last executing test programs: 17.512969793s ago: executing program 4 (id=16170): r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x80, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa040957389be6376784", 0x7b}, {&(0x7f0000001b40)="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", 0x13c}], 0x2}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff08", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000080000010a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c}, 0x28) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0", 0x43}, {0x0}], 0x2}, 0x0) gettid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'virt_wifi0\x00'}) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg(r5, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x40844) sendmsg$unix(r5, &(0x7f0000000640)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}, 0x8881) close(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)}, 0x22044880) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 17.303765628s ago: executing program 4 (id=16172): r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x80, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa040957389be6376784", 0x7b}, {&(0x7f0000001b40)="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", 0x13c}], 0x2}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac98"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff08", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000080000010a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c}, 0x28) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0", 0x43}, {0x0}], 0x2}, 0x0) gettid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'virt_wifi0\x00'}) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg(r5, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x40844) sendmsg$unix(r5, &(0x7f0000000640)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}, 0x8881) close(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)}, 0x22044880) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2209100, 0x0, 0x0, 0x0, 0x0, 0x0) 16.919611188s ago: executing program 4 (id=16179): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000008df2a03d9718dc895e05d1de0aa2753410a48f406f6828fe72c2692cf4427c07ad8f63b673f2aaa93b9afaad12595262503894af46443da45fabf0d257c98ac752bff20b82845996595cf2711ce8a9cc3cd7517c17e94c5dbfe66f30f0f62c9e8d7fc05485751b59090055", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fd, 0x1, @perf_config_ext={0x76, 0x400001ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x800, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10002, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0xfffffffffffffffa}, 0x215, 0x200000003ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x10, 0x0, 0x10001}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000000)=ANY=[]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r10}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000014a3775c18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000005005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000032000000c94f000108000000ac81c0ff080000001865000002000000000000000e0000000b8aff0704000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x236d1, r10, 0x6, &(0x7f0000000740)=[r3, r3, r8], &(0x7f00000009c0)=[{0x5, 0x2, 0xb, 0x7}, {0x1, 0x1, 0xb, 0xb}, {0x2, 0x5, 0x1, 0x7}, {0x5, 0x2, 0x7, 0x9}, {0x0, 0x3, 0x0, 0x3}, {0x2, 0x3, 0xc, 0x6}], 0x10, 0x1}, 0x94) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000600)=""/15, 0xf}], 0x1, &(0x7f0000000d00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x40000000) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 15.950530493s ago: executing program 4 (id=16184): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000071117b0000000000851000000200000085000000a000000095000000000000009500a50500000000694ae83a84c13c127f4456ce439b6fbb2f37ca289c9e41afa04c8fa2cc6661401d01cf0b9132535522f43336d72882af1dd8136cabd60e019d64d74061a2552f124e881e121141404d2a55f520f22017fe052a6f2e226b5574e23ca5a545059cef5fab9f062a940c8b99c6d8aed481ebb2f44b68d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x6}, 0x2020, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x40086602, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @struct={0x1, 0x8, 0x0, 0x4, 0x0, 0x84de, [{0x4, 0x1, 0x5}, {0x9, 0x1, 0x1}, {0x4, 0x0, 0x2}, {0x0, 0x3, 0xc28}, {0x3, 0x1, 0x3}, {0x3, 0x5, 0x3}, {0xa, 0x1, 0xfffffffa}, {0xf, 0x3, 0x7f}]}, @fwd={0x1}, @typedef={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x9}}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xe, 0x1, 0xffffff1f}, {0x1, 0x5, 0x4}, {0x6, 0x5, 0xc88}, {0x6, 0x2, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x61, 0x30, 0x0, 0x5f]}}, &(0x7f0000000880)=""/54, 0x11e, 0x36, 0x0, 0x6}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r5, 0x20, &(0x7f0000000a40)={&(0x7f0000000900)=""/60, 0x3c, 0x0, &(0x7f0000000940)=""/204, 0xcc}}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 15.724052219s ago: executing program 4 (id=16186): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={r0, 0xe0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002d40)=[0x0, 0x0], &(0x7f0000002d80)=[0x0], 0x0, 0x8a, &(0x7f0000002dc0)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000002e40), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000002e80)}}, 0x10) sendmsg$inet(r1, &(0x7f00000030c0)={&(0x7f0000000500)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002c80)=[{&(0x7f0000000540)}, {&(0x7f0000000800)="5a0adcbea903d44f65d44da3431fca1efb019d69a713b3ce5b4707bc9fba2aed88cd4b0c09b91a6b8bbe758e44e3338927", 0x31}, {0x0}, {0x0}], 0x4, &(0x7f0000003000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x3a}, @local}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xe9, [@multicast1, @empty, @rand_addr=0x64010100, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x98}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31b}, 0x94) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0xff, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socket$kcm(0x22, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 15.28106066s ago: executing program 4 (id=16191): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 8.373274076s ago: executing program 1 (id=16283): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x3e8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000040)=r3, 0x5) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'ip6erspan0\x00', @multicast}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}]}}, &(0x7f0000000080)=""/227, 0x26, 0xe3, 0x1}, 0x28) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000500)=0x4902, 0x12) r4 = socket$kcm(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[], 0x50) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) r8 = socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r8, &(0x7f0000001d80)={&(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f0000001d00)=[{&(0x7f00000003c0)}, {&(0x7f0000000b80)="707f76cbb3def433df9f27ce31e6e486f7549426c3548afb8146d1668c1289762833a34fd259a49135831d7b04582f321b57f7c5c9ec5ef5424e85bacdf291da612e7723a28a75d25a7b33fb8f4e6aaebc100201f4773c058978d7b2d71847e707d03ea3ef2c44f32714681ee7acefeff41a0ebba3923cdcb8d598db1f63cb4104a3aadc2160983194eb252a6530a5ea6ce14426491a8e291df3c0d9532af5dde87bf122e3606bd3b6b7d55777ec6b13fdca98343a4d1fe35a067a4fe17014ef348394905a26d913f7db5c7af4d0c28885a343bd94228d0dbcabe6fe9ddf991b339f2cb6b07ee2cdf2c44722f60be2898a1881bb79b8de0882d0b7789a74418f182e919184271380b2aa168c0a45f9679a047d1b5ab4cfadaf09456b43f0c5014d21fa9a099c0ebad3bb333f47b17d2b081a8649c02fa03349158e5226713e00a39ff72ed4cfabc29b46c6b7cac25b9019c2620e745afd0fed14c28b588b0bbc608de2c58aa2100a907d83938889327cabc0ba2d44e46441b39ddbfd64685d7306ee7851be884e53a13117712b63c6f76a8badfa7f792e856c6dfdb3b067da6287fc2070a6e001a1f2f18e121ed00e7b11191b1381dffd8aeb85befc7bbfe8e3db9a5872ee3c55ad7ed33dc2f2d6fbb0f7a118a9bd28859b6909e84e7606f912de9d32a710b48e3c3c985e2488501f72b080f0dd31c3652b440e414a67ee6241f722c9bf8e850efc2cac1233309ac49c9995354daf3ed13142ddfd7cdc381cf53c1454b2e334341c4baa6ffcde06999550bb3cabea5e107e093580bc2dd6f78b41f3367678c17596743b84a0d811edcf1c7acb4984bd5909d040207ad6a60bcb10908e15ed698dddae15e3f3723d120211f4b3a619159e915061e40fa612ff5baf4f0f8c86e87699c4d119df55949a78cafeb4413e1d7e91a126ece464bd3e2726e1ae4f84f44c88009f688c021b16977389fd14e7e3e58a1ac9a4662b65b7154b50bc0a3fc5d2249e54a3a5a96aaedcfde955fb052a180d8216af5d26bd17ff54a17d390a565919868e344e7e1bf066f422c37bc19edeac2ffd72b24e7d2d07eda2a3d33e9c971ce31a65b836d301600b8f57030dae686802a6fcf4a4458af9202e2590748952c80c9f58f24d9ec0a2997fd1e8d47141f1c731a90ddc7722cd357d71ed29cc2b0343505777c7105f81a3c3afb02f57caf8672cb31f141aa106feae0c4f71973d0bb4e7cd2bc0cf0ea5d08dace9cabd163ce7f48126e4373e60240c8ebd4228d0714d83a12bc1243d08763599cfbb261cc0ae53243f5094943e18c22c8811eae01ad768deb6a7bf4e58e989f022a982033a9dc22ac1180ed87624554f88b6f8ed76079d5d2def5de163d5057d00efa30786c27a51080d06ddb5ca763b1383537eba3e9a88dbc1ecb4818b019cfdb339dbc5878442e4b5587d786214926a5cc240d19dbe0f90825cf93f2009b525b33b2783a1a117e1771fb6dcfa6302453f625be63b4068eeca9ff6819a38d7e3b9f924bbd2f5edcef847b19f3fcb26e29c63ad7d892655315dfbe9d24e255aa2b18ef77011849bbf652a5156a46d833d353d53f7a47960e4bad9b63a9c33fcbb8e42c97fe9b264a963ddc54aba24408f1dffd961e756f15f2c7dcd8f1b60b7781b52a6d9a6cd40cf02b8af7ffcacac119131bd91fb33f3fd503e63b1b9e30bb1456af3b05bf7e3b45db28a5ee8789fdd8b375fb25080b69cfe2a10e96ad8fc689d54893ed8ebad033fefb891b2e59203e9663dcc58db59a79ca87fa8b47fb8793102e420e12b7eec98ff13db63395120f100c1dc65ef114500ccf0f1016029794d424c5b9b42243af63a72458fdd13f5eb8560c6d74446c04b26fbb3c54f5f07705870defdeb9d8eace29f4a231872e2391313ab4a06436beae9ada5c10247e8817b0fdc7bfbd9a4af8b03d774f1f9993f49abda8a773dd293678a5de6fc7190eb9da5559da06e042a44d2d669c2c47045e10bd61e41a4b148247f5ec98c0c15005ff0a0939063cdd64e4b020d8c4ee1444656ea2afe4507e0623a5342ab5ddb695c2925bdaf520817f145615fc5337c498376a7982823a3846b585aeb9462699ba27446a7d1a69ad43d8a34f5f9953e906dc6d7c279176e277cf72ec64bb54d2a0526eb1f7c1baa3b31e6976ae007c963111cbc88bfe126ace657fd64535cfba2f53b5e9f90b12953d842144750e8df713bb854f8f86f1498d79d484b0ddd0399f20c2340294d54c629dcc62a0063e25aef13af7885c65e7b61642a4cbf15261b15d99a2f8cebf9c468610fba536ca3aac14cad9a8a8c5c00a9ca23e02a16acd467cc4c7ca259b5f1494484c1e842b1f34684e196068f39a420c66d0e40a57e69699dddcb0b109df8f9c3be29f06ea978aedd7ac7e9c2c1c9c0219927672f00703cb6676ec5beab3131b8dfc0c5e99219bc53cd9f1e940ce1ce2ce1955b81c2bf1302605afcd186804ab5127f2c237f6874045b9d9830d318a1cca695ad71b09137476ca502491926d7fbf4db735d477fe896211e137a6be99fe39f7b75924d3456c277b46b743fd8374440760330e83202a88bdf552daf5463c2aded43b98634fb7a903fa6fcae0450694f2ddd10c769d6be64fe9ad0e9fd46d29045e27a94e53f0ff4daf7725f5e8e3cc7639ddf0727ddf13e8a40d1ebc5b459636fe3cdbae5f71de7f0bfc5829673ee5a01f41f0132352da491c362a4dbecfd09d420efb309642582cd33953b1c436ae9858022df917d15e7e40f77fa87a69f84c171d8ef24888a5876a08d724ccc97968b20006f491b1741dfab975112bc8f9fdb3156d52fbe11f16e0d23be51b4a495a35acbc6a3cae921a2fead1aabffa87f9f8b4124df591597ec0166062263a3da32e48fb6f7e722716bea0a297b602a3e9f384ec6a3a80d54d1701c925d2e004265aff2dcd0abfe5a9fd70ff8aa319230d4d86dcb8aa649505c85f001ecde98b7a683824af3fbd23c0a5614232bfb7f2f9be22b3bcd8fc1dee119440c1be4de3d714dacdda501fc97b4bc1d1e46b68ba01ac09882fd623b91ce3c6a24c408c9a0b458c33ef69e4b16e05fd35d5a33bb3967def7b8f43e586ecdde1729ceb8b3270a37034aa21d139d079492109c806db6a89aa73ef46a184473cf083b63e9b559d82e1483b1713625e302fc8e1c17f078c0a1cdd5d6166794e33861889a564050871de24a1cb4a0a8f7fe46c7de1722b3d648d8352f40a8b52db29ca6136ebed26f0d34bad2bcd3dc80afc32fc743fdcb4262e4fff3ad4f903729953b5b343fea0489ca6782f776ac72657dfe60890f969ee671b1efd20b5856715e8f426044115cf857d5408e02e6e88d5908a3b9852e65183414823b68773f53703bfb27f05aa2f829aa2364b1e0f15b852dabfe8459b2049ae0346779b00328fbf6558af601a44ba8ca84a6ee1be6fbebbe8886b5b6e46edef83a702f8bbcdc0dd7aec382e81778a6618eb2a256089ec8156fa148f90a85cce88ab112ee947af3f09ed848d15488a2ce1be6a8a38545bbceefbc4c253da5e9fa7bce5926e5a88493010a72f16cdfa3ff0a04bbf95746dd3d759860147177d0ecae41366ddb8c39620a4901a734f9286ab344288cc5a4ad234cb3f37f4348fc59425d15497d0d2210fc5eda88ec43d12e1b0bef2f3ccf7ba7f8ead31b1b5a5efa2694e8e5b99523cfb2041fb3f16aac157bd9f4ad57048b098eebdfe39c9e1c372f5526eee84e947b6c4793b712f4cf2bfca4add362497deb9c25668f93f1bfcd5231b883500eede35cac41e909a5e06a8b32c218881220a627e8bbcad911173271cef64ba0d7fdd89d213e5b3a66b8d2f30cad39e2d10039d32df21ecb42b373f1509183704daae3f94ddeba47b66272ea8649c6abb19939a62a796391ec0a9f31577777dfef6a7fd6b85d007d00e4df99c7e43985b806dec6bc44dad06498973d627289d76f6facf529bf6b4c75c27209c2de3e016d9dd6e377ffa942db371cd4cb899c5ccedf100c020cccae58ccaeca7983f94c799b3e27ecd79a29b918a845829fd2689d5815fe383b5b38fea47aaec63ce0e3005d02e7d4b7f5fcc9a0dc56238f2160f3ab9f784dbe4ff0d158eff40332a69eab7e5bbf6912d51af7f4c2d84c35e4fdf785d81fdc0f6a195d5942c4c9de2be8ce0c4d6d6b43dfcf7b56d03d978b198ae6a263066cf918c231e757c173b5ded9fae0a191224fa3746e7b3b0d5b84ed8d520cfb61c3879516f5edd7d7a33083def67a56e17da791bee19696da63364ceea6a8efc49c2b1daf39b78f4520725e73caadf3058b6f416f5cf81e4fc852a0169390b4a149a45b5276c5274adfb97a27a084df4d3e23c9f0195d4c241cb173b8f55d3caf2c495332e4a952037d6f0fe1179ccfcd59284a729753487c249f68a1d00d9c499ade437acdb823ac007cf61845dacead5f4dadd209ea53bbe534186d1c62674be87cecee243353217eb054c60d17f7526ccd0297ed2a9b4d0a4cafb4c0bb7aba99f1ff18ec250fcec77b71b4789f7dc3f3f72bc5775880d7adae98c10c9ebf528c1e34497b91d1a93244e21d16f0314fe54f95b6df6916ace7629d2d6d754ce825da6298439977dfba2ee6360b3da820c7531a87d6c2400990268191ccd9d7022366b1369e4c22c99c7bbf5f0f4cd0d78067052fc66c295d3b6c133570a24b1543e7a9a8272eeb2bfd02347117cd64e19467709e06eab677dc632ac7d1837d2d2bf86a7f538b47d26de25c25512f0466288fda403c84dbaa7af44efe4c9772882a5aa54a5676ec0f615e2521a8afd3598d74afa71265f6861f89536588f2d0f76dca9a22947cf4159a2436860af346df4b91bec72641081faa1a0c22a61e24fa5f397b5a649cf514d003992950fee36791331bb831946a926d9ae30f0c8e9eb6ff4e30296af20747148d91981e0f85930a821afde957e7f53953a5d6c8b5687e0d3540670ece5d19df8d0148abc834b6fbfbf45a8c0672c3149f2cdebce35d8530316c78e1188709e7bb0f509d1946424502362d8c6f89b954b506a50273533cd0982937161e2d9d121a450d1611346d64e75b1723623b47afea8f877e132e28692a7e658bdec159a85f4221422765fbd5bcb64b16e965aa09bad103cd41f4a192463f14f8ccc9fb1cd96819ac409dfdf76cc9024375c6b4620274b9b25c511cfde9c7256c3ab0d64099b0f3ea683f0e1a37bbb37fe1a010c60ddc2be446a272289ec3a3717944858ebafc24be75eb7d22a9ab12aeac1819b438a56936ed487d46d4aee97155416b0e64b329eada3bfd04ac213914bdaeec7b2cfaaefb865a6d10f6713f313d7866a58e1ab3edc008d54b0fcc2e91a91b67668e42c1042682cda8fa14e07f9bd53a3e8653a47d39a7517d5bf6e4d062ef34b87f7d1cee5c6bd361794cb1be5e18bbfe37d31c9633c2388c664e09a02dcb1500b047b28262fa5947c77f9fb19a42f57696219ac42733f57c83b25428cbe7517f29f00efa192a886287f3559738b30226c81ae14f9d18740897750580212a0567300fd9bcf855e1e4a114f1302fa0c3b697738b86163ee5846d88cd1023b18c396a61827768956b0685b70e3fc7b30df323322e5ae8adca0203df00274c23bf7addb849bc31fd16d8c8f402889abb7977da5a4d190946d5f1f57cc14e67db61f462ca3c1bbad2a9c79eceb6b508d34810b1b204a14165a5ffcfbd9780395c2381b2b1c0d112ba670ec66a31ca87beec6affb792c0e78e1301c3b24575ea2e42d422965f321bf0a6a0ad85", 0x1000}, {&(0x7f0000001b80)="a903c14a189b2b73f075557c773509a654520fa30d9cd1ffb1cf6dcccd5dd7fd47aaa201f9f37ab719f5553c210ca6235d5794a274dd7e22ac6426e9fc946dafd5cf0d8f7a8d27415c708b98b47fc421f207b82d6e1c54a2dae80d32ce8c23aebe3d1fac3d25ebf065bac840b938546b7650ae461ef29fb53fa71002d313acd27c5aeb7b8ca3aadd636b28bdd0cdf7a472bdc7c426006f4f893f114117d7cdf1484098e2f76589592ef583a1ca37774f4f1e7bec930caa6a2644bfb91be9fbfe3e1bfaa556b4a45bc8ede182524e9756199956eddd964b44", 0xd8}, {&(0x7f0000001c80)="c3722e11c4bfebdd7ed67036bd90dd11bad918dde3a173240f69ee7f0865d4e8afac249bb7563ca6884b813a6e19f452c2e7991e84c52530bcf9142185e0006bc6bba973", 0x44}], 0x4}, 0x41) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r5}, &(0x7f0000000780), &(0x7f00000007c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.732263473s ago: executing program 0 (id=16292): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000071117b0000000000851000000200000085000000a000000095000000000000009500a50500000000694ae83a84c13c127f4456ce439b6fbb2f37ca289c9e41afa04c8fa2cc6661401d01cf0b9132535522f43336d72882af1dd8136cabd60e019d64d74061a2552f124e881e121141404d2a55f520f22017fe052a6f2e226b5574e23ca5a545059cef5fab9f062a940c8b99c6d8aed481ebb2f44b68d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x6}, 0x2020, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x40086602, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @struct={0x1, 0x8, 0x0, 0x4, 0x0, 0x84de, [{0x4, 0x1, 0x5}, {0x9, 0x1, 0x1}, {0x4, 0x0, 0x2}, {0x0, 0x3, 0xc28}, {0x3, 0x1, 0x3}, {0x3, 0x5, 0x3}, {0xa, 0x1, 0xfffffffa}, {0xf, 0x3, 0x7f}]}, @fwd={0x1}, @typedef={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x9}}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xe, 0x1, 0xffffff1f}, {0x1, 0x5, 0x4}, {0x6, 0x5, 0xc88}, {0x6, 0x2, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x61, 0x30, 0x0, 0x5f]}}, &(0x7f0000000880)=""/54, 0x11e, 0x36, 0x0, 0x6}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r5, 0x20, &(0x7f0000000a40)={&(0x7f0000000900)=""/60, 0x3c, 0x0, &(0x7f0000000940)=""/204, 0xcc}}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 7.648557235s ago: executing program 2 (id=16293): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b601ffff80000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f541cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebebf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff8279421778d4a914512ca803da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef00000000000000000000373494cd59e8ba04ec8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a4af7464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f952b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf41ba88c7eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d4f237dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b8667b4dd0c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1ff}, 0x0, 0xdd2, 0x0, 0x4, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)="f24d", 0x0, 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x726, 0xfffffffc, 0x4, 0x0, 0x6, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32], 0x50) socketpair(0x26, 0x80000, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x3, 0x2, 0x1, 0x5, 0x0, 0x2d9e, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x9d33eb28b77135d0, 0x0, 0x6, 0x8, 0x7ed1, 0x8, 0x3ac, 0x0, 0x1, 0x0, 0xb}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 7.629240046s ago: executing program 3 (id=16294): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x480c0) recvmsg$kcm(r1, &(0x7f0000002600)={&(0x7f00000001c0)=@can, 0x80, 0x0, 0x0, &(0x7f0000002540)=""/133, 0x85}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x6}, 0xb040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, 0x0, 0x20004094) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r4, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x10070) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0xfefffeffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x7e8166965e22236a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 7.593962866s ago: executing program 0 (id=16295): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18240, 0x2, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x2000c884) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="e124c808f4"}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r9, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000800a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee", 0xba}], 0x1}, 0x0) 7.43358352s ago: executing program 1 (id=16296): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000003}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x38}, 0x4000044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x51, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000003000000030000000005000021ff0736", @ANYRES32=0x1, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="76c65517acd4", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xa, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x2, 0x94, &(0x7f0000000640)=""/148, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x6b, 0x101, 0x7}, 0x10, 0x0, r1, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=[{0x1, 0x4, 0xa, 0x2}, {0x2, 0x5, 0xb, 0x3}], 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.404911851s ago: executing program 3 (id=16297): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x6df9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0xbe) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x8a, 0x82, 0x0, 0x0, 0x6, 0x2400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x7cb6}, 0x4000, 0x7, 0x401, 0x1, 0x1000000000c1a, 0x7f, 0xfffe, 0x0, 0x92f, 0x0, 0xfffffffffffffff9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) 7.291058274s ago: executing program 0 (id=16299): socket$kcm(0x1e, 0x4, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x1f2ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000086a800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009519000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92211, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa}, 0x15340, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x161200, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x2, 0x10001, &(0x7f0000000240)) r8 = socket$kcm(0x2c, 0x3, 0x0) recvmsg$kcm(r8, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x100) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xe8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030039000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1400000037000b63717a3c4a01d8b4", 0xf}], 0x1}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x9) 7.290702574s ago: executing program 1 (id=16300): perf_event_open(0x0, 0x0, 0xfffdfffffffffffb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200828500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x73d6, 0x0, 0x0, 0x0, 0x0, 0x40000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) 7.290281584s ago: executing program 2 (id=16301): close(0xffffffffffffffff) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10042) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10c03b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x2b}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x4080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180)=r4, 0xfd31) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 7.238364785s ago: executing program 3 (id=16302): socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x22, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xa6, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e45", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) 6.418510416s ago: executing program 0 (id=16303): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x2a928e5c}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000400"/27], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r0, 0x7, 0x1, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='>\x00'/12, @ANYRES32=r2, @ANYBLOB="9e86024ad7f93adcb7b1921c062e3177f0895a7dc143cf42b5dd5440b94fa259cb906b0247b3808f5fee30e091f48686cc40a8d08c07104fccdff80c26535261415717b9967cf4e1a307cf2913"], 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="040000000000000005"], 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) close(r3) socket$kcm(0x2, 0x2, 0x73) bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r2}, 0x8) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002e00000085000000080000009500100000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000780), 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x10) socketpair(0x22, 0x2, 0x24, &(0x7f0000000000)) 6.418229006s ago: executing program 2 (id=16304): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x16, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x0, 0xc, 0x6, 0x6, 0xffffffffffffffec, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, 0xfffffffffffffffd, &(0x7f0000000040)=""/122}, 0x20) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32], 0x50) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r10) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x11008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x1800}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 6.418053616s ago: executing program 3 (id=16305): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18240, 0x2, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x2000c884) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="e124c808f4"}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r9, 0x4) 6.417161296s ago: executing program 1 (id=16313): r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x80, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc74f805a09abbf42c5735c0c0bfeb02c6eba50461c506405541b1d81412f4d6e0409c8ed01a24a00c19c619b8189c043fcbfcf7e0dae6fa040957389be6376784", 0x7b}, {&(0x7f0000001b40)="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", 0x13c}], 0x2}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff08", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000080000010a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c}, 0x28) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec1123a0b09cc7e0dc3f5a9429f67002f742e5bede8832b0b7f1f4eed5e3f01ceb7ace2806a3f4d63282bdb3fe486b407e80f9295666de3f31e9cecc5ee7cf654e0", 0x43}, {0x0}], 0x2}, 0x0) gettid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'virt_wifi0\x00'}) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg(r5, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x40844) sendmsg$unix(r5, &(0x7f0000000640)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$kcm(0xa, 0x2, 0x88) close(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)}, 0x22044880) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2209100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 6.134894644s ago: executing program 2 (id=16306): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000071117b0000000000851000000200000085000000a000000095000000000000009500a50500000000694ae83a84c13c127f4456ce439b6fbb2f37ca289c9e41afa04c8fa2cc6661401d01cf0b9132535522f43336d72882af1dd8136cabd60e019d64d74061a2552f124e881e121141404d2a55f520f22017fe052a6f2e226b5574e23ca5a545059cef5fab9f062a940c8b99c6d8aed481ebb2f44b68d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x6}, 0x2020, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x40086602, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0xa, [@ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @struct={0x1, 0x8, 0x0, 0x4, 0x0, 0x84de, [{0x4, 0x1, 0x5}, {0x9, 0x1, 0x1}, {0x4, 0x0, 0x2}, {0x0, 0x3, 0xc28}, {0x3, 0x1, 0x3}, {0x3, 0x5, 0x3}, {0xa, 0x1, 0xfffffffa}, {0xf, 0x3, 0x7f}]}, @fwd={0x1}, @typedef={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x9}}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @union={0x0, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xe, 0x1, 0xffffff1f}, {0x1, 0x5, 0x4}, {0x6, 0x5, 0xc88}, {0x6, 0x2, 0x7}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x61, 0x30, 0x0, 0x5f]}}, &(0x7f0000000880)=""/54, 0x11e, 0x36, 0x0, 0x6}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r5, 0x20, &(0x7f0000000a40)={&(0x7f0000000900)=""/60, 0x3c, 0x0, &(0x7f0000000940)=""/204, 0xcc}}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 6.059968165s ago: executing program 0 (id=16307): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffb, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @mcast1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000100), 0x120) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r7, 0x0, 0x0}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000080000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r9}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r9, 0x0, 0x0}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0x2c, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x11b, 0x3, &(0x7f0000000040)=r12, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 5.993206617s ago: executing program 3 (id=16308): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x480c0) recvmsg$kcm(r1, &(0x7f0000002600)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000002500)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1, &(0x7f0000002540)=""/133, 0x85}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x6}, 0xb040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, 0x0, 0x20004094) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x541b, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r4, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x10070) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0xfefffeffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x30}, 0x7e8166965e22236a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 5.948990198s ago: executing program 2 (id=16309): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18240, 0x2, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x2000c884) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="e124c808f4"}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r9, 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 5.86971327s ago: executing program 1 (id=16310): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10d, 0x11, &(0x7f0000000000)=r4, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) close(r0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101000, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6}]}) r8 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc6010000a000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000011006bec9e3be35c6e17aa31076b876c1d000000a2d0c62c160af36507001ac0043f020234000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010205091febd17d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) 5.580298447s ago: executing program 3 (id=16311): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000090000000f00000000000008020000000f0000000500008500020000080000000000000000100000080000000400000040000e81b55b10315400000c01000003000000090000000a000000020000000900000005fcff0003000000000000a0d7595aabc900002e3e303030005f00db1cca66bda8458af5b9fc831b84793567374a3d1c76d8302654f031eec40b4d9d6e861b9a"], &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5ae) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYBLOB="8700"/20, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc", 0x22}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) write$cgroup_int(r6, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) socket$kcm(0x29, 0x5, 0x0) 5.579555898s ago: executing program 2 (id=16312): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x6df9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, &(0x7f0000000000), 0x20000010) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0xbe) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x8a, 0x82, 0x0, 0x0, 0x6, 0x2400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x7cb6}, 0x4000, 0x7, 0x401, 0x1, 0x1000000000c1a, 0x7f, 0xfffe, 0x0, 0x92f, 0x0, 0xfffffffffffffff9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)}], 0x1}, 0x900000000000000) 5.47131715s ago: executing program 1 (id=16314): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x18240, 0x2, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x113, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x2000c884) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000500)="e124c808f4"}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r9, 0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000800a800628b8c8b144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbac68017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee", 0xba}], 0x1}, 0x0) 5.427802382s ago: executing program 0 (id=16315): close(0xffffffffffffffff) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10042) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10c03b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x2e]}}, 0x0, 0x2b}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000008c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x4080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000180)=r4, 0xfd31) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) 0s ago: executing program 32 (id=16191): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) kernel console output (not intermixed with test programs): 656434][T11252] netlink: 'syz.3.14437': attribute type 4 has an invalid length. [ 1796.261166][T11266] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1796.299066][T11266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1796.477474][T11272] netlink: 'syz.2.14438': attribute type 4 has an invalid length. [ 1797.266972][T11295] sock: sock_set_timeout: `syz.0.14449' (pid 11295) tries to set negative timeout [ 1798.653046][T11335] validate_nla: 5 callbacks suppressed [ 1798.653068][T11335] netlink: 'syz.0.14472': attribute type 29 has an invalid length. [ 1798.743090][T11335] netlink: 'syz.0.14472': attribute type 29 has an invalid length. [ 1798.844564][T11331] __nla_validate_parse: 17 callbacks suppressed [ 1798.844590][T11331] netlink: 144 bytes leftover after parsing attributes in process `syz.1.14461'. [ 1798.898260][T11336] netlink: 'syz.0.14472': attribute type 29 has an invalid length. [ 1798.972736][T11340] netlink: 'syz.3.14464': attribute type 39 has an invalid length. [ 1799.100872][T11328] netlink: 'syz.0.14472': attribute type 4 has an invalid length. [ 1799.133628][T11328] netlink: 205252 bytes leftover after parsing attributes in process `syz.0.14472'. [ 1799.698915][T11355] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.14469'. [ 1799.763565][T11359] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.14467'. [ 1800.034087][T11372] netlink: 'syz.0.14477': attribute type 39 has an invalid length. [ 1800.202129][T11374] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14478'. [ 1800.247631][T11378] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14480'. [ 1800.257893][T11378] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14480'. [ 1800.297631][T11380] netlink: 'syz.1.14492': attribute type 39 has an invalid length. [ 1800.396699][T11383] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14482'. [ 1800.413739][T11383] netlink: 6 bytes leftover after parsing attributes in process `syz.4.14482'. [ 1800.612027][T11393] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14481'. [ 1800.951337][T11397] netlink: 'syz.2.14483': attribute type 4 has an invalid length. [ 1800.953647][T11387] netlink: 'syz.2.14483': attribute type 29 has an invalid length. [ 1801.017353][T11387] netlink: 'syz.2.14483': attribute type 29 has an invalid length. [ 1803.331624][T11467] sock: sock_set_timeout: `syz.1.14511' (pid 11467) tries to set negative timeout [ 1803.844226][T11483] validate_nla: 10 callbacks suppressed [ 1803.844305][T11483] netlink: 'syz.1.14516': attribute type 13 has an invalid length. [ 1803.859729][T11483] __nla_validate_parse: 16 callbacks suppressed [ 1803.859763][T11483] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.14516'. [ 1803.925983][T11485] device syzkaller0 entered promiscuous mode [ 1803.944353][T11495] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14518'. [ 1803.970758][T11495] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14518'. [ 1804.118804][T11498] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14519'. [ 1804.307171][T11512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14524'. [ 1804.327534][T11512] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14524'. [ 1804.535340][T11520] sock: sock_set_timeout: `syz.2.14526' (pid 11520) tries to set negative timeout [ 1804.690197][T11520] netlink: 'syz.2.14526': attribute type 39 has an invalid length. [ 1804.830386][T11526] netlink: 'syz.3.14529': attribute type 10 has an invalid length. [ 1804.974006][T11529] sock: sock_set_timeout: `syz.1.14540' (pid 11529) tries to set negative timeout [ 1805.040543][T11533] netlink: 'syz.1.14540': attribute type 39 has an invalid length. [ 1805.097048][T11531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14530'. [ 1805.166808][T11522] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.14528'. [ 1805.281095][T11542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14534'. [ 1805.292745][T11542] netlink: 6 bytes leftover after parsing attributes in process `syz.3.14534'. [ 1805.693110][T11558] netlink: 'syz.0.14543': attribute type 39 has an invalid length. [ 1805.712210][T11556] netlink: 'syz.1.14541': attribute type 2 has an invalid length. [ 1805.722901][T11556] netlink: 'syz.1.14541': attribute type 8 has an invalid length. [ 1805.792520][T11561] netlink: 'syz.1.14541': attribute type 2 has an invalid length. [ 1805.808543][T11561] netlink: 'syz.1.14541': attribute type 8 has an invalid length. [ 1808.000803][T11599] netlink: 'syz.4.14554': attribute type 39 has an invalid length. [ 1809.046999][T11616] __nla_validate_parse: 14 callbacks suppressed [ 1809.047063][T11616] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.14561'. [ 1809.247850][T11623] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14565'. [ 1809.308766][T11623] netlink: 6 bytes leftover after parsing attributes in process `syz.4.14565'. [ 1809.356100][T11624] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14564'. [ 1809.454633][T11631] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14567'. [ 1809.480486][T11631] netlink: 6 bytes leftover after parsing attributes in process `syz.1.14567'. [ 1809.632837][T11634] netlink: 'syz.0.14568': attribute type 39 has an invalid length. [ 1809.754404][T11639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14580'. [ 1809.801288][T11639] netlink: 6 bytes leftover after parsing attributes in process `syz.1.14580'. [ 1810.070147][T11655] netlink: 'syz.2.14574': attribute type 39 has an invalid length. [ 1810.451761][T11669] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14578'. [ 1810.491878][T11672] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14579'. [ 1810.671142][T11682] netlink: 'syz.2.14584': attribute type 39 has an invalid length. [ 1810.891274][T11692] netlink: 'syz.0.14589': attribute type 39 has an invalid length. [ 1811.005535][T11696] netlink: 'syz.2.14591': attribute type 29 has an invalid length. [ 1811.014399][T11696] netlink: 'syz.2.14591': attribute type 29 has an invalid length. [ 1812.447345][T11718] netlink: 'syz.3.14598': attribute type 39 has an invalid length. [ 1812.794097][T11727] netlink: 'syz.3.14603': attribute type 39 has an invalid length. [ 1813.020925][T11734] netlink: 'syz.4.14604': attribute type 29 has an invalid length. [ 1813.071447][T11734] netlink: 'syz.4.14604': attribute type 29 has an invalid length. [ 1814.365721][T11756] __nla_validate_parse: 13 callbacks suppressed [ 1814.365747][T11756] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.14609'. [ 1814.468204][T11759] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14611'. [ 1814.849234][T11759] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14611'. [ 1815.169623][T11767] validate_nla: 1 callbacks suppressed [ 1815.169651][T11767] netlink: 'syz.3.14613': attribute type 39 has an invalid length. [ 1815.867041][T11780] netlink: 'syz.3.14617': attribute type 29 has an invalid length. [ 1815.912321][T11773] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14615'. [ 1815.928723][T11773] netlink: 6 bytes leftover after parsing attributes in process `syz.1.14615'. [ 1815.950578][T11776] device wlan0 entered promiscuous mode [ 1815.962164][T11780] netlink: 'syz.3.14617': attribute type 29 has an invalid length. [ 1816.103424][T11791] netlink: 'syz.3.14620': attribute type 21 has an invalid length. [ 1816.176983][T11788] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14628'. [ 1816.189063][T11788] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1816.237945][T11788] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14628'. [ 1816.350291][T11792] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.14619'. [ 1816.527739][T11801] netlink: 'syz.2.14624': attribute type 39 has an invalid length. [ 1816.764593][T11810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14627'. [ 1816.911209][T11812] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.14627'. [ 1817.205501][T11821] netlink: 'syz.0.14631': attribute type 29 has an invalid length. [ 1817.250326][T11821] netlink: 'syz.0.14631': attribute type 29 has an invalid length. [ 1817.362957][T11825] netlink: 'syz.3.14633': attribute type 1 has an invalid length. [ 1817.435183][T11829] netlink: 'syz.2.14634': attribute type 39 has an invalid length. [ 1817.655320][T11830] netlink: 'syz.3.14633': attribute type 9 has an invalid length. [ 1818.274266][T11843] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1819.008297][T11873] device sit0 left promiscuous mode [ 1819.131414][T11871] mac80211_hwsim hwsim112 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1819.178197][T11877] device sit0 entered promiscuous mode [ 1819.636050][T11880] __nla_validate_parse: 12 callbacks suppressed [ 1819.636114][T11880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14652'. [ 1819.653316][T11880] netlink: 6 bytes leftover after parsing attributes in process `syz.4.14652'. [ 1819.821594][T11897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.14658'. [ 1819.859723][T11897] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14658'. [ 1819.882221][T11903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14660'. [ 1819.899907][T11903] netlink: 6 bytes leftover after parsing attributes in process `syz.3.14660'. [ 1820.025871][T11908] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.14662'. [ 1820.061969][T11908] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1820.081941][T11913] netlink: 188 bytes leftover after parsing attributes in process `syz.4.14662'. [ 1820.426964][T11925] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14668'. [ 1820.596684][T11933] validate_nla: 6 callbacks suppressed [ 1820.596711][T11933] netlink: 'syz.2.14671': attribute type 39 has an invalid length. [ 1820.703810][T11940] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14674'. [ 1820.964954][T11949] mac80211_hwsim hwsim110 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1821.014865][T11955] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1821.839400][T11977] device wlan0 left promiscuous mode [ 1821.894600][T11979] device wlan0 entered promiscuous mode [ 1823.082832][T12025] openvswitch: netlink: IP tunnel dst address not specified [ 1823.219519][T12028] netlink: 'syz.4.14708': attribute type 39 has an invalid length. [ 1823.555936][T12048] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1825.110505][T12078] netlink: 'syz.1.14724': attribute type 39 has an invalid length. [ 1825.341009][T12091] netlink: 'syz.1.14729': attribute type 1 has an invalid length. [ 1825.367982][T12091] __nla_validate_parse: 26 callbacks suppressed [ 1825.368035][T12091] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.14729'. [ 1825.406352][T12096] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.14731'. [ 1825.689831][T12097] netlink: 'syz.1.14729': attribute type 9 has an invalid length. [ 1825.697928][T12097] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14729'. [ 1825.965150][T12099] device wlan0 entered promiscuous mode [ 1826.210126][T12108] device sit0 left promiscuous mode [ 1826.263623][T12113] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.14743'. [ 1826.698749][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14743'. [ 1826.760714][T12117] device sit0 entered promiscuous mode [ 1827.100197][T12119] netlink: 'syz.1.14747': attribute type 10 has an invalid length. [ 1827.316577][T12135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14740'. [ 1827.449528][T12145] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14755'. [ 1827.552311][T12141] mac80211_hwsim hwsim116 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1827.588388][T12142] device wlan0 entered promiscuous mode [ 1827.889936][T12154] netlink: 'syz.0.14748': attribute type 10 has an invalid length. [ 1827.898084][T12154] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14748'. [ 1827.979311][T12160] netlink: 'syz.4.14749': attribute type 1 has an invalid length. [ 1828.000919][T12160] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.14749'. [ 1828.403721][T12160] netlink: 'syz.4.14749': attribute type 9 has an invalid length. [ 1828.442514][T12160] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.14749'. [ 1828.507520][T12166] openvswitch: netlink: IP tunnel dst address not specified [ 1828.896835][T12171] netlink: 'syz.3.14754': attribute type 10 has an invalid length. [ 1829.535311][T12188] netlink: 'syz.0.14760': attribute type 4 has an invalid length. [ 1830.044335][T12203] device wlan0 entered promiscuous mode [ 1830.588407][T12210] __nla_validate_parse: 3 callbacks suppressed [ 1830.612506][T12210] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.14766'. [ 1830.643884][T12210] openvswitch: netlink: IP tunnel dst address not specified [ 1830.700010][T12216] netlink: 'syz.2.14767': attribute type 1 has an invalid length. [ 1830.710033][T12216] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.14767'. [ 1831.008055][T12216] netlink: 'syz.2.14767': attribute type 9 has an invalid length. [ 1831.026011][T12226] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14771'. [ 1831.061001][T12216] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.14767'. [ 1831.978334][T12235] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1832.011278][T12242] netlink: 188 bytes leftover after parsing attributes in process `syz.1.14778'. [ 1832.056877][T12235] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1832.112758][T12238] netlink: 'syz.0.14776': attribute type 10 has an invalid length. [ 1832.227273][T12241] device sit0 left promiscuous mode [ 1833.222019][T12244] device sit0 entered promiscuous mode [ 1833.580709][T12271] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14788'. [ 1833.696947][T12275] netlink: 'syz.4.14792': attribute type 4 has an invalid length. [ 1833.706307][T12275] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14792'. [ 1834.037649][T12294] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14795'. [ 1834.152797][T12290] device wlan0 left promiscuous mode [ 1834.883922][T12309] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14799'. [ 1835.111574][T12315] device wlan1 left promiscuous mode [ 1835.508219][T12326] netlink: 'syz.1.14804': attribute type 4 has an invalid length. [ 1835.608600][T12326] __nla_validate_parse: 3 callbacks suppressed [ 1835.608624][T12326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14804'. [ 1836.134851][T12343] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14821'. [ 1836.215256][T12347] netlink: 'syz.0.14809': attribute type 1 has an invalid length. [ 1836.239219][T12347] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.14809'. [ 1836.396323][T12347] netlink: 'syz.0.14809': attribute type 9 has an invalid length. [ 1836.414697][T12347] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.14809'. [ 1837.239431][T12364] netlink: 'syz.3.14812': attribute type 10 has an invalid length. [ 1837.277354][T12363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14825'. [ 1837.374364][T12356] delete_channel: no stack [ 1837.423562][T12379] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.14817'. [ 1837.467743][T12377] netlink: 'syz.0.14816': attribute type 39 has an invalid length. [ 1837.576740][T12381] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14818'. [ 1837.615066][T12386] netlink: 'syz.4.14818': attribute type 3 has an invalid length. [ 1837.638683][T12386] netlink: 'syz.4.14818': attribute type 4 has an invalid length. [ 1837.646715][T12386] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.14818'. [ 1837.658760][T12383] netlink: 'syz.1.14820': attribute type 2 has an invalid length. [ 1838.044899][T12397] device wlan0 left promiscuous mode [ 1838.209989][T12400] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14830'. [ 1838.461474][T12408] netlink: 'syz.0.14832': attribute type 1 has an invalid length. [ 1838.543235][T12408] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.14832'. [ 1838.775669][T12408] netlink: 'syz.0.14832': attribute type 9 has an invalid length. [ 1839.299111][T12425] netlink: 'syz.3.14836': attribute type 39 has an invalid length. [ 1839.368863][T12429] device wlan1 left promiscuous mode [ 1840.392077][T12450] device sit0 left promiscuous mode [ 1840.594961][T12452] device wlan0 left promiscuous mode [ 1840.688858][T12454] device sit0 entered promiscuous mode [ 1840.892308][T12463] mac80211_hwsim hwsim110 O3ãc¤±@: renamed from wlan1 [ 1840.976856][T12467] __nla_validate_parse: 4 callbacks suppressed [ 1840.976886][T12467] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.14846'. [ 1841.213086][T12474] delete_channel: no stack [ 1841.229358][T12474] delete_channel: no stack [ 1841.277914][T12476] validate_nla: 3 callbacks suppressed [ 1841.277941][T12476] netlink: 'syz.4.14852': attribute type 1 has an invalid length. [ 1841.379780][T12476] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.14852'. [ 1841.621279][T12480] netlink: 'syz.4.14852': attribute type 9 has an invalid length. [ 1841.749889][T12489] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14855'. [ 1841.781641][T12480] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.14852'. [ 1842.022263][T12484] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14853'. [ 1842.177636][T12490] device wlan0 left promiscuous mode [ 1842.249541][T12496] netlink: 'syz.3.14859': attribute type 2 has an invalid length. [ 1842.259130][T12493] netlink: 'syz.1.14858': attribute type 10 has an invalid length. [ 1842.520246][T12492] delete_channel: no stack [ 1842.771300][T12512] device wlan0 left promiscuous mode [ 1842.866316][T12510] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.14865'. [ 1842.883522][T12512] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.14864'. [ 1842.914294][T12516] netlink: 'syz.3.14867': attribute type 39 has an invalid length. [ 1843.097657][T12522] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14869'. [ 1843.140739][T12527] netlink: 'syz.0.14881': attribute type 39 has an invalid length. [ 1843.190652][T12524] device wlan1 left promiscuous mode [ 1843.243831][T12524] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14871'. [ 1844.138930][T12564] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.14878'. [ 1844.315033][T12567] netlink: 'syz.2.14883': attribute type 39 has an invalid length. [ 1845.692002][T12581] device wlan1 left promiscuous mode [ 1846.690155][T12613] mac80211_hwsim hwsim102 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1846.714108][T12615] netlink: 'syz.2.14898': attribute type 3 has an invalid length. [ 1846.749057][T12619] __nla_validate_parse: 3 callbacks suppressed [ 1846.749091][T12619] netlink: 80 bytes leftover after parsing attributes in process `syz.2.14898'. [ 1846.830589][T12615] netlink: 'syz.2.14898': attribute type 4 has an invalid length. [ 1846.878646][T12615] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.14898'. [ 1847.024175][T12629] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14903'. [ 1847.073884][T12633] netlink: 'syz.0.14906': attribute type 49 has an invalid length. [ 1847.135751][T12631] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.14905'. [ 1847.205417][T12637] mac80211_hwsim hwsim114 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1847.692292][T12654] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14912'. [ 1848.223577][T12669] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14918'. [ 1848.251679][T12675] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.14921'. [ 1848.259053][T12672] netlink: 'syz.2.14920': attribute type 21 has an invalid length. [ 1848.284649][T12672] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14920'. [ 1848.297535][T12669] netlink: 'syz.0.14918': attribute type 3 has an invalid length. [ 1848.297607][T12669] netlink: 'syz.0.14918': attribute type 4 has an invalid length. [ 1848.297648][T12669] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.14918'. [ 1848.401418][T12672] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14920'. [ 1848.689985][T12687] mac80211_hwsim hwsim116 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1850.239091][T12727] netlink: 'syz.4.14937': attribute type 39 has an invalid length. [ 1850.361684][T12730] netlink: 'syz.3.14938': attribute type 3 has an invalid length. [ 1850.387779][T12730] netlink: 'syz.3.14938': attribute type 4 has an invalid length. [ 1850.590972][T12726] device syzkaller0 entered promiscuous mode [ 1852.077196][T12769] netlink: 'syz.4.14952': attribute type 39 has an invalid length. [ 1852.478397][T12784] netlink: 'syz.3.14957': attribute type 5 has an invalid length. [ 1852.551527][T12782] __nla_validate_parse: 6 callbacks suppressed [ 1852.552550][T12782] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14956'. [ 1853.225824][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.232279][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.296423][T12810] netlink: 'syz.2.14966': attribute type 39 has an invalid length. [ 1853.467231][T12813] device wlan1 left promiscuous mode [ 1854.347638][T12838] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14972'. [ 1854.521027][T12842] netlink: 'syz.3.14976': attribute type 21 has an invalid length. [ 1854.535795][T12842] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14976'. [ 1854.583896][T12842] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14976'. [ 1854.843477][T12851] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14987'. [ 1855.282162][T12856] netlink: 'syz.4.14978': attribute type 9 has an invalid length. [ 1855.334931][T12856] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.14978'. [ 1855.348983][T12863] netlink: 'syz.2.14981': attribute type 39 has an invalid length. [ 1855.756273][T12873] netlink: 'syz.2.14985': attribute type 2 has an invalid length. [ 1855.775032][T12873] netlink: 'syz.2.14985': attribute type 8 has an invalid length. [ 1855.794791][T12873] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14985'. [ 1856.037580][T12877] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.14986'. [ 1856.848158][T12892] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14991'. [ 1857.148946][T12898] netlink: 'syz.0.14992': attribute type 21 has an invalid length. [ 1857.198740][T12898] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14992'. [ 1858.002627][T12904] __nla_validate_parse: 1 callbacks suppressed [ 1858.002812][T12904] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.14994'. [ 1858.166708][T12919] netlink: 'syz.3.14998': attribute type 10 has an invalid length. [ 1858.348603][T12919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14998'. [ 1858.816218][T12931] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15004'. [ 1859.803574][T12950] netlink: 'syz.4.15010': attribute type 21 has an invalid length. [ 1859.848899][T12950] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15010'. [ 1859.937128][T12950] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15010'. [ 1860.032281][T12974] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15017'. [ 1861.386966][T12988] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.15018'. [ 1862.443428][T13013] netlink: 'syz.4.15025': attribute type 1 has an invalid length. [ 1862.476211][T13013] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.15025'. [ 1863.079301][T13025] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.15030'. [ 1863.868812][T13030] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.15033'. [ 1863.978191][T13037] netlink: 'syz.4.15035': attribute type 10 has an invalid length. [ 1864.040718][T13037] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15035'. [ 1864.448074][T13034] device syzkaller0 entered promiscuous mode [ 1864.611375][T13044] netlink: 'syz.4.15037': attribute type 21 has an invalid length. [ 1865.081947][T13055] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.15040'. [ 1865.247387][T13058] device wlan1 entered promiscuous mode [ 1865.497470][T13063] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.15042'. [ 1866.134512][T13073] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15046'. [ 1866.296281][T13083] netlink: 'syz.0.15047': attribute type 10 has an invalid length. [ 1866.306206][T13083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15047'. [ 1867.164849][T13101] netlink: 'syz.2.15064': attribute type 3 has an invalid length. [ 1867.203693][T13101] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.15064'. [ 1867.561386][T13102] device syzkaller0 entered promiscuous mode [ 1867.941342][T13119] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15057'. [ 1868.198022][T13124] netlink: 'syz.0.15059': attribute type 1 has an invalid length. [ 1868.212696][T13124] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.15059'. [ 1868.544804][T13128] netlink: 'syz.3.15061': attribute type 9 has an invalid length. [ 1868.605081][T13128] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.15061'. [ 1868.699269][T13136] netlink: 'syz.0.15065': attribute type 4 has an invalid length. [ 1868.738819][T13136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15065'. [ 1868.969165][T13140] netlink: 'syz.4.15066': attribute type 3 has an invalid length. [ 1869.073989][T13140] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.15066'. [ 1869.897252][T13165] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.15075'. [ 1870.136981][T13156] netlink: 'syz.3.15073': attribute type 39 has an invalid length. [ 1870.285986][T13171] netlink: 'syz.3.15078': attribute type 4 has an invalid length. [ 1870.294309][T13171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15078'. [ 1870.648394][T13184] netlink: 'syz.3.15082': attribute type 3 has an invalid length. [ 1870.662653][T13184] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.15082'. [ 1871.281552][T13202] netlink: 'syz.3.15088': attribute type 39 has an invalid length. [ 1871.495080][T13211] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.15092'. [ 1871.865537][T13224] device wlan1 entered promiscuous mode [ 1871.876104][T13226] pim6reg: tun_chr_ioctl cmd 1074025677 [ 1871.906484][T13226] pim6reg: linktype set to 778 [ 1872.041320][T13225] netlink: 'syz.0.15096': attribute type 21 has an invalid length. [ 1872.101058][T13225] netlink: 14542 bytes leftover after parsing attributes in process `syz.0.15096'. [ 1872.206975][T13239] netlink: 'syz.1.15098': attribute type 3 has an invalid length. [ 1872.220435][T13239] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.15098'. [ 1872.947615][T13268] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1874.148246][T13285] pim6reg: tun_chr_ioctl cmd 1074025677 [ 1874.156901][T13296] validate_nla: 1 callbacks suppressed [ 1874.156923][T13296] netlink: 'syz.0.15116': attribute type 3 has an invalid length. [ 1874.156944][T13296] __nla_validate_parse: 3 callbacks suppressed [ 1874.156957][T13296] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.15116'. [ 1874.364706][T13285] pim6reg: linktype set to 778 [ 1874.986059][T13322] netlink: 'syz.0.15124': attribute type 39 has an invalid length. [ 1875.073792][T13317] netlink: 'syz.2.15123': attribute type 9 has an invalid length. [ 1875.132240][T13317] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.15123'. [ 1875.607172][T13338] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.15131'. [ 1876.229496][T13356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15139'. [ 1876.271474][T13356] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1876.341349][T13353] pim6reg: tun_chr_ioctl cmd 1074025677 [ 1876.382437][T13353] pim6reg: linktype set to 778 [ 1876.454527][T13356] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.15139'. [ 1876.701327][T13377] netlink: 'syz.4.15145': attribute type 39 has an invalid length. [ 1877.867663][T13388] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.15152'. [ 1877.932317][T13402] netlink: 'syz.4.15155': attribute type 4 has an invalid length. [ 1877.989941][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15155'. [ 1878.135919][T13400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15166'. [ 1878.327534][T13410] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1878.387610][T13410] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1878.441630][T13415] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.15157'. [ 1879.756391][T13421] netlink: 'syz.2.15161': attribute type 39 has an invalid length. [ 1879.770654][T13435] netlink: 'syz.4.15163': attribute type 10 has an invalid length. [ 1879.856413][T13446] netlink: 'syz.1.15169': attribute type 4 has an invalid length. [ 1879.940873][T13446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15169'. [ 1880.007356][T13448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15170'. [ 1880.582309][T13466] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15174'. [ 1880.606910][T13467] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.15174'. [ 1880.625729][T13466] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1881.148165][T13481] netlink: 'syz.1.15181': attribute type 39 has an invalid length. [ 1881.271225][T13485] netlink: 'syz.0.15183': attribute type 10 has an invalid length. [ 1882.251683][T13518] netlink: 'syz.4.15196': attribute type 39 has an invalid length. [ 1882.416280][T13520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15197'. [ 1882.655591][T13528] netlink: 'syz.2.15199': attribute type 10 has an invalid length. [ 1883.020986][T13526] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.15208'. [ 1883.477746][T13544] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1883.506189][T13544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1883.895459][T13559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15209'. [ 1884.165451][T13569] netlink: 'syz.1.15212': attribute type 10 has an invalid length. [ 1884.284019][T13573] netlink: 'syz.0.15214': attribute type 7 has an invalid length. [ 1884.328172][T13573] device sit0 left promiscuous mode [ 1884.613346][T13581] device sit0 entered promiscuous mode [ 1885.260768][T13595] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.15222'. [ 1885.692161][T13610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15226'. [ 1887.391941][T13652] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.15241'. [ 1887.740853][T13662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15243'. [ 1888.329985][T13674] netlink: 'syz.2.15248': attribute type 10 has an invalid length. [ 1889.230560][T13701] sctp: [Deprecated]: syz.3.15259 (pid 13701) Use of int in max_burst socket option deprecated. [ 1889.230560][T13701] Use struct sctp_assoc_value instead [ 1889.251629][T13697] netlink: 209032 bytes leftover after parsing attributes in process `syz.1.15258'. [ 1889.524995][T13708] netlink: 'syz.0.15262': attribute type 9 has an invalid length. [ 1889.547498][T13708] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.15262'. [ 1889.854897][T13706] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.15261'. [ 1890.559817][T13713] netlink: 'syz.0.15262': attribute type 9 has an invalid length. [ 1890.588912][T13713] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.15262'. [ 1890.809337][T13731] netlink: 'syz.4.15271': attribute type 10 has an invalid length. [ 1892.269248][T13770] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.15283'. [ 1892.481763][T13774] netlink: 'syz.3.15285': attribute type 41 has an invalid length. [ 1893.606586][T13794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1893.712306][T13794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1893.883464][T13803] netlink: 'syz.1.15294': attribute type 28 has an invalid length. [ 1894.006098][T13816] netlink: 'syz.3.15295': attribute type 39 has an invalid length. [ 1894.761943][T13828] netlink: 'syz.3.15300': attribute type 7 has an invalid length. [ 1894.828294][T13828] device sit0 left promiscuous mode [ 1895.198870][T13837] device sit0 entered promiscuous mode [ 1895.363780][T13839] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.15306'. [ 1896.173556][T13871] netlink: 'syz.0.15317': attribute type 28 has an invalid length. [ 1896.885381][T13879] netlink: 'syz.1.15319': attribute type 7 has an invalid length. [ 1896.958881][T13879] device sit0 left promiscuous mode [ 1897.065407][T13894] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.15321'. [ 1897.357842][T13891] device sit0 entered promiscuous mode [ 1898.166858][T13922] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1898.241508][T13922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1899.503770][T13956] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15341'. [ 1899.612296][T13956] device sit0 left promiscuous mode [ 1899.819879][T13961] device sit0 entered promiscuous mode [ 1900.515917][T13983] netlink: 'syz.2.15350': attribute type 28 has an invalid length. [ 1900.612677][T13985] netlink: 'syz.3.15351': attribute type 29 has an invalid length. [ 1900.667192][T13985] netlink: 'syz.3.15351': attribute type 29 has an invalid length. [ 1900.750728][T13995] netlink: 'syz.3.15351': attribute type 29 has an invalid length. [ 1900.795814][T13991] netlink: 'syz.3.15351': attribute type 29 has an invalid length. [ 1900.827252][T13985] netlink: 'syz.3.15351': attribute type 29 has an invalid length. [ 1900.920695][T13985] netlink: 'syz.3.15351': attribute type 29 has an invalid length. [ 1901.196633][T14004] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.15360'. [ 1901.222288][T14004] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1901.252920][T14004] CPU: 1 PID: 14004 Comm: syz.4.15360 Not tainted syzkaller #0 [ 1901.260615][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1901.270732][T14004] Call Trace: [ 1901.274064][T14004] [ 1901.277043][T14004] dump_stack_lvl+0x188/0x250 [ 1901.281797][T14004] ? show_regs_print_info+0x20/0x20 [ 1901.287052][T14004] ? load_image+0x410/0x410 [ 1901.291635][T14004] sysfs_warn_dup+0x8a/0xa0 [ 1901.296210][T14004] sysfs_do_create_link_sd+0xc0/0x110 [ 1901.301642][T14004] device_add+0x83b/0x1050 [ 1901.306255][T14004] wiphy_register+0x1e74/0x2c40 [ 1901.311241][T14004] ? cfg80211_event_work+0x40/0x40 [ 1901.316410][T14004] ? minstrel_ht_alloc+0x807/0x980 [ 1901.321578][T14004] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1901.327709][T14004] ieee80211_register_hw+0x2a03/0x3a60 [ 1901.333229][T14004] ? ieee80211_register_hw+0xae1/0x3a60 [ 1901.338840][T14004] ? ieee80211_tasklet_handler+0x20/0x20 [ 1901.344546][T14004] ? rcu_is_watching+0x11/0xa0 [ 1901.349381][T14004] ? hrtimer_init+0x10c/0x220 [ 1901.354120][T14004] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1901.359911][T14004] hwsim_new_radio_nl+0xa7d/0xc50 [ 1901.365021][T14004] genl_rcv_msg+0xd0b/0xfa0 [ 1901.369603][T14004] ? genl_bind+0x370/0x370 [ 1901.374085][T14004] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1901.380150][T14004] ? lock_chain_count+0x20/0x20 [ 1901.385073][T14004] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1901.391290][T14004] ? lockdep_hardirqs_on+0x94/0x140 [ 1901.396548][T14004] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1901.402751][T14004] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1901.409154][T14004] ? lock_acquire+0x208/0x400 [ 1901.413897][T14004] netlink_rcv_skb+0x1e9/0x430 [ 1901.418723][T14004] ? genl_bind+0x370/0x370 [ 1901.423216][T14004] ? netlink_ack+0xb10/0xb10 [ 1901.427879][T14004] ? down_read+0x1aa/0x2e0 [ 1901.432345][T14004] genl_rcv+0x24/0x40 [ 1901.436363][T14004] netlink_unicast+0x78f/0x940 [ 1901.441226][T14004] netlink_sendmsg+0x8ba/0xbe0 [ 1901.446063][T14004] ? netlink_getsockopt+0x570/0x570 [ 1901.451318][T14004] ? aa_sock_msg_perm+0x94/0x150 [ 1901.456315][T14004] ? apparmor_socket_sendmsg+0x88/0x230 [ 1901.461921][T14004] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1901.467276][T14004] ? security_socket_sendmsg+0x7c/0xa0 [ 1901.472850][T14004] ? netlink_getsockopt+0x570/0x570 [ 1901.478120][T14004] ____sys_sendmsg+0x5be/0x8f0 [ 1901.482992][T14004] ? __sys_sendmsg_sock+0x30/0x30 [ 1901.488108][T14004] ? import_iovec+0x6f/0xa0 [ 1901.492669][T14004] ___sys_sendmsg+0x236/0x2e0 [ 1901.497456][T14004] ? __sys_sendmsg+0x290/0x290 [ 1901.502291][T14004] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1901.508613][T14004] __se_sys_sendmsg+0x1b7/0x2a0 [ 1901.513517][T14004] ? __x64_sys_sendmsg+0x80/0x80 [ 1901.518531][T14004] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1901.524484][T14004] do_syscall_64+0x4c/0xa0 [ 1901.528958][T14004] ? clear_bhb_loop+0x30/0x80 [ 1901.533687][T14004] ? clear_bhb_loop+0x30/0x80 [ 1901.538414][T14004] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1901.544357][T14004] RIP: 0033:0x7f76e466a0d9 [ 1901.548827][T14004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.568484][T14004] RSP: 002b:00007f76e28c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1901.576951][T14004] RAX: ffffffffffffffda RBX: 00007f76e48f1fa0 RCX: 00007f76e466a0d9 [ 1901.584984][T14004] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1901.593024][T14004] RBP: 00007f76e4701024 R08: 0000000000000000 R09: 0000000000000000 [ 1901.601048][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1901.609077][T14004] R13: 00007f76e48f2038 R14: 00007f76e48f1fa0 R15: 00007ffe630ba0a8 [ 1901.617261][T14004] [ 1901.830055][T14023] netlink: 'syz.1.15366': attribute type 10 has an invalid length. [ 1901.861387][T14023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15366'. [ 1902.967324][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1903.042459][T14053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1903.437165][T14056] device wlan1 left promiscuous mode [ 1903.537653][T14060] netlink: 180 bytes leftover after parsing attributes in process `syz.2.15380'. [ 1904.583239][T14095] netlink: 'syz.4.15394': attribute type 39 has an invalid length. [ 1904.596631][T14097] netlink: 'syz.1.15391': attribute type 4 has an invalid length. [ 1904.755822][T14097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15391'. [ 1905.117831][T14089] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15391'. [ 1905.554009][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1905.647359][T14114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1906.657108][T14145] validate_nla: 2 callbacks suppressed [ 1906.657198][T14145] netlink: 'syz.3.15410': attribute type 3 has an invalid length. [ 1906.673524][T14145] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15410'. [ 1906.892422][T14161] netlink: 'syz.3.15413': attribute type 28 has an invalid length. [ 1908.094613][T14200] netlink: 'syz.4.15429': attribute type 4 has an invalid length. [ 1908.105982][T14200] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15429'. [ 1908.131015][T14202] netlink: 'syz.4.15429': attribute type 3 has an invalid length. [ 1908.173560][T14202] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15429'. [ 1908.483958][T14215] netlink: 'syz.1.15444': attribute type 29 has an invalid length. [ 1908.500842][T14215] netlink: 'syz.1.15444': attribute type 29 has an invalid length. [ 1908.522507][T14218] netlink: 'syz.1.15444': attribute type 29 has an invalid length. [ 1908.565100][T14215] netlink: 'syz.1.15444': attribute type 29 has an invalid length. [ 1908.634463][T14216] netlink: 'syz.4.15433': attribute type 28 has an invalid length. [ 1908.798228][T14218] netlink: 'syz.1.15444': attribute type 29 has an invalid length. [ 1909.122982][T14231] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1909.200585][T14231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1909.746770][T14243] netlink: 180 bytes leftover after parsing attributes in process `syz.1.15446'. [ 1910.029643][T14253] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15445'. [ 1910.216674][T14243] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15446'. [ 1910.337826][T14245] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15445'. [ 1910.824322][T14269] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15455'. [ 1910.946715][T14269] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1910.995321][T14269] CPU: 0 PID: 14269 Comm: syz.1.15455 Not tainted syzkaller #0 [ 1911.003081][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1911.013214][T14269] Call Trace: [ 1911.016566][T14269] [ 1911.019613][T14269] dump_stack_lvl+0x188/0x250 [ 1911.024393][T14269] ? show_regs_print_info+0x20/0x20 [ 1911.029689][T14269] ? load_image+0x410/0x410 [ 1911.034327][T14269] sysfs_warn_dup+0x8a/0xa0 [ 1911.038940][T14269] sysfs_do_create_link_sd+0xc0/0x110 [ 1911.044414][T14269] device_add+0x83b/0x1050 [ 1911.048948][T14269] wiphy_register+0x1e74/0x2c40 [ 1911.053954][T14269] ? cfg80211_event_work+0x40/0x40 [ 1911.059172][T14269] ? minstrel_ht_alloc+0x807/0x980 [ 1911.064406][T14269] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1911.070600][T14269] ieee80211_register_hw+0x2a03/0x3a60 [ 1911.076174][T14269] ? ieee80211_register_hw+0xae1/0x3a60 [ 1911.081855][T14269] ? ieee80211_tasklet_handler+0x20/0x20 [ 1911.087598][T14269] ? rcu_is_watching+0x11/0xa0 [ 1911.092479][T14269] ? hrtimer_init+0x10c/0x220 [ 1911.097276][T14269] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1911.103160][T14269] hwsim_new_radio_nl+0xa7d/0xc50 [ 1911.108345][T14269] genl_rcv_msg+0xd0b/0xfa0 [ 1911.112983][T14269] ? genl_bind+0x370/0x370 [ 1911.117511][T14269] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1911.123665][T14269] ? lock_chain_count+0x20/0x20 [ 1911.128638][T14269] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1911.134881][T14269] ? lockdep_hardirqs_on+0x94/0x140 [ 1911.140172][T14269] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1911.146440][T14269] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1911.153043][T14269] ? lock_acquire+0x208/0x400 [ 1911.157839][T14269] netlink_rcv_skb+0x1e9/0x430 [ 1911.162695][T14269] ? genl_bind+0x370/0x370 [ 1911.167215][T14269] ? netlink_ack+0xb10/0xb10 [ 1911.172033][T14269] ? down_read+0x1aa/0x2e0 [ 1911.176561][T14269] genl_rcv+0x24/0x40 [ 1911.180775][T14269] netlink_unicast+0x78f/0x940 [ 1911.185683][T14269] netlink_sendmsg+0x8ba/0xbe0 [ 1911.190577][T14269] ? netlink_getsockopt+0x570/0x570 [ 1911.195869][T14269] ? aa_sock_msg_perm+0x94/0x150 [ 1911.200961][T14269] ? apparmor_socket_sendmsg+0x88/0x230 [ 1911.206591][T14269] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1911.211950][T14269] ? security_socket_sendmsg+0x7c/0xa0 [ 1911.217490][T14269] ? netlink_getsockopt+0x570/0x570 [ 1911.222865][T14269] ____sys_sendmsg+0x5be/0x8f0 [ 1911.227752][T14269] ? __sys_sendmsg_sock+0x30/0x30 [ 1911.232898][T14269] ? import_iovec+0x6f/0xa0 [ 1911.237516][T14269] ___sys_sendmsg+0x236/0x2e0 [ 1911.242320][T14269] ? __sys_sendmsg+0x290/0x290 [ 1911.247227][T14269] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1911.253590][T14269] __se_sys_sendmsg+0x1b7/0x2a0 [ 1911.258544][T14269] ? __x64_sys_sendmsg+0x80/0x80 [ 1911.263559][T14269] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1911.269702][T14269] ? lockdep_hardirqs_on+0x94/0x140 [ 1911.275037][T14269] do_syscall_64+0x4c/0xa0 [ 1911.279534][T14269] ? clear_bhb_loop+0x30/0x80 [ 1911.284285][T14269] ? clear_bhb_loop+0x30/0x80 [ 1911.289139][T14269] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1911.295221][T14269] RIP: 0033:0x7f9c2f6860d9 [ 1911.299797][T14269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.319501][T14269] RSP: 002b:00007f9c2d8de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1911.328009][T14269] RAX: ffffffffffffffda RBX: 00007f9c2f90dfa0 RCX: 00007f9c2f6860d9 [ 1911.336061][T14269] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1911.344111][T14269] RBP: 00007f9c2f71d024 R08: 0000000000000000 R09: 0000000000000000 [ 1911.352159][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1911.360208][T14269] R13: 00007f9c2f90e038 R14: 00007f9c2f90dfa0 R15: 00007ffe3aa36678 [ 1911.368330][T14269] [ 1911.985556][T14294] netlink: 180 bytes leftover after parsing attributes in process `syz.3.15464'. [ 1912.114585][T14294] validate_nla: 8 callbacks suppressed [ 1912.114638][T14294] netlink: 'syz.3.15464': attribute type 4 has an invalid length. [ 1912.150979][T14294] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.15464'. [ 1912.239195][T14303] netlink: 'syz.2.15467': attribute type 28 has an invalid length. [ 1912.869799][T14318] sctp: [Deprecated]: syz.2.15472 (pid 14318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1912.869799][T14318] Use struct sctp_sack_info instead [ 1913.737924][T14342] netlink: 'syz.2.15479': attribute type 4 has an invalid length. [ 1913.763078][T14342] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.15479'. [ 1913.908637][T14342] netlink: 'syz.2.15479': attribute type 3 has an invalid length. [ 1913.929331][T14342] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15479'. [ 1914.199667][T14356] netlink: 180 bytes leftover after parsing attributes in process `syz.4.15483'. [ 1914.273476][T14355] netlink: 'syz.4.15483': attribute type 4 has an invalid length. [ 1914.454797][T14362] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1914.570665][T14362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1914.590014][T14368] sctp: [Deprecated]: syz.4.15489 (pid 14368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1914.590014][T14368] Use struct sctp_sack_info instead [ 1914.640924][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.647390][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.279798][T14389] netlink: 'syz.3.15497': attribute type 28 has an invalid length. [ 1915.431860][T14393] netlink: 'syz.4.15499': attribute type 4 has an invalid length. [ 1915.444201][T14393] __nla_validate_parse: 1 callbacks suppressed [ 1915.444243][T14393] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15499'. [ 1915.575523][T14395] netlink: 'syz.4.15499': attribute type 3 has an invalid length. [ 1915.585742][T14395] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15499'. [ 1915.801211][T14397] netlink: 'syz.3.15513': attribute type 28 has an invalid length. [ 1915.914634][T14405] netlink: 180 bytes leftover after parsing attributes in process `syz.0.15500'. [ 1915.952765][T14408] netlink: 'syz.0.15500': attribute type 4 has an invalid length. [ 1915.979996][T14408] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15500'. [ 1917.091942][T14437] netlink: 180 bytes leftover after parsing attributes in process `syz.3.15515'. [ 1917.203234][T14437] netlink: 'syz.3.15515': attribute type 4 has an invalid length. [ 1917.234423][T14446] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.15516'. [ 1917.246143][T14437] netlink: 'syz.3.15515': attribute type 1 has an invalid length. [ 1917.262449][T14445] netlink: 'syz.0.15519': attribute type 2 has an invalid length. [ 1917.267920][T14437] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.15515'. [ 1917.302401][T14446] openvswitch: netlink: IP tunnel dst address not specified [ 1917.505473][T14451] tun0: tun_chr_ioctl cmd 1074025675 [ 1917.513006][T14451] tun0: persist enabled [ 1917.520644][T14451] tun0: tun_chr_ioctl cmd 1074025681 [ 1918.397264][T14476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15528'. [ 1918.697835][T14491] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1918.779029][T14491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1918.928913][T14495] netlink: 'syz.0.15535': attribute type 27 has an invalid length. [ 1920.174046][T14525] netlink: 'syz.1.15544': attribute type 46 has an invalid length. [ 1920.182991][T14525] netlink: 55 bytes leftover after parsing attributes in process `syz.1.15544'. [ 1920.598664][T14540] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.15550'. [ 1921.249757][T14561] netlink: 160444 bytes leftover after parsing attributes in process `syz.3.15554'. [ 1921.343785][T14548] netlink: 'syz.3.15554': attribute type 4 has an invalid length. [ 1921.372076][T14551] IPv6: …: Disabled Multicast RS [ 1921.385931][T14548] netlink: 178700 bytes leftover after parsing attributes in process `syz.3.15554'. [ 1921.477353][T14558] netlink: 'syz.0.15557': attribute type 39 has an invalid length. [ 1921.927428][T14570] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1922.186281][T14570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1923.107942][T14588] netlink: 'syz.2.15564': attribute type 39 has an invalid length. [ 1923.132336][T14567] netlink: 'syz.1.15559': attribute type 27 has an invalid length. [ 1923.225181][T14592] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15566'. [ 1923.260727][T14590] device sit0 left promiscuous mode [ 1923.570282][T14591] device sit0 entered promiscuous mode [ 1923.675187][T14600] netlink: 'syz.4.15571': attribute type 39 has an invalid length. [ 1925.339804][T14627] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.15582'. [ 1926.012150][T14633] netlink: 'syz.3.15583': attribute type 27 has an invalid length. [ 1926.413050][T14636] netlink: 160444 bytes leftover after parsing attributes in process `syz.1.15584'. [ 1926.474449][T14638] netlink: 'syz.1.15584': attribute type 4 has an invalid length. [ 1926.487781][T14638] netlink: 178700 bytes leftover after parsing attributes in process `syz.1.15584'. [ 1927.126308][T14664] netlink: 'syz.1.15591': attribute type 39 has an invalid length. [ 1927.307414][T14669] netlink: 'syz.2.15593': attribute type 46 has an invalid length. [ 1927.329392][T14669] netlink: 55 bytes leftover after parsing attributes in process `syz.2.15593'. [ 1927.551440][T14671] netlink: 'syz.3.15594': attribute type 39 has an invalid length. [ 1927.809360][T14686] syz.1.15599[14686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1927.809532][T14686] syz.1.15599[14686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1928.143423][T14700] netlink: 'syz.0.15602': attribute type 4 has an invalid length. [ 1928.271955][T14699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1928.330477][T14699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1928.339704][T14699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1928.411130][T14700] netlink: 178700 bytes leftover after parsing attributes in process `syz.0.15602'. [ 1928.422799][T14699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1928.465172][T14699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1928.480063][T14694] netlink: 'syz.0.15602': attribute type 4 has an invalid length. [ 1928.519677][T14694] netlink: 178700 bytes leftover after parsing attributes in process `syz.0.15602'. [ 1928.532249][T14699] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1928.836633][T14713] netlink: 'syz.2.15607': attribute type 3 has an invalid length. [ 1928.893727][T14713] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15607'. [ 1929.014522][T14714] netlink: 'syz.3.15606': attribute type 39 has an invalid length. [ 1929.377915][T14729] netlink: 'syz.0.15610': attribute type 46 has an invalid length. [ 1929.386912][T14729] netlink: 55 bytes leftover after parsing attributes in process `syz.0.15610'. [ 1929.823099][T14750] netlink: 160444 bytes leftover after parsing attributes in process `syz.2.15619'. [ 1929.842328][T14750] netlink: 'syz.2.15619': attribute type 4 has an invalid length. [ 1929.850796][T14750] netlink: 178700 bytes leftover after parsing attributes in process `syz.2.15619'. [ 1930.293314][T14770] netlink: 'syz.3.15623': attribute type 39 has an invalid length. [ 1930.354643][T14771] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15622'. [ 1930.651778][T14778] device syzkaller0 entered promiscuous mode [ 1931.059002][T14791] netlink: 'syz.2.15631': attribute type 41 has an invalid length. [ 1931.395749][T14807] delete_channel: no stack [ 1931.530435][T14806] device syzkaller0 entered promiscuous mode [ 1931.833596][T14819] __nla_validate_parse: 3 callbacks suppressed [ 1931.833625][T14819] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.15634'. [ 1932.032358][T14828] netlink: 'syz.2.15639': attribute type 39 has an invalid length. [ 1932.043048][T14810] netlink: 'syz.4.15634': attribute type 4 has an invalid length. [ 1932.071599][T14810] netlink: 178700 bytes leftover after parsing attributes in process `syz.4.15634'. [ 1932.272224][T14826] device syzkaller0 entered promiscuous mode [ 1932.416246][T14842] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.15641'. [ 1932.426144][T14842] netlink: 21192 bytes leftover after parsing attributes in process `syz.3.15641'. [ 1935.707729][T14861] netlink: 'syz.0.15662': attribute type 29 has an invalid length. [ 1935.724687][T14861] netlink: 'syz.0.15662': attribute type 29 has an invalid length. [ 1935.749137][T14861] netlink: 'syz.0.15662': attribute type 29 has an invalid length. [ 1935.881038][T14870] syz.2.15655[14870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1935.881245][T14870] syz.2.15655[14870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1935.954909][T14872] netlink: 'syz.3.15656': attribute type 39 has an invalid length. [ 1936.227207][T14878] netlink: 160444 bytes leftover after parsing attributes in process `syz.4.15658'. [ 1936.367769][T14881] netlink: 'syz.4.15658': attribute type 4 has an invalid length. [ 1936.471360][T14881] netlink: 178700 bytes leftover after parsing attributes in process `syz.4.15658'. [ 1936.519589][T14888] device syzkaller0 entered promiscuous mode [ 1937.386088][T14898] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1937.667929][T14909] netlink: 'syz.4.15674': attribute type 39 has an invalid length. [ 1937.885841][T14910] netlink: 'syz.1.15671': attribute type 29 has an invalid length. [ 1937.901043][T14910] netlink: 'syz.1.15671': attribute type 29 has an invalid length. [ 1937.915288][T14910] netlink: 'syz.1.15671': attribute type 29 has an invalid length. [ 1938.061060][T14924] netlink: 175 bytes leftover after parsing attributes in process `syz.1.15677'. [ 1938.317765][T14932] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.15680'. [ 1938.362286][T14930] device syzkaller0 entered promiscuous mode [ 1938.390633][T14932] netlink: 20624 bytes leftover after parsing attributes in process `syz.1.15680'. [ 1938.430676][T14927] delete_channel: no stack [ 1938.665776][T14942] netlink: 'syz.1.15683': attribute type 21 has an invalid length. [ 1938.686443][T14942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15683'. [ 1938.728035][T14940] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15684'. [ 1938.745653][T14944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15683'. [ 1938.863132][T14944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1938.900577][T14944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1939.845106][T14972] netlink: 160444 bytes leftover after parsing attributes in process `syz.1.15694'. [ 1939.881427][T14972] netlink: 178700 bytes leftover after parsing attributes in process `syz.1.15694'. [ 1939.968100][T14975] device syzkaller0 entered promiscuous mode [ 1940.945685][T15011] validate_nla: 8 callbacks suppressed [ 1940.945724][T15011] netlink: 'syz.2.15706': attribute type 29 has an invalid length. [ 1941.025152][T15011] netlink: 'syz.2.15706': attribute type 29 has an invalid length. [ 1941.041628][T15016] netlink: 'syz.2.15706': attribute type 29 has an invalid length. [ 1941.113981][T15014] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1941.862551][T15028] netlink: 'syz.1.15713': attribute type 39 has an invalid length. [ 1941.978158][T15024] device syzkaller0 entered promiscuous mode [ 1942.313986][T15044] device syzkaller0 entered promiscuous mode [ 1942.392232][T15042] netlink: 175 bytes leftover after parsing attributes in process `syz.0.15715'. [ 1942.696140][T15053] netlink: 'syz.4.15719': attribute type 29 has an invalid length. [ 1942.714981][T15053] netlink: 'syz.4.15719': attribute type 29 has an invalid length. [ 1942.735760][T15059] netlink: 'syz.4.15719': attribute type 29 has an invalid length. [ 1943.109437][T15077] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15724'. [ 1943.126250][T15078] netlink: 'syz.0.15726': attribute type 39 has an invalid length. [ 1943.163265][T15077] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1943.183010][T15077] CPU: 0 PID: 15077 Comm: syz.3.15724 Not tainted syzkaller #0 [ 1943.190667][T15077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1943.200770][T15077] Call Trace: [ 1943.204094][T15077] [ 1943.207065][T15077] dump_stack_lvl+0x188/0x250 [ 1943.211800][T15077] ? show_regs_print_info+0x20/0x20 [ 1943.217135][T15077] ? load_image+0x410/0x410 [ 1943.221725][T15077] sysfs_warn_dup+0x8a/0xa0 [ 1943.226277][T15077] sysfs_do_create_link_sd+0xc0/0x110 [ 1943.231702][T15077] device_add+0x83b/0x1050 [ 1943.236202][T15077] wiphy_register+0x1e74/0x2c40 [ 1943.241138][T15077] ? cfg80211_event_work+0x40/0x40 [ 1943.246312][T15077] ? minstrel_ht_alloc+0x807/0x980 [ 1943.251496][T15077] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1943.257622][T15077] ieee80211_register_hw+0x2a03/0x3a60 [ 1943.263238][T15077] ? ieee80211_register_hw+0xae1/0x3a60 [ 1943.268848][T15077] ? ieee80211_tasklet_handler+0x20/0x20 [ 1943.274545][T15077] ? rcu_is_watching+0x11/0xa0 [ 1943.279539][T15077] ? hrtimer_init+0x10c/0x220 [ 1943.284272][T15077] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1943.290161][T15077] hwsim_new_radio_nl+0xa7d/0xc50 [ 1943.295317][T15077] genl_rcv_msg+0xd0b/0xfa0 [ 1943.299875][T15077] ? genl_bind+0x370/0x370 [ 1943.304352][T15077] ? verify_lock_unused+0x140/0x140 [ 1943.309612][T15077] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 1943.316274][T15077] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1943.322677][T15077] netlink_rcv_skb+0x1e9/0x430 [ 1943.327580][T15077] ? genl_bind+0x370/0x370 [ 1943.332044][T15077] ? netlink_ack+0xb10/0xb10 [ 1943.336698][T15077] ? down_read+0x1aa/0x2e0 [ 1943.341175][T15077] genl_rcv+0x24/0x40 [ 1943.345223][T15077] netlink_unicast+0x78f/0x940 [ 1943.350045][T15077] netlink_sendmsg+0x8ba/0xbe0 [ 1943.354868][T15077] ? netlink_getsockopt+0x570/0x570 [ 1943.360114][T15077] ? aa_sock_msg_perm+0x94/0x150 [ 1943.365117][T15077] ? apparmor_socket_sendmsg+0x88/0x230 [ 1943.370723][T15077] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1943.376062][T15077] ? security_socket_sendmsg+0x7c/0xa0 [ 1943.381568][T15077] ? netlink_getsockopt+0x570/0x570 [ 1943.386826][T15077] ____sys_sendmsg+0x5be/0x8f0 [ 1943.391660][T15077] ? __sys_sendmsg_sock+0x30/0x30 [ 1943.396748][T15077] ? import_iovec+0x6f/0xa0 [ 1943.401309][T15077] ___sys_sendmsg+0x236/0x2e0 [ 1943.406048][T15077] ? __sys_sendmsg+0x290/0x290 [ 1943.410911][T15077] __se_sys_sendmsg+0x1b7/0x2a0 [ 1943.415833][T15077] ? __x64_sys_sendmsg+0x80/0x80 [ 1943.420822][T15077] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1943.426875][T15077] ? lockdep_hardirqs_on+0x94/0x140 [ 1943.432133][T15077] do_syscall_64+0x4c/0xa0 [ 1943.436610][T15077] ? clear_bhb_loop+0x30/0x80 [ 1943.441382][T15077] ? clear_bhb_loop+0x30/0x80 [ 1943.446123][T15077] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1943.452069][T15077] RIP: 0033:0x7f0f47ebe0d9 [ 1943.456529][T15077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1943.476197][T15077] RSP: 002b:00007f0f460d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1943.484667][T15077] RAX: ffffffffffffffda RBX: 00007f0f48146180 RCX: 00007f0f47ebe0d9 [ 1943.492683][T15077] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1943.500701][T15077] RBP: 00007f0f47f55024 R08: 0000000000000000 R09: 0000000000000000 [ 1943.508729][T15077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.516754][T15077] R13: 00007f0f48146218 R14: 00007f0f48146180 R15: 00007ffd5a009638 [ 1943.524838][T15077] [ 1943.941085][T15095] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1944.225593][T15086] netlink: 175 bytes leftover after parsing attributes in process `syz.3.15730'. [ 1944.475168][T15108] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.15737'. [ 1944.503398][T15108] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.15737'. [ 1944.539566][T15107] delete_channel: no stack [ 1944.775906][T15116] netlink: 'syz.1.15739': attribute type 21 has an invalid length. [ 1945.973020][T15137] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1945.993485][T15133] netlink: 175 bytes leftover after parsing attributes in process `syz.4.15747'. [ 1946.135825][T15143] netlink: 'syz.2.15750': attribute type 21 has an invalid length. [ 1946.278382][T15143] tap0: tun_chr_ioctl cmd 1074025677 [ 1946.285406][T15143] tap0: linktype set to 270 [ 1946.918577][T15154] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15762'. [ 1947.418242][T15159] delete_channel: no stack [ 1947.555344][T15154] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1947.565308][T15154] CPU: 0 PID: 15154 Comm: syz.1.15762 Not tainted syzkaller #0 [ 1947.572927][T15154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1947.583036][T15154] Call Trace: [ 1947.586369][T15154] [ 1947.589340][T15154] dump_stack_lvl+0x188/0x250 [ 1947.594055][T15154] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1947.600262][T15154] ? show_regs_print_info+0x20/0x20 [ 1947.605503][T15154] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1947.611702][T15154] sysfs_warn_dup+0x8a/0xa0 [ 1947.616244][T15154] sysfs_do_create_link_sd+0xc0/0x110 [ 1947.621688][T15154] device_add+0x83b/0x1050 [ 1947.626157][T15154] wiphy_register+0x1e74/0x2c40 [ 1947.631106][T15154] ? cfg80211_event_work+0x40/0x40 [ 1947.636264][T15154] ? ieee80211_init_rate_ctrl_alg+0x4d9/0x5e0 [ 1947.642408][T15154] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1947.648518][T15154] ieee80211_register_hw+0x2a03/0x3a60 [ 1947.654057][T15154] ? ieee80211_register_hw+0xae1/0x3a60 [ 1947.659647][T15154] ? ieee80211_tasklet_handler+0x20/0x20 [ 1947.665321][T15154] ? hrtimer_init+0x16c/0x220 [ 1947.670122][T15154] ? hrtimer_init+0x10c/0x220 [ 1947.674842][T15154] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1947.680608][T15154] hwsim_new_radio_nl+0xa7d/0xc50 [ 1947.685681][T15154] genl_rcv_msg+0xd0b/0xfa0 [ 1947.690232][T15154] ? genl_bind+0x370/0x370 [ 1947.694678][T15154] ? mark_lock+0x94/0x320 [ 1947.699039][T15154] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1947.705058][T15154] ? lock_chain_count+0x20/0x20 [ 1947.709951][T15154] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1947.716143][T15154] ? lockdep_hardirqs_on+0x94/0x140 [ 1947.721409][T15154] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1947.727785][T15154] netlink_rcv_skb+0x1e9/0x430 [ 1947.732586][T15154] ? genl_bind+0x370/0x370 [ 1947.737036][T15154] ? netlink_ack+0xb10/0xb10 [ 1947.741670][T15154] ? lockdep_hardirqs_on+0x94/0x140 [ 1947.746924][T15154] ? down_read+0x1aa/0x2e0 [ 1947.751408][T15154] genl_rcv+0x24/0x40 [ 1947.755436][T15154] netlink_unicast+0x78f/0x940 [ 1947.760247][T15154] netlink_sendmsg+0x8ba/0xbe0 [ 1947.765048][T15154] ? netlink_getsockopt+0x570/0x570 [ 1947.770285][T15154] ? aa_sock_msg_perm+0x94/0x150 [ 1947.775267][T15154] ? apparmor_socket_sendmsg+0x88/0x230 [ 1947.780846][T15154] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1947.786168][T15154] ? security_socket_sendmsg+0x7c/0xa0 [ 1947.791657][T15154] ? netlink_getsockopt+0x570/0x570 [ 1947.796903][T15154] ____sys_sendmsg+0x5be/0x8f0 [ 1947.801716][T15154] ? __sys_sendmsg_sock+0x30/0x30 [ 1947.806806][T15154] ? import_iovec+0x6f/0xa0 [ 1947.811354][T15154] ___sys_sendmsg+0x236/0x2e0 [ 1947.816539][T15154] ? __sys_sendmsg+0x290/0x290 [ 1947.821397][T15154] __se_sys_sendmsg+0x1b7/0x2a0 [ 1947.826301][T15154] ? __x64_sys_sendmsg+0x80/0x80 [ 1947.831288][T15154] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1947.837236][T15154] do_syscall_64+0x4c/0xa0 [ 1947.841693][T15154] ? clear_bhb_loop+0x30/0x80 [ 1947.846403][T15154] ? clear_bhb_loop+0x30/0x80 [ 1947.851107][T15154] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1947.857030][T15154] RIP: 0033:0x7f9c2f6860d9 [ 1947.861477][T15154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1947.881268][T15154] RSP: 002b:00007f9c2d8de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1947.889722][T15154] RAX: ffffffffffffffda RBX: 00007f9c2f90dfa0 RCX: 00007f9c2f6860d9 [ 1947.897723][T15154] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1947.905723][T15154] RBP: 00007f9c2f71d024 R08: 0000000000000000 R09: 0000000000000000 [ 1947.913722][T15154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1947.921728][T15154] R13: 00007f9c2f90e038 R14: 00007f9c2f90dfa0 R15: 00007ffe3aa36678 [ 1947.929749][T15154] [ 1947.997265][T15160] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.15755'. [ 1948.015281][T15160] netlink: 20624 bytes leftover after parsing attributes in process `syz.3.15755'. [ 1948.283540][T15178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15763'. [ 1949.231192][T15198] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15769'. [ 1949.252911][T15203] netlink: 'syz.4.15771': attribute type 21 has an invalid length. [ 1949.807093][T15209] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15772'. [ 1950.018163][T15209] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1950.056235][T15209] CPU: 1 PID: 15209 Comm: syz.2.15772 Not tainted syzkaller #0 [ 1950.063917][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1950.074044][T15209] Call Trace: [ 1950.077368][T15209] [ 1950.080350][T15209] dump_stack_lvl+0x188/0x250 [ 1950.085103][T15209] ? show_regs_print_info+0x20/0x20 [ 1950.090377][T15209] ? load_image+0x410/0x410 [ 1950.095016][T15209] sysfs_warn_dup+0x8a/0xa0 [ 1950.099576][T15209] sysfs_do_create_link_sd+0xc0/0x110 [ 1950.105009][T15209] device_add+0x83b/0x1050 [ 1950.109498][T15209] wiphy_register+0x1e74/0x2c40 [ 1950.114615][T15209] ? cfg80211_event_work+0x40/0x40 [ 1950.119797][T15209] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1950.126027][T15209] ? ieee80211_register_hw+0x247b/0x3a60 [ 1950.131808][T15209] ieee80211_register_hw+0x2a03/0x3a60 [ 1950.137343][T15209] ? ieee80211_register_hw+0xae1/0x3a60 [ 1950.142979][T15209] ? ieee80211_tasklet_handler+0x20/0x20 [ 1950.148744][T15209] ? rcu_is_watching+0x11/0xa0 [ 1950.153575][T15209] ? hrtimer_init+0x10c/0x220 [ 1950.158322][T15209] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1950.164143][T15209] hwsim_new_radio_nl+0xa7d/0xc50 [ 1950.169256][T15209] genl_rcv_msg+0xd0b/0xfa0 [ 1950.173838][T15209] ? genl_bind+0x370/0x370 [ 1950.178453][T15209] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1950.184510][T15209] ? lock_chain_count+0x20/0x20 [ 1950.189440][T15209] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1950.195655][T15209] ? lockdep_hardirqs_on+0x94/0x140 [ 1950.200918][T15209] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1950.207143][T15209] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1950.213551][T15209] ? lock_acquire+0x208/0x400 [ 1950.218311][T15209] netlink_rcv_skb+0x1e9/0x430 [ 1950.223141][T15209] ? genl_bind+0x370/0x370 [ 1950.227628][T15209] ? netlink_ack+0xb10/0xb10 [ 1950.232293][T15209] ? down_read+0x1aa/0x2e0 [ 1950.236763][T15209] genl_rcv+0x24/0x40 [ 1950.240778][T15209] netlink_unicast+0x78f/0x940 [ 1950.245594][T15209] netlink_sendmsg+0x8ba/0xbe0 [ 1950.250400][T15209] ? lockdep_hardirqs_on+0x94/0x140 [ 1950.255645][T15209] ? netlink_getsockopt+0x570/0x570 [ 1950.260890][T15209] ? security_socket_sendmsg+0x77/0xa0 [ 1950.266395][T15209] ? security_socket_sendmsg+0x7c/0xa0 [ 1950.271890][T15209] ? netlink_getsockopt+0x570/0x570 [ 1950.277131][T15209] ____sys_sendmsg+0x5be/0x8f0 [ 1950.281941][T15209] ? __sys_sendmsg_sock+0x30/0x30 [ 1950.287005][T15209] ? import_iovec+0x6f/0xa0 [ 1950.291548][T15209] ___sys_sendmsg+0x236/0x2e0 [ 1950.296268][T15209] ? __sys_sendmsg+0x290/0x290 [ 1950.301061][T15209] ? rcu_nmi_exit+0x6f/0xf0 [ 1950.305650][T15209] __se_sys_sendmsg+0x1b7/0x2a0 [ 1950.310564][T15209] ? __x64_sys_sendmsg+0x80/0x80 [ 1950.315749][T15209] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1950.321719][T15209] do_syscall_64+0x4c/0xa0 [ 1950.326177][T15209] ? clear_bhb_loop+0x30/0x80 [ 1950.330976][T15209] ? clear_bhb_loop+0x30/0x80 [ 1950.335783][T15209] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1950.341751][T15209] RIP: 0033:0x7f2cc92dd0d9 [ 1950.346235][T15209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.365885][T15209] RSP: 002b:00007f2cc7535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1950.374342][T15209] RAX: ffffffffffffffda RBX: 00007f2cc9564fa0 RCX: 00007f2cc92dd0d9 [ 1950.382381][T15209] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1950.390413][T15209] RBP: 00007f2cc9374024 R08: 0000000000000000 R09: 0000000000000000 [ 1950.398464][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1950.406511][T15209] R13: 00007f2cc9565038 R14: 00007f2cc9564fa0 R15: 00007ffd9d954888 [ 1950.414567][T15209] [ 1950.850444][T15241] netlink: 'syz.0.15781': attribute type 10 has an invalid length. [ 1950.983221][T15241] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15781'. [ 1951.479139][T15249] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15785'. [ 1952.479428][T15302] netlink: 'syz.0.15800': attribute type 10 has an invalid length. [ 1952.676468][T15308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15803'. [ 1953.875134][T15326] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.15808'. [ 1953.969390][T15330] netlink: 'syz.0.15810': attribute type 21 has an invalid length. [ 1954.139105][T15338] netlink: 'syz.2.15813': attribute type 39 has an invalid length. [ 1954.331589][T15348] device wlan1 entered promiscuous mode [ 1954.347307][T15344] delete_channel: no stack [ 1954.362277][T15344] delete_channel: no stack [ 1954.517844][T15353] netlink: 'syz.4.15820': attribute type 10 has an invalid length. [ 1954.536723][T15353] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15820'. [ 1954.801223][T15367] netlink: 'syz.2.15826': attribute type 39 has an invalid length. [ 1954.816967][T15359] netlink: 160444 bytes leftover after parsing attributes in process `syz.0.15823'. [ 1954.853885][T15359] netlink: 'syz.0.15823': attribute type 4 has an invalid length. [ 1954.872928][T15359] netlink: 178700 bytes leftover after parsing attributes in process `syz.0.15823'. [ 1954.958384][T15369] device syzkaller0 entered promiscuous mode [ 1954.971261][T15371] netlink: 'syz.2.15829': attribute type 3 has an invalid length. [ 1954.980334][T15371] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15829'. [ 1955.009709][T15373] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.15828'. [ 1955.189361][T15377] netlink: 'syz.2.15830': attribute type 21 has an invalid length. [ 1955.433292][T15379] delete_channel: no stack [ 1955.461863][T15379] delete_channel: no stack [ 1955.612672][T15396] device wlan1 entered promiscuous mode [ 1955.661629][T15398] netlink: 'syz.4.15839': attribute type 39 has an invalid length. [ 1955.787596][T15404] netlink: 'syz.0.15840': attribute type 21 has an invalid length. [ 1955.983548][T15401] tap0: tun_chr_ioctl cmd 1074025677 [ 1955.989417][T15401] tap0: linktype set to 270 [ 1956.047912][T15408] device syzkaller0 entered promiscuous mode [ 1956.066840][T15406] netlink: 144 bytes leftover after parsing attributes in process `syz.1.15842'. [ 1956.244148][T15418] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.15847'. [ 1956.332933][T15421] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15848'. [ 1956.443287][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15849'. [ 1957.707399][T15459] validate_nla: 1 callbacks suppressed [ 1957.707471][T15459] netlink: 'syz.3.15858': attribute type 21 has an invalid length. [ 1958.031395][T15467] netlink: 'syz.4.15863': attribute type 3 has an invalid length. [ 1958.040960][T15471] tap0: tun_chr_ioctl cmd 1074025677 [ 1958.046727][T15471] tap0: linktype set to 270 [ 1958.167559][T15475] netlink: 'syz.0.15860': attribute type 4 has an invalid length. [ 1958.262822][T15472] device syzkaller0 entered promiscuous mode [ 1958.520897][T15482] delete_channel: no stack [ 1958.767000][T15498] netlink: 'syz.3.15874': attribute type 2 has an invalid length. [ 1958.777623][T15498] netlink: 'syz.3.15874': attribute type 8 has an invalid length. [ 1958.825837][T15490] delete_channel: no stack [ 1958.850782][T15490] delete_channel: no stack [ 1958.863445][T15501] device wlan1 entered promiscuous mode [ 1959.194008][T15518] netlink: 'syz.1.15879': attribute type 39 has an invalid length. [ 1959.976267][T15529] netlink: 'syz.4.15883': attribute type 39 has an invalid length. [ 1960.173211][T15543] netlink: 'syz.3.15888': attribute type 21 has an invalid length. [ 1960.412069][T15553] __nla_validate_parse: 21 callbacks suppressed [ 1960.412094][T15553] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.15891'. [ 1960.505808][T15561] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.15893'. [ 1960.565848][T15551] delete_channel: no stack [ 1960.571600][T15551] delete_channel: no stack [ 1960.789104][T15574] device wlan0 entered promiscuous mode [ 1960.907753][T15572] netlink: 'syz.4.15896': attribute type 39 has an invalid length. [ 1960.974156][T15580] netlink: 'syz.1.15900': attribute type 39 has an invalid length. [ 1961.196788][T15587] delete_channel: no stack [ 1961.209570][T15587] delete_channel: no stack [ 1961.373398][T15597] device syzkaller0 entered promiscuous mode [ 1961.556060][T15603] delete_channel: no stack [ 1961.818228][T15621] device wlan0 entered promiscuous mode [ 1961.975837][T15631] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.15918'. [ 1962.084512][T15631] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.15918'. [ 1962.601512][T15653] device syzkaller0 entered promiscuous mode [ 1962.655768][T15659] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.15929'. [ 1963.038214][T15671] device wlan0 entered promiscuous mode [ 1963.078047][T15667] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.15932'. [ 1963.159817][T15672] validate_nla: 3 callbacks suppressed [ 1963.159871][T15672] netlink: 'syz.1.15935': attribute type 41 has an invalid length. [ 1963.299086][T15680] netlink: 'syz.4.15937': attribute type 2 has an invalid length. [ 1963.307223][T15680] netlink: 'syz.4.15937': attribute type 8 has an invalid length. [ 1963.329055][T15680] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15937'. [ 1963.433469][T15684] netlink: 'syz.2.15939': attribute type 39 has an invalid length. [ 1963.821722][T15705] device syzkaller0 entered promiscuous mode [ 1963.907571][T15707] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.15946'. [ 1964.225388][T15719] device wlan0 entered promiscuous mode [ 1964.680057][T15730] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.15949'. [ 1964.882918][T15735] netlink: 'syz.0.15954': attribute type 39 has an invalid length. [ 1965.513054][T15753] netlink: 'syz.1.15959': attribute type 2 has an invalid length. [ 1965.539082][T15753] netlink: 'syz.1.15959': attribute type 8 has an invalid length. [ 1965.547647][T15753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15959'. [ 1965.610969][T15758] device syzkaller0 entered promiscuous mode [ 1966.741863][T15794] device wlan0 left promiscuous mode [ 1966.773617][T15800] netlink: 'syz.2.15972': attribute type 9 has an invalid length. [ 1966.818759][T15800] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.15972'. [ 1967.295867][T15805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15974'. [ 1967.728121][T15829] netlink: 'syz.1.15985': attribute type 29 has an invalid length. [ 1967.766448][T15829] netlink: 'syz.1.15985': attribute type 29 has an invalid length. [ 1967.807630][T15829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15985'. [ 1967.989228][T15836] device syzkaller0 entered promiscuous mode [ 1968.005537][T15847] device wlan0 left promiscuous mode [ 1968.036494][T15848] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15991'. [ 1968.062675][T15844] netlink: 168 bytes leftover after parsing attributes in process `syz.3.15991'. [ 1968.092818][T15847] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.15993'. [ 1968.510875][T15854] validate_nla: 7 callbacks suppressed [ 1968.510951][T15854] netlink: 'syz.0.16004': attribute type 41 has an invalid length. [ 1968.871514][T15880] device sit0 left promiscuous mode [ 1968.960155][T15882] netlink: 'syz.3.16003': attribute type 29 has an invalid length. [ 1969.079883][T15889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16001'. [ 1969.118331][T15882] netlink: 'syz.3.16003': attribute type 29 has an invalid length. [ 1969.160003][T15891] netlink: 'syz.3.16003': attribute type 29 has an invalid length. [ 1969.168295][T15894] netlink: 'syz.3.16003': attribute type 29 has an invalid length. [ 1969.306504][T15898] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.16008'. [ 1969.333235][T15892] device syzkaller0 entered promiscuous mode [ 1969.355726][T15898] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1969.368132][T15898] CPU: 0 PID: 15898 Comm: syz.4.16008 Not tainted syzkaller #0 [ 1969.375772][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1969.386018][T15898] Call Trace: [ 1969.389353][T15898] [ 1969.392335][T15898] dump_stack_lvl+0x188/0x250 [ 1969.397086][T15898] ? show_regs_print_info+0x20/0x20 [ 1969.402366][T15898] ? load_image+0x410/0x410 [ 1969.406957][T15898] sysfs_warn_dup+0x8a/0xa0 [ 1969.411541][T15898] sysfs_do_create_link_sd+0xc0/0x110 [ 1969.416972][T15898] device_add+0x83b/0x1050 [ 1969.421464][T15898] wiphy_register+0x1e74/0x2c40 [ 1969.426397][T15898] ? cfg80211_event_work+0x40/0x40 [ 1969.431547][T15898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1969.437745][T15898] ieee80211_register_hw+0x2a03/0x3a60 [ 1969.443268][T15898] ? ieee80211_register_hw+0xae1/0x3a60 [ 1969.448881][T15898] ? ieee80211_tasklet_handler+0x20/0x20 [ 1969.454555][T15898] ? rcu_is_watching+0x11/0xa0 [ 1969.459372][T15898] ? hrtimer_init+0x10c/0x220 [ 1969.464113][T15898] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1969.469883][T15898] hwsim_new_radio_nl+0xa7d/0xc50 [ 1969.475006][T15898] genl_rcv_msg+0xd0b/0xfa0 [ 1969.479592][T15898] ? genl_bind+0x370/0x370 [ 1969.484068][T15898] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1969.490270][T15898] ? lock_chain_count+0x20/0x20 [ 1969.495176][T15898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1969.501396][T15898] ? lockdep_hardirqs_on+0x94/0x140 [ 1969.506651][T15898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1969.512872][T15898] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1969.519277][T15898] ? lock_acquire+0x208/0x400 [ 1969.524033][T15898] netlink_rcv_skb+0x1e9/0x430 [ 1969.528857][T15898] ? genl_bind+0x370/0x370 [ 1969.533334][T15898] ? netlink_ack+0xb10/0xb10 [ 1969.537993][T15898] ? down_read+0x1aa/0x2e0 [ 1969.542473][T15898] genl_rcv+0x24/0x40 [ 1969.546527][T15898] netlink_unicast+0x78f/0x940 [ 1969.551354][T15898] netlink_sendmsg+0x8ba/0xbe0 [ 1969.556152][T15898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1969.562364][T15898] ? netlink_getsockopt+0x570/0x570 [ 1969.567610][T15898] ? apparmor_socket_sendmsg+0x88/0x230 [ 1969.573188][T15898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1969.578516][T15898] ? security_socket_sendmsg+0x7c/0xa0 [ 1969.584013][T15898] ? netlink_getsockopt+0x570/0x570 [ 1969.589260][T15898] ____sys_sendmsg+0x5be/0x8f0 [ 1969.594079][T15898] ? __sys_sendmsg_sock+0x30/0x30 [ 1969.599158][T15898] ? import_iovec+0x6f/0xa0 [ 1969.603742][T15898] ___sys_sendmsg+0x236/0x2e0 [ 1969.608469][T15898] ? __sys_sendmsg+0x290/0x290 [ 1969.613276][T15898] ? lockdep_hardirqs_on+0x94/0x140 [ 1969.618550][T15898] __se_sys_sendmsg+0x1b7/0x2a0 [ 1969.623454][T15898] ? __x64_sys_sendmsg+0x80/0x80 [ 1969.628493][T15898] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1969.634465][T15898] do_syscall_64+0x4c/0xa0 [ 1969.638914][T15898] ? clear_bhb_loop+0x30/0x80 [ 1969.643778][T15898] ? clear_bhb_loop+0x30/0x80 [ 1969.648502][T15898] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1969.654470][T15898] RIP: 0033:0x7f76e466a0d9 [ 1969.658951][T15898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1969.678608][T15898] RSP: 002b:00007f76e28a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1969.687052][T15898] RAX: ffffffffffffffda RBX: 00007f76e48f2090 RCX: 00007f76e466a0d9 [ 1969.695054][T15898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1969.703088][T15898] RBP: 00007f76e4701024 R08: 0000000000000000 R09: 0000000000000000 [ 1969.711090][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1969.719127][T15898] R13: 00007f76e48f2128 R14: 00007f76e48f2090 R15: 00007ffe630ba0a8 [ 1969.727166][T15898] [ 1970.039436][T15910] device wlan0 left promiscuous mode [ 1970.054199][T15908] netlink: 'syz.4.16010': attribute type 41 has an invalid length. [ 1970.119941][T15910] netlink: 'syz.3.16013': attribute type 9 has an invalid length. [ 1970.128026][T15910] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16013'. [ 1970.297334][T15914] device syzkaller0 entered promiscuous mode [ 1970.466840][T15923] netlink: 'syz.4.16017': attribute type 21 has an invalid length. [ 1970.529196][T15926] tap0: tun_chr_ioctl cmd 1074025677 [ 1970.534873][T15926] tap0: linktype set to 270 [ 1970.708324][T15932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16020'. [ 1970.763327][T15938] netlink: 'syz.4.16021': attribute type 29 has an invalid length. [ 1970.789902][T15938] netlink: 'syz.4.16021': attribute type 29 has an invalid length. [ 1970.838084][T15938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16021'. [ 1970.972430][T15941] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.16022'. [ 1971.026230][T15941] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1971.037717][T15941] CPU: 1 PID: 15941 Comm: syz.0.16022 Not tainted syzkaller #0 [ 1971.045354][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1971.055468][T15941] Call Trace: [ 1971.058802][T15941] [ 1971.061770][T15941] dump_stack_lvl+0x188/0x250 [ 1971.066516][T15941] ? show_regs_print_info+0x20/0x20 [ 1971.071822][T15941] ? load_image+0x410/0x410 [ 1971.076423][T15941] sysfs_warn_dup+0x8a/0xa0 [ 1971.080995][T15941] sysfs_do_create_link_sd+0xc0/0x110 [ 1971.086476][T15941] device_add+0x83b/0x1050 [ 1971.090960][T15941] wiphy_register+0x1e74/0x2c40 [ 1971.095903][T15941] ? cfg80211_event_work+0x40/0x40 [ 1971.101107][T15941] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1971.107249][T15941] ieee80211_register_hw+0x2a03/0x3a60 [ 1971.112819][T15941] ? ieee80211_register_hw+0xae1/0x3a60 [ 1971.118439][T15941] ? ieee80211_tasklet_handler+0x20/0x20 [ 1971.124193][T15941] ? rcu_is_watching+0x11/0xa0 [ 1971.129023][T15941] ? hrtimer_init+0x10c/0x220 [ 1971.133800][T15941] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1971.139608][T15941] hwsim_new_radio_nl+0xa7d/0xc50 [ 1971.144734][T15941] genl_rcv_msg+0xd0b/0xfa0 [ 1971.149319][T15941] ? genl_bind+0x370/0x370 [ 1971.153807][T15941] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1971.159868][T15941] ? lock_chain_count+0x20/0x20 [ 1971.164800][T15941] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1971.171022][T15941] ? lockdep_hardirqs_on+0x94/0x140 [ 1971.176288][T15941] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1971.182522][T15941] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1971.188924][T15941] ? lock_acquire+0x208/0x400 [ 1971.193688][T15941] netlink_rcv_skb+0x1e9/0x430 [ 1971.198516][T15941] ? genl_bind+0x370/0x370 [ 1971.203013][T15941] ? netlink_ack+0xb10/0xb10 [ 1971.207684][T15941] ? down_read+0x1aa/0x2e0 [ 1971.212169][T15941] genl_rcv+0x24/0x40 [ 1971.216214][T15941] netlink_unicast+0x78f/0x940 [ 1971.221055][T15941] netlink_sendmsg+0x8ba/0xbe0 [ 1971.225880][T15941] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1971.232121][T15941] ? netlink_getsockopt+0x570/0x570 [ 1971.237383][T15941] ? apparmor_socket_sendmsg+0x88/0x230 [ 1971.243002][T15941] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1971.248353][T15941] ? security_socket_sendmsg+0x7c/0xa0 [ 1971.253878][T15941] ? netlink_getsockopt+0x570/0x570 [ 1971.259152][T15941] ____sys_sendmsg+0x5be/0x8f0 [ 1971.264000][T15941] ? __sys_sendmsg_sock+0x30/0x30 [ 1971.269107][T15941] ? import_iovec+0x6f/0xa0 [ 1971.273673][T15941] ___sys_sendmsg+0x236/0x2e0 [ 1971.278421][T15941] ? __sys_sendmsg+0x290/0x290 [ 1971.283303][T15941] __se_sys_sendmsg+0x1b7/0x2a0 [ 1971.288210][T15941] ? __x64_sys_sendmsg+0x80/0x80 [ 1971.293214][T15941] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1971.299167][T15941] do_syscall_64+0x4c/0xa0 [ 1971.303810][T15941] ? clear_bhb_loop+0x30/0x80 [ 1971.308528][T15941] ? clear_bhb_loop+0x30/0x80 [ 1971.313272][T15941] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1971.319225][T15941] RIP: 0033:0x7f0447dcb0d9 [ 1971.323710][T15941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1971.343374][T15941] RSP: 002b:00007f0446023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1971.351854][T15941] RAX: ffffffffffffffda RBX: 00007f0448052fa0 RCX: 00007f0447dcb0d9 [ 1971.359867][T15941] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1971.367876][T15941] RBP: 00007f0447e62024 R08: 0000000000000000 R09: 0000000000000000 [ 1971.375866][T15941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1971.383853][T15941] R13: 00007f0448053038 R14: 00007f0448052fa0 R15: 00007ffd7726ab98 [ 1971.391897][T15941] [ 1972.052279][T15976] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.16038'. [ 1972.380782][T15987] device syzkaller0 entered promiscuous mode [ 1972.462553][T15992] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16043'. [ 1972.509908][T15992] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1972.518295][T15992] CPU: 1 PID: 15992 Comm: syz.2.16043 Not tainted syzkaller #0 [ 1972.525911][T15992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1972.536040][T15992] Call Trace: [ 1972.539345][T15992] [ 1972.542315][T15992] dump_stack_lvl+0x188/0x250 [ 1972.547060][T15992] ? show_regs_print_info+0x20/0x20 [ 1972.552326][T15992] ? load_image+0x410/0x410 [ 1972.556873][T15992] sysfs_warn_dup+0x8a/0xa0 [ 1972.561406][T15992] sysfs_do_create_link_sd+0xc0/0x110 [ 1972.566829][T15992] device_add+0x83b/0x1050 [ 1972.571279][T15992] wiphy_register+0x1e74/0x2c40 [ 1972.576167][T15992] ? cfg80211_event_work+0x40/0x40 [ 1972.581313][T15992] ? minstrel_ht_alloc+0x807/0x980 [ 1972.586525][T15992] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1972.592629][T15992] ieee80211_register_hw+0x2a03/0x3a60 [ 1972.598122][T15992] ? ieee80211_register_hw+0xae1/0x3a60 [ 1972.603706][T15992] ? ieee80211_tasklet_handler+0x20/0x20 [ 1972.609390][T15992] ? rcu_is_watching+0x11/0xa0 [ 1972.614210][T15992] ? hrtimer_init+0x10c/0x220 [ 1972.618940][T15992] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1972.624734][T15992] hwsim_new_radio_nl+0xa7d/0xc50 [ 1972.629833][T15992] genl_rcv_msg+0xd0b/0xfa0 [ 1972.634368][T15992] ? genl_bind+0x370/0x370 [ 1972.638818][T15992] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1972.644099][T15992] ? verify_lock_unused+0x140/0x140 [ 1972.649385][T15992] ? dev_queue_xmit+0x20/0x20 [ 1972.654091][T15992] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1972.660471][T15992] netlink_rcv_skb+0x1e9/0x430 [ 1972.665314][T15992] ? genl_bind+0x370/0x370 [ 1972.669757][T15992] ? netlink_ack+0xb10/0xb10 [ 1972.674380][T15992] ? down_read+0x1aa/0x2e0 [ 1972.678821][T15992] genl_rcv+0x24/0x40 [ 1972.682882][T15992] netlink_unicast+0x78f/0x940 [ 1972.687680][T15992] netlink_sendmsg+0x8ba/0xbe0 [ 1972.692467][T15992] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1972.698661][T15992] ? netlink_getsockopt+0x570/0x570 [ 1972.703928][T15992] ? apparmor_socket_sendmsg+0x88/0x230 [ 1972.709525][T15992] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1972.714839][T15992] ? security_socket_sendmsg+0x7c/0xa0 [ 1972.720356][T15992] ? netlink_getsockopt+0x570/0x570 [ 1972.725615][T15992] ____sys_sendmsg+0x5be/0x8f0 [ 1972.730440][T15992] ? __sys_sendmsg_sock+0x30/0x30 [ 1972.735491][T15992] ? import_iovec+0x6f/0xa0 [ 1972.740030][T15992] ___sys_sendmsg+0x236/0x2e0 [ 1972.744768][T15992] ? __sys_sendmsg+0x290/0x290 [ 1972.749560][T15992] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1972.755851][T15992] __se_sys_sendmsg+0x1b7/0x2a0 [ 1972.760736][T15992] ? __x64_sys_sendmsg+0x80/0x80 [ 1972.765757][T15992] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1972.771682][T15992] do_syscall_64+0x4c/0xa0 [ 1972.776185][T15992] ? clear_bhb_loop+0x30/0x80 [ 1972.780989][T15992] ? clear_bhb_loop+0x30/0x80 [ 1972.785725][T15992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1972.791783][T15992] RIP: 0033:0x7f2cc92dd0d9 [ 1972.796245][T15992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1972.816032][T15992] RSP: 002b:00007f2cc7535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.824474][T15992] RAX: ffffffffffffffda RBX: 00007f2cc9564fa0 RCX: 00007f2cc92dd0d9 [ 1972.832521][T15992] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1972.840543][T15992] RBP: 00007f2cc9374024 R08: 0000000000000000 R09: 0000000000000000 [ 1972.848649][T15992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1972.856645][T15992] R13: 00007f2cc9565038 R14: 00007f2cc9564fa0 R15: 00007ffd9d954888 [ 1972.864686][T15992] [ 1973.941163][T16020] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.16050'. [ 1974.039544][T16023] validate_nla: 8 callbacks suppressed [ 1974.039566][T16023] netlink: 'syz.3.16049': attribute type 41 has an invalid length. [ 1974.228524][T16026] tun0: tun_chr_ioctl cmd 1074025681 [ 1974.259890][T16018] tun0: tun_chr_ioctl cmd 1074025675 [ 1974.265380][T16018] tun0: persist enabled [ 1974.394253][T16032] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.16065'. [ 1974.433621][T16036] netlink: 'syz.0.16053': attribute type 39 has an invalid length. [ 1974.548583][T16040] device syzkaller0 entered promiscuous mode [ 1974.574155][T16042] netlink: 'syz.2.16056': attribute type 21 has an invalid length. [ 1974.615007][T16042] tap0: tun_chr_ioctl cmd 1074025677 [ 1974.624373][T16042] tap0: linktype set to 270 [ 1974.932792][T16046] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16058'. [ 1974.963155][T16047] device syzkaller0 entered promiscuous mode [ 1974.975969][T16053] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.16071'. [ 1974.996829][T16046] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1975.009081][T16046] CPU: 0 PID: 16046 Comm: syz.1.16058 Not tainted syzkaller #0 [ 1975.016906][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1975.027095][T16046] Call Trace: [ 1975.030414][T16046] [ 1975.033371][T16046] dump_stack_lvl+0x188/0x250 [ 1975.038309][T16046] ? show_regs_print_info+0x20/0x20 [ 1975.043663][T16046] ? load_image+0x410/0x410 [ 1975.048248][T16046] sysfs_warn_dup+0x8a/0xa0 [ 1975.052820][T16046] sysfs_do_create_link_sd+0xc0/0x110 [ 1975.058267][T16046] device_add+0x83b/0x1050 [ 1975.062765][T16046] wiphy_register+0x1e74/0x2c40 [ 1975.067686][T16046] ? cfg80211_event_work+0x40/0x40 [ 1975.072858][T16046] ? minstrel_ht_alloc+0x807/0x980 [ 1975.078042][T16046] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1975.084169][T16046] ieee80211_register_hw+0x2a03/0x3a60 [ 1975.089664][T16046] ? ieee80211_register_hw+0xae1/0x3a60 [ 1975.095266][T16046] ? ieee80211_tasklet_handler+0x20/0x20 [ 1975.100958][T16046] ? rcu_is_watching+0x11/0xa0 [ 1975.105784][T16046] ? hrtimer_init+0x10c/0x220 [ 1975.110487][T16046] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1975.116257][T16046] hwsim_new_radio_nl+0xa7d/0xc50 [ 1975.121336][T16046] genl_rcv_msg+0xd0b/0xfa0 [ 1975.125933][T16046] ? genl_bind+0x370/0x370 [ 1975.130422][T16046] ? mark_lock+0x94/0x320 [ 1975.134798][T16046] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1975.140831][T16046] ? lock_chain_count+0x20/0x20 [ 1975.145749][T16046] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1975.151944][T16046] ? lockdep_hardirqs_on+0x94/0x140 [ 1975.157172][T16046] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1975.163545][T16046] netlink_rcv_skb+0x1e9/0x430 [ 1975.168490][T16046] ? genl_bind+0x370/0x370 [ 1975.172969][T16046] ? netlink_ack+0xb10/0xb10 [ 1975.177583][T16046] ? lockdep_hardirqs_on+0x94/0x140 [ 1975.182841][T16046] ? down_read+0x1aa/0x2e0 [ 1975.187331][T16046] genl_rcv+0x24/0x40 [ 1975.191338][T16046] netlink_unicast+0x78f/0x940 [ 1975.196144][T16046] netlink_sendmsg+0x8ba/0xbe0 [ 1975.200958][T16046] ? lockdep_hardirqs_on+0x94/0x140 [ 1975.206207][T16046] ? netlink_getsockopt+0x570/0x570 [ 1975.211433][T16046] ? netlink_getsockopt+0x570/0x570 [ 1975.216663][T16046] ? netlink_getsockopt+0x570/0x570 [ 1975.222157][T16046] ____sys_sendmsg+0x5be/0x8f0 [ 1975.227011][T16046] ? __sys_sendmsg_sock+0x30/0x30 [ 1975.232076][T16046] ? import_iovec+0x6f/0xa0 [ 1975.236628][T16046] ___sys_sendmsg+0x236/0x2e0 [ 1975.241349][T16046] ? __sys_sendmsg+0x290/0x290 [ 1975.246193][T16046] __se_sys_sendmsg+0x1b7/0x2a0 [ 1975.251083][T16046] ? __x64_sys_sendmsg+0x80/0x80 [ 1975.256057][T16046] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1975.262106][T16046] ? lockdep_hardirqs_on+0x94/0x140 [ 1975.267375][T16046] do_syscall_64+0x4c/0xa0 [ 1975.271851][T16046] ? clear_bhb_loop+0x30/0x80 [ 1975.276560][T16046] ? clear_bhb_loop+0x30/0x80 [ 1975.281290][T16046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1975.287239][T16046] RIP: 0033:0x7f9c2f6860d9 [ 1975.291805][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1975.311522][T16046] RSP: 002b:00007f9c2d8de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1975.319977][T16046] RAX: ffffffffffffffda RBX: 00007f9c2f90dfa0 RCX: 00007f9c2f6860d9 [ 1975.328001][T16046] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1975.336003][T16046] RBP: 00007f9c2f71d024 R08: 0000000000000000 R09: 0000000000000000 [ 1975.343997][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1975.351994][T16046] R13: 00007f9c2f90e038 R14: 00007f9c2f90dfa0 R15: 00007ffe3aa36678 [ 1975.360049][T16046] [ 1975.857427][T16071] device wlan0 left promiscuous mode [ 1975.890660][T16073] netlink: 'syz.0.16068': attribute type 41 has an invalid length. [ 1975.943058][T16071] netlink: 'syz.4.16066': attribute type 9 has an invalid length. [ 1975.961745][T16071] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.16066'. [ 1976.070817][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.077206][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.392265][T16091] netlink: 'syz.0.16088': attribute type 39 has an invalid length. [ 1976.511907][T16089] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16075'. [ 1976.567617][T16089] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1976.618131][T16089] CPU: 0 PID: 16089 Comm: syz.3.16075 Not tainted syzkaller #0 [ 1976.625795][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1976.635949][T16089] Call Trace: [ 1976.639278][T16089] [ 1976.642250][T16089] dump_stack_lvl+0x188/0x250 [ 1976.646990][T16089] ? show_regs_print_info+0x20/0x20 [ 1976.652257][T16089] ? load_image+0x410/0x410 [ 1976.656838][T16089] sysfs_warn_dup+0x8a/0xa0 [ 1976.661413][T16089] sysfs_do_create_link_sd+0xc0/0x110 [ 1976.666861][T16089] device_add+0x83b/0x1050 [ 1976.671361][T16089] wiphy_register+0x1e74/0x2c40 [ 1976.676308][T16089] ? cfg80211_event_work+0x40/0x40 [ 1976.681494][T16089] ? ieee80211_register_hw+0x28e1/0x3a60 [ 1976.687200][T16089] ? ieee80211_register_hw+0x2729/0x3a60 [ 1976.692905][T16089] ? kasan_check_range+0xe/0x290 [ 1976.697913][T16089] ieee80211_register_hw+0x2a03/0x3a60 [ 1976.703428][T16089] ? ieee80211_register_hw+0xae1/0x3a60 [ 1976.709024][T16089] ? ieee80211_tasklet_handler+0x20/0x20 [ 1976.714705][T16089] ? rcu_is_watching+0x11/0xa0 [ 1976.719515][T16089] ? hrtimer_init+0x10c/0x220 [ 1976.724239][T16089] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1976.730013][T16089] hwsim_new_radio_nl+0xa7d/0xc50 [ 1976.735096][T16089] genl_rcv_msg+0xd0b/0xfa0 [ 1976.739688][T16089] ? genl_bind+0x370/0x370 [ 1976.744173][T16089] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1976.749431][T16089] ? verify_lock_unused+0x140/0x140 [ 1976.754684][T16089] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1976.760462][T16089] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1976.766874][T16089] netlink_rcv_skb+0x1e9/0x430 [ 1976.771708][T16089] ? genl_bind+0x370/0x370 [ 1976.776171][T16089] ? netlink_ack+0xb10/0xb10 [ 1976.780821][T16089] ? down_read+0x1aa/0x2e0 [ 1976.785375][T16089] genl_rcv+0x24/0x40 [ 1976.789402][T16089] netlink_unicast+0x78f/0x940 [ 1976.794229][T16089] netlink_sendmsg+0x8ba/0xbe0 [ 1976.799051][T16089] ? lockdep_hardirqs_on+0x94/0x140 [ 1976.804656][T16089] ? netlink_getsockopt+0x570/0x570 [ 1976.809911][T16089] ? aa_sock_msg_perm+0x94/0x150 [ 1976.814941][T16089] ? apparmor_socket_sendmsg+0x88/0x230 [ 1976.820534][T16089] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1976.825864][T16089] ? security_socket_sendmsg+0x7c/0xa0 [ 1976.831362][T16089] ? netlink_getsockopt+0x570/0x570 [ 1976.836718][T16089] ____sys_sendmsg+0x5be/0x8f0 [ 1976.841546][T16089] ? __sys_sendmsg_sock+0x30/0x30 [ 1976.846628][T16089] ? import_iovec+0x6f/0xa0 [ 1976.851305][T16089] ___sys_sendmsg+0x236/0x2e0 [ 1976.856051][T16089] ? __sys_sendmsg+0x290/0x290 [ 1976.860891][T16089] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1976.866685][T16089] __se_sys_sendmsg+0x1b7/0x2a0 [ 1976.871591][T16089] ? __x64_sys_sendmsg+0x80/0x80 [ 1976.876608][T16089] ? lockdep_hardirqs_on+0x94/0x140 [ 1976.881884][T16089] do_syscall_64+0x4c/0xa0 [ 1976.886339][T16089] ? clear_bhb_loop+0x30/0x80 [ 1976.891059][T16089] ? clear_bhb_loop+0x30/0x80 [ 1976.895801][T16089] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1976.901739][T16089] RIP: 0033:0x7f0f47ebe0d9 [ 1976.906201][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.925849][T16089] RSP: 002b:00007f0f46116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1976.934385][T16089] RAX: ffffffffffffffda RBX: 00007f0f48145fa0 RCX: 00007f0f47ebe0d9 [ 1976.942436][T16089] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1976.950445][T16089] RBP: 00007f0f47f55024 R08: 0000000000000000 R09: 0000000000000000 [ 1976.958475][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1976.966510][T16089] R13: 00007f0f48146038 R14: 00007f0f48145fa0 R15: 00007ffd5a009638 [ 1976.974654][T16089] [ 1977.074782][T16101] netlink: 'syz.1.16078': attribute type 21 has an invalid length. [ 1977.120454][T16101] tap0: tun_chr_ioctl cmd 1074025677 [ 1977.127923][T16101] tap0: linktype set to 270 [ 1977.736648][T16125] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.16090'. [ 1978.125250][T16144] device sit0 left promiscuous mode [ 1978.505256][T16149] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16096'. [ 1978.544442][T16149] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1978.574107][T16149] CPU: 1 PID: 16149 Comm: syz.3.16096 Not tainted syzkaller #0 [ 1978.581759][T16149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1978.591874][T16149] Call Trace: [ 1978.595201][T16149] [ 1978.598174][T16149] dump_stack_lvl+0x188/0x250 [ 1978.602926][T16149] ? show_regs_print_info+0x20/0x20 [ 1978.608198][T16149] ? load_image+0x410/0x410 [ 1978.612785][T16149] sysfs_warn_dup+0x8a/0xa0 [ 1978.617350][T16149] sysfs_do_create_link_sd+0xc0/0x110 [ 1978.622789][T16149] device_add+0x83b/0x1050 [ 1978.627269][T16149] wiphy_register+0x1e74/0x2c40 [ 1978.632223][T16149] ? cfg80211_event_work+0x40/0x40 [ 1978.637453][T16149] ? minstrel_ht_alloc+0x807/0x980 [ 1978.642636][T16149] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1978.648777][T16149] ieee80211_register_hw+0x2a03/0x3a60 [ 1978.654314][T16149] ? ieee80211_register_hw+0xae1/0x3a60 [ 1978.659929][T16149] ? ieee80211_tasklet_handler+0x20/0x20 [ 1978.665628][T16149] ? rcu_is_watching+0x11/0xa0 [ 1978.670454][T16149] ? hrtimer_init+0x10c/0x220 [ 1978.675201][T16149] mac80211_hwsim_new_radio+0x209d/0x4050 [ 1978.681007][T16149] hwsim_new_radio_nl+0xa7d/0xc50 [ 1978.686124][T16149] genl_rcv_msg+0xd0b/0xfa0 [ 1978.690705][T16149] ? genl_bind+0x370/0x370 [ 1978.695185][T16149] ? __dev_queue_xmit+0x1b64/0x2e50 [ 1978.700449][T16149] ? verify_lock_unused+0x140/0x140 [ 1978.705731][T16149] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1978.711522][T16149] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 1978.718064][T16149] netlink_rcv_skb+0x1e9/0x430 [ 1978.722904][T16149] ? genl_bind+0x370/0x370 [ 1978.727393][T16149] ? netlink_ack+0xb10/0xb10 [ 1978.732094][T16149] ? down_read+0x1aa/0x2e0 [ 1978.736570][T16149] genl_rcv+0x24/0x40 [ 1978.740607][T16149] netlink_unicast+0x78f/0x940 [ 1978.745437][T16149] netlink_sendmsg+0x8ba/0xbe0 [ 1978.750274][T16149] ? netlink_getsockopt+0x570/0x570 [ 1978.755539][T16149] ? aa_sock_msg_perm+0x94/0x150 [ 1978.760548][T16149] ? apparmor_socket_sendmsg+0x88/0x230 [ 1978.766158][T16149] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1978.771590][T16149] ? security_socket_sendmsg+0x7c/0xa0 [ 1978.777090][T16149] ? netlink_getsockopt+0x570/0x570 [ 1978.782382][T16149] ____sys_sendmsg+0x5be/0x8f0 [ 1978.787202][T16149] ? __sys_sendmsg_sock+0x30/0x30 [ 1978.792407][T16149] ? import_iovec+0x6f/0xa0 [ 1978.796969][T16149] ___sys_sendmsg+0x236/0x2e0 [ 1978.801707][T16149] ? __sys_sendmsg+0x290/0x290 [ 1978.806547][T16149] __se_sys_sendmsg+0x1b7/0x2a0 [ 1978.811449][T16149] ? __x64_sys_sendmsg+0x80/0x80 [ 1978.816471][T16149] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1978.822467][T16149] do_syscall_64+0x4c/0xa0 [ 1978.826961][T16149] ? clear_bhb_loop+0x30/0x80 [ 1978.831698][T16149] ? clear_bhb_loop+0x30/0x80 [ 1978.836442][T16149] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1978.842409][T16149] RIP: 0033:0x7f0f47ebe0d9 [ 1978.846894][T16149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.866534][T16149] RSP: 002b:00007f0f46116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1978.875115][T16149] RAX: ffffffffffffffda RBX: 00007f0f48145fa0 RCX: 00007f0f47ebe0d9 [ 1978.883272][T16149] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1978.891333][T16149] RBP: 00007f0f47f55024 R08: 0000000000000000 R09: 0000000000000000 [ 1978.899503][T16149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1978.907574][T16149] R13: 00007f0f48146038 R14: 00007f0f48145fa0 R15: 00007ffd5a009638 [ 1978.915628][T16149] [ 1979.396803][T16176] tun0: tun_chr_ioctl cmd 1074025675 [ 1979.402530][T16176] tun0: persist enabled [ 1979.408844][T16176] tun0: tun_chr_ioctl cmd 1074025681 [ 1979.690995][T16193] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.16111'. [ 1979.859397][T16188] netlink: 'syz.4.16108': attribute type 10 has an invalid length. [ 1979.873176][T16188] netlink: 'syz.4.16108': attribute type 10 has an invalid length. [ 1979.882207][T16188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16108'. [ 1979.990635][T16197] netlink: 60823 bytes leftover after parsing attributes in process `syz.3.16113'. [ 1980.017365][T16197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16113'. [ 1980.078808][T16202] device syzkaller0 entered promiscuous mode [ 1980.105357][T16204] netlink: 'syz.4.16114': attribute type 10 has an invalid length. [ 1980.114345][T16204] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.124051][T16204] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.133697][T16204] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.142842][T16204] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.165125][T16204] device geneve0 entered promiscuous mode [ 1980.970768][T16213] netlink: 'syz.1.16119': attribute type 3 has an invalid length. [ 1981.051153][T16213] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16119'. [ 1981.164907][T16219] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.16118'. [ 1981.910602][T16240] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.16125'. [ 1982.049302][T16238] netlink: 'syz.3.16126': attribute type 10 has an invalid length. [ 1982.085636][T16238] netlink: 'syz.3.16126': attribute type 10 has an invalid length. [ 1982.105024][T16238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16126'. [ 1982.274687][T16248] netlink: 'syz.0.16129': attribute type 21 has an invalid length. [ 1982.291611][T16250] tun0: tun_chr_ioctl cmd 1074025675 [ 1982.297344][T16250] tun0: persist enabled [ 1982.376609][T16250] tun0: tun_chr_ioctl cmd 1074025681 [ 1982.392110][T16248] tap0: tun_chr_ioctl cmd 1074025677 [ 1982.400314][T16248] tap0: linktype set to 270 [ 1982.520221][T16261] netlink: 'syz.3.16135': attribute type 10 has an invalid length. [ 1982.530162][T16261] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.541075][T16261] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.558939][T16261] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.593219][T16261] device geneve0 entered promiscuous mode [ 1982.735074][T16267] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.16134'. [ 1983.143443][T16285] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16142'. [ 1983.707018][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16146'. [ 1983.720823][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16146'. [ 1983.773371][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16146'. [ 1983.792195][T16296] tun0: tun_chr_ioctl cmd 1074025675 [ 1983.797897][T16296] tun0: persist enabled [ 1983.827648][T16294] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16146'. [ 1983.850982][T16301] tun0: tun_chr_ioctl cmd 1074025681 [ 1983.877519][T16293] netlink: 'syz.1.16145': attribute type 10 has an invalid length. [ 1983.954440][T16293] netlink: 'syz.1.16145': attribute type 10 has an invalid length. [ 1984.123011][T16308] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.145487][T16308] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.168150][T16308] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.184134][T16308] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.205241][T16308] device geneve0 entered promiscuous mode [ 1985.060997][T16341] validate_nla: 1 callbacks suppressed [ 1985.061069][T16341] netlink: 'syz.4.16160': attribute type 3 has an invalid length. [ 1985.236659][T16351] tun1: tun_chr_ioctl cmd 1074025675 [ 1985.242645][T16351] tun1: persist enabled [ 1985.249201][T16351] tun1: tun_chr_ioctl cmd 1074025681 [ 1985.816977][T16353] delete_channel: no stack [ 1985.832851][T16361] netlink: 'syz.1.16176': attribute type 4 has an invalid length. [ 1985.863625][T16360] netlink: 'syz.2.16164': attribute type 10 has an invalid length. [ 1985.881104][T16360] netlink: 'syz.2.16164': attribute type 10 has an invalid length. [ 1986.031534][T16366] netlink: 'syz.3.16169': attribute type 39 has an invalid length. [ 1986.123209][T16371] netlink: 'syz.1.16166': attribute type 10 has an invalid length. [ 1986.143407][T16371] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.154895][T16371] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.164963][T16371] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.188065][T16371] device geneve0 entered promiscuous mode [ 1986.611375][T16380] netlink: 'syz.3.16175': attribute type 3 has an invalid length. [ 1986.621275][T16382] __nla_validate_parse: 5 callbacks suppressed [ 1986.621317][T16382] netlink: 60823 bytes leftover after parsing attributes in process `syz.1.16173'. [ 1986.638963][T16380] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16175'. [ 1986.649610][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16173'. [ 1987.643505][T16399] netlink: 'syz.0.16180': attribute type 10 has an invalid length. [ 1987.661746][T16399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16180'. [ 1987.686319][T16410] netlink: 'syz.4.16184': attribute type 39 has an invalid length. [ 1987.726387][T16392] delete_channel: no stack [ 1988.424100][T16439] netlink: 'syz.1.16192': attribute type 3 has an invalid length. [ 1988.448519][T16439] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16192'. [ 1989.567857][T16455] delete_channel: no stack [ 1989.629344][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16204'. [ 1989.742788][T16466] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.16204'. [ 1989.756786][T16468] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.16203'. [ 1989.768137][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16203'. [ 1989.786776][T16466] netlink: 21192 bytes leftover after parsing attributes in process `syz.1.16204'. [ 1990.099532][T16476] validate_nla: 4 callbacks suppressed [ 1990.099582][T16476] netlink: 'syz.3.16207': attribute type 3 has an invalid length. [ 1990.213154][T16485] netlink: 'syz.2.16212': attribute type 39 has an invalid length. [ 1990.407236][T16491] delete_channel: no stack [ 1990.432578][T16494] delete_channel: no stack [ 1990.437460][T16494] delete_channel: no stack [ 1990.463189][T16495] netlink: 'syz.0.16215': attribute type 4 has an invalid length. [ 1991.026128][T16517] netlink: 'syz.3.16224': attribute type 10 has an invalid length. [ 1991.066740][T16519] netlink: 'syz.1.16225': attribute type 39 has an invalid length. [ 1991.236699][T16523] netlink: 'syz.1.16226': attribute type 3 has an invalid length. [ 1991.617482][T16541] netlink: 'syz.3.16232': attribute type 4 has an invalid length. [ 1991.733003][T16544] __nla_validate_parse: 10 callbacks suppressed [ 1991.733066][T16544] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.16234'. [ 1991.801676][T16544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16234'. [ 1991.831878][T16551] netlink: 'syz.2.16237': attribute type 39 has an invalid length. [ 1992.013367][T16554] netlink: 'syz.0.16238': attribute type 10 has an invalid length. [ 1992.245720][T16560] netlink: 'syz.0.16242': attribute type 22 has an invalid length. [ 1992.258017][T16562] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16241'. [ 1992.269122][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16242'. [ 1992.361459][T16560] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.16242'. [ 1992.377964][T16560] netlink: 21192 bytes leftover after parsing attributes in process `syz.0.16242'. [ 1993.164745][T16587] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.16252'. [ 1993.175380][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16252'. [ 1993.252668][T16590] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.16250'. [ 1993.322922][T16597] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16255'. [ 1994.435739][T16639] delete_channel: no stack [ 1994.453877][T16639] delete_channel: no stack [ 1995.136165][T16665] validate_nla: 11 callbacks suppressed [ 1995.136220][T16665] netlink: 'syz.2.16282': attribute type 3 has an invalid length. [ 1995.366168][T16675] device syzkaller0 entered promiscuous mode [ 1995.602050][T16682] delete_channel: no stack [ 1995.608120][T16682] delete_channel: no stack [ 1995.822681][T16689] netlink: 'syz.3.16291': attribute type 3 has an invalid length. [ 1995.847576][T16691] netlink: 'syz.0.16292': attribute type 39 has an invalid length. [ 1996.116735][T16699] netlink: 'syz.0.16295': attribute type 3 has an invalid length. [ 1996.346315][T16705] device syzkaller0 entered promiscuous mode [ 1997.319224][T16722] __nla_validate_parse: 28 callbacks suppressed [ 1997.319299][T16722] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.16303'. [ 1997.339591][T16719] netlink: 'syz.3.16305': attribute type 3 has an invalid length. [ 1997.348128][T16719] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.16305'. [ 1997.397440][T16722] delete_channel: no stack [ 1997.410792][T16722] delete_channel: no stack [ 1997.466091][T16728] netlink: 'syz.2.16306': attribute type 39 has an invalid length. [ 1997.966956][T16738] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.16310'. [ 1998.117633][T16749] netlink: 'syz.1.16314': attribute type 3 has an invalid length. [ 1998.125796][T16749] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.16314'. [ 2003.765021][T16753] chnl_net:caif_netlink_parms(): no params data found [ 2003.811721][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.819029][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.827085][T16753] device bridge_slave_0 entered promiscuous mode [ 2003.835887][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.843180][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 2003.851849][T16753] device bridge_slave_1 entered promiscuous mode [ 2003.875967][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2003.887726][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2003.912886][T16753] team0: Port device team_slave_0 added [ 2003.923649][T16753] team0: Port device team_slave_1 added [ 2003.943317][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2003.950647][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2003.976676][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2003.990434][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2003.997539][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.023783][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2004.055403][T16753] device hsr_slave_0 entered promiscuous mode [ 2004.062663][T16753] device hsr_slave_1 entered promiscuous mode [ 2004.069560][T16753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2004.077161][T16753] Cannot create hsr debugfs directory [ 2004.169760][T16753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2004.179783][T16753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2004.189334][T16753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2004.198836][T16753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2004.222546][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.229757][T16753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2004.237100][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.244282][T16753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.293174][T16753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2004.307913][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2004.323002][T24328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.331261][T24328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.340998][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2004.357448][T16753] 8021q: adding VLAN 0 to HW filter on device team0 [ 2004.371159][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2004.380333][T24328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2004.387485][T24328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2004.399012][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2004.408967][T24328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2004.416078][T24328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2004.441489][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2004.450949][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2004.466579][T24328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2004.481660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2004.508265][T16761] netlink: 'syz.0.16317': attribute type 3 has an invalid length. [ 2004.519120][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2004.524239][T16761] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16317'. [ 2004.538043][T16753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2004.635424][T16765] netlink: 'syz.1.16320': attribute type 39 has an invalid length. [ 2004.745699][T16768] netlink: 'syz.0.16319': attribute type 3 has an invalid length. [ 2004.764590][T16768] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.16319'. [ 2004.843556][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2004.851513][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2004.866024][T16753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.999467][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2005.010887][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2005.037153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2005.045919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2005.055825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2005.064220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2005.075717][T16753] device veth0_vlan entered promiscuous mode [ 2005.090205][T16753] device veth1_vlan entered promiscuous mode [ 2005.113522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2005.123664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2005.132931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2005.142169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2005.155212][T16753] device veth0_macvtap entered promiscuous mode [ 2005.167838][T16753] device veth1_macvtap entered promiscuous mode [ 2005.186501][T16753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2005.194649][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2005.205071][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2005.213516][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2005.222825][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2005.235189][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.246208][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.257539][T16753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2005.266788][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2005.276641][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2005.289929][T16753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.298991][T16753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.307733][T16753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.316793][T16753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.401672][ T4598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.410237][ T4598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.442477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2005.456308][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.465240][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.474987][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2005.553943][T16781] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.16316'. [ 2005.653683][T16783] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.16321'. [ 2005.667823][T16783] delete_channel: no stack [ 2005.674097][T16783] delete_channel: no stack [ 2005.750011][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 2005.986321][T16787] netlink: 'syz.2.16324': attribute type 3 has an invalid length. [ 2006.032866][T16787] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.16324'. [ 2006.076847][T16789] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.16325'. [ 2007.838688][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 2009.909127][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 2011.988728][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 2037.510549][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.516941][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.951177][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.957741][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2126.628700][ T4227] Bluetooth: hci4: command 0x0406 tx timeout [ 2134.149109][ T27] INFO: task syz.4.16191:16438 blocked for more than 143 seconds. [ 2134.156971][ T27] Not tainted syzkaller #0 [ 2134.166472][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2134.177419][ T27] task:syz.4.16191 state:D stack:25264 pid:16438 ppid: 24031 flags:0x00004002 [ 2134.189453][ T27] Call Trace: [ 2134.192850][ T27] [ 2134.195827][ T27] __schedule+0x11c3/0x4350 [ 2134.201680][ T27] ? perf_event_release_kernel+0x55e/0x850 [ 2134.207645][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 2134.214035][ T27] ? release_firmware_map_entry+0x190/0x190 [ 2134.221195][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2134.227220][ T27] schedule+0x11b/0x1e0 [ 2134.232667][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 2134.238211][ T27] _free_event+0x34/0xe30 [ 2134.243821][ T27] perf_event_release_kernel+0x7c4/0x850 [ 2134.250829][ T27] ? __might_sleep+0xf0/0xf0 [ 2134.255602][ T27] ? calc_timer_values+0x410/0x410 [ 2134.262137][ T27] ? __might_sleep+0xf0/0xf0 [ 2134.266831][ T27] ? perf_mmap+0x1480/0x1480 [ 2134.272745][ T27] perf_release+0x37/0x40 [ 2134.277137][ T27] __fput+0x212/0x8c0 [ 2134.284838][ T27] task_work_run+0x125/0x1a0 [ 2134.290833][ T27] do_exit+0x635/0x2110 [ 2134.295134][ T27] ? put_task_struct+0x80/0x80 [ 2134.301151][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2134.307382][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 2134.313960][ T27] do_group_exit+0x12c/0x2f0 [ 2134.319897][ T27] get_signal+0x7eb/0x12e0 [ 2134.324496][ T27] arch_do_signal_or_restart+0xe6/0x12a0 [ 2134.331751][ T27] ? slab_free_freelist_hook+0xec/0x170 [ 2134.337457][ T27] ? rcu_is_watching+0x11/0xa0 [ 2134.343418][ T27] ? kmem_cache_free+0x14c/0x210 [ 2134.349631][ T27] ? get_sigframe_size+0x10/0x10 [ 2134.354642][ T27] ? fd_install+0x2b1/0x4c0 [ 2134.360469][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2134.366529][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 2134.373277][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 2134.379793][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 2134.385407][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 2134.394522][ T27] do_syscall_64+0x58/0xa0 [ 2134.400356][ T27] ? clear_bhb_loop+0x30/0x80 [ 2134.405108][ T27] ? clear_bhb_loop+0x30/0x80 [ 2134.411085][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2134.417050][ T27] RIP: 0033:0x7f76e466a0d9 [ 2134.423092][ T27] RSP: 002b:00007f76e28a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2134.433218][ T27] RAX: 0000000000000008 RBX: 00007f76e48f2090 RCX: 00007f76e466a0d9 [ 2134.442607][ T27] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000007 [ 2134.452059][ T27] RBP: 00007f76e4701024 R08: 0000000000000000 R09: 0000000000000000 [ 2134.461490][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2134.471792][ T27] R13: 00007f76e48f2128 R14: 00007f76e48f2090 R15: 00007ffe630ba0a8 [ 2134.481358][ T27] [ 2134.484503][ T27] [ 2134.484503][ T27] Showing all locks held in the system: [ 2134.493326][ T27] 1 lock held by khungtaskd/27: [ 2134.498211][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 2134.508550][ T27] 2 locks held by getty/3949: [ 2134.513281][ T27] #0: ffff88814cf12098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2134.523360][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 2134.534360][ T27] 4 locks held by kworker/u4:2/24328: [ 2134.540391][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 2134.550670][ T27] #1: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 2134.560258][ T27] #2: ffff88801adb0688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 2134.570850][ T27] #3: ffff888061f78d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10f0 [ 2134.580816][ T27] [ 2134.583211][ T27] ============================================= [ 2134.583211][ T27] [ 2134.591806][ T27] NMI backtrace for cpu 1 [ 2134.596343][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 2134.603722][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2134.613943][ T27] Call Trace: [ 2134.617263][ T27] [ 2134.620239][ T27] dump_stack_lvl+0x188/0x250 [ 2134.624976][ T27] ? show_regs_print_info+0x20/0x20 [ 2134.630222][ T27] ? load_image+0x410/0x410 [ 2134.634782][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 2134.639975][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 2134.644971][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 2134.651143][ T27] ? _printk+0xda/0x130 [ 2134.655373][ T27] ? load_image+0x410/0x410 [ 2134.659903][ T27] ? load_image+0x410/0x410 [ 2134.664458][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2134.670667][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 2134.676722][ T27] watchdog+0xe1b/0xe60 [ 2134.680917][ T27] kthread+0x42e/0x520 [ 2134.685027][ T27] ? hungtask_pm_notify+0x40/0x40 [ 2134.690075][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2134.694706][ T27] ret_from_fork+0x1f/0x30 [ 2134.699204][ T27] [ 2134.702757][ T27] Sending NMI from CPU 1 to CPUs 0: [ 2134.708044][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 2134.711672][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 2134.723168][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 2134.730655][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2134.740776][ T27] Call Trace: [ 2134.744099][ T27] [ 2134.747056][ T27] dump_stack_lvl+0x188/0x250 [ 2134.751765][ T27] ? show_regs_print_info+0x20/0x20 [ 2134.756999][ T27] ? load_image+0x410/0x410 [ 2134.761551][ T27] panic+0x2f8/0x850 [ 2134.765491][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 2134.771148][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 2134.775854][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 2134.781521][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 2134.787735][ T27] watchdog+0xe5a/0xe60 [ 2134.791976][ T27] kthread+0x42e/0x520 [ 2134.796112][ T27] ? hungtask_pm_notify+0x40/0x40 [ 2134.801217][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2134.805873][ T27] ret_from_fork+0x1f/0x30 [ 2134.810359][ T27] [ 2134.813895][ T27] Kernel Offset: disabled [ 2134.818258][ T27] Rebooting in 86400 seconds..