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39227'. [ 3144.025976][T26600] : port 1(veth0_to_team) entered blocking state [ 3144.033570][T26600] : port 1(veth0_to_team) entered disabled state [ 3144.050950][T26600] device veth0_to_team entered promiscuous mode [ 3144.067672][T26597] netlink: 'syz.1.39235': attribute type 2 has an invalid length. [ 3144.090110][T26597] netlink: 164 bytes leftover after parsing attributes in process `syz.1.39235'. [ 3145.189075][T26630] netlink: 'syz.1.39245': attribute type 1 has an invalid length. [ 3145.243506][T26630] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.39245'. [ 3145.487612][T26638] netlink: 'syz.2.39252': attribute type 2 has an invalid length. [ 3145.497092][T26638] netlink: 164 bytes leftover after parsing attributes in process `syz.2.39252'. [ 3145.631364][T26639] netlink: 152 bytes leftover after parsing attributes in process `syz.3.39248'. [ 3145.647506][T26641] : port 1(veth0_to_bridge) entered blocking state [ 3145.656823][T26641] : port 1(veth0_to_bridge) entered disabled state [ 3145.669033][T26641] device veth0_to_bridge entered promiscuous mode [ 3145.689686][T26641] : port 2(veth0_to_team) entered blocking state [ 3145.711070][T26641] : port 2(veth0_to_team) entered disabled state [ 3145.737546][T26641] device veth0_to_team entered promiscuous mode [ 3146.995865][T26682] netlink: 'syz.0.39263': attribute type 1 has an invalid length. [ 3147.139873][T26682] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.39263'. [ 3147.478317][T26687] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39266'. [ 3147.534286][T26689] netlink: 'syz.0.39264': attribute type 2 has an invalid length. [ 3147.573332][T26689] netlink: 164 bytes leftover after parsing attributes in process `syz.0.39264'. [ 3147.800489][T26695] : port 2(veth0_to_bridge) entered blocking state [ 3147.829402][T26695] : port 2(veth0_to_bridge) entered disabled state [ 3147.857930][T26695] device veth0_to_bridge entered promiscuous mode [ 3147.881677][T26704] : port 3(veth0_to_team) entered blocking state [ 3147.949615][T26704] : port 3(veth0_to_team) entered disabled state [ 3147.960563][T26704] device veth0_to_team entered promiscuous mode [ 3148.241394][T26717] netlink: 'syz.4.39279': attribute type 1 has an invalid length. [ 3148.249793][T26717] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.39279'. [ 3148.464352][T26721] netlink: 'syz.3.39280': attribute type 2 has an invalid length. [ 3148.473693][T26721] netlink: 164 bytes leftover after parsing attributes in process `syz.3.39280'. [ 3148.486126][T26725] netlink: 152 bytes leftover after parsing attributes in process `syz.4.39281'. [ 3150.097922][T26754] netlink: 'syz.2.39302': attribute type 28 has an invalid length. [ 3150.140429][T26755] : port 1(veth0_to_bridge) entered blocking state [ 3150.147313][T26755] : port 1(veth0_to_bridge) entered disabled state [ 3150.168785][T26755] device veth0_to_bridge entered promiscuous mode [ 3150.183438][T26755] : port 2(veth0_to_team) entered blocking state [ 3150.190393][T26755] : port 2(veth0_to_team) entered disabled state [ 3150.198537][T26755] device veth0_to_team entered promiscuous mode [ 3150.396760][T26766] netlink: 'syz.3.39295': attribute type 11 has an invalid length. [ 3150.412422][T26766] netlink: 168 bytes leftover after parsing attributes in process `syz.3.39295'. [ 3150.424401][T26765] netlink: 'syz.1.39306': attribute type 28 has an invalid length. [ 3151.144969][T26805] delete_channel: no stack [ 3151.187535][T26805] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.39311'. [ 3151.242620][T26805] netlink: zone id is out of range [ 3151.247920][T26805] netlink: zone id is out of range [ 3151.303578][T26805] netlink: del zone limit has 8 unknown bytes [ 3151.371076][T26812] netlink: 'syz.0.39312': attribute type 11 has an invalid length. [ 3151.380569][T26803] delete_channel: no stack [ 3151.394580][T26812] netlink: 168 bytes leftover after parsing attributes in process `syz.0.39312'. [ 3151.411360][T26808] netlink: 'syz.3.39313': attribute type 28 has an invalid length. [ 3151.493989][T26818] netlink: 'syz.2.39328': attribute type 11 has an invalid length. [ 3151.502313][T26818] netlink: 168 bytes leftover after parsing attributes in process `syz.2.39328'. [ 3151.692147][T26823] device syzkaller0 left promiscuous mode [ 3152.153892][T26849] netlink: 'syz.0.39329': attribute type 7 has an invalid length. [ 3152.180237][T26849] netlink: 140 bytes leftover after parsing attributes in process `syz.0.39329'. [ 3152.265528][T26854] netlink: 'syz.4.39331': attribute type 11 has an invalid length. [ 3152.280251][T26854] netlink: 168 bytes leftover after parsing attributes in process `syz.4.39331'. [ 3152.434436][T26856] device syzkaller0 entered promiscuous mode [ 3152.585496][T26874] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.39340'. [ 3152.823311][T26884] netlink: 'syz.2.39346': attribute type 10 has an invalid length. [ 3152.835887][T26884] netlink: 55 bytes leftover after parsing attributes in process `syz.2.39346'. [ 3153.003974][T26878] netlink: 'syz.4.39344': attribute type 2 has an invalid length. [ 3153.015605][T26878] netlink: 164 bytes leftover after parsing attributes in process `syz.4.39344'. [ 3153.682198][T26911] netlink: 'syz.1.39352': attribute type 11 has an invalid length. [ 3153.704287][T26911] netlink: 168 bytes leftover after parsing attributes in process `syz.1.39352'. [ 3154.348926][T26928] netlink: 'syz.1.39361': attribute type 2 has an invalid length. [ 3154.380161][T26928] netlink: 164 bytes leftover after parsing attributes in process `syz.1.39361'. [ 3154.506597][T26932] netlink: 'syz.2.39375': attribute type 2 has an invalid length. [ 3154.516428][T26932] netlink: 164 bytes leftover after parsing attributes in process `syz.2.39375'. [ 3154.564424][T26933] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.39362'. [ 3154.701449][T26941] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39377'. [ 3154.721294][T26941] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 3154.729697][T26941] CPU: 1 PID: 26941 Comm: syz.2.39377 Not tainted syzkaller #0 [ 3154.737296][T26941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3154.747424][T26941] Call Trace: [ 3154.750732][T26941] [ 3154.753691][T26941] dump_stack_lvl+0x188/0x250 [ 3154.758412][T26941] ? show_regs_print_info+0x20/0x20 [ 3154.763652][T26941] ? load_image+0x400/0x400 [ 3154.768224][T26941] sysfs_warn_dup+0x8a/0xa0 [ 3154.772769][T26941] sysfs_do_create_link_sd+0xc0/0x110 [ 3154.778184][T26941] device_add+0x7ed/0xfb0 [ 3154.782557][T26941] wiphy_register+0x1e81/0x2c30 [ 3154.787457][T26941] ? cfg80211_event_work+0x40/0x40 [ 3154.792608][T26941] ? minstrel_ht_alloc+0x808/0x980 [ 3154.797763][T26941] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3154.803857][T26941] ieee80211_register_hw+0x2aa1/0x3af0 [ 3154.809355][T26941] ? ieee80211_tasklet_handler+0x20/0x20 [ 3154.815013][T26941] ? rcu_is_watching+0x11/0xa0 [ 3154.819799][T26941] ? memset+0x1e/0x40 [ 3154.823806][T26941] ? hrtimer_init+0x10c/0x220 [ 3154.828606][T26941] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3154.834453][T26941] hwsim_new_radio_nl+0xa6f/0xc40 [ 3154.839515][T26941] genl_rcv_msg+0xcea/0xf90 [ 3154.844046][T26941] ? genl_bind+0x380/0x380 [ 3154.848512][T26941] ? verify_lock_unused+0x140/0x140 [ 3154.853730][T26941] ? verify_lock_unused+0x140/0x140 [ 3154.858950][T26941] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3154.865133][T26941] ? rcu_nmi_exit+0x6f/0xf0 [ 3154.869662][T26941] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3154.876198][T26941] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3154.882210][T26941] netlink_rcv_skb+0x1f5/0x440 [ 3154.886999][T26941] ? genl_bind+0x380/0x380 [ 3154.891439][T26941] ? netlink_ack+0xb50/0xb50 [ 3154.896060][T26941] ? genl_bind+0x380/0x380 [ 3154.900492][T26941] genl_rcv+0x24/0x40 [ 3154.904491][T26941] netlink_unicast+0x774/0x920 [ 3154.909279][T26941] netlink_sendmsg+0x8ba/0xbe0 [ 3154.914111][T26941] ? netlink_getsockopt+0x570/0x570 [ 3154.919332][T26941] ? aa_sock_msg_perm+0x94/0x150 [ 3154.924307][T26941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3154.929614][T26941] ? security_socket_sendmsg+0x7c/0xa0 [ 3154.935099][T26941] ? netlink_getsockopt+0x570/0x570 [ 3154.940318][T26941] ____sys_sendmsg+0x5b7/0x8f0 [ 3154.945112][T26941] ? __sys_sendmsg_sock+0x30/0x30 [ 3154.950164][T26941] ? import_iovec+0x6f/0xa0 [ 3154.954703][T26941] ___sys_sendmsg+0x236/0x2e0 [ 3154.959412][T26941] ? __sys_sendmsg+0x2a0/0x2a0 [ 3154.964225][T26941] ? ktime_get_real_ts64+0x440/0x440 [ 3154.969552][T26941] __se_sys_sendmsg+0x1af/0x290 [ 3154.974429][T26941] ? __x64_sys_sendmsg+0x80/0x80 [ 3154.979398][T26941] ? syscall_enter_from_user_mode+0x2a/0x70 [ 3154.985317][T26941] do_syscall_64+0x4c/0xa0 [ 3154.989754][T26941] ? clear_bhb_loop+0x30/0x80 [ 3154.994444][T26941] ? clear_bhb_loop+0x30/0x80 [ 3154.999139][T26941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3155.005049][T26941] RIP: 0033:0x7f0de2967cb9 [ 3155.009502][T26941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3155.029139][T26941] RSP: 002b:00007f0de0bc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3155.037574][T26941] RAX: ffffffffffffffda RBX: 00007f0de2be2fa0 RCX: 00007f0de2967cb9 [ 3155.045563][T26941] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3155.053551][T26941] RBP: 00007f0de29d5bf7 R08: 0000000000000000 R09: 0000000000000000 [ 3155.061541][T26941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3155.069538][T26941] R13: 00007f0de2be3038 R14: 00007f0de2be2fa0 R15: 00007ffd3cbdf118 [ 3155.077542][T26941] [ 3155.219789][T26952] device bridge_slave_0 entered promiscuous mode [ 3155.286170][T26952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3155.299533][T28818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3155.426416][T26958] netlink: 'syz.4.39371': attribute type 11 has an invalid length. [ 3155.700743][T26975] netlink: 'syz.0.39379': attribute type 10 has an invalid length. [ 3155.920872][T26976] netlink: 'syz.4.39378': attribute type 2 has an invalid length. [ 3156.203807][T26988] device syzkaller0 entered promiscuous mode [ 3157.203206][T27034] validate_nla: 1 callbacks suppressed [ 3157.203387][T27034] netlink: 'syz.4.39412': attribute type 10 has an invalid length. [ 3157.230577][T27034] __nla_validate_parse: 7 callbacks suppressed [ 3157.230652][T27034] netlink: 55 bytes leftover after parsing attributes in process `syz.4.39412'. [ 3157.794243][T27046] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.39402'. [ 3157.983943][T27053] device syzkaller0 entered promiscuous mode [ 3159.133629][T27081] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3159.309506][T27089] netlink: 'syz.3.39419': attribute type 10 has an invalid length. [ 3159.329582][T27089] netlink: 55 bytes leftover after parsing attributes in process `syz.3.39419'. [ 3159.508393][T27098] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39422'. [ 3159.651418][T27098] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 3159.659513][T27098] CPU: 0 PID: 27098 Comm: syz.0.39422 Not tainted syzkaller #0 [ 3159.667105][T27098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3159.677274][T27098] Call Trace: [ 3159.680592][T27098] [ 3159.683603][T27098] dump_stack_lvl+0x188/0x250 [ 3159.688327][T27098] ? show_regs_print_info+0x20/0x20 [ 3159.693672][T27098] ? load_image+0x400/0x400 [ 3159.698231][T27098] sysfs_warn_dup+0x8a/0xa0 [ 3159.702769][T27098] sysfs_do_create_link_sd+0xc0/0x110 [ 3159.708201][T27098] device_add+0x7ed/0xfb0 [ 3159.712709][T27098] wiphy_register+0x1e81/0x2c30 [ 3159.717638][T27098] ? cfg80211_event_work+0x40/0x40 [ 3159.722807][T27098] ? minstrel_ht_alloc+0x808/0x980 [ 3159.727974][T27098] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3159.734097][T27098] ieee80211_register_hw+0x2aa1/0x3af0 [ 3159.739620][T27098] ? ieee80211_tasklet_handler+0x20/0x20 [ 3159.745306][T27098] ? rcu_is_watching+0x11/0xa0 [ 3159.750121][T27098] ? memset+0x1e/0x40 [ 3159.754166][T27098] ? hrtimer_init+0x10c/0x220 [ 3159.758897][T27098] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3159.764812][T27098] hwsim_new_radio_nl+0xa6f/0xc40 [ 3159.769908][T27098] genl_rcv_msg+0xcea/0xf90 [ 3159.774483][T27098] ? genl_bind+0x380/0x380 [ 3159.778973][T27098] ? __schedule+0x11f7/0x43c0 [ 3159.783709][T27098] ? lock_chain_count+0x20/0x20 [ 3159.788643][T27098] ? release_firmware_map_entry+0x190/0x190 [ 3159.794599][T27098] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3159.801167][T27098] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3159.807221][T27098] netlink_rcv_skb+0x1f5/0x440 [ 3159.812038][T27098] ? genl_bind+0x380/0x380 [ 3159.816508][T27098] ? netlink_ack+0xb50/0xb50 [ 3159.821154][T27098] ? genl_bind+0x380/0x380 [ 3159.825607][T27098] genl_rcv+0x24/0x40 [ 3159.829614][T27098] netlink_unicast+0x774/0x920 [ 3159.834476][T27098] netlink_sendmsg+0x8ba/0xbe0 [ 3159.839301][T27098] ? netlink_getsockopt+0x570/0x570 [ 3159.844540][T27098] ? aa_sock_msg_perm+0x94/0x150 [ 3159.849535][T27098] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3159.854873][T27098] ? security_socket_sendmsg+0x7c/0xa0 [ 3159.860363][T27098] ? netlink_getsockopt+0x570/0x570 [ 3159.865592][T27098] ____sys_sendmsg+0x5b7/0x8f0 [ 3159.870396][T27098] ? __sys_sendmsg_sock+0x30/0x30 [ 3159.875457][T27098] ? import_iovec+0x6f/0xa0 [ 3159.879998][T27098] ___sys_sendmsg+0x236/0x2e0 [ 3159.884731][T27098] ? __sys_sendmsg+0x2a0/0x2a0 [ 3159.889561][T27098] __se_sys_sendmsg+0x1af/0x290 [ 3159.894441][T27098] ? __x64_sys_sendmsg+0x80/0x80 [ 3159.899423][T27098] ? syscall_enter_from_user_mode+0x2a/0x70 [ 3159.905348][T27098] do_syscall_64+0x4c/0xa0 [ 3159.909791][T27098] ? clear_bhb_loop+0x30/0x80 [ 3159.914601][T27098] ? clear_bhb_loop+0x30/0x80 [ 3159.919326][T27098] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3159.925261][T27098] RIP: 0033:0x7f5d41f61cb9 [ 3159.929718][T27098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3159.949401][T27098] RSP: 002b:00007f5d401bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3159.957850][T27098] RAX: ffffffffffffffda RBX: 00007f5d421dcfa0 RCX: 00007f5d41f61cb9 [ 3159.965874][T27098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3159.973872][T27098] RBP: 00007f5d41fcfbf7 R08: 0000000000000000 R09: 0000000000000000 [ 3159.981878][T27098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3159.989883][T27098] R13: 00007f5d421dd038 R14: 00007f5d421dcfa0 R15: 00007fff728cf028 [ 3159.997899][T27098] [ 3160.089825][T27099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39422'. [ 3160.845221][T27118] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3160.983572][T27124] device syzkaller0 entered promiscuous mode [ 3161.089518][T27123] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.39428'. [ 3162.661234][T27175] netlink: 'syz.2.39463': attribute type 7 has an invalid length. [ 3162.671963][T27175] netlink: 140 bytes leftover after parsing attributes in process `syz.2.39463'. [ 3162.909535][T27179] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39454'. [ 3163.919632][T27215] netlink: 'syz.1.39470': attribute type 7 has an invalid length. [ 3163.930296][T27215] netlink: 140 bytes leftover after parsing attributes in process `syz.1.39470'. [ 3164.128512][T27219] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.39479'. [ 3164.377043][T27232] netlink: 'syz.2.39473': attribute type 10 has an invalid length. [ 3164.386392][T27232] netlink: 55 bytes leftover after parsing attributes in process `syz.2.39473'. [ 3164.638680][T27233] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.39485'. [ 3165.001785][T27252] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39482'. [ 3165.428156][T27272] device syzkaller0 entered promiscuous mode [ 3165.733920][T27280] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.39495'. [ 3166.259702][T27299] netlink: 'syz.4.39505': attribute type 3 has an invalid length. [ 3166.278920][T27303] netlink: 'syz.2.39506': attribute type 12 has an invalid length. [ 3166.289755][T27303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39506'. [ 3166.320261][T27299] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.39505'. [ 3166.577384][T27310] netlink: 'syz.4.39507': attribute type 7 has an invalid length. [ 3166.614082][T27314] netlink: 'syz.0.39510': attribute type 3 has an invalid length. [ 3166.667228][T27316] netlink: 'syz.1.39511': attribute type 3 has an invalid length. [ 3167.467940][T27318] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 3167.490346][T27318] CPU: 1 PID: 27318 Comm: syz.1.39522 Not tainted syzkaller #0 [ 3167.497964][T27318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3167.508057][T27318] Call Trace: [ 3167.511370][T27318] [ 3167.514335][T27318] dump_stack_lvl+0x188/0x250 [ 3167.519194][T27318] ? show_regs_print_info+0x20/0x20 [ 3167.524443][T27318] ? load_image+0x400/0x400 [ 3167.529004][T27318] sysfs_warn_dup+0x8a/0xa0 [ 3167.533552][T27318] sysfs_do_create_link_sd+0xc0/0x110 [ 3167.538959][T27318] device_add+0x7ed/0xfb0 [ 3167.543478][T27318] wiphy_register+0x1e81/0x2c30 [ 3167.548386][T27318] ? cfg80211_event_work+0x40/0x40 [ 3167.553542][T27318] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3167.559748][T27318] ? ieee80211_register_hw+0x28d4/0x3af0 [ 3167.565510][T27318] ieee80211_register_hw+0x2aa1/0x3af0 [ 3167.571033][T27318] ? ieee80211_tasklet_handler+0x20/0x20 [ 3167.576713][T27318] ? rcu_is_watching+0x11/0xa0 [ 3167.581514][T27318] ? memset+0x1e/0x40 [ 3167.585523][T27318] ? hrtimer_init+0x10c/0x220 [ 3167.590266][T27318] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3167.596046][T27318] hwsim_new_radio_nl+0xa6f/0xc40 [ 3167.601122][T27318] genl_rcv_msg+0xcea/0xf90 [ 3167.605679][T27318] ? genl_bind+0x380/0x380 [ 3167.610139][T27318] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 3167.615369][T27318] ? verify_lock_unused+0x140/0x140 [ 3167.620751][T27318] ? dev_queue_xmit+0x20/0x20 [ 3167.625472][T27318] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3167.632058][T27318] netlink_rcv_skb+0x1f5/0x440 [ 3167.636886][T27318] ? genl_bind+0x380/0x380 [ 3167.641362][T27318] ? netlink_ack+0xb50/0xb50 [ 3167.646003][T27318] ? __lock_acquire+0x7d10/0x7d10 [ 3167.651078][T27318] ? down_read+0x1aa/0x2e0 [ 3167.655761][T27318] genl_rcv+0x24/0x40 [ 3167.659789][T27318] netlink_unicast+0x774/0x920 [ 3167.664625][T27318] netlink_sendmsg+0x8ba/0xbe0 [ 3167.669433][T27318] ? lockdep_hardirqs_on+0x94/0x140 [ 3167.674682][T27318] ? netlink_getsockopt+0x570/0x570 [ 3167.680026][T27318] ? bpf_lsm_socket_accept+0x10/0x10 [ 3167.685348][T27318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3167.690674][T27318] ? security_socket_sendmsg+0x7c/0xa0 [ 3167.696173][T27318] ? netlink_getsockopt+0x570/0x570 [ 3167.701407][T27318] ____sys_sendmsg+0x5b7/0x8f0 [ 3167.706257][T27318] ? __sys_sendmsg_sock+0x30/0x30 [ 3167.711345][T27318] ? import_iovec+0x6f/0xa0 [ 3167.715919][T27318] ___sys_sendmsg+0x236/0x2e0 [ 3167.720663][T27318] ? __sys_sendmsg+0x2a0/0x2a0 [ 3167.725504][T27318] __se_sys_sendmsg+0x1af/0x290 [ 3167.730404][T27318] ? __x64_sys_sendmsg+0x80/0x80 [ 3167.735377][T27318] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3167.741413][T27318] ? lockdep_hardirqs_on+0x94/0x140 [ 3167.746680][T27318] do_syscall_64+0x4c/0xa0 [ 3167.751133][T27318] ? clear_bhb_loop+0x30/0x80 [ 3167.755856][T27318] ? clear_bhb_loop+0x30/0x80 [ 3167.760577][T27318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3167.766509][T27318] RIP: 0033:0x7f61b4581cb9 [ 3167.770965][T27318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3167.790614][T27318] RSP: 002b:00007f61b27dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3167.799075][T27318] RAX: ffffffffffffffda RBX: 00007f61b47fcfa0 RCX: 00007f61b4581cb9 [ 3167.807095][T27318] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3167.815114][T27318] RBP: 00007f61b45efbf7 R08: 0000000000000000 R09: 0000000000000000 [ 3167.823158][T27318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3167.831170][T27318] R13: 00007f61b47fd038 R14: 00007f61b47fcfa0 R15: 00007ffeb7a460a8 [ 3167.839197][T27318] [ 3167.864813][T27330] __nla_validate_parse: 5 callbacks suppressed [ 3167.864831][T27330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39522'. [ 3168.511338][T27358] device syzkaller0 entered promiscuous mode [ 3168.685423][T27369] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.39541'. [ 3169.681220][T27393] netlink: 'syz.3.39534': attribute type 12 has an invalid length. [ 3169.699893][T27393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39534'. [ 3170.032137][T27403] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.39539'. [ 3170.057573][T27398] netlink: 'syz.3.39536': attribute type 7 has an invalid length. [ 3170.076909][T27398] netlink: 140 bytes leftover after parsing attributes in process `syz.3.39536'. [ 3170.684374][T27421] netlink: 'syz.0.39543': attribute type 3 has an invalid length. [ 3170.744813][T27421] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.39543'. [ 3170.888319][T27432] netlink: 'syz.4.39552': attribute type 12 has an invalid length. [ 3170.930169][T27432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39552'. [ 3170.988088][T27437] device syzkaller0 entered promiscuous mode [ 3171.388887][T27448] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.39558'. [ 3171.700681][T27455] netlink: 'syz.4.39561': attribute type 3 has an invalid length. [ 3171.709574][T27455] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39561'. [ 3171.732881][T27457] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.39560'. [ 3172.192681][T27462] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3172.258598][T27462] device syzkaller0 entered promiscuous mode [ 3172.662098][T27478] netlink: 'syz.2.39566': attribute type 3 has an invalid length. [ 3173.011003][T27481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3173.273640][T27494] netlink: 'syz.2.39576': attribute type 3 has an invalid length. [ 3173.292748][T27494] __nla_validate_parse: 3 callbacks suppressed [ 3173.292786][T27494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39576'. [ 3173.979589][T27524] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39586'. [ 3174.006273][T27516] netlink: 'syz.3.39581': attribute type 3 has an invalid length. [ 3174.020001][T27516] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.39581'. [ 3174.138268][T27528] netlink: 10 bytes leftover after parsing attributes in process `syz.2.39587'. [ 3174.316514][T27523] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.39584'. [ 3174.889245][T27548] device syzkaller0 entered promiscuous mode [ 3175.314221][T27556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3175.434254][T27563] netlink: 10 bytes leftover after parsing attributes in process `syz.0.39600'. [ 3175.566189][T27567] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.39602'. [ 3175.901676][T27576] netlink: 'syz.4.39606': attribute type 3 has an invalid length. [ 3175.932140][T27576] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.39606'. [ 3176.521361][T27588] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.39609'. [ 3176.675758][T27597] netlink: 'syz.0.39610': attribute type 3 has an invalid length. [ 3176.685259][T27597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39610'. [ 3176.997982][T27600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3177.961311][T27632] device syzkaller0 entered promiscuous mode [ 3178.489858][T27655] netlink: 'syz.3.39630': attribute type 3 has an invalid length. [ 3178.575985][T27655] __nla_validate_parse: 1 callbacks suppressed [ 3178.576078][T27655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39630'. [ 3178.684637][T27649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3178.838971][T27665] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39631'. [ 3180.495012][T27699] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.39659'. [ 3180.740670][T27707] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.39650'. [ 3181.094179][T27719] netlink: 'syz.1.39653': attribute type 3 has an invalid length. [ 3181.122036][T27719] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.39653'. [ 3181.244855][T27729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39658'. [ 3181.780743][T27737] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.39665'. [ 3182.007555][T27752] IPv6: pim6reg1: Disabled Multicast RS [ 3182.501294][T27769] netlink: 'syz.1.39672': attribute type 3 has an invalid length. [ 3182.509530][T27769] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.39672'. [ 3182.694714][T27774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39675'. [ 3182.889218][T27784] device syzkaller0 entered promiscuous mode [ 3182.922127][T27789] device syzkaller0 entered promiscuous mode [ 3183.097194][T27799] device syzkaller0 left promiscuous mode [ 3183.762990][T27819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39690'. [ 3183.903062][T27823] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.39703'. [ 3183.982220][T27823] netlink: 16770 bytes leftover after parsing attributes in process `syz.2.39703'. [ 3183.991925][T27823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39703'. [ 3184.239182][T27834] netlink: 'syz.1.39695': attribute type 3 has an invalid length. [ 3184.249257][T27834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39695'. [ 3184.826358][T27865] device syzkaller0 entered promiscuous mode [ 3185.222084][T27885] netlink: 'syz.2.39715': attribute type 3 has an invalid length. [ 3185.230487][T27885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39715'. [ 3186.359093][T27916] netlink: 10 bytes leftover after parsing attributes in process `syz.0.39737'. [ 3189.021293][T27929] netlink: 'syz.0.39730': attribute type 3 has an invalid length. [ 3189.030330][T27929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39730'. [ 3189.471002][T27948] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.39735'. [ 3189.514936][T27949] netlink: 156 bytes leftover after parsing attributes in process `syz.2.39739'. [ 3189.580315][T27948] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.39735'. [ 3189.611607][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39735'. [ 3189.645395][T27963] device syzkaller0 entered promiscuous mode [ 3189.654447][T28818] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3189.673447][T27953] device syzkaller0 entered promiscuous mode [ 3190.148300][T27985] netlink: 'syz.2.39750': attribute type 3 has an invalid length. [ 3190.158118][T27985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39750'. [ 3190.629848][T27987] netlink: 10 bytes leftover after parsing attributes in process `syz.4.39751'. [ 3190.821159][T27995] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.39753'. [ 3191.251989][T27995] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.39753'. [ 3191.310901][T27995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39753'. [ 3192.232038][T28034] device syzkaller0 entered promiscuous mode [ 3192.644791][T28052] netlink: 'syz.4.39779': attribute type 7 has an invalid length. [ 3195.216837][T28099] __nla_validate_parse: 2 callbacks suppressed [ 3195.216878][T28099] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.39795'. [ 3195.248372][T28099] netlink: 16770 bytes leftover after parsing attributes in process `syz.1.39795'. [ 3195.258443][T28099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39795'. [ 3195.424444][T28101] device syzkaller0 entered promiscuous mode [ 3195.609424][T28113] netlink: 152 bytes leftover after parsing attributes in process `syz.3.39801'. [ 3195.845605][T28121] device syzkaller0 entered promiscuous mode [ 3196.472745][T28131] netlink: 10 bytes leftover after parsing attributes in process `syz.2.39807'. [ 3196.544135][T28138] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.39806'. [ 3196.588798][T28137] device syzkaller0 entered promiscuous mode [ 3196.609570][T28138] netlink: 16770 bytes leftover after parsing attributes in process `syz.0.39806'. [ 3196.630291][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39806'. [ 3196.917940][T28146] device syzkaller0 entered promiscuous mode [ 3197.235796][T28153] device syzkaller0 entered promiscuous mode [ 3197.251367][T28154] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39826'. [ 3197.809681][T28181] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 3198.286428][T28189] device syzkaller0 entered promiscuous mode [ 3199.486598][T28232] netlink: 'syz.3.39846': attribute type 3 has an invalid length. [ 3199.541172][T28232] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.39846'. [ 3199.881128][T28258] device syzkaller0 left promiscuous mode [ 3199.897873][T28257] device bridge_slave_1 entered promiscuous mode [ 3200.192102][T28270] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 3200.375201][T28274] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.39857'. [ 3201.066175][T28279] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3201.709554][T28318] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 3202.356548][T28342] netlink: 14 bytes leftover after parsing attributes in process `syz.2.39885'. [ 3204.234937][T28401] device syzkaller0 entered promiscuous mode [ 3204.792920][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.799400][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.245157][T28445] device syzkaller0 entered promiscuous mode [ 3205.386569][T28453] netlink: 'syz.0.39927': attribute type 9 has an invalid length. [ 3205.406652][T28453] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.39927'. [ 3206.268998][T28490] netlink: 'syz.0.39943': attribute type 29 has an invalid length. [ 3206.375426][T28495] delete_channel: no stack [ 3206.396865][T28496] netlink: 'syz.0.39943': attribute type 4 has an invalid length. [ 3206.408876][T28496] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.39943'. [ 3206.417545][T28491] delete_channel: no stack [ 3206.531886][T28490] netlink: 'syz.0.39943': attribute type 29 has an invalid length. [ 3206.654430][T28494] netlink: 'syz.0.39943': attribute type 29 has an invalid length. [ 3207.120869][T28515] netlink: 'syz.2.39951': attribute type 3 has an invalid length. [ 3207.133170][T28515] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.39951'. [ 3207.835856][T28537] netlink: 'syz.3.39958': attribute type 9 has an invalid length. [ 3207.880226][T28537] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.39958'. [ 3208.611065][T28570] netlink: 'syz.1.39969': attribute type 3 has an invalid length. [ 3208.623348][T28570] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.39969'. [ 3209.723937][T28611] netlink: 'syz.0.39984': attribute type 3 has an invalid length. [ 3209.740294][T28611] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.39984'. [ 3212.792944][T28661] netlink: 'syz.1.40005': attribute type 29 has an invalid length. [ 3212.816477][T28661] netlink: 'syz.1.40005': attribute type 29 has an invalid length. [ 3212.828907][T28663] netlink: 'syz.1.40005': attribute type 29 has an invalid length. [ 3212.882125][T28661] netlink: 'syz.1.40005': attribute type 4 has an invalid length. [ 3212.902985][T28661] netlink: 205136 bytes leftover after parsing attributes in process `syz.1.40005'. [ 3216.901336][T28705] netlink: 'syz.3.40020': attribute type 12 has an invalid length. [ 3216.910147][T28705] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40020'. [ 3217.164995][T28713] netlink: 'syz.2.40036': attribute type 12 has an invalid length. [ 3217.179916][T28713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40036'. [ 3217.275986][T28714] delete_channel: no stack [ 3217.283717][T28712] delete_channel: no stack [ 3218.528465][T28754] netlink: 'syz.1.40039': attribute type 12 has an invalid length. [ 3218.557135][T28754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40039'. [ 3218.650851][T28764] device syzkaller0 entered promiscuous mode [ 3218.830723][T28768] netlink: 'syz.1.40045': attribute type 1 has an invalid length. [ 3218.839059][T28768] netlink: 'syz.1.40045': attribute type 3 has an invalid length. [ 3218.870402][T28768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40045'. [ 3218.903832][T28769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40045'. [ 3219.076403][T28784] netlink: 'syz.0.40053': attribute type 29 has an invalid length. [ 3219.089875][T28784] netlink: 'syz.0.40053': attribute type 29 has an invalid length. [ 3219.183812][T28787] netlink: 'syz.0.40053': attribute type 29 has an invalid length. [ 3219.416928][T28784] netlink: 'syz.0.40053': attribute type 27 has an invalid length. [ 3219.460165][T28784] netlink: 164 bytes leftover after parsing attributes in process `syz.0.40053'. [ 3219.678350][T28801] netlink: 'syz.0.40056': attribute type 12 has an invalid length. [ 3219.705549][T28801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40056'. [ 3219.837912][T28813] netlink: 'syz.3.40063': attribute type 1 has an invalid length. [ 3219.925635][T28813] netlink: 'syz.3.40063': attribute type 3 has an invalid length. [ 3219.997732][T28808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40063'. [ 3220.060269][T28813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40063'. [ 3221.446647][T28851] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40077'. [ 3221.573858][T28860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40081'. [ 3221.589273][T28860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40081'. [ 3223.328017][T28903] device syzkaller0 entered promiscuous mode [ 3223.653771][T28912] __nla_validate_parse: 2 callbacks suppressed [ 3223.653818][T28912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40095'. [ 3224.192962][T28943] validate_nla: 6 callbacks suppressed [ 3224.193029][T28943] netlink: 'syz.2.40123': attribute type 29 has an invalid length. [ 3224.221142][T28943] netlink: 'syz.2.40123': attribute type 29 has an invalid length. [ 3224.238639][T28946] netlink: 'syz.2.40123': attribute type 29 has an invalid length. [ 3224.277329][T28943] netlink: 'syz.2.40123': attribute type 27 has an invalid length. [ 3224.286043][T28943] netlink: 164 bytes leftover after parsing attributes in process `syz.2.40123'. [ 3224.511767][T28956] netlink: 'syz.3.40113': attribute type 12 has an invalid length. [ 3224.529617][T28956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40113'. [ 3224.863066][T28963] device syzkaller0 entered promiscuous mode [ 3226.672909][T28991] netlink: 'syz.4.40132': attribute type 12 has an invalid length. [ 3226.682431][T28991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40132'. [ 3227.141426][T29013] device syzkaller0 entered promiscuous mode [ 3227.412010][T29029] netlink: 'syz.2.40145': attribute type 12 has an invalid length. [ 3227.421716][T29029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40145'. [ 3227.489058][T29030] netlink: 'syz.1.40157': attribute type 10 has an invalid length. [ 3228.756073][T29062] device syzkaller0 entered promiscuous mode [ 3228.877182][T29070] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.40162'. [ 3228.959030][T29070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40162'. [ 3229.038323][T29077] netlink: 'syz.4.40165': attribute type 10 has an invalid length. [ 3230.602089][T29119] netlink: 'syz.3.40182': attribute type 10 has an invalid length. [ 3230.732199][T29126] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.40183'. [ 3230.743808][T29126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40183'. [ 3231.147673][T29148] device syzkaller0 left promiscuous mode [ 3231.263141][T29153] device syzkaller0 entered promiscuous mode [ 3232.234086][T29165] netlink: 'syz.0.40196': attribute type 10 has an invalid length. [ 3232.418616][T29177] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.40202'. [ 3232.453671][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40202'. [ 3232.532015][T29182] device wlan0 entered promiscuous mode [ 3236.303601][T29227] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.40221'. [ 3236.324194][T29227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40221'. [ 3237.621967][T29282] netlink: 'syz.1.40244': attribute type 7 has an invalid length. [ 3237.633348][T29282] netlink: 140 bytes leftover after parsing attributes in process `syz.1.40244'. [ 3237.714959][T29288] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.40242'. [ 3237.796854][T29288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40242'. [ 3238.438219][T29311] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.40256'. [ 3238.886225][T29327] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.40262'. [ 3238.918565][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40262'. [ 3239.937939][T29357] netlink: 'syz.4.40273': attribute type 10 has an invalid length. [ 3240.020391][T29357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40273'. [ 3240.126986][T29355] delete_channel: no stack [ 3240.273820][T29364] device syzkaller0 entered promiscuous mode [ 3240.887127][T29390] device syzkaller0 entered promiscuous mode [ 3240.975051][T29387] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.40284'. [ 3241.031422][T29393] device wlan0 left promiscuous mode [ 3241.038415][T29398] netlink: 'syz.3.40289': attribute type 9 has an invalid length. [ 3241.082491][T29396] device wlan0 entered promiscuous mode [ 3241.421691][T29420] device syzkaller0 entered promiscuous mode [ 3242.041335][T29442] device syzkaller0 entered promiscuous mode [ 3243.413877][T29517] netlink: 'syz.2.40337': attribute type 2 has an invalid length. [ 3243.423280][T29517] netlink: 'syz.2.40337': attribute type 8 has an invalid length. [ 3243.440076][T29517] __nla_validate_parse: 1 callbacks suppressed [ 3243.440093][T29517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40337'. [ 3243.537154][T29515] device syzkaller0 entered promiscuous mode [ 3243.649973][T29519] device wg2 entered promiscuous mode [ 3247.188317][T29572] mac80211_hwsim hwsim123 O3c: renamed from wlan1 [ 3248.508274][T29629] mac80211_hwsim hwsim90 O3c: renamed from wlan1 [ 3249.955341][T29680] mac80211_hwsim hwsim121 O3c: renamed from wlan1 [ 3250.588351][T29699] device sit0 entered promiscuous mode [ 3251.722000][T29716] netlink: 'syz.2.40413': attribute type 10 has an invalid length. [ 3251.861159][T29728] netlink: 'syz.4.40410': attribute type 9 has an invalid length. [ 3251.869054][T29728] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40410'. [ 3251.977016][T29723] device lo left promiscuous mode [ 3252.042118][T29723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3252.187583][T29736] mac80211_hwsim hwsim119 O3c: renamed from wlan1 [ 3252.458980][T29746] netlink: 68 bytes leftover after parsing attributes in process `syz.1.40420'. [ 3252.876529][T29763] device sit0 entered promiscuous mode [ 3253.560733][T29790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40435'. [ 3253.962286][T29816] device lo left promiscuous mode [ 3254.027765][T29816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3254.068293][T29819] netlink: 'syz.2.40448': attribute type 17 has an invalid length. [ 3254.077555][T29819] netlink: 'syz.2.40448': attribute type 16 has an invalid length. [ 3254.116457][T29819] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40448'. [ 3254.278861][T29826] mac80211_hwsim hwsim114 O3c: renamed from wlan1 [ 3254.944735][T29843] netlink: 'syz.4.40453': attribute type 9 has an invalid length. [ 3254.957997][T29843] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.40453'. [ 3255.446321][T29858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3255.885506][T29881] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 3255.897574][T29881] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 3256.556734][T29909] device lo left promiscuous mode [ 3256.659895][T29909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3258.005848][T29965] netlink: 'syz.0.40504': attribute type 10 has an invalid length. [ 3258.308379][T29988] device wlan0 entered promiscuous mode [ 3258.863281][T29997] netlink: 'syz.3.40515': attribute type 10 has an invalid length. [ 3258.872839][T29997] netlink: 55 bytes leftover after parsing attributes in process `syz.3.40515'. [ 3259.875130][T30015] netlink: 'syz.1.40525': attribute type 21 has an invalid length. [ 3259.895492][T30015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40525'. [ 3260.206620][T30035] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 3260.229873][T30035] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 3260.536647][T30051] netlink: 'syz.2.40540': attribute type 10 has an invalid length. [ 3260.545900][T30051] netlink: 55 bytes leftover after parsing attributes in process `syz.2.40540'. [ 3260.825171][T30063] netlink: 'syz.0.40546': attribute type 17 has an invalid length. [ 3260.834085][T30063] netlink: 'syz.0.40546': attribute type 16 has an invalid length. [ 3260.843210][T30063] netlink: 152 bytes leftover after parsing attributes in process `syz.0.40546'. [ 3261.629418][T30082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3261.842926][T30104] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 3261.853065][T30104] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 3262.873939][T30124] netlink: 'syz.2.40569': attribute type 9 has an invalid length. [ 3262.894146][T30124] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.40569'. [ 3263.244436][T30142] netlink: 'syz.4.40579': attribute type 21 has an invalid length. [ 3263.313898][T30142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40579'. [ 3263.554470][T30146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3263.592749][T30145] netlink: 'syz.1.40578': attribute type 10 has an invalid length. [ 3263.639233][T30145] netlink: 55 bytes leftover after parsing attributes in process `syz.1.40578'. [ 3264.210838][T30173] netlink: 'syz.3.40585': attribute type 9 has an invalid length. [ 3264.240694][T30173] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.40585'. [ 3264.851095][T30191] netlink: 'syz.2.40595': attribute type 21 has an invalid length. [ 3264.869030][T30191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40595'. [ 3265.393319][T30192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3265.863462][T30224] delete_channel: no stack [ 3266.396277][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.402700][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.464316][T30246] netlink: 'syz.1.40615': attribute type 3 has an invalid length. [ 3266.492970][T30246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40615'. [ 3267.590502][T30269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3268.413328][T30304] netlink: 'syz.2.40637': attribute type 3 has an invalid length. [ 3268.421675][T30304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40637'. [ 3268.647644][T30299] delete_channel: no stack [ 3269.171559][T30321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3269.363566][T30344] netlink: 'syz.0.40649': attribute type 21 has an invalid length. [ 3269.420467][T30347] netlink: 'syz.4.40650': attribute type 3 has an invalid length. [ 3269.454249][T30352] netlink: 'syz.0.40649': attribute type 9 has an invalid length. [ 3269.467016][T30347] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40650'. [ 3269.491785][T30352] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.40649'. [ 3269.680810][T30350] delete_channel: no stack [ 3269.731546][T30363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.40657'. [ 3270.318895][T30385] delete_channel: no stack [ 3270.352348][T30393] netlink: 'syz.3.40671': attribute type 3 has an invalid length. [ 3270.360530][T30393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40671'. [ 3270.938842][T30421] delete_channel: no stack [ 3271.217625][T30442] netlink: 'syz.1.40693': attribute type 39 has an invalid length. [ 3271.689066][T30456] delete_channel: no stack [ 3272.297644][T30486] device wlan0 entered promiscuous mode [ 3273.050714][T30515] device sit0 left promiscuous mode [ 3273.314363][T30519] device sit0 entered promiscuous mode [ 3274.392915][T30551] delete_channel: no stack [ 3274.581374][T30560] netlink: 'syz.2.40735': attribute type 21 has an invalid length. [ 3274.693266][T30560] netlink: 'syz.2.40735': attribute type 9 has an invalid length. [ 3274.703092][T30560] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.40735'. [ 3275.376457][T30575] device wlan0 entered promiscuous mode [ 3279.647346][T30617] netlink: 'syz.1.40754': attribute type 21 has an invalid length. [ 3279.776806][T30617] netlink: 'syz.1.40754': attribute type 9 has an invalid length. [ 3279.793027][T30617] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.40754'. [ 3279.969241][T30636] netlink: 'syz.4.40762': attribute type 29 has an invalid length. [ 3280.082507][T30640] netlink: 'syz.4.40762': attribute type 4 has an invalid length. [ 3280.106241][T30640] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.40762'. [ 3280.223113][T30636] netlink: 'syz.4.40762': attribute type 29 has an invalid length. [ 3280.264033][T30637] netlink: 'syz.4.40762': attribute type 29 has an invalid length. [ 3280.489002][T30638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3280.635080][T30654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3281.820770][T30687] device sit0 entered promiscuous mode [ 3282.522458][T30703] device syzkaller0 entered promiscuous mode [ 3284.037249][T30762] netlink: 'syz.2.40806': attribute type 10 has an invalid length. [ 3284.893769][T30798] device syzkaller0 entered promiscuous mode [ 3286.143682][T30836] delete_channel: no stack [ 3287.542138][T30874] netlink: 180 bytes leftover after parsing attributes in process `syz.1.40849'. [ 3288.148325][T30900] netlink: 'syz.1.40860': attribute type 6 has an invalid length. [ 3289.123616][T30938] netlink: 'syz.3.40873': attribute type 21 has an invalid length. [ 3289.192121][T30943] netlink: 'syz.3.40873': attribute type 9 has an invalid length. [ 3289.208542][T30943] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.40873'. [ 3290.279402][T30986] netlink: 'syz.4.40889': attribute type 21 has an invalid length. [ 3290.343536][T30992] netlink: 'syz.4.40889': attribute type 9 has an invalid length. [ 3290.430615][T30992] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40889'. [ 3290.624889][T30998] netlink: 'syz.0.40898': attribute type 6 has an invalid length. [ 3291.721700][T31035] device syzkaller0 left promiscuous mode [ 3292.391586][T31063] device wlan0 left promiscuous mode [ 3292.442618][T31063] device wlan0 entered promiscuous mode [ 3292.479052][T31063] netlink: 'syz.2.40926': attribute type 9 has an invalid length. [ 3292.510112][T31063] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.40926'. [ 3292.835352][T31071] netlink: 'syz.1.40928': attribute type 10 has an invalid length. [ 3292.960560][T31071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40928'. [ 3293.576733][T31097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.40940'. [ 3293.790616][T31104] netlink: 'syz.4.40942': attribute type 4 has an invalid length. [ 3293.861206][T31104] netlink: 152 bytes leftover after parsing attributes in process `syz.4.40942'. [ 3295.020859][T31154] device wlan0 left promiscuous mode [ 3295.083696][T31154] device wlan0 entered promiscuous mode [ 3295.129842][T31154] netlink: 'syz.4.40961': attribute type 9 has an invalid length. [ 3295.197984][T31154] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40961'. [ 3295.492427][T31170] netlink: 'syz.2.40969': attribute type 3 has an invalid length. [ 3295.510338][T31170] netlink: 'syz.2.40969': attribute type 1 has an invalid length. [ 3295.519165][T31170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40969'. [ 3296.921195][T31206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3296.987606][T31208] device wlan0 left promiscuous mode [ 3297.069267][T31211] device wlan0 entered promiscuous mode [ 3297.103785][T31208] netlink: 'syz.0.40983': attribute type 9 has an invalid length. [ 3297.158761][T31208] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.40983'. [ 3297.436712][T31223] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40992'. [ 3297.449325][T31224] netlink: 'syz.4.40991': attribute type 21 has an invalid length. [ 3297.690317][T31228] netlink: 'syz.4.40991': attribute type 9 has an invalid length. [ 3297.719595][T31228] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40991'. [ 3298.519087][T31256] netlink: 76 bytes leftover after parsing attributes in process `syz.4.40999'. [ 3299.200332][T31277] device wlan0 left promiscuous mode [ 3299.256813][T31281] device wlan0 entered promiscuous mode [ 3299.336804][T31277] netlink: 'syz.3.41007': attribute type 9 has an invalid length. [ 3299.382442][T31277] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41007'. [ 3299.398013][T31285] netlink: 'syz.2.41011': attribute type 21 has an invalid length. [ 3300.047024][T31287] netlink: 'syz.2.41011': attribute type 9 has an invalid length. [ 3300.060851][T31287] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.41011'. [ 3303.536380][T31338] netlink: 'syz.1.41030': attribute type 21 has an invalid length. [ 3303.645857][T31338] netlink: 'syz.1.41030': attribute type 9 has an invalid length. [ 3303.667692][T31338] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.41030'. [ 3303.904132][T31353] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 3303.925560][T31361] netlink: 'syz.0.41036': attribute type 6 has an invalid length. [ 3304.046467][T31355] netlink: 'syz.4.41038': attribute type 9 has an invalid length. [ 3304.054656][T31355] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.41038'. [ 3304.324261][T31379] netlink: 'syz.1.41040': attribute type 9 has an invalid length. [ 3304.356201][T31379] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.41040'. [ 3304.538718][T31371] device wlan0 left promiscuous mode [ 3304.612489][T31376] device wlan0 entered promiscuous mode [ 3304.874147][T31390] netlink: 'syz.3.41048': attribute type 7 has an invalid length. [ 3304.890063][T31390] netlink: 140 bytes leftover after parsing attributes in process `syz.3.41048'. [ 3304.963396][T31399] netlink: 'syz.2.41054': attribute type 21 has an invalid length. [ 3305.018374][T31404] netlink: 'syz.2.41054': attribute type 9 has an invalid length. [ 3305.027096][T31404] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.41054'. [ 3305.339810][T31414] netlink: 'syz.4.41058': attribute type 10 has an invalid length. [ 3305.971796][T31451] netlink: 'syz.2.41074': attribute type 27 has an invalid length. [ 3306.043451][T31452] netlink: 'syz.1.41073': attribute type 6 has an invalid length. [ 3307.052916][T31502] netlink: 'syz.2.41093': attribute type 6 has an invalid length. [ 3307.210175][T31507] netlink: 'syz.2.41097': attribute type 9 has an invalid length. [ 3307.218061][T31507] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.41097'. [ 3307.825404][T31520] netlink: 'syz.1.41101': attribute type 3 has an invalid length. [ 3307.888173][T31520] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41101'. [ 3308.152255][T31536] device wlan0 left promiscuous mode [ 3308.190535][T31536] device wlan0 entered promiscuous mode [ 3308.243963][T31536] netlink: 'syz.3.41105': attribute type 9 has an invalid length. [ 3308.259189][T31536] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41105'. [ 3308.863023][T31549] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.41111'. [ 3309.786162][T31586] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.41125'. [ 3310.067339][T31599] device wlan0 left promiscuous mode [ 3310.095647][T31602] validate_nla: 3 callbacks suppressed [ 3310.095667][T31602] netlink: 'syz.3.41131': attribute type 9 has an invalid length. [ 3310.114146][T31599] device wlan0 entered promiscuous mode [ 3310.202546][T31602] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.41131'. [ 3310.317073][T31599] netlink: 'syz.2.41133': attribute type 9 has an invalid length. [ 3310.335792][T31599] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.41133'. [ 3312.208625][T31643] netlink: 'syz.2.41144': attribute type 153 has an invalid length. [ 3312.240219][T31643] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.41144'. [ 3312.496729][T31648] device bridge0 left promiscuous mode [ 3312.542490][T31650] device wlan0 left promiscuous mode [ 3312.558768][T31653] netlink: 'syz.0.41147': attribute type 9 has an invalid length. [ 3312.638774][T31653] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.41147'. [ 3312.650229][T31656] device wlan0 entered promiscuous mode [ 3313.835818][T31698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3314.134478][T31712] netlink: 'syz.1.41169': attribute type 10 has an invalid length. [ 3316.040841][T31742] netlink: 'syz.4.41183': attribute type 3 has an invalid length. [ 3316.106881][T31742] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41183'. [ 3316.335296][T31757] netlink: 'syz.3.41190': attribute type 10 has an invalid length. [ 3317.236366][T31791] netlink: 'syz.2.41203': attribute type 10 has an invalid length. [ 3317.348320][T31797] netlink: 'syz.2.41206': attribute type 9 has an invalid length. [ 3317.357141][T31797] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.41206'. [ 3317.562983][T31803] netlink: 'syz.3.41208': attribute type 3 has an invalid length. [ 3317.630101][T31803] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41208'. [ 3318.264079][T31830] netlink: 'syz.2.41219': attribute type 9 has an invalid length. [ 3318.276084][T31830] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.41219'. [ 3318.705761][T31847] netlink: 'syz.2.41224': attribute type 3 has an invalid length. [ 3318.717818][T31847] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41224'. [ 3320.775150][T31911] netlink: 'syz.4.41248': attribute type 10 has an invalid length. [ 3322.278782][T31955] netlink: 'syz.0.41262': attribute type 10 has an invalid length. [ 3322.929643][T31989] device bridge0 left promiscuous mode [ 3323.241235][T32001] netlink: 'syz.2.41280': attribute type 3 has an invalid length. [ 3323.253718][T32001] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41280'. [ 3324.217135][T32031] device wlan0 left promiscuous mode [ 3324.296813][T32039] device wlan0 entered promiscuous mode [ 3324.346565][T32031] netlink: 'syz.4.41290': attribute type 9 has an invalid length. [ 3324.434532][T32031] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.41290'. [ 3325.564709][T32095] device wlan0 left promiscuous mode [ 3325.593181][T32095] device wlan0 entered promiscuous mode [ 3325.619054][T32095] netlink: 'syz.2.41318': attribute type 9 has an invalid length. [ 3325.630109][T32095] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.41318'. [ 3326.197317][T32112] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.41325'. [ 3326.981923][T32144] netlink: 'syz.3.41334': attribute type 9 has an invalid length. [ 3327.027659][T32144] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41334'. [ 3327.137005][T32140] device wlan0 left promiscuous mode [ 3327.175751][T32143] device wlan0 entered promiscuous mode [ 3327.189537][T32149] netlink: 'syz.0.41337': attribute type 21 has an invalid length. [ 3327.232781][T32149] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41337'. [ 3327.325180][T32154] netlink: 'syz.2.41338': attribute type 3 has an invalid length. [ 3327.341056][T32154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41338'. [ 3327.351891][T32153] delete_channel: no stack [ 3327.695108][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.701514][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.229136][T32183] device wlan0 left promiscuous mode [ 3328.265719][T32183] device wlan0 entered promiscuous mode [ 3328.669178][T32207] netlink: 'syz.2.41359': attribute type 21 has an invalid length. [ 3328.682786][T32207] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41359'. [ 3329.331450][T32237] netlink: 'syz.2.41370': attribute type 10 has an invalid length. [ 3329.371053][T32240] netlink: 'syz.3.41371': attribute type 12 has an invalid length. [ 3329.383588][T32240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41371'. [ 3329.478423][T32245] netlink: 'syz.1.41373': attribute type 21 has an invalid length. [ 3329.501833][T32245] netlink: 156 bytes leftover after parsing attributes in process `syz.1.41373'. [ 3330.156265][T32271] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.41384'. [ 3330.489105][T32286] device wlan0 left promiscuous mode [ 3330.567954][T32294] device wlan0 entered promiscuous mode [ 3330.623117][T32286] netlink: 'syz.1.41389': attribute type 9 has an invalid length. [ 3330.661182][T32286] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.41389'. [ 3330.942213][T32295] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.41391'. [ 3331.176796][T32308] device wlan0 left promiscuous mode [ 3331.204460][T32311] device wlan0 entered promiscuous mode [ 3331.628626][T32325] netlink: 'syz.4.41404': attribute type 10 has an invalid length. [ 3332.121174][T32352] netlink: 'syz.1.41413': attribute type 3 has an invalid length. [ 3332.130272][T32352] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41413'. [ 3332.204689][T32355] device wlan0 left promiscuous mode [ 3332.259797][T32358] device wlan0 entered promiscuous mode [ 3332.312362][T32355] netlink: 'syz.0.41412': attribute type 9 has an invalid length. [ 3332.333057][T32355] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.41412'. [ 3333.106286][T32389] netlink: 'syz.4.41431': attribute type 3 has an invalid length. [ 3333.127906][T32389] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41431'. [ 3333.722044][T32406] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.41439'. [ 3334.326204][T32417] netlink: 'syz.3.41443': attribute type 21 has an invalid length. [ 3334.336390][T32417] netlink: 156 bytes leftover after parsing attributes in process `syz.3.41443'. [ 3334.411610][T32421] netlink: 'syz.0.41444': attribute type 21 has an invalid length. [ 3334.475390][T32425] netlink: 10 bytes leftover after parsing attributes in process `syz.0.41444'. [ 3334.893670][T32441] netlink: 'syz.3.41450': attribute type 3 has an invalid length. [ 3334.968571][T32441] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41450'. [ 3335.079798][T32450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41457'. [ 3335.117920][T32455] netlink: 'syz.4.41460': attribute type 21 has an invalid length. [ 3335.132193][T32455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.41460'. [ 3335.565355][T32478] netlink: 'syz.1.41469': attribute type 10 has an invalid length. [ 3335.603282][T32477] netlink: 'syz.4.41470': attribute type 3 has an invalid length. [ 3335.611664][T32478] netlink: 168 bytes leftover after parsing attributes in process `syz.1.41469'. [ 3335.625336][T32477] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41470'. [ 3336.021060][T32500] netlink: 'syz.0.41475': attribute type 21 has an invalid length. [ 3336.042322][T32500] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41475'. [ 3336.862677][T32526] netlink: 180 bytes leftover after parsing attributes in process `syz.4.41482'. [ 3337.045556][T32536] netlink: 'syz.2.41487': attribute type 3 has an invalid length. [ 3337.453703][T32545] device bridge0 left promiscuous mode [ 3337.998907][T32569] netlink: 'syz.2.41504': attribute type 3 has an invalid length. [ 3338.887697][T32587] netlink: 'syz.3.41511': attribute type 2 has an invalid length. [ 3338.898299][T32587] __nla_validate_parse: 3 callbacks suppressed [ 3338.898317][T32587] netlink: 164 bytes leftover after parsing attributes in process `syz.3.41511'. [ 3339.047646][T32588] netlink: 'syz.3.41511': attribute type 2 has an invalid length. [ 3339.066141][T32588] netlink: 164 bytes leftover after parsing attributes in process `syz.3.41511'. [ 3339.414679][T32600] netlink: 'syz.3.41515': attribute type 3 has an invalid length. [ 3339.451217][T32600] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41515'. [ 3340.056310][T32610] netlink: 180 bytes leftover after parsing attributes in process `syz.3.41519'. [ 3340.326312][T32614] device wlan0 left promiscuous mode [ 3340.412496][T32614] device wlan0 entered promiscuous mode [ 3340.424991][T32618] netlink: 'syz.4.41520': attribute type 9 has an invalid length. [ 3340.462799][T32618] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.41520'. [ 3341.317162][T32643] netlink: 'syz.1.41529': attribute type 3 has an invalid length. [ 3341.327659][T32643] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41529'. [ 3341.691591][T32656] netlink: 'syz.3.41536': attribute type 10 has an invalid length. [ 3341.700961][T32656] netlink: 168 bytes leftover after parsing attributes in process `syz.3.41536'. [ 3341.784796][T32659] netlink: 180 bytes leftover after parsing attributes in process `syz.2.41537'. [ 3342.113544][T32672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41540'. [ 3342.477638][T32674] netlink: 'syz.4.41541': attribute type 2 has an invalid length. [ 3342.497449][T32674] netlink: 164 bytes leftover after parsing attributes in process `syz.4.41541'. [ 3342.512715][T32676] netlink: 'syz.4.41541': attribute type 2 has an invalid length. [ 3343.426886][T32698] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 3343.444839][T32682] netlink: 'syz.0.41543': attribute type 1 has an invalid length. [ 3343.708884][T32711] netlink: 'syz.0.41553': attribute type 3 has an invalid length. [ 3343.940474][T32720] __nla_validate_parse: 5 callbacks suppressed [ 3343.940492][T32720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41556'. [ 3343.993014][T32721] device wlan0 left promiscuous mode [ 3344.043952][T32721] device wlan0 entered promiscuous mode [ 3344.062177][T32722] validate_nla: 1 callbacks suppressed [ 3344.062196][T32722] netlink: 'syz.0.41566': attribute type 3 has an invalid length. [ 3344.107859][T32722] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41566'. [ 3344.126808][T32721] netlink: 'syz.3.41558': attribute type 9 has an invalid length. [ 3344.135219][T32721] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.41558'. [ 3344.934685][T32740] netlink: 'syz.2.41576': attribute type 3 has an invalid length. [ 3344.942651][T32740] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41576'. [ 3345.191885][T32747] netlink: 'syz.2.41567': attribute type 10 has an invalid length. [ 3345.201118][T32747] netlink: 168 bytes leftover after parsing attributes in process `syz.2.41567'. [ 3345.218864][T32752] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41579'. [ 3345.480933][T32754] device wlan0 left promiscuous mode [ 3345.527287][T32754] netlink: 'syz.1.41578': attribute type 9 has an invalid length. [ 3345.542525][T32754] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.41578'. [ 3345.561698][T32751] device wlan0 entered promiscuous mode [ 3346.356261][T32765] netlink: 180 bytes leftover after parsing attributes in process `syz.0.41568'. [ 3346.634734][ T308] netlink: 'syz.3.41574': attribute type 3 has an invalid length. [ 3346.670980][ T308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41574'. [ 3346.964386][ T318] netlink: 'syz.2.41583': attribute type 2 has an invalid length. [ 3346.973488][ T318] netlink: 'syz.2.41583': attribute type 8 has an invalid length. [ 3346.985132][ T318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41583'. [ 3347.119730][ T324] netlink: 'syz.0.41582': attribute type 10 has an invalid length. [ 3347.893495][ T350] netlink: 'syz.1.41591': attribute type 9 has an invalid length. [ 3349.400307][ T347] device wlan0 left promiscuous mode [ 3349.433474][ T349] device wlan0 entered promiscuous mode [ 3352.773088][ T368] netlink: 'syz.4.41600': attribute type 10 has an invalid length. [ 3352.784994][ T368] __nla_validate_parse: 2 callbacks suppressed [ 3352.785034][ T368] netlink: 168 bytes leftover after parsing attributes in process `syz.4.41600'. [ 3353.128187][ T388] netlink: 'syz.4.41605': attribute type 2 has an invalid length. [ 3353.140326][ T388] netlink: 'syz.4.41605': attribute type 8 has an invalid length. [ 3353.148520][ T388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41605'. [ 3353.303693][ T7716] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3353.532093][ T409] netlink: 'syz.1.41612': attribute type 11 has an invalid length. [ 3353.653416][ T414] netlink: 'syz.1.41612': attribute type 6 has an invalid length. [ 3353.820706][ T418] netlink: 'syz.3.41616': attribute type 10 has an invalid length. [ 3353.860138][ T418] netlink: 168 bytes leftover after parsing attributes in process `syz.3.41616'. [ 3354.330488][ T435] netlink: 'syz.0.41622': attribute type 2 has an invalid length. [ 3354.338552][ T435] netlink: 'syz.0.41622': attribute type 8 has an invalid length. [ 3354.460756][ T435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41622'. [ 3354.505820][ T443] netlink: 'syz.2.41635': attribute type 10 has an invalid length. [ 3354.524625][ T443] netlink: 168 bytes leftover after parsing attributes in process `syz.2.41635'. [ 3354.864958][ T455] netlink: 'syz.3.41629': attribute type 2 has an invalid length. [ 3357.057424][ T460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3357.763256][ T483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41638'. [ 3358.023412][ T489] validate_nla: 3 callbacks suppressed [ 3358.023453][ T489] netlink: 'syz.3.41653': attribute type 2 has an invalid length. [ 3358.069294][ T491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41639'. [ 3358.110567][ T489] netlink: 'syz.3.41653': attribute type 8 has an invalid length. [ 3358.118694][ T489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41653'. [ 3358.914417][ T507] netlink: 'syz.3.41645': attribute type 3 has an invalid length. [ 3358.931011][ T510] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41657'. [ 3358.950050][ T507] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41645'. [ 3360.091456][ T521] delete_channel: no stack [ 3360.593403][ T560] netlink: 'syz.2.41664': attribute type 3 has an invalid length. [ 3360.602339][ T560] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41664'. [ 3360.638289][ T553] netlink: 'syz.0.41661': attribute type 2 has an invalid length. [ 3360.653143][ T553] netlink: 'syz.0.41661': attribute type 8 has an invalid length. [ 3360.662167][ T553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41661'. [ 3360.898111][ T565] device syzkaller0 entered promiscuous mode [ 3361.427774][ T588] netlink: 'syz.2.41681': attribute type 3 has an invalid length. [ 3361.435964][ T588] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41681'. [ 3361.715156][ T597] netlink: 'syz.0.41682': attribute type 2 has an invalid length. [ 3361.740025][ T597] netlink: 'syz.0.41682': attribute type 8 has an invalid length. [ 3361.772968][ T597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41682'. [ 3361.851401][ T591] netlink: 'syz.4.41678': attribute type 10 has an invalid length. [ 3361.915669][ T591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41678'. [ 3361.984907][ T591] device caif0 entered promiscuous mode [ 3362.004893][ T591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3362.327922][ T613] device wlan0 left promiscuous mode [ 3362.820187][ T614] device wlan0 entered promiscuous mode [ 3362.871722][ T624] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41693'. [ 3363.784100][ T641] validate_nla: 2 callbacks suppressed [ 3363.784143][ T641] netlink: 'syz.3.41698': attribute type 10 has an invalid length. [ 3363.904149][ T641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41698'. [ 3364.029258][ T641] device caif0 entered promiscuous mode [ 3364.050151][ T641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3364.162232][ T650] delete_channel: no stack [ 3364.192648][ T651] netlink: 'syz.4.41700': attribute type 4 has an invalid length. [ 3364.212016][ T658] netlink: 'syz.2.41704': attribute type 3 has an invalid length. [ 3364.239633][ T658] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41704'. [ 3364.749683][ T674] delete_channel: no stack [ 3365.211089][ T692] netlink: 'syz.1.41716': attribute type 3 has an invalid length. [ 3365.280288][ T670] delete_channel: no stack [ 3365.291817][ T692] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41716'. [ 3365.457309][ T696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.41718'. [ 3365.559715][ T704] netlink: 'syz.4.41724': attribute type 3 has an invalid length. [ 3365.612880][ T704] netlink: 'syz.4.41724': attribute type 1 has an invalid length. [ 3365.672873][ T704] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.41724'. [ 3365.825049][ T711] netlink: 'syz.2.41726': attribute type 11 has an invalid length. [ 3365.968096][ T714] netlink: 'syz.2.41726': attribute type 6 has an invalid length. [ 3366.067926][ T718] netlink: 'syz.0.41725': attribute type 39 has an invalid length. [ 3366.111473][ T713] netlink: 'syz.0.41725': attribute type 2 has an invalid length. [ 3366.158066][ T713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41725'. [ 3366.374400][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3366.743064][ T713] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 3366.772735][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3366.808839][ T713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3367.047366][ T741] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41733'. [ 3367.268641][ T755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41740'. [ 3367.549088][ T738] delete_channel: no stack [ 3367.700549][ T756] delete_channel: no stack [ 3368.015973][ T776] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41748'. [ 3368.060002][ T767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41743'. [ 3368.425119][ T767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3368.872208][ T800] validate_nla: 12 callbacks suppressed [ 3368.872230][ T800] netlink: 'syz.0.41753': attribute type 3 has an invalid length. [ 3368.922153][ T797] delete_channel: no stack [ 3368.959973][ T800] netlink: 'syz.0.41753': attribute type 1 has an invalid length. [ 3369.002799][ T800] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.41753'. [ 3369.088037][ T807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41756'. [ 3369.821767][ T812] delete_channel: no stack [ 3370.138617][ T821] delete_channel: no stack [ 3370.156045][ T819] delete_channel: no stack [ 3370.176298][ T819] delete_channel: no stack [ 3370.285643][ T830] netlink: 'syz.2.41765': attribute type 39 has an invalid length. [ 3370.332476][ T830] netlink: 'syz.2.41765': attribute type 2 has an invalid length. [ 3370.367389][ T830] netlink: 'syz.2.41765': attribute type 10 has an invalid length. [ 3370.391097][ T830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41765'. [ 3370.422423][ T833] delete_channel: no stack [ 3370.546171][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): Q6\bY4: link becomes ready [ 3370.597628][ T830] IPv6: ADDRCONF(NETDEV_CHANGE): Q6\bY4: link becomes ready [ 3370.652402][ T830] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 3370.871317][ T831] delete_channel: no stack [ 3371.008198][ T839] netlink: 'syz.3.41767': attribute type 4 has an invalid length. [ 3371.038118][ T850] netlink: 'syz.1.41770': attribute type 3 has an invalid length. [ 3371.066267][ T850] netlink: 'syz.1.41770': attribute type 1 has an invalid length. [ 3371.114826][ T850] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.41770'. [ 3371.499843][ T859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41774'. [ 3371.953300][ T868] delete_channel: no stack [ 3371.958672][ T868] delete_channel: no stack [ 3372.181144][ T873] netlink: 'syz.0.41782': attribute type 10 has an invalid length. [ 3372.201797][ T871] netlink: 'syz.4.41781': attribute type 39 has an invalid length. [ 3372.224807][ T877] delete_channel: no stack [ 3372.243887][ T871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41781'. [ 3372.388823][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3372.633374][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3372.784559][ T871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3372.803317][ T897] netlink: 55 bytes leftover after parsing attributes in process `syz.2.41787'. [ 3373.227375][ T910] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.41805'. [ 3373.313209][ T916] device syzkaller0 entered promiscuous mode [ 3373.400586][ T913] delete_channel: no stack [ 3373.635508][ T917] delete_channel: no stack [ 3373.672352][ T917] delete_channel: no stack [ 3377.140459][ T954] delete_channel: no stack [ 3377.387124][ T963] validate_nla: 5 callbacks suppressed [ 3377.387166][ T963] netlink: 'syz.4.41818': attribute type 10 has an invalid length. [ 3377.411995][ T961] netlink: 'syz.1.41816': attribute type 10 has an invalid length. [ 3377.440180][ T961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41816'. [ 3380.351558][ T961] device caif0 entered promiscuous mode [ 3380.359854][ T961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3380.461886][ T963] netlink: 'syz.4.41818': attribute type 10 has an invalid length. [ 3380.547307][ T975] netlink: 'syz.1.41830': attribute type 10 has an invalid length. [ 3380.832164][ T985] netlink: 'syz.3.41822': attribute type 10 has an invalid length. [ 3381.491951][ T1010] netlink: 'syz.0.41833': attribute type 10 has an invalid length. [ 3381.501136][ T1010] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41833'. [ 3381.815498][ T1017] netlink: 'syz.0.41836': attribute type 10 has an invalid length. [ 3381.826644][ T1017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41836'. [ 3381.840617][ T1017] device caif0 entered promiscuous mode [ 3381.846534][ T1017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3382.280963][ T1028] netlink: 'syz.2.41839': attribute type 10 has an invalid length. [ 3382.709061][ T1051] netlink: 'syz.2.41848': attribute type 10 has an invalid length. [ 3382.795136][ T1056] netlink: 'syz.2.41849': attribute type 10 has an invalid length. [ 3382.807732][ T1056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41849'. [ 3382.822217][ T1056] device caif0 entered promiscuous mode [ 3382.827939][ T1056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3384.015651][ T1088] netlink: 'syz.3.41860': attribute type 39 has an invalid length. [ 3384.088022][ T1086] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 3384.097615][ T1086] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 3384.221762][ T1098] netlink: 'syz.3.41863': attribute type 3 has an invalid length. [ 3384.245572][ T1098] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41863'. [ 3384.268507][ T1102] netlink: 'syz.1.41864': attribute type 10 has an invalid length. [ 3384.277320][ T1102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.41864'. [ 3384.292143][ T1102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3384.438920][ T1110] netlink: 'syz.1.41876': attribute type 3 has an invalid length. [ 3384.468864][ T1110] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41876'. [ 3385.637354][ T1126] netlink: 'syz.2.41875': attribute type 39 has an invalid length. [ 3385.726038][ T1135] netlink: 'syz.2.41879': attribute type 39 has an invalid length. [ 3385.750228][ T1133] netlink: 'syz.0.41877': attribute type 10 has an invalid length. [ 3385.782018][ T1133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.41877'. [ 3385.823183][ T1140] netlink: 'syz.1.41880': attribute type 3 has an invalid length. [ 3385.831779][ T1140] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41880'. [ 3385.858332][ T1133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3386.069127][ T1153] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 3386.099778][ T1153] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 3387.078690][ T1174] device veth1_to_batadv entered promiscuous mode [ 3387.702820][ T1195] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41895'. [ 3387.768244][ T1197] validate_nla: 3 callbacks suppressed [ 3387.768281][ T1197] netlink: 'syz.2.41896': attribute type 10 has an invalid length. [ 3387.785597][ T1197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41896'. [ 3387.798052][ T1197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3388.142803][ T1211] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 3388.161610][ T1211] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 3388.323141][ T1217] netlink: 'syz.1.41906': attribute type 10 has an invalid length. [ 3388.364815][ T1219] netlink: 'syz.0.41904': attribute type 39 has an invalid length. [ 3388.406490][ T1221] netlink: 'syz.1.41907': attribute type 10 has an invalid length. [ 3388.420206][ T1221] netlink: 156 bytes leftover after parsing attributes in process `syz.1.41907'. [ 3388.901599][ T1228] netlink: 'syz.1.41910': attribute type 3 has an invalid length. [ 3388.942135][ T1228] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41910'. [ 3389.176071][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.187065][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.355346][ T1235] netlink: 'syz.0.41924': attribute type 3 has an invalid length. [ 3389.363320][ T1235] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41924'. [ 3389.601820][ T1243] delete_channel: no stack [ 3389.776622][ T1254] syz.0.41932[1254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3389.776722][ T1254] syz.0.41932[1254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3389.894776][ T1259] netlink: 'syz.4.41921': attribute type 10 has an invalid length. [ 3389.918006][ T1259] netlink: 156 bytes leftover after parsing attributes in process `syz.4.41921'. [ 3390.013873][ T1263] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 3390.040134][ T1263] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 3390.124813][ T1269] netlink: 'syz.3.41928': attribute type 3 has an invalid length. [ 3390.135527][ T1269] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41928'. [ 3390.902798][ T1290] netlink: 'syz.2.41937': attribute type 10 has an invalid length. [ 3390.911655][ T1290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.41937'. [ 3390.927812][ T1291] netlink: 144 bytes leftover after parsing attributes in process `syz.3.41936'. [ 3391.026301][ T9] tipc: Subscription rejected, illegal request [ 3391.106003][ T1295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.41939'. [ 3391.170310][ T1293] device wlan0 left promiscuous mode [ 3392.161698][ T1327] netlink: 'syz.3.41951': attribute type 3 has an invalid length. [ 3392.223057][ T1327] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41951'. [ 3392.936636][ T1345] netlink: 'syz.2.41959': attribute type 39 has an invalid length. [ 3392.992557][ T1348] device wlan0 left promiscuous mode [ 3393.237033][ T1356] netlink: 'syz.4.41964': attribute type 3 has an invalid length. [ 3393.395931][ T1356] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41964'. [ 3394.300432][ T1391] netlink: 'syz.4.41978': attribute type 3 has an invalid length. [ 3394.453291][ T1391] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41978'. [ 3396.447019][ T9] tipc: Subscription rejected, illegal request [ 3396.677382][ T1426] device wlan0 left promiscuous mode [ 3396.844275][ T1429] netlink: 'syz.2.41989': attribute type 3 has an invalid length. [ 3396.853074][ T1429] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.41989'. [ 3397.001679][ T1431] netlink: 'syz.4.41988': attribute type 39 has an invalid length. [ 3397.298205][ T1440] device wlan0 left promiscuous mode [ 3397.416623][ T1440] mac80211_hwsim hwsim89 : renamed from wlan0 [ 3398.637191][ T1467] netlink: 'syz.0.42000': attribute type 3 has an invalid length. [ 3398.690126][ T1467] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.42000'. [ 3398.880389][T28818] tipc: Subscription rejected, illegal request [ 3399.456784][ T1486] netlink: 'syz.1.42008': attribute type 39 has an invalid length. [ 3400.963072][ T1509] netlink: 'syz.4.42016': attribute type 3 has an invalid length. [ 3401.083337][ T1509] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.42016'. [ 3401.401502][ T1515] netlink: 'syz.2.42028': attribute type 3 has an invalid length. [ 3401.409454][ T1515] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42028'. [ 3401.952680][ T1526] netlink: 'syz.1.42031': attribute type 3 has an invalid length. [ 3402.010081][ T1526] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.42031'. [ 3402.154991][T25666] tipc: Subscription rejected, illegal request [ 3402.278064][ T1528] device wlan0 left promiscuous mode [ 3403.047075][ T1549] device wlan0 entered promiscuous mode [ 3403.093142][ T1549] netlink: 'syz.4.42030': attribute type 9 has an invalid length. [ 3403.109470][ T1549] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.42030'. [ 3404.705011][ T1556] device wlan0 entered promiscuous mode [ 3404.775638][ T1556] netlink: 'syz.1.42044': attribute type 9 has an invalid length. [ 3404.798930][ T1556] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.42044'. [ 3404.815787][ T1566] netlink: 'syz.2.42036': attribute type 3 has an invalid length. [ 3404.824491][ T1566] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42036'. [ 3405.192538][ T1571] netlink: 'syz.2.42038': attribute type 10 has an invalid length. [ 3405.744267][T28818] tipc: Subscription rejected, illegal request [ 3406.513959][ T1605] netlink: 'syz.2.42051': attribute type 3 has an invalid length. [ 3406.522829][ T1605] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42051'. [ 3407.003783][ T1628] netlink: 'syz.3.42056': attribute type 9 has an invalid length. [ 3407.090256][ T1628] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.42056'. [ 3407.177514][ T1629] delete_channel: no stack [ 3407.185488][ T1629] delete_channel: no stack [ 3407.353000][ T1624] device wlan0 entered promiscuous mode [ 3407.406956][ T1637] netlink: 'syz.2.42062': attribute type 5 has an invalid length. [ 3407.438704][ T1619] device wlan0 left promiscuous mode [ 3407.562462][ T1637] netlink: 'syz.2.42062': attribute type 10 has an invalid length. [ 3407.673895][ T1644] netlink: 'syz.2.42064': attribute type 3 has an invalid length. [ 3407.681958][ T1644] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42064'. [ 3407.809826][T25666] tipc: Subscription rejected, illegal request [ 3410.888999][ T1660] netlink: 'syz.2.42069': attribute type 46 has an invalid length. [ 3410.898504][ T1660] netlink: 55 bytes leftover after parsing attributes in process `syz.2.42069'. [ 3411.350092][ T1680] netlink: 'syz.4.42076': attribute type 3 has an invalid length. [ 3411.372357][ T1680] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.42076'. [ 3411.941403][ T1688] device wlan0 entered promiscuous mode [ 3412.025340][ T1688] netlink: 'syz.0.42077': attribute type 9 has an invalid length. [ 3412.078311][ T1688] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42077'. [ 3413.011772][ T1712] netlink: 'syz.0.42087': attribute type 5 has an invalid length. [ 3413.020151][ T1702] delete_channel: no stack [ 3413.065753][ T1714] IPv6: pim6reg1: Disabled Multicast RS [ 3413.072478][ T1702] delete_channel: no stack [ 3413.121392][ T1712] netlink: 'syz.0.42087': attribute type 10 has an invalid length. [ 3414.501729][ T1745] netlink: 'syz.0.42098': attribute type 10 has an invalid length. [ 3414.939047][ T1752] device wlan0 entered promiscuous mode [ 3414.986176][ T1750] netlink: 'syz.4.42111': attribute type 10 has an invalid length. [ 3414.996763][ T1752] netlink: 'syz.2.42099': attribute type 9 has an invalid length. [ 3415.030159][ T1752] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.42099'. [ 3415.873316][ T1768] netlink: 'syz.3.42103': attribute type 1 has an invalid length. [ 3415.899996][ T1768] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.42103'. [ 3416.308947][ T1778] netlink: 'syz.1.42107': attribute type 46 has an invalid length. [ 3416.318310][ T1778] netlink: 55 bytes leftover after parsing attributes in process `syz.1.42107'. [ 3419.483369][ T1790] netlink: 'syz.1.42114': attribute type 10 has an invalid length. [ 3419.757213][ T1802] netlink: 'syz.0.42116': attribute type 9 has an invalid length. [ 3419.773405][ T1802] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42116'. [ 3422.412729][ T1799] device wlan0 left promiscuous mode [ 3422.435210][ T1801] device wlan0 entered promiscuous mode [ 3422.453578][ T1805] netlink: 'syz.4.42117': attribute type 11 has an invalid length. [ 3422.464028][ T1805] netlink: 176 bytes leftover after parsing attributes in process `syz.4.42117'. [ 3425.618381][ T1826] delete_channel: no stack [ 3425.623634][ T1826] delete_channel: no stack [ 3425.906071][ T1836] netlink: 'syz.3.42126': attribute type 46 has an invalid length. [ 3425.925673][ T1836] netlink: 55 bytes leftover after parsing attributes in process `syz.3.42126'. [ 3426.264092][ T1852] device wlan0 left promiscuous mode [ 3426.287880][ T1852] device wlan0 entered promiscuous mode [ 3426.309515][ T1852] netlink: 'syz.0.42134': attribute type 9 has an invalid length. [ 3426.320087][ T1852] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42134'. [ 3427.457900][ T1875] delete_channel: no stack [ 3427.470446][ T1875] delete_channel: no stack [ 3428.062523][ T1901] netlink: 'syz.3.42155': attribute type 10 has an invalid length. [ 3428.479664][ T1903] netlink: 'syz.0.42156': attribute type 11 has an invalid length. [ 3428.520196][ T1903] netlink: 176 bytes leftover after parsing attributes in process `syz.0.42156'. [ 3428.875527][ T1918] device wlan0 left promiscuous mode [ 3428.910885][ T1925] device wlan0 entered promiscuous mode [ 3428.952734][ T1918] netlink: 'syz.0.42162': attribute type 9 has an invalid length. [ 3428.985260][ T1918] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42162'. [ 3430.048964][ T1944] netlink: 'syz.2.42170': attribute type 10 has an invalid length. [ 3430.118872][ T1947] device wlan0 left promiscuous mode [ 3430.161178][ T1947] device wlan0 entered promiscuous mode [ 3430.189477][ T1947] netlink: 'syz.0.42181': attribute type 9 has an invalid length. [ 3430.198089][ T1947] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42181'. [ 3430.608621][ T1955] netlink: 'syz.2.42176': attribute type 11 has an invalid length. [ 3430.619249][ T1955] netlink: 176 bytes leftover after parsing attributes in process `syz.2.42176'. [ 3430.749351][ T1959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3430.756937][ T1959] IPv6: NLM_F_CREATE should be set when creating new route [ 3430.764690][ T1959] IPv6: NLM_F_CREATE should be set when creating new route [ 3430.772540][ T1959] IPv6: NLM_F_CREATE should be set when creating new route [ 3430.793973][ T1959] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.42177'. [ 3431.954841][ T1980] netlink: 'syz.3.42185': attribute type 2 has an invalid length. [ 3434.998019][ T1994] netlink: 'syz.0.42201': attribute type 10 has an invalid length. [ 3435.010620][ T1994] netlink: 'syz.0.42201': attribute type 10 has an invalid length. [ 3435.093652][ T1996] device wlan0 left promiscuous mode [ 3435.158737][ T1996] device wlan0 entered promiscuous mode [ 3435.194188][ T2001] netlink: 'syz.3.42188': attribute type 11 has an invalid length. [ 3435.208867][ T1996] netlink: 'syz.4.42202': attribute type 9 has an invalid length. [ 3435.219240][ T2001] netlink: 176 bytes leftover after parsing attributes in process `syz.3.42188'. [ 3435.229335][ T1996] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.42202'. [ 3438.941119][ T2049] netlink: set zone limit has 8 unknown bytes [ 3439.138074][ T2055] netlink: 'syz.4.42218': attribute type 9 has an invalid length. [ 3439.186631][ T2055] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.42218'. [ 3439.433113][ T2059] netlink: 'syz.2.42210': attribute type 10 has an invalid length. [ 3441.509022][ T2051] device wlan0 left promiscuous mode [ 3441.538970][ T2052] device wlan0 entered promiscuous mode [ 3441.560435][ T2059] netlink: 'syz.2.42210': attribute type 10 has an invalid length. [ 3441.931929][ T2083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3441.944230][ T2065] delete_channel: no stack [ 3441.949173][ T2065] delete_channel: no stack [ 3441.971293][ T2084] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.42216'. [ 3442.414715][ T2107] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.42231'. [ 3442.426246][ T2107] openvswitch: netlink: Tunnel attr 3952 out of range max 16 [ 3442.436641][ T2109] netlink: 'syz.4.42229': attribute type 10 has an invalid length. [ 3442.494378][ T2109] netlink: 'syz.4.42229': attribute type 10 has an invalid length. [ 3442.596852][ T2117] netlink: 'syz.0.42234': attribute type 10 has an invalid length. [ 3443.047928][ T2127] delete_channel: no stack [ 3443.052974][ T2127] delete_channel: no stack [ 3443.507085][ T2137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3443.514671][ T2137] IPv6: NLM_F_CREATE should be set when creating new route [ 3443.522592][ T2137] IPv6: NLM_F_CREATE should be set when creating new route [ 3443.530035][ T2137] IPv6: NLM_F_CREATE should be set when creating new route [ 3443.574408][ T2145] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.42240'. [ 3444.557007][ T2162] netlink: 'syz.0.42250': attribute type 2 has an invalid length. [ 3447.636657][ T2183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3447.644460][ T2183] IPv6: NLM_F_CREATE should be set when creating new route [ 3447.652689][ T2183] IPv6: NLM_F_CREATE should be set when creating new route [ 3447.660301][ T2183] IPv6: NLM_F_CREATE should be set when creating new route [ 3447.723596][ T2183] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.42255'. [ 3447.776624][ T7716] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3448.187373][ T2215] netlink: 'syz.2.42269': attribute type 2 has an invalid length. [ 3450.583895][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.590732][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.325943][ T2236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3451.333526][ T2236] IPv6: NLM_F_CREATE should be set when creating new route [ 3451.341140][ T2236] IPv6: NLM_F_CREATE should be set when creating new route [ 3451.348799][ T2236] IPv6: NLM_F_CREATE should be set when creating new route [ 3451.473632][ T2246] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.42276'. [ 3457.217674][ T2341] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 3457.542831][ T2345] device wlan0 left promiscuous mode [ 3457.567919][ T2345] device wlan0 entered promiscuous mode [ 3457.594232][ T2345] netlink: 'syz.2.42320': attribute type 9 has an invalid length. [ 3457.606040][ T2345] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.42320'. [ 3460.982175][ T2366] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.42325'. [ 3465.622133][ T2411] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.42341'. [ 3468.963681][ T2467] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.42361'. [ 3469.311702][ T2478] netlink: 'syz.0.42363': attribute type 10 has an invalid length. [ 3469.406991][ T2479] tap0: tun_chr_ioctl cmd 2147767511 [ 3472.637119][ T2506] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.42373'. [ 3472.718819][ T2509] netlink: 'syz.4.42374': attribute type 21 has an invalid length. [ 3472.754060][ T2511] netlink: 'syz.2.42375': attribute type 10 has an invalid length. [ 3473.030659][ T2524] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.42376'. [ 3473.068940][ T2529] tap0: tun_chr_ioctl cmd 2147767511 [ 3473.472308][ T2557] netlink: 'syz.0.42390': attribute type 10 has an invalid length. [ 3473.519635][ T2556] device syzkaller0 entered promiscuous mode [ 3473.770995][ T2574] IPv6: Can't replace route, no match found [ 3474.125468][ T2587] tap0: tun_chr_ioctl cmd 2147767511 [ 3474.139623][ T2591] netlink: 'syz.2.42402': attribute type 10 has an invalid length. [ 3474.582333][ T2603] delete_channel: no stack [ 3474.586976][ T2603] delete_channel: no stack [ 3475.006500][ T2626] netlink: 'syz.4.42413': attribute type 10 has an invalid length. [ 3475.748838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3476.075810][ T2655] tap0: tun_chr_ioctl cmd 2147767511 [ 3476.305165][ T2664] IPv6: Can't replace route, no match found [ 3476.862708][ T2684] device wlan0 entered promiscuous mode [ 3476.920233][ T2684] netlink: 'syz.3.42432': attribute type 9 has an invalid length. [ 3476.950268][ T2684] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.42432'. [ 3477.714912][ T2714] tap1: tun_chr_ioctl cmd 2147767511 [ 3478.433401][ T2760] device wlan0 left promiscuous mode [ 3478.480394][ T2760] device wlan0 entered promiscuous mode [ 3478.548032][ T2760] netlink: 'syz.0.42453': attribute type 9 has an invalid length. [ 3478.566237][ T2760] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42453'. [ 3479.326407][ T2765] delete_channel: no stack [ 3479.332152][ T2765] delete_channel: no stack [ 3481.637976][ T2787] IPv6: Can't replace route, no match found [ 3482.229768][ T2818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.269919][ T2818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.345792][ T2818] netlink: 33 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.413938][ T2818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.460833][ T2818] netlink: 33 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.504407][ T2818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.526126][ T2818] netlink: 33 bytes leftover after parsing attributes in process `syz.0.42476'. [ 3482.558059][ T2818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3486.260070][ T2881] device wlan0 left promiscuous mode [ 3486.302459][ T2881] device wlan0 entered promiscuous mode [ 3486.379808][ T2881] netlink: 'syz.1.42509': attribute type 9 has an invalid length. [ 3486.413433][ T2881] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.42509'. [ 3487.269479][ T2919] device wlan0 left promiscuous mode [ 3487.318454][ T2927] netlink: 'syz.1.42521': attribute type 9 has an invalid length. [ 3487.326817][ T2927] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.42521'. [ 3487.362960][ T2922] device wlan0 entered promiscuous mode [ 3487.397757][ T2923] IPv6: Can't replace route, no match found [ 3487.405008][ T2924] mac80211_hwsim hwsim210 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3487.628435][ T2947] netlink: 'syz.2.42528': attribute type 10 has an invalid length. [ 3487.925856][ T2958] delete_channel: no stack [ 3487.932573][ T2958] delete_channel: no stack [ 3488.987466][ T2996] netlink: 'syz.2.42535': attribute type 3 has an invalid length. [ 3489.010159][ T2996] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42535'. [ 3489.094491][ T3000] netlink: 'syz.3.42533': attribute type 10 has an invalid length. [ 3489.711762][ T3022] netlink: 'syz.3.42544': attribute type 39 has an invalid length. [ 3489.863196][ T3015] delete_channel: no stack [ 3489.867791][ T3015] delete_channel: no stack [ 3490.660889][ T3047] netlink: 'syz.2.42554': attribute type 10 has an invalid length. [ 3491.358407][ T3062] delete_channel: no stack [ 3491.410138][ T3062] delete_channel: no stack [ 3492.260991][ T3094] netlink: 'syz.2.42572': attribute type 10 has an invalid length. [ 3493.276027][ T3099] delete_channel: no stack [ 3493.305904][ T3099] delete_channel: no stack [ 3495.674007][ T3122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3495.698796][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3495.739012][ T3122] netlink: 33 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3495.752108][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3495.823593][ T3122] netlink: 33 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3495.928548][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3495.958693][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3495.974539][ T3122] netlink: 33 bytes leftover after parsing attributes in process `syz.3.42585'. [ 3496.008474][ T3122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3499.777973][ T3164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42601'. [ 3499.795643][ T3164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42601'. [ 3499.808795][ T3164] netlink: 33 bytes leftover after parsing attributes in process `syz.2.42601'. [ 3500.402193][ T3181] mac80211_hwsim hwsim208 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3503.769219][ T3203] netlink: 'syz.0.42616': attribute type 4 has an invalid length. [ 3503.778049][ T3203] netlink: 152 bytes leftover after parsing attributes in process `syz.0.42616'. [ 3505.041251][ T3236] mac80211_hwsim hwsim213 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3505.106175][ T3242] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.42630'. [ 3508.959313][ T3277] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.42646'. [ 3512.002379][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.009124][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.129504][ T3307] mac80211_hwsim hwsim210 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3512.414104][ T3312] netlink: 'syz.0.42668': attribute type 3 has an invalid length. [ 3512.453920][ T3312] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.42668'. [ 3513.071267][ T3334] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.42667'. [ 3513.784576][ T3356] netlink: 'syz.2.42680': attribute type 3 has an invalid length. [ 3513.792761][ T3356] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.42680'. [ 3514.190740][ T3377] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.42689'. [ 3514.738766][ T3384] netlink: 'syz.4.42693': attribute type 3 has an invalid length. [ 3514.810779][ T3384] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.42693'. [ 3515.564121][ T3408] netlink: 'syz.4.42696': attribute type 4 has an invalid length. [ 3516.125455][ T3423] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.42706'. [ 3517.836450][ T3466] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.42721'. [ 3521.221495][ T3529] netlink: 'syz.2.42744': attribute type 10 has an invalid length. [ 3521.463241][ T3531] netlink: 'syz.1.42743': attribute type 4 has an invalid length. [ 3521.491059][ T3531] netlink: 152 bytes leftover after parsing attributes in process `syz.1.42743'. [ 3521.777975][ T3545] netlink: 'syz.1.42748': attribute type 3 has an invalid length. [ 3521.916909][ T3545] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.42748'. [ 3522.860954][ T3571] netlink: 'syz.3.42758': attribute type 10 has an invalid length. [ 3523.269590][ T3576] netlink: 'syz.2.42760': attribute type 4 has an invalid length. [ 3523.278967][ T3576] netlink: 152 bytes leftover after parsing attributes in process `syz.2.42760'. [ 3523.667420][ T3590] netlink: 'syz.2.42765': attribute type 4 has an invalid length. [ 3524.179245][ T3609] netlink: 'syz.1.42773': attribute type 3 has an invalid length. [ 3524.197855][ T3609] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.42773'. [ 3524.523270][ T3619] netlink: 'syz.2.42778': attribute type 10 has an invalid length. [ 3524.725777][ T3617] netlink: 'syz.3.42775': attribute type 4 has an invalid length. [ 3524.752109][ T3617] netlink: 152 bytes leftover after parsing attributes in process `syz.3.42775'. [ 3525.281163][ T3649] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.42791'. [ 3525.349104][ T3645] netlink: 'syz.0.42786': attribute type 4 has an invalid length. [ 3525.796692][ T3660] netlink: 152 bytes leftover after parsing attributes in process `syz.4.42795'. [ 3526.013056][ T3669] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.42800'. [ 3526.220915][ T3682] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.42807'. [ 3526.543374][ T3692] validate_nla: 4 callbacks suppressed [ 3526.543391][ T3692] netlink: 'syz.2.42811': attribute type 4 has an invalid length. [ 3526.568915][ T3692] netlink: 152 bytes leftover after parsing attributes in process `syz.2.42811'. [ 3526.776296][ T3699] netlink: 'syz.2.42815': attribute type 10 has an invalid length. [ 3527.078542][ T3701] netlink: 'syz.1.42814': attribute type 4 has an invalid length. [ 3527.235954][ T3716] netlink: 'syz.4.42822': attribute type 3 has an invalid length. [ 3527.250059][ T3716] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.42822'. [ 3527.266850][ T3721] netlink: 160 bytes leftover after parsing attributes in process `syz.2.42823'. [ 3527.347799][ T3724] netlink: 'syz.3.42824': attribute type 4 has an invalid length. [ 3527.362025][ T3724] netlink: 152 bytes leftover after parsing attributes in process `syz.3.42824'. [ 3527.443081][ T3729] netlink: 'syz.2.42826': attribute type 10 has an invalid length. [ 3527.617547][ T3732] netlink: 'syz.4.42827': attribute type 29 has an invalid length. [ 3527.706952][ T3732] netlink: 'syz.4.42827': attribute type 29 has an invalid length. [ 3528.221904][ T3740] netlink: 'syz.4.42827': attribute type 29 has an invalid length. [ 3528.233194][ T3740] netlink: 'syz.4.42827': attribute type 29 has an invalid length. [ 3528.566678][ T3754] netlink: 152 bytes leftover after parsing attributes in process `syz.0.42837'. [ 3528.831280][ T3769] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.42840'. [ 3528.869656][ T3773] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.42854'. [ 3529.328792][ T3791] device wlan1 entered promiscuous mode [ 3529.401511][ T3794] device syzkaller0 entered promiscuous mode [ 3529.478597][ T3799] device wlan0 left promiscuous mode [ 3529.498453][ T3799] device wlan0 entered promiscuous mode [ 3530.146969][ T3807] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.42859'. [ 3530.156977][ T3809] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.42857'. [ 3530.330585][ T3802] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.42856'. [ 3531.596657][ T3848] validate_nla: 9 callbacks suppressed [ 3531.596686][ T3848] netlink: 'syz.2.42874': attribute type 3 has an invalid length. [ 3531.611043][ T3848] __nla_validate_parse: 1 callbacks suppressed [ 3531.611071][ T3848] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.42874'. [ 3531.764475][ T3857] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.42875'. [ 3531.842093][T25666] wlan1: Trigger new scan to find an IBSS to join [ 3532.439266][ T3896] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.42892'. [ 3532.562864][ T3896] netlink: 'syz.3.42892': attribute type 4 has an invalid length. [ 3532.620385][ T3896] netlink: 'syz.3.42892': attribute type 1 has an invalid length. [ 3532.628996][ T3896] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.42892'. [ 3532.675866][ T3893] netlink: 'syz.0.42891': attribute type 3 has an invalid length. [ 3532.684524][ T3893] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.42891'. [ 3532.739601][ T3902] netlink: 'syz.2.42895': attribute type 4 has an invalid length. [ 3532.755847][ T3902] netlink: 152 bytes leftover after parsing attributes in process `syz.2.42895'. [ 3532.837551][ T3910] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.42894'. [ 3532.972824][ T3918] device wlan0 left promiscuous mode [ 3533.024940][ T3921] device wlan0 entered promiscuous mode [ 3533.034885][ T3921] netlink: 'syz.3.42900': attribute type 9 has an invalid length. [ 3533.043303][ T3921] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.42900'. [ 3534.205522][ T3955] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.42912'. [ 3534.685133][ T3974] netlink: 'syz.3.42920': attribute type 4 has an invalid length. [ 3534.693913][ T3974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.42920'. [ 3534.792640][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 3535.722583][ T4013] netlink: 'syz.4.42936': attribute type 4 has an invalid length. [ 3535.789352][ T4017] netlink: 'syz.0.42938': attribute type 4 has an invalid length. [ 3537.830008][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 3538.746843][ T7716] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 3538.798451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3538.998752][ T4037] device wlan0 left promiscuous mode [ 3539.053148][ T4037] device wlan0 entered promiscuous mode [ 3539.133281][ T4043] device wlan1 entered promiscuous mode [ 3539.188870][ T4049] __nla_validate_parse: 3 callbacks suppressed [ 3539.188905][ T4049] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.42954'. [ 3539.645556][ T4061] netlink: 'syz.4.42958': attribute type 4 has an invalid length. [ 3539.701879][ T4061] netlink: 152 bytes leftover after parsing attributes in process `syz.4.42958'. [ 3540.053549][ T4079] netlink: 'syz.3.42965': attribute type 29 has an invalid length. [ 3540.112870][ T4079] netlink: 'syz.3.42965': attribute type 29 has an invalid length. [ 3540.138583][ T4081] device wlan0 left promiscuous mode [ 3540.173423][ T4081] device wlan0 entered promiscuous mode [ 3540.383415][ T4085] device wlan1 entered promiscuous mode [ 3540.392231][ T4086] netlink: 'syz.3.42965': attribute type 29 has an invalid length. [ 3540.406655][ T4086] netlink: 'syz.3.42965': attribute type 29 has an invalid length. [ 3541.173535][ T4120] device wlan0 left promiscuous mode [ 3541.206536][ T4123] device wlan0 entered promiscuous mode [ 3541.329587][ T4127] netlink: 'syz.0.42985': attribute type 1 has an invalid length. [ 3541.339500][ T4127] netlink: 'syz.0.42985': attribute type 4 has an invalid length. [ 3541.347946][ T4127] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.42985'. [ 3541.458052][ T4133] device wlan1 entered promiscuous mode [ 3541.538197][ T4138] netlink: 'syz.2.42990': attribute type 29 has an invalid length. [ 3541.586782][ T4138] netlink: 'syz.2.42990': attribute type 29 has an invalid length. [ 3541.798945][ T4146] netlink: 'syz.2.42990': attribute type 29 has an invalid length. [ 3542.501974][ T4167] device wlan0 left promiscuous mode [ 3542.551583][ T4167] device wlan0 entered promiscuous mode [ 3542.784072][ T4182] device wlan1 entered promiscuous mode [ 3543.039182][ T4198] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.43012'. [ 3543.135409][ T4198] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.43012'. [ 3543.583347][ T4206] device wlan0 left promiscuous mode [ 3543.624881][ T4209] device wlan0 entered promiscuous mode [ 3543.840011][ T9] wlan1: Trigger new scan to find an IBSS to join [ 3544.741586][ T4253] device wlan0 left promiscuous mode [ 3544.803077][ T4256] device wlan0 entered promiscuous mode [ 3545.185350][ T4267] validate_nla: 8 callbacks suppressed [ 3545.185968][ T4267] netlink: 'syz.1.43036': attribute type 29 has an invalid length. [ 3545.210694][ T4265] netlink: 'syz.3.43038': attribute type 4 has an invalid length. [ 3545.238349][ T4265] netlink: 152 bytes leftover after parsing attributes in process `syz.3.43038'. [ 3545.369086][ T4269] netlink: 'syz.1.43036': attribute type 29 has an invalid length. [ 3545.394351][ T4267] netlink: 'syz.1.43036': attribute type 29 has an invalid length. [ 3545.404828][ T4269] netlink: 'syz.1.43036': attribute type 29 has an invalid length. [ 3545.830047][ T9] wlan1: Trigger new scan to find an IBSS to join [ 3546.790301][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 3546.870013][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 3548.945459][ T7716] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 3548.962955][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3549.053129][ T4297] netlink: 'syz.2.43046': attribute type 4 has an invalid length. [ 3549.063586][ T4297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.43046'. [ 3549.128445][ T4301] netlink: 'syz.0.43048': attribute type 3 has an invalid length. [ 3549.304117][ T4311] netlink: 'syz.0.43053': attribute type 4 has an invalid length. [ 3549.312779][ T4311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.43053'. [ 3550.264331][ T4339] netlink: 'syz.3.43065': attribute type 4 has an invalid length. [ 3550.316903][ T4339] netlink: 152 bytes leftover after parsing attributes in process `syz.3.43065'. [ 3550.368511][ T4342] netlink: 'syz.2.43066': attribute type 9 has an invalid length. [ 3550.377135][ T4342] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.43066'. [ 3550.517701][ T4351] netlink: 14 bytes leftover after parsing attributes in process `syz.2.43070'. [ 3550.880309][ T4295] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 3552.462046][ T4390] netlink: 'syz.4.43083': attribute type 4 has an invalid length. [ 3552.490071][ T4390] netlink: 152 bytes leftover after parsing attributes in process `syz.4.43083'. [ 3552.576490][ T4396] netlink: 'syz.2.43100': attribute type 3 has an invalid length. [ 3552.888587][ T4295] wlan1: Trigger new scan to find an IBSS to join [ 3553.245321][ T4419] netlink: 'syz.4.43097': attribute type 1 has an invalid length. [ 3553.265744][ T4419] netlink: 'syz.4.43097': attribute type 4 has an invalid length. [ 3553.289748][ T4419] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.43097'. [ 3554.371247][ T4434] netlink: 'syz.1.43103': attribute type 4 has an invalid length. [ 3554.381598][ T4434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.43103'. [ 3554.552941][ T4442] netlink: 14 bytes leftover after parsing attributes in process `syz.1.43107'. [ 3554.880190][T25666] wlan1: Trigger new scan to find an IBSS to join [ 3554.935266][ T4460] netlink: 'syz.1.43113': attribute type 1 has an invalid length. [ 3554.953811][ T4460] netlink: 'syz.1.43113': attribute type 4 has an invalid length. [ 3554.974457][ T4460] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.43113'. [ 3555.521671][ T4471] netlink: 'syz.3.43120': attribute type 4 has an invalid length. [ 3555.550210][ T4471] netlink: 152 bytes leftover after parsing attributes in process `syz.3.43120'. [ 3555.849688][ T4485] netlink: 'syz.2.43127': attribute type 4 has an invalid length. [ 3555.858318][ T4485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.43127'. [ 3555.872437][ T4487] netlink: 14 bytes leftover after parsing attributes in process `syz.4.43124'. [ 3556.122121][ T4500] netlink: 'syz.4.43130': attribute type 5 has an invalid length. [ 3556.164936][ T4501] netlink: 'syz.3.43128': attribute type 1 has an invalid length. [ 3556.178459][ T4501] netlink: 'syz.3.43128': attribute type 4 has an invalid length. [ 3556.199012][ T4501] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.43128'. [ 3556.214230][ T4502] netlink: 'syz.4.43130': attribute type 3 has an invalid length. [ 3556.240278][ T4502] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.43130'. [ 3556.880382][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 3557.830135][ T4295] wlan1: Trigger new scan to find an IBSS to join [ 3557.836870][T25666] wlan1: Trigger new scan to find an IBSS to join [ 3560.790264][ T4295] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 3562.870715][T25666] wlan1: Trigger new scan to find an IBSS to join [ 3565.243431][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 3567.830016][ T4295] wlan1: Trigger new scan to find an IBSS to join [ 3571.830004][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 3572.298327][ T7716] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 3573.437705][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.444131][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 3574.790026][T28818] wlan1: Trigger new scan to find an IBSS to join [ 3575.290691][ T4295] ------------[ cut here ]------------ [ 3575.296577][ T4295] WARNING: CPU: 0 PID: 4295 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 3575.319348][ T4295] Modules linked in: [ 3575.357037][ T4295] CPU: 1 PID: 4295 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 3575.380162][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3575.401458][ T4295] Workqueue: cfg80211 cfg80211_event_work [ 3575.407266][ T4295] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 3575.460923][ T4295] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 2b 44 f8 0f 0b eb bb e8 b8 2b 44 f8 <0f> 0b eb b2 e8 af 2b 44 f8 0f 0b e9 77 fd ff ff e8 a3 2b 44 f8 0f [ 3575.505641][ T4295] RSP: 0018:ffffc90002727aa0 EFLAGS: 00010293 [ 3575.513458][ T4295] RAX: ffffffff8934f3e8 RBX: dffffc0000000000 RCX: ffff88805d123b80 [ 3575.522479][ T4295] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 3575.530916][ T4295] RBP: ffffc90002727b70 R08: ffffffff901d112f R09: 1ffffffff203a225 [ 3575.539140][ T4295] R10: dffffc0000000000 R11: fffffbfff203a226 R12: ffff8880788b3550 [ 3575.549927][ T4295] R13: 1ffff920004e4f5c R14: 000000000000001f R15: ffff888037918c90 [ 3575.558140][ T4295] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 3575.567492][ T4295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3575.575361][ T4295] CR2: 00007f5d421a52f8 CR3: 000000002b511000 CR4: 00000000003506f0 [ 3575.583580][ T4295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3575.591643][ T4295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3575.599660][ T4295] Call Trace: [ 3575.603520][ T4295] [ 3575.606495][ T4295] ? trace_rdev_return_void+0x1c0/0x1c0 [ 3575.612189][ T4295] ? cfg80211_event_work+0x23/0x40 [ 3575.617343][ T4295] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 3575.623352][ T4295] cfg80211_process_rdev_events+0x9d/0x110 [ 3575.629210][ T4295] cfg80211_event_work+0x2b/0x40 [ 3575.634231][ T4295] process_one_work+0x85f/0x1010 [ 3575.639316][ T4295] ? worker_detach_from_pool+0x240/0x240 [ 3575.645034][ T4295] ? lockdep_hardirqs_off+0x70/0x100 [ 3575.650383][ T4295] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3575.655426][ T4295] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3575.661065][ T4295] ? wq_worker_running+0x97/0x170 [ 3575.666120][ T4295] worker_thread+0xaa6/0x1290 [ 3575.670899][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 3575.676126][ T4295] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3575.683270][ T4295] kthread+0x436/0x520 [ 3575.687523][ T4295] ? rcu_lock_release+0x20/0x20 [ 3575.692472][ T4295] ? kthread_blkcg+0xd0/0xd0 [ 3575.697104][ T4295] ret_from_fork+0x1f/0x30 [ 3575.701712][ T4295] [ 3575.704785][ T4295] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3575.712073][ T4295] CPU: 0 PID: 4295 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 3575.719624][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3575.729709][ T4295] Workqueue: cfg80211 cfg80211_event_work [ 3575.735443][ T4295] Call Trace: [ 3575.738912][ T4295] [ 3575.741857][ T4295] dump_stack_lvl+0x188/0x250 [ 3575.746552][ T4295] ? show_regs_print_info+0x20/0x20 [ 3575.751762][ T4295] ? load_image+0x400/0x400 [ 3575.756290][ T4295] panic+0x2e5/0x810 [ 3575.760196][ T4295] ? bpf_jit_dump+0xd0/0xd0 [ 3575.764734][ T4295] ? ret_from_fork+0x1f/0x30 [ 3575.769357][ T4295] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 3575.775009][ T4295] __warn+0x248/0x2b0 [ 3575.779018][ T4295] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 3575.784580][ T4295] report_bug+0x1b7/0x2e0 [ 3575.788996][ T4295] handle_bug+0x3a/0x70 [ 3575.793163][ T4295] exc_invalid_op+0x16/0x40 [ 3575.797734][ T4295] asm_exc_invalid_op+0x16/0x20 [ 3575.802615][ T4295] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 3575.808866][ T4295] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c1 2b 44 f8 0f 0b eb bb e8 b8 2b 44 f8 <0f> 0b eb b2 e8 af 2b 44 f8 0f 0b e9 77 fd ff ff e8 a3 2b 44 f8 0f [ 3575.828493][ T4295] RSP: 0018:ffffc90002727aa0 EFLAGS: 00010293 [ 3575.834588][ T4295] RAX: ffffffff8934f3e8 RBX: dffffc0000000000 RCX: ffff88805d123b80 [ 3575.842593][ T4295] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 3575.850600][ T4295] RBP: ffffc90002727b70 R08: ffffffff901d112f R09: 1ffffffff203a225 [ 3575.858605][ T4295] R10: dffffc0000000000 R11: fffffbfff203a226 R12: ffff8880788b3550 [ 3575.866762][ T4295] R13: 1ffff920004e4f5c R14: 000000000000001f R15: ffff888037918c90 [ 3575.874751][ T4295] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 3575.880338][ T4295] ? trace_rdev_return_void+0x1c0/0x1c0 [ 3575.886028][ T4295] ? cfg80211_event_work+0x23/0x40 [ 3575.891245][ T4295] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 3575.897165][ T4295] cfg80211_process_rdev_events+0x9d/0x110 [ 3575.902985][ T4295] cfg80211_event_work+0x2b/0x40 [ 3575.907931][ T4295] process_one_work+0x85f/0x1010 [ 3575.912920][ T4295] ? worker_detach_from_pool+0x240/0x240 [ 3575.918640][ T4295] ? lockdep_hardirqs_off+0x70/0x100 [ 3575.923971][ T4295] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3575.929003][ T4295] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3575.934616][ T4295] ? wq_worker_running+0x97/0x170 [ 3575.939696][ T4295] worker_thread+0xaa6/0x1290 [ 3575.944433][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 3575.949866][ T4295] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3575.955883][ T4295] kthread+0x436/0x520 [ 3575.959961][ T4295] ? rcu_lock_release+0x20/0x20 [ 3575.964814][ T4295] ? kthread_blkcg+0xd0/0xd0 [ 3575.969415][ T4295] ret_from_fork+0x1f/0x30 [ 3575.974019][ T4295] [ 3575.977472][ T4295] Kernel Offset: disabled [ 3575.982041][ T4295] Rebooting in 86400 seconds..