last executing test programs: 23.703640807s ago: executing program 1 (id=10630): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x8041) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x10a900, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 22.137592403s ago: executing program 1 (id=10639): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/37, 0x25}], 0x1}, 0x10001) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000600)={&(0x7f0000000580)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x80, 0x0}, 0x48811) mkdir(0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0xa, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 21.298173432s ago: executing program 1 (id=10647): socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, 0x0, 0x4040081) close(0x3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r4, &(0x7f0000001bc0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/2, 0x2}], 0x4}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xb1, 0x5, 0x2, 0x9, 0x0, 0xfffffffffffffeff, 0x8000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x1}, 0x20, 0xffffffffffffffff, 0x9, 0x1, 0x8000000000000000, 0x1, 0x4, 0x0, 0xff, 0x0, 0xc1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) 17.606934337s ago: executing program 1 (id=10655): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000005c0), 0x4}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x725006, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'wg2\x00', 0x2000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000d0000000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001812", @ANYRES32], &(0x7f0000000740)='syzkaller\x00', 0xa2e, 0x0, 0x0, 0x41000, 0x68, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000000900)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x3, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000980)=[{0x4, 0x2, 0xe}, {0x5, 0x5, 0x1, 0xc}, {0x2, 0x5, 0x4, 0x4}, {0x3, 0x1, 0x10, 0x9}, {0x2, 0x5, 0xf, 0xc}], 0x10, 0xab25}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000008000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe0085000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) r6 = syz_clone(0x800000, &(0x7f00000001c0)="297cb942e88d182df981bed56cc72de661ca1b2d6dce8df9be0f32fdd05ee6324f5162b98113c7b4ac41519a8c0b58cecba11154a9c0d37f484b54", 0x3b, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000340)="7c0d17bc2a81264281f7f021462dc86b4a36cba1abfe1442708b1b21b948d0bd9639df1ee6e9e9fb3f6c20af79455e674cd7331721b2dd10e4d7a19e1aa76afca011c0119521aa301804f6eac2fce116bb1deb8d37b8611b226e090a4e44191f28543de71b9fe269b1d548ec5e1995732c5db9dd16652bbb8ee5c5f2cce8e742d2721e7447630d19c5c47ab41daf756fae0bd623c488fa206e78068d822b4e4241103563e668e71dc1708c8b36e8b8ab2b988363e29fa3745f4931f20cf7a20c144eb4135f7fa63ff1e8fe16fa55066565") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffffffffff4a}, 0x101d0, 0x2, 0xc2ba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, r6, 0xd, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xcfa4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ac0)='cpu.max.burst\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) 16.996297391s ago: executing program 1 (id=10660): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000500008000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f700000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x6, 0x8}, @exit, @map_idx={0x18, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x2, 0xf6, &(0x7f0000000a80)=""/246, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x8, 0x1, 0xac}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c40)=[{0x5, 0x4, 0x10, 0xd}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x4, 0xe, 0x7}, {0x4, 0x4, 0x10, 0x6}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xe, 0x1c}, {0x3, 0x3, 0xd, 0x5}, {0x0, 0x1, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001040)={r3, 0x0, 0xdd, 0x0, &(0x7f0000000e40)="e83448d83a6cc0f113df9d08210887d4a83024c150baf125d9ac784e8d41800210cee4fb8e1836b5fab7d7946445f650ff33179904d672f23e52a7c87db4c3ed0e46ad533acb9532c1dc21ef4e6cb74eb3dbba857d6317dd281e7401ad65e0980c0ba61df3d8a6a4cddc95e924e3f2a4652e9ffcb88fe374c7cc87e4cc6725fbadacfc7c2c8207a0f58d4e9678aa5cc251b48902e1f5f100d5c940c867c33c97f92b814d51806828d7de47940968ae78130ab2ec91c82f5654ee94c2943c9d03f0236212783a140ef1fa9b7d7343b45f8e748e4ea18d9a7068ad18cf68", 0x0, 0x4, 0x0, 0xcf, 0x0, &(0x7f0000000f40)="cad386f8f56ab0a88d70af9dd32d303cfd5434c80ee3699433f11111299fbc0c1ec0e22f28c8c5316e7c178717c37ed28b2b338c7d1faae7164239a41e0701ad26901c865f90e1875dd215c07ab1ef624e35dfc41474865c267d4b62fb197484881f199bfdee82409c559df5047342e9ee8b16885b64aef541e90fcb8073eef420c1c37b3b0f67108aa82626805c2a9f4401be10ee1011fa7c7bd95c109c77189ac7a57e2f2b9b3a06d93706a5bd765d1cf6d97a37184f5f5e7dff5dfea92d8e90012841942b99e5b293a76a5adf0d", 0x0, 0x2, 0x0, 0x11af1108}, 0x50) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x240048c0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb, '\x00', 0x0, r6, 0x7ff, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="186300000d00000000000800000000009500000000000000da63092e437ac0cdf71860a300a78105b6bc3d4736b89da6dca1526ece95a1bb2f2d8eeab379df23f3f916de66b5f492d623a91af5bb14dba73aacf8927a26d3610c4e2790589964a0a1f2120407efd88ce714e6f62d62de4653838fcc7c332c6b"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r6, r6, r6], &(0x7f0000000900)=[{0x3, 0x2, 0x9, 0x55134e6ea0079c75}, {0x0, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xc, 0xc}, {0x0, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0x800}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xf0d, '\x00', r7, r6, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 15.574884503s ago: executing program 1 (id=10666): socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, 0x0, 0x4040081) close(0x3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r4, &(0x7f0000001bc0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/2, 0x2}], 0x4}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xb1, 0x5, 0x2, 0x9, 0x0, 0xfffffffffffffeff, 0x8000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x1}, 0x20, 0xffffffffffffffff, 0x9, 0x1, 0x8000000000000000, 0x1, 0x4, 0x0, 0xff, 0x0, 0xc1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) 5.284144028s ago: executing program 3 (id=10706): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) 5.091619693s ago: executing program 3 (id=10707): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, 0x0, 0x0) 5.016966395s ago: executing program 0 (id=10708): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000500008000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f700000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x6, 0x8}, @exit, @map_idx={0x18, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x2, 0xf6, &(0x7f0000000a80)=""/246, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x8, 0x1, 0xac}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c40)=[{0x5, 0x4, 0x10, 0xd}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x4, 0xe, 0x7}, {0x4, 0x4, 0x10, 0x6}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xe, 0x1c}, {0x3, 0x3, 0xd, 0x5}, {0x0, 0x1, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001040)={r3, 0x0, 0xdd, 0x0, &(0x7f0000000e40)="e83448d83a6cc0f113df9d08210887d4a83024c150baf125d9ac784e8d41800210cee4fb8e1836b5fab7d7946445f650ff33179904d672f23e52a7c87db4c3ed0e46ad533acb9532c1dc21ef4e6cb74eb3dbba857d6317dd281e7401ad65e0980c0ba61df3d8a6a4cddc95e924e3f2a4652e9ffcb88fe374c7cc87e4cc6725fbadacfc7c2c8207a0f58d4e9678aa5cc251b48902e1f5f100d5c940c867c33c97f92b814d51806828d7de47940968ae78130ab2ec91c82f5654ee94c2943c9d03f0236212783a140ef1fa9b7d7343b45f8e748e4ea18d9a7068ad18cf68", 0x0, 0x4, 0x0, 0xcf, 0x0, &(0x7f0000000f40)="cad386f8f56ab0a88d70af9dd32d303cfd5434c80ee3699433f11111299fbc0c1ec0e22f28c8c5316e7c178717c37ed28b2b338c7d1faae7164239a41e0701ad26901c865f90e1875dd215c07ab1ef624e35dfc41474865c267d4b62fb197484881f199bfdee82409c559df5047342e9ee8b16885b64aef541e90fcb8073eef420c1c37b3b0f67108aa82626805c2a9f4401be10ee1011fa7c7bd95c109c77189ac7a57e2f2b9b3a06d93706a5bd765d1cf6d97a37184f5f5e7dff5dfea92d8e90012841942b99e5b293a76a5adf0d", 0x0, 0x2, 0x0, 0x11af1108}, 0x50) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x240048c0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb, '\x00', 0x0, r6, 0x7ff, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="186300000d00000000000800000000009500000000000000da63092e437ac0cdf71860a300a78105b6bc3d4736b89da6dca1526ece95a1bb2f2d8eeab379df23f3f916de66b5f492d623a91af5bb14dba73aacf8927a26d3610c4e2790589964a0a1f2120407efd88ce714e6f62d62de4653838fcc7c332c6b"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r6, r8, r6], &(0x7f0000000900)=[{0x3, 0x2, 0x9, 0x55134e6ea0079c75}, {0x0, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xc, 0xc}, {0x0, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0x800}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xf0d, '\x00', r7, r6, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 4.832945949s ago: executing program 3 (id=10711): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x5b, 0x6, 0x2, 0x4, 0x0, 0x7fe, 0x18, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x6021, 0xfff, 0xb, 0x2, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0xe, r0, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x40010080) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0, 0x8, 0xe, 0x2}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r6, 0x2000012, 0xa, 0x0, &(0x7f0000000400)="63eced8edf0004082115", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r3, 0x0, 0x48, 0x5a, &(0x7f0000000340)="899edbb986f8186991791f206da9383e829a1aadb7b344f3a6cfbd9e23dc187cd74149ff38b20fedcab623ff9c2b75860842a6b6ebe707689a91874ed65f416bca95a82e0c90face", &(0x7f0000000540)=""/90, 0x0, 0x0, 0x89, 0xcf, &(0x7f0000001680)="b78c74ecd0ff47fe606a89ea4c4793d97720002fb2b8d2f4155fa38d92e6ec5c9ea927483919e3bcc3443f42818f66085fc1e1b07ca944a7c3da5a38481485be5e3423fe6204078ec7dfa762905faf98f46c9d423f63630e757da814593f6701016c961b6a2929dae6e67802ef43be706ffa43249329a399b73470c1b8165445f7272a4307ea418363", &(0x7f0000001740)="5bd5a9a27f64cdc942f85b1586e4edaf7f64d70c930fadccd00d79f3c33b2e6cd0e24d34828b159a340fc8b2bca9edd87d2f48688a89798331ef2a8691612f0187eea8103c8b216575585e3e332c59bc63f5294f9fe66c3ecd8e952a4d96a47d3f95cfb81da57bb22fe09e82740a087760a8e191fd20c81e83655ee6b4c172a63e41a71366c02fd8dd592cae1568ab8718284444e00f836ba74e71467782a198f26429c2402c3222e6ef84b34be6e8b32317ea13cb561ea3688a1f239305d3cf62748862156c4e02001f325dd9bdbf", 0x2, 0x0, 0xf3}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a000000f8ffff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4020804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.257310632s ago: executing program 3 (id=10712): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.90714668s ago: executing program 2 (id=10713): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 3.865091481s ago: executing program 0 (id=10714): r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x1, 0x4b, &(0x7f0000000500), 0x4) 3.772884833s ago: executing program 4 (id=10715): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x4, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xffff, 0x101}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) close(0x3) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3.712464355s ago: executing program 2 (id=10716): r0 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) 3.689942385s ago: executing program 0 (id=10717): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) 3.582910947s ago: executing program 2 (id=10718): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000500008000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f700000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000001140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x6, 0x8}, @exit, @map_idx={0x18, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x2, 0xf6, &(0x7f0000000a80)=""/246, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x8, 0x1, 0xac}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c40)=[{0x5, 0x4, 0x10, 0xd}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x4, 0xe, 0x7}, {0x4, 0x4, 0x10, 0x6}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xe, 0x1c}, {0x3, 0x3, 0xd, 0x5}, {0x0, 0x1, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001040)={r3, 0x0, 0xdd, 0x0, &(0x7f0000000e40)="e83448d83a6cc0f113df9d08210887d4a83024c150baf125d9ac784e8d41800210cee4fb8e1836b5fab7d7946445f650ff33179904d672f23e52a7c87db4c3ed0e46ad533acb9532c1dc21ef4e6cb74eb3dbba857d6317dd281e7401ad65e0980c0ba61df3d8a6a4cddc95e924e3f2a4652e9ffcb88fe374c7cc87e4cc6725fbadacfc7c2c8207a0f58d4e9678aa5cc251b48902e1f5f100d5c940c867c33c97f92b814d51806828d7de47940968ae78130ab2ec91c82f5654ee94c2943c9d03f0236212783a140ef1fa9b7d7343b45f8e748e4ea18d9a7068ad18cf68", 0x0, 0x4, 0x0, 0xcf, 0x0, &(0x7f0000000f40)="cad386f8f56ab0a88d70af9dd32d303cfd5434c80ee3699433f11111299fbc0c1ec0e22f28c8c5316e7c178717c37ed28b2b338c7d1faae7164239a41e0701ad26901c865f90e1875dd215c07ab1ef624e35dfc41474865c267d4b62fb197484881f199bfdee82409c559df5047342e9ee8b16885b64aef541e90fcb8073eef420c1c37b3b0f67108aa82626805c2a9f4401be10ee1011fa7c7bd95c109c77189ac7a57e2f2b9b3a06d93706a5bd765d1cf6d97a37184f5f5e7dff5dfea92d8e90012841942b99e5b293a76a5adf0d", 0x0, 0x2, 0x0, 0x11af1108}, 0x50) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x240048c0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb, '\x00', 0x0, r6, 0x7ff, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="186300000d00000000000800000000009500000000000000da63092e437ac0cdf71860a300a78105b6bc3d4736b89da6dca1526ece95a1bb2f2d8eeab379df23f3f916de66b5f492d623a91af5bb14dba73aacf8927a26d3610c4e2790589964a0a1f2120407efd88ce714e6f62d62de4653838fcc7c332c6b"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r6, r6, r8, r6], &(0x7f0000000900), 0x10, 0x800}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xf0d, '\x00', r7, r6, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 3.510500059s ago: executing program 4 (id=10719): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="f101ff8cffeb"}) 3.509119609s ago: executing program 0 (id=10720): socket$kcm(0x10, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="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", 0x165}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000840)}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x8d91, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYBLOB="00000000000000000059fa03caf0283a4c00"/27, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000e4cb19c30d13c48c7b3a0000181100983ccfc70b96002e150872906787f718ac739ab6d9cc98e3bf14", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x0, 0x4, 0x0, 0x7ff2, 0xaa90, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0xf}, 0x14105, 0x32, 0xfffffbff, 0x6, 0x2, 0x6, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r8, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1b, 0x0}, 0x4000080) recvmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) 3.201758676s ago: executing program 2 (id=10721): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0), 0x4) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x8041) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x10a900, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2.970918852s ago: executing program 4 (id=10722): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x5b, 0x6, 0x2, 0x4, 0x0, 0x7fe, 0x18, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x6021, 0xfff, 0xb, 0x2, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0xe, r0, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010100000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}, 0x40010080) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x0, 0x8, 0xe, 0x2}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r6, 0x2000012, 0xa, 0x0, &(0x7f0000000400)="63eced8edf0004082115", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r3, 0x0, 0x48, 0x5a, &(0x7f0000000340)="899edbb986f8186991791f206da9383e829a1aadb7b344f3a6cfbd9e23dc187cd74149ff38b20fedcab623ff9c2b75860842a6b6ebe707689a91874ed65f416bca95a82e0c90face", &(0x7f0000000540)=""/90, 0x0, 0x0, 0x89, 0xcf, &(0x7f0000001680)="b78c74ecd0ff47fe606a89ea4c4793d97720002fb2b8d2f4155fa38d92e6ec5c9ea927483919e3bcc3443f42818f66085fc1e1b07ca944a7c3da5a38481485be5e3423fe6204078ec7dfa762905faf98f46c9d423f63630e757da814593f6701016c961b6a2929dae6e67802ef43be706ffa43249329a399b73470c1b8165445f7272a4307ea418363", &(0x7f0000001740)="5bd5a9a27f64cdc942f85b1586e4edaf7f64d70c930fadccd00d79f3c33b2e6cd0e24d34828b159a340fc8b2bca9edd87d2f48688a89798331ef2a8691612f0187eea8103c8b216575585e3e332c59bc63f5294f9fe66c3ecd8e952a4d96a47d3f95cfb81da57bb22fe09e82740a087760a8e191fd20c81e83655ee6b4c172a63e41a71366c02fd8dd592cae1568ab8718284444e00f836ba74e71467782a198f26429c2402c3222e6ef84b34be6e8b32317ea13cb561ea3688a1f239305d3cf62748862156c4e02001f325dd9bdbf", 0x2, 0x0, 0xf3}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a000000f8ffff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4020804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.885249543s ago: executing program 3 (id=10723): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f00000005c0), 0x4}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x725006, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'wg2\x00', 0x2000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181200", @ANYRES32], &(0x7f0000000740)='syzkaller\x00', 0xa2e, 0x0, 0x0, 0x41000, 0x68, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000000900)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x3, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000980)=[{0x4, 0x2, 0xe}, {0x5, 0x5, 0x1, 0xc}, {0x2, 0x5, 0x4, 0x4}, {0x3, 0x1, 0x10, 0x9}, {0x2, 0x5, 0xf, 0xc}], 0x10, 0xab25}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000008000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe0085000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xb, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) r6 = syz_clone(0x800000, &(0x7f00000001c0)="297cb942e88d182df981bed56cc72de661ca1b2d6dce8df9be0f32fdd05ee6324f5162b98113c7b4ac41519a8c0b58cecba11154a9c0d37f484b54", 0x3b, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000340)="7c0d17bc2a81264281f7f021462dc86b4a36cba1abfe1442708b1b21b948d0bd9639df1ee6e9e9fb3f6c20af79455e674cd7331721b2dd10e4d7a19e1aa76afca011c0119521aa301804f6eac2fce116bb1deb8d37b8611b226e090a4e44191f28543de71b9fe269b1d548ec5e1995732c5db9dd16652bbb8ee5c5f2cce8e742d2721e7447630d19c5c47ab41daf756fae0bd623c488fa206e78068d822b4e4241103563e668e71dc1708c8b36e8b8ab2b988363e29fa3745f4931f20cf7a20c144eb4135f7fa63ff1e8fe16fa55066565") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffffffffff4a}, 0x101d0, 0x2, 0xc2ba, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, r6, 0xd, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xcfa4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ac0)='cpu.max.burst\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) 2.568707391s ago: executing program 4 (id=10724): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000500008000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f700000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x6, 0x8}, @exit, @map_idx={0x18, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x2, 0xf6, &(0x7f0000000a80)=""/246, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x8, 0x1, 0xac}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c40)=[{0x5, 0x4, 0x10, 0xd}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x4, 0xe, 0x7}, {0x4, 0x4, 0x10, 0x6}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xe, 0x1c}, {0x3, 0x3, 0xd, 0x5}, {0x0, 0x1, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001040)={r3, 0x0, 0xdd, 0x0, &(0x7f0000000e40)="e83448d83a6cc0f113df9d08210887d4a83024c150baf125d9ac784e8d41800210cee4fb8e1836b5fab7d7946445f650ff33179904d672f23e52a7c87db4c3ed0e46ad533acb9532c1dc21ef4e6cb74eb3dbba857d6317dd281e7401ad65e0980c0ba61df3d8a6a4cddc95e924e3f2a4652e9ffcb88fe374c7cc87e4cc6725fbadacfc7c2c8207a0f58d4e9678aa5cc251b48902e1f5f100d5c940c867c33c97f92b814d51806828d7de47940968ae78130ab2ec91c82f5654ee94c2943c9d03f0236212783a140ef1fa9b7d7343b45f8e748e4ea18d9a7068ad18cf68", 0x0, 0x4, 0x0, 0xcf, 0x0, &(0x7f0000000f40)="cad386f8f56ab0a88d70af9dd32d303cfd5434c80ee3699433f11111299fbc0c1ec0e22f28c8c5316e7c178717c37ed28b2b338c7d1faae7164239a41e0701ad26901c865f90e1875dd215c07ab1ef624e35dfc41474865c267d4b62fb197484881f199bfdee82409c559df5047342e9ee8b16885b64aef541e90fcb8073eef420c1c37b3b0f67108aa82626805c2a9f4401be10ee1011fa7c7bd95c109c77189ac7a57e2f2b9b3a06d93706a5bd765d1cf6d97a37184f5f5e7dff5dfea92d8e90012841942b99e5b293a76a5adf0d", 0x0, 0x2, 0x0, 0x11af1108}, 0x50) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x240048c0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb, '\x00', 0x0, r6, 0x7ff, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="186300000d00000000000800000000009500000000000000da63092e437ac0cdf71860a300a78105b6bc3d4736b89da6dca1526ece95a1bb2f2d8eeab379df23f3f916de66b5f492d623a91af5bb14dba73aacf8927a26d3610c4e2790589964a0a1f2120407efd88ce714e6f62d62de4653838fcc7c332c6b"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000008c0)=[r6, r8, r6], &(0x7f0000000900)=[{0x3, 0x2, 0x9, 0x55134e6ea0079c75}, {0x0, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xc, 0xc}, {0x0, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0x800}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xf0d, '\x00', r7, r6, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2.447736383s ago: executing program 0 (id=10725): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 275.090613ms ago: executing program 32 (id=10666): socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, 0x0, 0x4040081) close(0x3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r4, &(0x7f0000001bc0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/2, 0x2}], 0x4}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xb1, 0x5, 0x2, 0x9, 0x0, 0xfffffffffffffeff, 0x8000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x1}, 0x20, 0xffffffffffffffff, 0x9, 0x1, 0x8000000000000000, 0x1, 0x4, 0x0, 0xff, 0x0, 0xc1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) 264.559703ms ago: executing program 2 (id=10727): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 263.229643ms ago: executing program 3 (id=10728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f00000000c0)=r0, 0x18) 262.887994ms ago: executing program 4 (id=10729): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x4, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xffff, 0x101}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) close(0x3) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 256.544774ms ago: executing program 0 (id=10736): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x4, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xffff, 0x101}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="c6a100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) 36.550199ms ago: executing program 2 (id=10730): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'lo\x00', @link_local}) 0s ago: executing program 4 (id=10731): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000500008000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f700000000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000001140)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x1e}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x1, 0x7, 0x7, 0x6, 0x8}, @exit, @map_idx={0x18, 0x1}]}, &(0x7f0000000a40)='GPL\x00', 0x2, 0xf6, &(0x7f0000000a80)=""/246, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x8, 0x1, 0xac}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c40)=[{0x5, 0x4, 0x10, 0xd}, {0x2, 0x2, 0x8, 0x6}, {0x3, 0x4, 0xe, 0x7}, {0x4, 0x4, 0x10, 0x6}, {0x4, 0x1, 0x2, 0x8}, {0x1, 0x1, 0x9, 0x4}, {0x0, 0x2, 0xe, 0x1c}, {0x3, 0x3, 0xd, 0x5}, {0x0, 0x1, 0x3, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001040)={r3, 0x0, 0xdd, 0x0, &(0x7f0000000e40)="e83448d83a6cc0f113df9d08210887d4a83024c150baf125d9ac784e8d41800210cee4fb8e1836b5fab7d7946445f650ff33179904d672f23e52a7c87db4c3ed0e46ad533acb9532c1dc21ef4e6cb74eb3dbba857d6317dd281e7401ad65e0980c0ba61df3d8a6a4cddc95e924e3f2a4652e9ffcb88fe374c7cc87e4cc6725fbadacfc7c2c8207a0f58d4e9678aa5cc251b48902e1f5f100d5c940c867c33c97f92b814d51806828d7de47940968ae78130ab2ec91c82f5654ee94c2943c9d03f0236212783a140ef1fa9b7d7343b45f8e748e4ea18d9a7068ad18cf68", 0x0, 0x4, 0x0, 0xcf, 0x0, &(0x7f0000000f40)="cad386f8f56ab0a88d70af9dd32d303cfd5434c80ee3699433f11111299fbc0c1ec0e22f28c8c5316e7c178717c37ed28b2b338c7d1faae7164239a41e0701ad26901c865f90e1875dd215c07ab1ef624e35dfc41474865c267d4b62fb197484881f199bfdee82409c559df5047342e9ee8b16885b64aef541e90fcb8073eef420c1c37b3b0f67108aa82626805c2a9f4401be10ee1011fa7c7bd95c109c77189ac7a57e2f2b9b3a06d93706a5bd765d1cf6d97a37184f5f5e7dff5dfea92d8e90012841942b99e5b293a76a5adf0d", 0x0, 0x2, 0x0, 0x11af1108}, 0x50) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x240048c0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r6, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb, '\x00', 0x0, r6, 0x7ff, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="186300000d00000000000800000000009500000000000000da63092e437ac0cdf71860a300a78105b6bc3d4736b89da6dca1526ece95a1bb2f2d8eeab379df23f3f916de66b5f492d623a91af5bb14dba73aacf8927a26d3610c4e2790589964a0a1f2120407efd88ce714e6f62d62de4653838fcc7c332c6b"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000380)=""/173, 0x41100, 0x1, '\x00', r7, 0x0, r6, 0x8, &(0x7f0000000700)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xe, 0x3, 0xffffff80}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r6, r6, r8, r6], &(0x7f0000000900)=[{0x3, 0x2, 0x9, 0x55134e6ea0079c75}, {0x0, 0x3, 0x6, 0x6}, {0x1, 0x3, 0xc, 0xc}, {0x2, 0x1, 0xc, 0xc}, {0x0, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x2, 0x5, 0xb, 0x4}], 0x10, 0x800}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xf0d, '\x00', r7, r6, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): invalid length. [ 1842.739142][ T1250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8973'. [ 1844.126703][ T1293] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8986'. [ 1849.355840][ T1433] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9036'. [ 1850.530155][ T1473] sock: sock_set_timeout: `syz.4.9050' (pid 1473) tries to set negative timeout [ 1850.688345][ T1478] netlink: 'syz.4.9050': attribute type 13 has an invalid length. [ 1850.718576][ T1478] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9050'. [ 1850.783767][ T1480] netlink: 'syz.4.9050': attribute type 13 has an invalid length. [ 1850.823437][ T1480] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9050'. [ 1850.861397][ T1478] netlink: 'syz.4.9050': attribute type 10 has an invalid length. [ 1851.238953][ T1493] netlink: 'syz.1.9056': attribute type 21 has an invalid length. [ 1851.264877][ T1493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9056'. [ 1851.456797][ T1493] netlink: 'syz.1.9056': attribute type 2 has an invalid length. [ 1851.495091][ T1493] netlink: 197536 bytes leftover after parsing attributes in process `syz.1.9056'. [ 1852.433863][ T1533] netlink: 'syz.2.9070': attribute type 27 has an invalid length. [ 1852.451325][ T1533] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9070'. [ 1852.552765][ T1533] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9070'. [ 1853.237131][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.243589][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.282207][ T1555] netlink: 'syz.1.9078': attribute type 39 has an invalid length. [ 1854.562585][ T1593] netlink: 'syz.0.9093': attribute type 28 has an invalid length. [ 1854.738686][ T1599] netlink: 'syz.0.9093': attribute type 10 has an invalid length. [ 1855.641756][ T1615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1856.063222][ T1631] sock: sock_set_timeout: `syz.1.9103' (pid 1631) tries to set negative timeout [ 1856.169145][ T1639] netlink: 'syz.1.9103': attribute type 13 has an invalid length. [ 1856.218233][ T1639] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9103'. [ 1856.275702][ T1640] netlink: 'syz.1.9103': attribute type 13 has an invalid length. [ 1856.341879][ T1640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9103'. [ 1856.385131][ T1639] netlink: 'syz.1.9103': attribute type 10 has an invalid length. [ 1856.699705][ T1650] netlink: 'syz.4.9109': attribute type 27 has an invalid length. [ 1856.734781][ T1650] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1856.757983][ T1650] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1856.998270][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9112'. [ 1857.194396][ T1665] netlink: 'syz.4.9116': attribute type 21 has an invalid length. [ 1857.203318][ T1665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1857.397559][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9115'. [ 1857.509896][ T1665] netlink: 'syz.4.9116': attribute type 2 has an invalid length. [ 1857.524185][ T1665] netlink: 197536 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1858.100362][ T1692] netlink: 'syz.1.9123': attribute type 27 has an invalid length. [ 1858.135869][ T1692] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9123'. [ 1859.076366][ T1722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1859.087261][ T1722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1859.096353][ T1722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1859.105436][ T1722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1859.115319][ T1722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1859.127629][ T1722] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1860.282428][ T1760] netlink: 'syz.4.9148': attribute type 28 has an invalid length. [ 1860.439423][ T1768] netlink: 'syz.4.9148': attribute type 10 has an invalid length. [ 1860.694518][ T1774] -1: renamed from syzkaller0 [ 1860.863682][ T1782] netlink: 'syz.3.9154': attribute type 21 has an invalid length. [ 1860.904819][ T1782] __nla_validate_parse: 6 callbacks suppressed [ 1860.904841][ T1782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1861.159112][ T1782] netlink: 197536 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1861.203304][ T1788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1861.246495][ T1788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1861.255505][ T1788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1861.283678][ T1788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1861.294748][ T1788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1861.304431][ T1788] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1861.432234][ T1796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9159'. [ 1861.841221][ T1805] validate_nla: 1 callbacks suppressed [ 1861.841274][ T1805] netlink: 'syz.2.9163': attribute type 28 has an invalid length. [ 1862.151154][ T1805] netlink: 'syz.2.9163': attribute type 10 has an invalid length. [ 1862.343815][ T1824] netlink: 'syz.2.9168': attribute type 27 has an invalid length. [ 1863.187149][ T1840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9174'. [ 1863.312302][ T1851] netlink: 'syz.3.9178': attribute type 28 has an invalid length. [ 1863.571244][ T1854] netlink: 'syz.3.9178': attribute type 10 has an invalid length. [ 1863.649179][ T1860] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1863.720476][ T1860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9181'. [ 1864.573905][ T1885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9190'. [ 1864.896748][ T1894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1865.434105][ T1912] netlink: 'syz.1.9198': attribute type 28 has an invalid length. [ 1865.588193][ T1911] netlink: 'syz.1.9198': attribute type 10 has an invalid length. [ 1866.561937][ T1936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9207'. [ 1867.438514][ T1967] -1: renamed from syzkaller0 [ 1867.771410][ T1977] netlink: 'syz.0.9219': attribute type 27 has an invalid length. [ 1870.211546][ T2049] netlink: 'syz.1.9245': attribute type 1 has an invalid length. [ 1870.225343][ T2049] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.9245'. [ 1871.282728][ T2069] -1: renamed from syzkaller0 [ 1871.804767][ T2090] netlink: 'syz.3.9260': attribute type 27 has an invalid length. [ 1872.599462][ T2105] netlink: 'syz.0.9265': attribute type 1 has an invalid length. [ 1872.628526][ T2105] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.9265'. [ 1872.857779][ T2111] : port 1(ip6gretap0) entered blocking state [ 1872.865421][ T2111] : port 1(ip6gretap0) entered disabled state [ 1872.896136][ T2111] device ip6gretap0 entered promiscuous mode [ 1872.956167][ T2105] device ip6gretap0 left promiscuous mode [ 1872.964260][ T2105] : port 1(ip6gretap0) entered disabled state [ 1875.647024][ T2163] -1: renamed from syzkaller0 [ 1875.732801][ T2172] netlink: 'syz.3.9283': attribute type 1 has an invalid length. [ 1875.755054][ T2172] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.9283'. [ 1876.044780][ T2173] : port 1(ip6gretap0) entered blocking state [ 1876.051115][ T2173] : port 1(ip6gretap0) entered disabled state [ 1876.112288][ T2173] device ip6gretap0 entered promiscuous mode [ 1876.162847][ T2176] device ip6gretap0 left promiscuous mode [ 1876.204918][ T2176] : port 1(ip6gretap0) entered disabled state [ 1877.085919][ T2184] netlink: 172 bytes leftover after parsing attributes in process `syz.4.9284'. [ 1877.619366][ T2202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9294'. [ 1878.400787][ T2223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9301'. [ 1878.541689][ T2225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9302'. [ 1880.363962][ T2267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9315'. [ 1880.519954][ T2267] netlink: 'syz.0.9315': attribute type 4 has an invalid length. [ 1880.560307][ T2267] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9315'. [ 1880.713103][ T2267] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1880.874275][ T2272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9316'. [ 1881.007680][ T2284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1881.079233][ T2286] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1882.080312][ T2306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1882.088255][ T2306] IPv6: NLM_F_CREATE should be set when creating new route [ 1882.096275][ T2306] IPv6: NLM_F_CREATE should be set when creating new route [ 1882.139771][ T2309] netlink: 'syz.4.9326': attribute type 2 has an invalid length. [ 1882.202373][ T2309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9326'. [ 1882.799759][ T2325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9331'. [ 1883.242295][ T2339] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9332'. [ 1884.206010][ T2357] sock: sock_timestamping_bind_phc: sock not bind to device [ 1884.470747][ T2369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9343'. [ 1884.628141][ T2369] netlink: 'syz.3.9343': attribute type 4 has an invalid length. [ 1884.675144][ T2369] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9343'. [ 1884.925604][ T2382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1884.963090][ T2382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1884.992151][ T2382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.049275][ T2382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.067774][ T2382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.097379][ T2382] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1885.531815][ T2387] device sit0 left promiscuous mode [ 1886.102350][ T2403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9348'. [ 1886.763044][ T2418] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9351'. [ 1887.567028][ T2437] sock: sock_timestamping_bind_phc: sock not bind to device [ 1888.270809][ T2448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9360'. [ 1888.320426][ T2455] netlink: 'syz.0.9359': attribute type 5 has an invalid length. [ 1888.382233][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9362'. [ 1889.169871][ T2473] netlink: 'syz.0.9366': attribute type 1 has an invalid length. [ 1889.287913][ T2473] netlink: 'syz.0.9366': attribute type 4 has an invalid length. [ 1889.349067][ T2473] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9366'. [ 1890.171576][ T2504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9372'. [ 1890.251953][ T2498] sock: sock_timestamping_bind_phc: sock not bind to device [ 1891.229023][ T2520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9375'. [ 1891.525610][ T2529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9376'. [ 1892.583840][ T2547] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9382'. [ 1892.982102][ T2558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1893.024703][ T2558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1893.047815][ T2558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1893.082239][ T2558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1893.115303][ T2558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1893.154827][ T2558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1893.896405][ T2569] device sit0 entered promiscuous mode [ 1894.123908][ T2589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9388'. [ 1894.331853][ T2591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9390'. [ 1895.010221][ T2614] netlink: 'syz.1.9393': attribute type 5 has an invalid length. [ 1895.618883][ T2628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9399'. [ 1896.306323][ T2641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9401'. [ 1896.617056][ T2647] Q±6ã`Ò˜: renamed from lo [ 1896.860311][ T2655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9404'. [ 1896.974484][ T2662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9405'. [ 1897.611298][ T2686] device sit0 entered promiscuous mode [ 1898.558017][ T2695] netlink: 'syz.3.9412': attribute type 5 has an invalid length. [ 1898.591164][ T2705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1898.994301][ T2717] sock: sock_timestamping_bind_phc: sock not bind to device [ 1899.398833][ T2720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9418'. [ 1901.141343][ T2755] netlink: 'syz.3.9426': attribute type 1 has an invalid length. [ 1901.198147][ T2755] netlink: 'syz.3.9426': attribute type 4 has an invalid length. [ 1901.269485][ T2755] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9426'. [ 1901.795579][ T2765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1902.188222][ T2780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9431'. [ 1902.724007][ T2790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9434'. [ 1904.888992][ T2817] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9437'. [ 1905.664919][ T2833] device sit0 entered promiscuous mode [ 1906.196566][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9442'. [ 1906.917162][ T2861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9444'. [ 1906.967158][ T2865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9446'. [ 1909.102543][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9456'. [ 1909.758224][ T2923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9459'. [ 1910.826917][ T2939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9462'. [ 1912.030554][ T2962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1912.527737][ T2977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9474'. [ 1913.215323][ T2995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9479'. [ 1913.474045][ T3003] netlink: 'syz.3.9482': attribute type 21 has an invalid length. [ 1914.571903][ T3021] sock: sock_timestamping_bind_phc: sock not bind to device [ 1914.703313][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.709834][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.248566][ T3026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9488'. [ 1915.847634][ T3036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9490'. [ 1917.198090][ T3060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9495'. [ 1917.348563][ T3070] sock: sock_timestamping_bind_phc: sock not bind to device [ 1917.859642][ T3080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9503'. [ 1918.119849][ T3084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9501'. [ 1919.136631][ T3106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1919.176580][ T3106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1919.199377][ T3106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1919.224393][ T3106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1919.281291][ T3106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1919.305460][ T3106] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1919.313770][ T3115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9511'. [ 1919.987293][ T3124] sock: sock_timestamping_bind_phc: sock not bind to device [ 1920.108920][ T3132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9515'. [ 1920.894395][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9521'. [ 1921.099292][ T3165] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9523'. [ 1921.184313][ T3165] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1921.255918][ T3165] CPU: 0 PID: 3165 Comm: syz.0.9523 Not tainted syzkaller #0 [ 1921.263482][ T3165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1921.273615][ T3165] Call Trace: [ 1921.277033][ T3165] [ 1921.280113][ T3165] dump_stack_lvl+0x188/0x24e [ 1921.284953][ T3165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1921.291169][ T3165] ? show_regs_print_info+0x12/0x12 [ 1921.296503][ T3165] ? load_image+0x410/0x410 [ 1921.301050][ T3165] ? sysfs_warn_dup+0x61/0xa0 [ 1921.305770][ T3165] sysfs_warn_dup+0x8a/0xa0 [ 1921.310589][ T3165] sysfs_do_create_link_sd+0xc0/0x110 [ 1921.316015][ T3165] device_add+0x83b/0x1050 [ 1921.320481][ T3165] wiphy_register+0x1d8b/0x2aa0 [ 1921.325411][ T3165] ? cfg80211_event_work+0x40/0x40 [ 1921.330567][ T3165] ? minstrel_ht_alloc+0x894/0xa20 [ 1921.335740][ T3165] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1921.341849][ T3165] ieee80211_register_hw+0x2d48/0x39f0 [ 1921.347450][ T3165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1921.353850][ T3165] ? ieee80211_register_hw+0xf61/0x39f0 [ 1921.359437][ T3165] ? ieee80211_register_hw+0xf61/0x39f0 [ 1921.365064][ T3165] ? ieee80211_tasklet_handler+0x20/0x20 [ 1921.370738][ T3165] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1921.376718][ T3165] ? __debug_object_init+0xed/0x440 [ 1921.381992][ T3165] ? memset+0x1e/0x40 [ 1921.386034][ T3165] ? __hrtimer_init+0x189/0x270 [ 1921.390923][ T3165] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1921.396714][ T3165] ? memcpy+0x3c/0x60 [ 1921.400747][ T3165] hwsim_new_radio_nl+0xab7/0xc90 [ 1921.406017][ T3165] genl_family_rcv_msg_doit+0x22f/0x350 [ 1921.411612][ T3165] ? end_current_label_crit_section+0x170/0x170 [ 1921.417911][ T3165] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1921.423874][ T3165] ? bpf_lsm_capable+0x5/0x10 [ 1921.428687][ T3165] ? security_capable+0x85/0xb0 [ 1921.433588][ T3165] genl_rcv_msg+0x601/0x790 [ 1921.438332][ T3165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1921.444624][ T3165] ? genl_bind+0x360/0x360 [ 1921.449085][ T3165] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1921.455473][ T3165] netlink_rcv_skb+0x1ef/0x440 [ 1921.460405][ T3165] ? genl_bind+0x360/0x360 [ 1921.464865][ T3165] ? netlink_ack+0x1160/0x1160 [ 1921.469688][ T3165] ? down_read+0x1a8/0x2d0 [ 1921.474133][ T3165] genl_rcv+0x24/0x40 [ 1921.478151][ T3165] netlink_unicast+0x7ad/0x920 [ 1921.483173][ T3165] netlink_sendmsg+0x8ad/0xbd0 [ 1921.487984][ T3165] ? aa_sock_msg_perm+0x94/0x150 [ 1921.492979][ T3165] ? netlink_getsockopt+0x550/0x550 [ 1921.498248][ T3165] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1921.504024][ T3165] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1921.509386][ T3165] ? security_socket_sendmsg+0x7c/0xa0 [ 1921.514920][ T3165] ? netlink_getsockopt+0x550/0x550 [ 1921.520175][ T3165] ____sys_sendmsg+0x5ed/0x9a0 [ 1921.525000][ T3165] ? __sys_sendmsg_sock+0x30/0x30 [ 1921.530161][ T3165] ? __import_iovec+0x306/0x510 [ 1921.535082][ T3165] ? import_iovec+0x6f/0xa0 [ 1921.539646][ T3165] ___sys_sendmsg+0x2a2/0x360 [ 1921.544384][ T3165] ? __sys_sendmsg+0x2a0/0x2a0 [ 1921.549301][ T3165] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1921.555404][ T3165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1921.561706][ T3165] ? lockdep_hardirqs_on+0x94/0x140 [ 1921.566967][ T3165] ? __se_sys_sendmsg+0xee/0x2b0 [ 1921.571962][ T3165] ? kasan_check_range+0x80/0x290 [ 1921.577131][ T3165] __se_sys_sendmsg+0x1c3/0x2b0 [ 1921.582040][ T3165] ? __x64_sys_sendmsg+0x80/0x80 [ 1921.587330][ T3165] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1921.593292][ T3165] do_syscall_64+0x4c/0xa0 [ 1921.597761][ T3165] ? clear_bhb_loop+0x60/0xb0 [ 1921.602485][ T3165] ? clear_bhb_loop+0x60/0xb0 [ 1921.607215][ T3165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1921.613422][ T3165] RIP: 0033:0x7f154a59de59 [ 1921.617889][ T3165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1921.637564][ T3165] RSP: 002b:00007f15487d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1921.646206][ T3165] RAX: ffffffffffffffda RBX: 00007f154a826090 RCX: 00007f154a59de59 [ 1921.654227][ T3165] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1921.662249][ T3165] RBP: 00007f154a633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1921.670533][ T3165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1921.678552][ T3165] R13: 00007f154a826128 R14: 00007f154a826090 R15: 00007ffc1f8fdbf8 [ 1921.686591][ T3165] [ 1922.693500][ T3177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9525'. [ 1922.713475][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9528'. [ 1922.950689][ T3191] sock: sock_timestamping_bind_phc: sock not bind to device [ 1923.521234][ T3207] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1923.552115][ T3207] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1923.586624][ T3207] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1923.618445][ T3207] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1923.682580][ T3206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9534'. [ 1924.468393][ T3223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9539'. [ 1924.737438][ T3230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9541'. [ 1924.976074][ T3235] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.9542'. [ 1925.095076][ T3235] net_ratelimit: 2 callbacks suppressed [ 1925.095119][ T3235] netlink: zone id is out of range [ 1925.186051][ T3235] netlink: zone id is out of range [ 1925.235207][ T3235] netlink: zone id is out of range [ 1925.285891][ T3244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9548'. [ 1925.298528][ T3235] netlink: zone id is out of range [ 1925.404770][ T3235] netlink: zone id is out of range [ 1925.476533][ T3235] netlink: zone id is out of range [ 1925.482562][ T3235] netlink: zone id is out of range [ 1925.494761][ T3235] netlink: zone id is out of range [ 1925.500868][ T3235] netlink: zone id is out of range [ 1925.678741][ T3235] netlink: zone id is out of range [ 1926.417706][ T3255] netlink: 'syz.0.9549': attribute type 10 has an invalid length. [ 1926.948749][ T3275] sock: sock_timestamping_bind_phc: sock not bind to device [ 1927.038549][ T3271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9554'. [ 1928.002438][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9561'. [ 1928.090693][ T3292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9560'. [ 1928.766126][ T3312] sock: sock_timestamping_bind_phc: sock not bind to device [ 1929.011723][ T3315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9569'. [ 1929.737972][ T3333] netlink: 'syz.0.9572': attribute type 41 has an invalid length. [ 1929.973018][ T3336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9575'. [ 1930.249581][ T3344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9577'. [ 1930.691738][ T3354] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.9579'. [ 1930.785869][ T3354] net_ratelimit: 26 callbacks suppressed [ 1930.785912][ T3354] netlink: zone id is out of range [ 1930.885184][ T3354] netlink: zone id is out of range [ 1930.891124][ T3354] netlink: zone id is out of range [ 1930.960880][ T3354] netlink: zone id is out of range [ 1931.011254][ T3362] sock: sock_timestamping_bind_phc: sock not bind to device [ 1931.043204][ T3354] netlink: zone id is out of range [ 1931.077170][ T3354] netlink: zone id is out of range [ 1931.094929][ T3354] netlink: zone id is out of range [ 1931.138716][ T3354] netlink: zone id is out of range [ 1931.172815][ T3354] netlink: zone id is out of range [ 1931.203714][ T3354] netlink: zone id is out of range [ 1931.433361][ T3366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1932.822818][ T3395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9591'. [ 1933.828472][ T3414] sock: sock_timestamping_bind_phc: sock not bind to device [ 1934.087581][ T3420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9596'. [ 1934.192523][ T3427] netlink: 'syz.2.9599': attribute type 39 has an invalid length. [ 1935.282529][ T3453] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9607'. [ 1935.350522][ T3451] netlink: 'syz.0.9606': attribute type 1 has an invalid length. [ 1935.370554][ T3451] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.9606'. [ 1935.425906][ T3456] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.9606'. [ 1936.020560][ T3456] net_ratelimit: 28 callbacks suppressed [ 1936.020624][ T3456] netlink: del zone limit has 4 unknown bytes [ 1936.256059][ T3463] netlink: 'syz.1.9608': attribute type 17 has an invalid length. [ 1936.259056][ T3462] sock: sock_timestamping_bind_phc: sock not bind to device [ 1936.264522][ T3463] netlink: 'syz.1.9608': attribute type 16 has an invalid length. [ 1936.379277][ T3463] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9608'. [ 1936.897285][ T3468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9611'. [ 1937.411626][ T3478] netlink: 'syz.0.9615': attribute type 3 has an invalid length. [ 1937.452272][ T3478] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.9615'. [ 1937.651738][ T3496] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1937.966082][ T3502] sock: sock_timestamping_bind_phc: sock not bind to device [ 1938.400314][ T3507] netlink: 'syz.1.9623': attribute type 41 has an invalid length. [ 1938.738115][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9628'. [ 1938.892386][ T3529] netlink: 'syz.4.9632': attribute type 1 has an invalid length. [ 1938.939718][ T3529] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.9632'. [ 1938.980477][ T3531] sock: sock_timestamping_bind_phc: sock not bind to device [ 1939.091882][ T3529] netlink: zone id is out of range [ 1939.109996][ T3534] netlink: 'syz.1.9633': attribute type 39 has an invalid length. [ 1939.143130][ T3529] netlink: zone id is out of range [ 1939.861707][ T3529] netlink: del zone limit has 4 unknown bytes [ 1940.356932][ T3553] __nla_validate_parse: 1 callbacks suppressed [ 1940.356955][ T3553] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9639'. [ 1940.441643][ T3555] netlink: 'syz.0.9640': attribute type 3 has an invalid length. [ 1940.450957][ T3555] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9640'. [ 1941.140438][ T3571] sock: sock_timestamping_bind_phc: sock not bind to device [ 1941.259616][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9647'. [ 1941.396349][ T3576] netlink: 'syz.4.9648': attribute type 39 has an invalid length. [ 1941.922517][ T3589] netlink: 'syz.0.9653': attribute type 41 has an invalid length. [ 1942.245170][ T3609] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1942.924008][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9661'. [ 1943.140829][ T3631] netlink: 'syz.3.9663': attribute type 3 has an invalid length. [ 1943.164955][ T3631] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.9663'. [ 1943.390327][ T3637] netlink: 'syz.4.9662': attribute type 17 has an invalid length. [ 1943.425518][ T3637] netlink: 'syz.4.9662': attribute type 16 has an invalid length. [ 1943.466413][ T3637] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1943.950341][ T3652] netlink: 'syz.1.9668': attribute type 41 has an invalid length. [ 1944.496840][ T3670] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9675'. [ 1944.607843][ T3667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9676'. [ 1944.954431][ T3682] netlink: 'syz.4.9677': attribute type 41 has an invalid length. [ 1945.644405][ T3689] netlink: 'syz.4.9682': attribute type 3 has an invalid length. [ 1945.652750][ T3689] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1945.970157][ T3701] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9686'. [ 1946.046578][ T3683] sock: sock_timestamping_bind_phc: sock not bind to device [ 1946.413330][ T3709] netlink: 'syz.3.9685': attribute type 17 has an invalid length. [ 1946.477344][ T3709] netlink: 'syz.3.9685': attribute type 16 has an invalid length. [ 1946.534878][ T3709] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9685'. [ 1946.826007][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9690'. [ 1947.043003][ T3732] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9695'. [ 1948.349933][ T3758] netlink: 'syz.4.9705': attribute type 2 has an invalid length. [ 1948.384711][ T3758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9705'. [ 1949.480820][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9708'. [ 1950.275305][ T3788] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9714'. [ 1951.247823][ T3807] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9718'. [ 1951.667816][ T3815] netlink: 'syz.3.9720': attribute type 3 has an invalid length. [ 1951.708736][ T3822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9725'. [ 1951.735060][ T3815] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.9720'. [ 1951.761464][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9722'. [ 1953.116337][ T3853] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9734'. [ 1953.309437][ T3864] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9736'. [ 1953.798663][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9737'. [ 1954.000893][ T3875] netlink: 'syz.4.9740': attribute type 3 has an invalid length. [ 1954.038389][ T3875] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9740'. [ 1954.097915][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9738'. [ 1956.481854][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1956.599683][ T3928] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9753'. [ 1956.724957][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9754'. [ 1957.618665][ T3948] netlink: 'syz.2.9756': attribute type 41 has an invalid length. [ 1957.781203][ T3950] netlink: 'syz.3.9760': attribute type 3 has an invalid length. [ 1957.949310][ T3950] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9760'. [ 1958.950428][ T3965] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9763'. [ 1959.040190][ T3965] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1959.085046][ T3965] CPU: 1 PID: 3965 Comm: syz.3.9763 Not tainted syzkaller #0 [ 1959.092521][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1959.102639][ T3965] Call Trace: [ 1959.105980][ T3965] [ 1959.108973][ T3965] dump_stack_lvl+0x188/0x24e [ 1959.113752][ T3965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1959.120160][ T3965] ? show_regs_print_info+0x12/0x12 [ 1959.125446][ T3965] ? load_image+0x410/0x410 [ 1959.130031][ T3965] ? sysfs_warn_dup+0x61/0xa0 [ 1959.134793][ T3965] sysfs_warn_dup+0x8a/0xa0 [ 1959.139365][ T3965] sysfs_do_create_link_sd+0xc0/0x110 [ 1959.144803][ T3965] device_add+0x83b/0x1050 [ 1959.149305][ T3965] wiphy_register+0x1d8b/0x2aa0 [ 1959.154246][ T3965] ? cfg80211_event_work+0x40/0x40 [ 1959.159478][ T3965] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1959.165701][ T3965] ieee80211_register_hw+0x2d48/0x39f0 [ 1959.171227][ T3965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1959.177462][ T3965] ? ieee80211_register_hw+0xf61/0x39f0 [ 1959.183081][ T3965] ? ieee80211_register_hw+0xf61/0x39f0 [ 1959.188806][ T3965] ? ieee80211_tasklet_handler+0x20/0x20 [ 1959.194702][ T3965] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1959.196387][ T3969] sock: sock_timestamping_bind_phc: sock not bind to device [ 1959.200642][ T3965] ? __debug_object_init+0xed/0x440 [ 1959.213292][ T3965] ? memset+0x1e/0x40 [ 1959.217331][ T3965] ? __hrtimer_init+0x189/0x270 [ 1959.222235][ T3965] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1959.228022][ T3965] hwsim_new_radio_nl+0xab7/0xc90 [ 1959.233102][ T3965] genl_family_rcv_msg_doit+0x22f/0x350 [ 1959.238893][ T3965] ? end_current_label_crit_section+0x170/0x170 [ 1959.245197][ T3965] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1959.251152][ T3965] ? bpf_lsm_capable+0x5/0x10 [ 1959.256046][ T3965] ? security_capable+0x85/0xb0 [ 1959.261045][ T3965] genl_rcv_msg+0x601/0x790 [ 1959.265768][ T3965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1959.271979][ T3965] ? genl_bind+0x360/0x360 [ 1959.276441][ T3965] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1959.282820][ T3965] ? lock_acquire+0x225/0x4a0 [ 1959.287547][ T3965] netlink_rcv_skb+0x1ef/0x440 [ 1959.292361][ T3965] ? genl_bind+0x360/0x360 [ 1959.296960][ T3965] ? netlink_ack+0x1160/0x1160 [ 1959.301814][ T3965] ? down_read+0x1a8/0x2d0 [ 1959.306296][ T3965] genl_rcv+0x24/0x40 [ 1959.310433][ T3965] netlink_unicast+0x7ad/0x920 [ 1959.315266][ T3965] netlink_sendmsg+0x8ad/0xbd0 [ 1959.320098][ T3965] ? netlink_getsockopt+0x550/0x550 [ 1959.325361][ T3965] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1959.330962][ T3965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1959.336322][ T3965] ? security_socket_sendmsg+0x7c/0xa0 [ 1959.341829][ T3965] ? netlink_getsockopt+0x550/0x550 [ 1959.347083][ T3965] ____sys_sendmsg+0x5ed/0x9a0 [ 1959.351921][ T3965] ? __sys_sendmsg_sock+0x30/0x30 [ 1959.357104][ T3965] ? __import_iovec+0x306/0x510 [ 1959.362023][ T3965] ? import_iovec+0x6f/0xa0 [ 1959.366589][ T3965] ___sys_sendmsg+0x2a2/0x360 [ 1959.371323][ T3965] ? __sys_sendmsg+0x2a0/0x2a0 [ 1959.376162][ T3965] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1959.381973][ T3965] __se_sys_sendmsg+0x1c3/0x2b0 [ 1959.386884][ T3965] ? __x64_sys_sendmsg+0x80/0x80 [ 1959.391896][ T3965] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1959.397848][ T3965] do_syscall_64+0x4c/0xa0 [ 1959.402320][ T3965] ? clear_bhb_loop+0x60/0xb0 [ 1959.407224][ T3965] ? clear_bhb_loop+0x60/0xb0 [ 1959.411954][ T3965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1959.417991][ T3965] RIP: 0033:0x7fa8bbb9de59 [ 1959.422462][ T3965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1959.442120][ T3965] RSP: 002b:00007fa8b9dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1959.450710][ T3965] RAX: ffffffffffffffda RBX: 00007fa8bbe26090 RCX: 00007fa8bbb9de59 [ 1959.458737][ T3965] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1959.466768][ T3965] RBP: 00007fa8bbc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1959.474781][ T3965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1959.482812][ T3965] R13: 00007fa8bbe26128 R14: 00007fa8bbe26090 R15: 00007ffe3c6ae678 [ 1959.490855][ T3965] [ 1960.568677][ T3993] netlink: 'syz.4.9770': attribute type 10 has an invalid length. [ 1960.665411][ T3993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9770'. [ 1961.287868][ T4007] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.9775'. [ 1961.349388][ T4016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9774'. [ 1961.950089][ T4024] delete_channel: no stack [ 1962.067123][ T4030] netlink: 'syz.0.9779': attribute type 10 has an invalid length. [ 1962.099074][ T4030] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9779'. [ 1962.417883][ T4035] netlink: 'syz.3.9781': attribute type 41 has an invalid length. [ 1962.722323][ T4044] delete_channel: no stack [ 1962.773615][ T4044] delete_channel: no stack [ 1962.936500][ T4042] delete_channel: no stack [ 1963.038969][ T4054] netlink: 'syz.2.9786': attribute type 10 has an invalid length. [ 1963.084759][ T4054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9786'. [ 1963.281812][ T4060] netlink: 'syz.1.9788': attribute type 21 has an invalid length. [ 1963.302345][ T4060] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9788'. [ 1963.324809][ T4060] netlink: 'syz.1.9788': attribute type 4 has an invalid length. [ 1963.417685][ T4060] netlink: 'syz.1.9788': attribute type 28 has an invalid length. [ 1963.641773][ T4060] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9788'. [ 1963.693240][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9790'. [ 1964.416615][ T4079] delete_channel: no stack [ 1964.676937][ T4087] netlink: 'syz.3.9796': attribute type 10 has an invalid length. [ 1964.693928][ T4087] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9796'. [ 1965.091794][ T4094] netlink: 'syz.2.9799': attribute type 41 has an invalid length. [ 1965.736601][ T4106] delete_channel: no stack [ 1965.764876][ T4106] delete_channel: no stack [ 1965.867321][ T4104] delete_channel: no stack [ 1965.929297][ T4115] netlink: 'syz.3.9801': attribute type 10 has an invalid length. [ 1965.947632][ T4115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9801'. [ 1966.043097][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9804'. [ 1966.411245][ T4128] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9806'. [ 1966.457219][ T4132] netlink: 'syz.3.9808': attribute type 21 has an invalid length. [ 1966.506855][ T4132] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9808'. [ 1966.537489][ T4132] netlink: 'syz.3.9808': attribute type 4 has an invalid length. [ 1966.592007][ T4128] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1966.618927][ T4128] CPU: 0 PID: 4128 Comm: syz.2.9806 Not tainted syzkaller #0 [ 1966.626401][ T4128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1966.636519][ T4128] Call Trace: [ 1966.639850][ T4128] [ 1966.642838][ T4128] dump_stack_lvl+0x188/0x24e [ 1966.647580][ T4128] ? show_regs_print_info+0x12/0x12 [ 1966.652883][ T4128] ? load_image+0x410/0x410 [ 1966.657454][ T4128] sysfs_warn_dup+0x8a/0xa0 [ 1966.662022][ T4128] sysfs_do_create_link_sd+0xc0/0x110 [ 1966.667471][ T4128] device_add+0x83b/0x1050 [ 1966.671962][ T4128] wiphy_register+0x1d8b/0x2aa0 [ 1966.676897][ T4128] ? cfg80211_event_work+0x40/0x40 [ 1966.682066][ T4128] ? minstrel_ht_alloc+0x894/0xa20 [ 1966.687250][ T4128] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1966.693387][ T4128] ieee80211_register_hw+0x2d48/0x39f0 [ 1966.698923][ T4128] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1966.705180][ T4128] ? ieee80211_register_hw+0xf61/0x39f0 [ 1966.710801][ T4128] ? ieee80211_register_hw+0xf61/0x39f0 [ 1966.716429][ T4128] ? ieee80211_tasklet_handler+0x20/0x20 [ 1966.722135][ T4128] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1966.728119][ T4128] ? __debug_object_init+0xed/0x440 [ 1966.733484][ T4128] ? memset+0x1e/0x40 [ 1966.737615][ T4128] ? __hrtimer_init+0x189/0x270 [ 1966.742533][ T4128] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1966.748351][ T4128] ? memcpy+0x3c/0x60 [ 1966.752422][ T4128] hwsim_new_radio_nl+0xab7/0xc90 [ 1966.757537][ T4128] genl_family_rcv_msg_doit+0x22f/0x350 [ 1966.763171][ T4128] ? end_current_label_crit_section+0x170/0x170 [ 1966.769497][ T4128] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1966.775562][ T4128] ? bpf_lsm_capable+0x5/0x10 [ 1966.780310][ T4128] ? security_capable+0x85/0xb0 [ 1966.785243][ T4128] genl_rcv_msg+0x601/0x790 [ 1966.789832][ T4128] ? genl_bind+0x360/0x360 [ 1966.794334][ T4128] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1966.800761][ T4128] netlink_rcv_skb+0x1ef/0x440 [ 1966.805602][ T4128] ? genl_bind+0x360/0x360 [ 1966.810204][ T4128] ? netlink_ack+0x1160/0x1160 [ 1966.815224][ T4128] ? down_read+0x1a8/0x2d0 [ 1966.819703][ T4128] genl_rcv+0x24/0x40 [ 1966.823759][ T4128] netlink_unicast+0x7ad/0x920 [ 1966.828604][ T4128] netlink_sendmsg+0x8ad/0xbd0 [ 1966.833885][ T4128] ? netlink_getsockopt+0x550/0x550 [ 1966.839158][ T4128] ? netlink_getsockopt+0x550/0x550 [ 1966.844431][ T4128] ____sys_sendmsg+0x5ed/0x9a0 [ 1966.849286][ T4128] ? __sys_sendmsg_sock+0x30/0x30 [ 1966.854380][ T4128] ? __import_iovec+0x306/0x510 [ 1966.859300][ T4128] ? import_iovec+0x6f/0xa0 [ 1966.863875][ T4128] ___sys_sendmsg+0x2a2/0x360 [ 1966.868633][ T4128] ? __sys_sendmsg+0x2a0/0x2a0 [ 1966.873496][ T4128] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1966.879324][ T4128] __se_sys_sendmsg+0x1c3/0x2b0 [ 1966.884383][ T4128] ? __x64_sys_sendmsg+0x80/0x80 [ 1966.889408][ T4128] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1966.895371][ T4128] do_syscall_64+0x4c/0xa0 [ 1966.899858][ T4128] ? clear_bhb_loop+0x60/0xb0 [ 1966.904598][ T4128] ? clear_bhb_loop+0x60/0xb0 [ 1966.909432][ T4128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1966.915413][ T4128] RIP: 0033:0x7f583b99de59 [ 1966.919899][ T4128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1966.939571][ T4128] RSP: 002b:00007f583c7bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1966.948228][ T4128] RAX: ffffffffffffffda RBX: 00007f583bc26090 RCX: 00007f583b99de59 [ 1966.956318][ T4128] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1966.964366][ T4128] RBP: 00007f583ba33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1966.972404][ T4128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1966.980453][ T4128] R13: 00007f583bc26128 R14: 00007f583bc26090 R15: 00007ffe1f3aad08 [ 1966.988526][ T4128] [ 1967.074501][ T4132] netlink: 'syz.3.9808': attribute type 28 has an invalid length. [ 1967.138957][ T4132] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9808'. [ 1969.501144][ T4150] netlink: 'syz.4.9810': attribute type 10 has an invalid length. [ 1969.515156][ T4150] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9810'. [ 1969.552981][ T4155] netlink: 'syz.3.9811': attribute type 3 has an invalid length. [ 1969.642393][ T4148] netlink: 'syz.0.9821': attribute type 41 has an invalid length. [ 1970.012311][ T4162] delete_channel: no stack [ 1970.018070][ T4162] delete_channel: no stack [ 1970.080110][ T4161] delete_channel: no stack [ 1970.477527][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9818'. [ 1970.592761][ T4172] netlink: 'syz.0.9819': attribute type 10 has an invalid length. [ 1970.642940][ T4172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9819'. [ 1971.176808][ T4190] netlink: 'syz.4.9824': attribute type 21 has an invalid length. [ 1971.202015][ T4190] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9824'. [ 1971.237011][ T4190] netlink: 'syz.4.9824': attribute type 4 has an invalid length. [ 1971.304404][ T4190] netlink: 'syz.4.9824': attribute type 28 has an invalid length. [ 1971.340381][ T4190] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9824'. [ 1972.302353][ T4215] delete_channel: no stack [ 1972.315105][ T4215] delete_channel: no stack [ 1972.429283][ T4214] delete_channel: no stack [ 1972.521889][ T4211] delete_channel: no stack [ 1972.768714][ T4224] netlink: 'syz.3.9834': attribute type 27 has an invalid length. [ 1972.805457][ T4224] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9834'. [ 1972.872561][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9833'. [ 1972.918642][ T4224] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.9834'. [ 1973.189792][ T4232] netlink: 'syz.2.9835': attribute type 10 has an invalid length. [ 1973.225246][ T4232] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9835'. [ 1973.536531][ T4243] netlink: 'syz.1.9837': attribute type 10 has an invalid length. [ 1973.584604][ T4243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9837'. [ 1974.184124][ T4251] delete_channel: no stack [ 1975.570178][ T4283] delete_channel: no stack [ 1975.638452][ T4283] delete_channel: no stack [ 1975.729052][ T4291] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.9848'. [ 1975.763486][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9849'. [ 1975.893551][ T4277] delete_channel: no stack [ 1976.117778][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.124250][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.259902][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9851'. [ 1977.462896][ T4336] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9861'. [ 1978.915482][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1978.926874][ T4357] netlink: 'syz.3.9866': attribute type 10 has an invalid length. [ 1978.954729][ T4357] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9866'. [ 1979.226785][ T4366] delete_channel: no stack [ 1979.235626][ T4371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9871'. [ 1979.281890][ T4373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1979.317199][ T4373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1979.347068][ T4373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1979.387060][ T4373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1979.417913][ T4373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1979.446829][ T4373] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1980.109769][ T4393] sctp: [Deprecated]: syz.2.9878 (pid 4393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1980.109769][ T4393] Use struct sctp_sack_info instead [ 1980.198497][ T4386] sock: sock_timestamping_bind_phc: sock not bind to device [ 1980.390962][ T4401] netlink: 'syz.1.9881': attribute type 29 has an invalid length. [ 1980.419095][ T4401] netlink: 'syz.1.9881': attribute type 29 has an invalid length. [ 1980.447017][ T4404] netlink: 'syz.1.9881': attribute type 29 has an invalid length. [ 1980.494365][ T4401] netlink: 'syz.1.9881': attribute type 3 has an invalid length. [ 1980.510638][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9883'. [ 1980.513930][ T4401] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9881'. [ 1980.546119][ T4404] netlink: 'syz.1.9881': attribute type 29 has an invalid length. [ 1980.630762][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9882'. [ 1980.727728][ T4409] delete_channel: no stack [ 1981.883429][ T4439] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9893'. [ 1982.570399][ T4451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1982.773660][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9895'. [ 1983.060755][ T4435] sock: sock_timestamping_bind_phc: sock not bind to device [ 1983.329571][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9901'. [ 1983.398229][ T4471] netlink: 'syz.3.9902': attribute type 10 has an invalid length. [ 1983.415178][ T4471] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9902'. [ 1983.917955][ T4480] sock: sock_timestamping_bind_phc: sock not bind to device [ 1984.127526][ T4486] __nla_validate_parse: 1 callbacks suppressed [ 1984.127565][ T4486] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9905'. [ 1984.409912][ T4492] sock: sock_timestamping_bind_phc: sock not bind to device [ 1984.422939][ T4489] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.9907'. [ 1984.531707][ T4486] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1984.627097][ T4486] CPU: 1 PID: 4486 Comm: syz.4.9905 Not tainted syzkaller #0 [ 1984.634672][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1984.644814][ T4486] Call Trace: [ 1984.648169][ T4486] [ 1984.651414][ T4486] dump_stack_lvl+0x188/0x24e [ 1984.656185][ T4486] ? show_regs_print_info+0x12/0x12 [ 1984.661537][ T4486] ? load_image+0x410/0x410 [ 1984.666097][ T4486] sysfs_warn_dup+0x8a/0xa0 [ 1984.670650][ T4486] sysfs_do_create_link_sd+0xc0/0x110 [ 1984.676112][ T4486] device_add+0x83b/0x1050 [ 1984.680576][ T4486] wiphy_register+0x1d8b/0x2aa0 [ 1984.685483][ T4486] ? cfg80211_event_work+0x40/0x40 [ 1984.690635][ T4486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1984.696850][ T4486] ? ieee80211_register_hw+0x2b89/0x39f0 [ 1984.702570][ T4486] ieee80211_register_hw+0x2d48/0x39f0 [ 1984.708070][ T4486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1984.714642][ T4486] ? ieee80211_register_hw+0xf61/0x39f0 [ 1984.720243][ T4486] ? ieee80211_register_hw+0xf61/0x39f0 [ 1984.725851][ T4486] ? ieee80211_tasklet_handler+0x20/0x20 [ 1984.731531][ T4486] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1984.737463][ T4486] ? __debug_object_init+0xed/0x440 [ 1984.742717][ T4486] ? memset+0x1e/0x40 [ 1984.746738][ T4486] ? __hrtimer_init+0x189/0x270 [ 1984.751629][ T4486] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1984.757406][ T4486] ? memcpy+0x3c/0x60 [ 1984.761474][ T4486] hwsim_new_radio_nl+0xab7/0xc90 [ 1984.766814][ T4486] genl_family_rcv_msg_doit+0x22f/0x350 [ 1984.772416][ T4486] ? end_current_label_crit_section+0x170/0x170 [ 1984.778711][ T4486] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1984.784670][ T4486] ? bpf_lsm_capable+0x5/0x10 [ 1984.789380][ T4486] ? security_capable+0x85/0xb0 [ 1984.794291][ T4486] genl_rcv_msg+0x601/0x790 [ 1984.798840][ T4486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1984.805047][ T4486] ? genl_bind+0x360/0x360 [ 1984.809502][ T4486] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1984.815875][ T4486] ? lock_acquire+0x225/0x4a0 [ 1984.820602][ T4486] netlink_rcv_skb+0x1ef/0x440 [ 1984.825414][ T4486] ? genl_bind+0x360/0x360 [ 1984.829870][ T4486] ? netlink_ack+0x1160/0x1160 [ 1984.834683][ T4486] ? down_read+0x1a8/0x2d0 [ 1984.839147][ T4486] genl_rcv+0x24/0x40 [ 1984.843311][ T4486] netlink_unicast+0x7ad/0x920 [ 1984.848141][ T4486] netlink_sendmsg+0x8ad/0xbd0 [ 1984.852960][ T4486] ? netlink_getsockopt+0x550/0x550 [ 1984.858221][ T4486] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1984.863841][ T4486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1984.869177][ T4486] ? security_socket_sendmsg+0x7c/0xa0 [ 1984.874680][ T4486] ? netlink_getsockopt+0x550/0x550 [ 1984.879931][ T4486] ____sys_sendmsg+0x5ed/0x9a0 [ 1984.884752][ T4486] ? __sys_sendmsg_sock+0x30/0x30 [ 1984.889820][ T4486] ? __import_iovec+0x306/0x510 [ 1984.894730][ T4486] ? import_iovec+0x6f/0xa0 [ 1984.899458][ T4486] ___sys_sendmsg+0x2a2/0x360 [ 1984.904183][ T4486] ? __sys_sendmsg+0x2a0/0x2a0 [ 1984.909003][ T4486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1984.915263][ T4486] __se_sys_sendmsg+0x1c3/0x2b0 [ 1984.920165][ T4486] ? __x64_sys_sendmsg+0x80/0x80 [ 1984.925180][ T4486] ? lockdep_hardirqs_on+0x94/0x140 [ 1984.930516][ T4486] do_syscall_64+0x4c/0xa0 [ 1984.934976][ T4486] ? clear_bhb_loop+0x60/0xb0 [ 1984.939693][ T4486] ? clear_bhb_loop+0x60/0xb0 [ 1984.944438][ T4486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1984.950380][ T4486] RIP: 0033:0x7f34bff9de59 [ 1984.954841][ T4486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1984.974594][ T4486] RSP: 002b:00007f34c0eb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1984.983148][ T4486] RAX: ffffffffffffffda RBX: 00007f34c0226180 RCX: 00007f34bff9de59 [ 1984.991165][ T4486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1984.999169][ T4486] RBP: 00007f34c0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1985.007180][ T4486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.015371][ T4486] R13: 00007f34c0226218 R14: 00007f34c0226180 R15: 00007fffbcf3db28 [ 1985.023397][ T4486] [ 1987.908987][ T4515] sock: sock_timestamping_bind_phc: sock not bind to device [ 1988.197429][ T4522] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1988.239706][ T4525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9918'. [ 1989.361143][ T4555] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9924'. [ 1989.445557][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1989.457921][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1989.489226][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1989.513120][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1989.540101][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1989.571191][ T4555] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1991.255523][ T4567] netlink: 'syz.0.9927': attribute type 41 has an invalid length. [ 1991.364461][ T4566] netlink: 'syz.2.9931': attribute type 3 has an invalid length. [ 1991.373967][ T4566] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9931'. [ 1991.429565][ T4572] netlink: 'syz.2.9931': attribute type 10 has an invalid length. [ 1992.087020][ T4577] netlink: 'syz.0.9933': attribute type 10 has an invalid length. [ 1992.110657][ T4561] sock: sock_timestamping_bind_phc: sock not bind to device [ 1992.123025][ T4577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9933'. [ 1992.236294][ T4577] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9933'. [ 1992.785106][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9935'. [ 1993.523191][ T4598] netlink: 'syz.2.9939': attribute type 2 has an invalid length. [ 1993.588302][ T4598] netlink: 'syz.2.9939': attribute type 3 has an invalid length. [ 1993.626995][ T4598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9939'. [ 1994.125264][ T4622] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9943'. [ 1994.550919][ T4631] netlink: 'syz.2.9948': attribute type 10 has an invalid length. [ 1994.616823][ T4631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1994.759879][ T4631] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1994.789460][ T4636] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1995.001552][ T4627] netlink: 'syz.4.9946': attribute type 2 has an invalid length. [ 1995.066700][ T4627] netlink: 'syz.4.9946': attribute type 8 has an invalid length. [ 1995.094272][ T4627] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9946'. [ 1995.668274][ T4645] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1995.797422][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9952'. [ 1996.137724][ T4653] sctp: [Deprecated]: syz.4.9954 (pid 4653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1996.137724][ T4653] Use struct sctp_sack_info instead [ 1996.963457][ T4656] netlink: 'syz.1.9955': attribute type 2 has an invalid length. [ 1997.075438][ T4656] netlink: 'syz.1.9955': attribute type 3 has an invalid length. [ 1997.083669][ T4656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9955'. [ 1998.441124][ T4684] netlink: 'syz.3.9963': attribute type 41 has an invalid length. [ 2000.922300][ T4690] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9964'. [ 2001.003807][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9965'. [ 2001.572993][ T4704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9978'. [ 2001.599843][ T4709] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.9969'. [ 2001.901426][ T4709] netlink: 'syz.4.9969': attribute type 2 has an invalid length. [ 2002.104701][ T4709] netlink: 'syz.4.9969': attribute type 8 has an invalid length. [ 2002.113508][ T4709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9969'. [ 2002.236903][ T4715] netlink: 'syz.4.9969': attribute type 2 has an invalid length. [ 2002.295414][ T4715] netlink: 'syz.4.9969': attribute type 8 has an invalid length. [ 2002.337015][ T4715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9969'. [ 2002.418826][ T4718] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9971'. [ 2003.098030][ T4726] netlink: 'syz.4.9973': attribute type 3 has an invalid length. [ 2003.144962][ T4726] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9973'. [ 2003.981325][ T4730] delete_channel: no stack [ 2004.034767][ T4730] delete_channel: no stack [ 2004.071849][ T4729] delete_channel: no stack [ 2004.166998][ T4740] netlink: 'syz.2.9980': attribute type 41 has an invalid length. [ 2004.179071][ T4736] netlink: 'syz.4.9976': attribute type 27 has an invalid length. [ 2004.203855][ T4736] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9976'. [ 2004.213621][ T4741] netlink: 'syz.3.9975': attribute type 10 has an invalid length. [ 2004.224068][ T4741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9975'. [ 2004.269320][ T4739] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2004.327623][ T4739] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2005.185856][ T4767] netlink: 'syz.2.9986': attribute type 2 has an invalid length. [ 2005.290936][ T4767] netlink: 'syz.2.9986': attribute type 8 has an invalid length. [ 2005.516520][ T4758] netlink: 'syz.2.9986': attribute type 2 has an invalid length. [ 2006.149218][ T4785] __nla_validate_parse: 6 callbacks suppressed [ 2006.149263][ T4785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9996'. [ 2006.266879][ T4789] delete_channel: no stack [ 2006.292321][ T4789] delete_channel: no stack [ 2006.379803][ T4788] delete_channel: no stack [ 2006.639271][ T4796] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9994'. [ 2007.338039][ T4811] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.10006'. [ 2007.509406][ T4811] validate_nla: 2 callbacks suppressed [ 2007.509473][ T4811] netlink: 'syz.1.10006': attribute type 2 has an invalid length. [ 2007.542574][ T4811] netlink: 'syz.1.10006': attribute type 8 has an invalid length. [ 2007.596649][ T4811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10006'. [ 2007.682137][ T4814] netlink: 'syz.1.10006': attribute type 2 has an invalid length. [ 2007.721307][ T4814] netlink: 'syz.1.10006': attribute type 8 has an invalid length. [ 2007.780482][ T4814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10006'. [ 2008.208194][ T4817] sock: sock_timestamping_bind_phc: sock not bind to device [ 2008.364492][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10010'. [ 2008.787180][ T4841] delete_channel: no stack [ 2008.812293][ T4841] delete_channel: no stack [ 2008.919417][ T4839] delete_channel: no stack [ 2009.487331][ T4857] netlink: 'syz.2.10017': attribute type 2 has an invalid length. [ 2009.650600][ T4857] netlink: 'syz.2.10017': attribute type 8 has an invalid length. [ 2009.781132][ T4857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10017'. [ 2009.914387][ T4860] delete_channel: no stack [ 2010.237582][ T4862] sock: sock_timestamping_bind_phc: sock not bind to device [ 2010.383020][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10025'. [ 2010.474037][ T4867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10021'. [ 2010.653247][ T4869] netlink: 'syz.2.10026': attribute type 29 has an invalid length. [ 2010.757671][ T4869] netlink: 'syz.2.10026': attribute type 29 has an invalid length. [ 2010.981171][ T4869] netlink: 'syz.2.10026': attribute type 10 has an invalid length. [ 2011.176420][ T4869] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.219778][ T4869] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.298868][ T4869] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.418631][ T4869] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.099127][ T4895] netlink: 'syz.1.10033': attribute type 27 has an invalid length. [ 2014.138331][ T4895] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10033'. [ 2014.928742][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10038'. [ 2016.227232][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10042'. [ 2016.404847][ T4921] netlink: 'syz.1.10039': attribute type 2 has an invalid length. [ 2016.453436][ T4921] netlink: 'syz.1.10039': attribute type 8 has an invalid length. [ 2016.525552][ T4921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10039'. [ 2016.883713][ T4925] netlink: 'syz.0.10043': attribute type 2 has an invalid length. [ 2016.965948][ T4925] netlink: 'syz.0.10043': attribute type 8 has an invalid length. [ 2017.015769][ T4925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10043'. [ 2017.047424][ T4936] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.10047'. [ 2017.181299][ T4942] netlink: 'syz.3.10047': attribute type 2 has an invalid length. [ 2017.206603][ T4942] netlink: 'syz.3.10047': attribute type 8 has an invalid length. [ 2017.231332][ T4942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10047'. [ 2017.326949][ T4936] netlink: 'syz.3.10047': attribute type 2 has an invalid length. [ 2017.364750][ T4936] netlink: 'syz.3.10047': attribute type 8 has an invalid length. [ 2017.373202][ T4936] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10047'. [ 2017.856161][ T4951] netlink: 'syz.3.10051': attribute type 27 has an invalid length. [ 2017.912227][ T4951] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10051'. [ 2018.062370][ T4956] delete_channel: no stack [ 2018.106545][ T4957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10062'. [ 2018.128243][ T4956] delete_channel: no stack [ 2018.249963][ T4954] delete_channel: no stack [ 2019.889044][ T4979] netlink: 'syz.4.10061': attribute type 29 has an invalid length. [ 2019.942208][ T4979] netlink: 'syz.4.10061': attribute type 29 has an invalid length. [ 2020.091248][ T4981] netlink: 'syz.4.10061': attribute type 10 has an invalid length. [ 2020.196403][ T4981] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.234864][ T4981] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.256356][ T4981] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.276312][ T4981] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.622421][ T4999] __nla_validate_parse: 2 callbacks suppressed [ 2020.622462][ T4999] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.10064'. [ 2020.725825][ T4997] netlink: 'syz.3.10059': attribute type 2 has an invalid length. [ 2020.757484][ T4997] netlink: 'syz.3.10059': attribute type 8 has an invalid length. [ 2020.797728][ T4997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10059'. [ 2020.851924][ T4998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10065'. [ 2020.915661][ T5003] netlink: 'syz.0.10064': attribute type 2 has an invalid length. [ 2020.923577][ T5003] netlink: 'syz.0.10064': attribute type 8 has an invalid length. [ 2021.043964][ T5003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10064'. [ 2021.076962][ T5002] netlink: 'syz.0.10064': attribute type 2 has an invalid length. [ 2021.098598][ T5002] netlink: 'syz.0.10064': attribute type 8 has an invalid length. [ 2021.135942][ T5002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10064'. [ 2021.170916][ T5008] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.10066'. [ 2021.211722][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10067'. [ 2021.409865][ T5005] netlink: 'syz.4.10066': attribute type 16 has an invalid length. [ 2021.465950][ T5005] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10066'. [ 2021.657007][ T5016] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10068'. [ 2021.736030][ T5022] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10068'. [ 2025.755101][ T5050] __nla_validate_parse: 2 callbacks suppressed [ 2025.755157][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10077'. [ 2026.756539][ T5055] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10089'. [ 2026.897955][ T5058] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.10080'. [ 2027.058910][ T5062] validate_nla: 2 callbacks suppressed [ 2027.059123][ T5062] netlink: 'syz.1.10079': attribute type 29 has an invalid length. [ 2027.127548][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10081'. [ 2027.382207][ T5062] netlink: 'syz.1.10079': attribute type 29 has an invalid length. [ 2027.525021][ T5065] netlink: 'syz.1.10079': attribute type 10 has an invalid length. [ 2028.173330][ T5071] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10082'. [ 2028.542767][ T5064] netlink: 'syz.0.10078': attribute type 2 has an invalid length. [ 2028.581898][ T5064] netlink: 'syz.0.10078': attribute type 8 has an invalid length. [ 2028.613955][ T5064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10078'. [ 2028.760935][ T5087] netlink: 'syz.2.10091': attribute type 29 has an invalid length. [ 2028.802540][ T5087] netlink: 'syz.2.10091': attribute type 29 has an invalid length. [ 2028.888470][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10093'. [ 2029.314440][ T5094] netlink: 'syz.0.10088': attribute type 27 has an invalid length. [ 2029.354821][ T5094] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10088'. [ 2029.397820][ T5099] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2029.489669][ T5088] netlink: 'syz.1.10090': attribute type 2 has an invalid length. [ 2029.509284][ T5088] netlink: 'syz.1.10090': attribute type 8 has an invalid length. [ 2029.544804][ T5088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10090'. [ 2029.558872][ T5099] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2029.622951][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10096'. [ 2032.682335][ T5126] netlink: 'syz.0.10102': attribute type 29 has an invalid length. [ 2032.832431][ T5126] netlink: 'syz.0.10102': attribute type 29 has an invalid length. [ 2033.013962][ T5127] netlink: 'syz.0.10102': attribute type 10 has an invalid length. [ 2033.105458][ T5127] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.214938][ T5127] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.242571][ T5127] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.283612][ T5127] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.545069][ T5138] __nla_validate_parse: 1 callbacks suppressed [ 2033.545097][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 2033.635204][ T5139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10103'. [ 2033.858498][ T5144] netlink: 'syz.2.10105': attribute type 2 has an invalid length. [ 2033.914858][ T5144] netlink: 'syz.2.10105': attribute type 8 has an invalid length. [ 2033.944740][ T5144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10105'. [ 2034.013829][ T5147] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10101'. [ 2034.646145][ T5156] netlink: 'syz.0.10107': attribute type 29 has an invalid length. [ 2034.704808][ T5156] netlink: 'syz.0.10107': attribute type 29 has an invalid length. [ 2034.971523][ T5159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10108'. [ 2035.496882][ T5167] netlink: 'syz.3.10109': attribute type 2 has an invalid length. [ 2035.553399][ T5167] netlink: 'syz.3.10109': attribute type 8 has an invalid length. [ 2035.581897][ T5167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10109'. [ 2035.673488][ T5172] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2035.750260][ T5172] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.10110'. [ 2035.764831][ T5173] netlink: 'syz.2.10112': attribute type 21 has an invalid length. [ 2035.795235][ T5176] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2035.853173][ T5172] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2035.904889][ T5172] CPU: 0 PID: 5172 Comm: syz.1.10110 Not tainted syzkaller #0 [ 2035.912467][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2035.922593][ T5172] Call Trace: [ 2035.925934][ T5172] [ 2035.928940][ T5172] dump_stack_lvl+0x188/0x24e [ 2035.933723][ T5172] ? show_regs_print_info+0x12/0x12 [ 2035.939008][ T5172] ? load_image+0x410/0x410 [ 2035.943708][ T5172] sysfs_warn_dup+0x8a/0xa0 [ 2035.948298][ T5172] sysfs_do_create_link_sd+0xc0/0x110 [ 2035.953770][ T5172] device_add+0x83b/0x1050 [ 2035.958287][ T5172] wiphy_register+0x1d8b/0x2aa0 [ 2035.963285][ T5172] ? cfg80211_event_work+0x40/0x40 [ 2035.968570][ T5172] ? minstrel_ht_alloc+0x894/0xa20 [ 2035.973784][ T5172] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2035.980036][ T5172] ieee80211_register_hw+0x2d48/0x39f0 [ 2035.985608][ T5172] ? ieee80211_register_hw+0xf61/0x39f0 [ 2035.991246][ T5172] ? ieee80211_register_hw+0xf61/0x39f0 [ 2035.997499][ T5172] ? ieee80211_tasklet_handler+0x20/0x20 [ 2036.003212][ T5172] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2036.006613][ T5180] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10113'. [ 2036.009167][ T5172] ? __debug_object_init+0xed/0x440 [ 2036.009231][ T5172] ? memset+0x1e/0x40 [ 2036.009266][ T5172] ? __hrtimer_init+0x189/0x270 [ 2036.009309][ T5172] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2036.009369][ T5172] ? memcpy+0x3c/0x60 [ 2036.042663][ T5172] hwsim_new_radio_nl+0xab7/0xc90 [ 2036.047786][ T5172] genl_family_rcv_msg_doit+0x22f/0x350 [ 2036.053392][ T5172] ? end_current_label_crit_section+0x170/0x170 [ 2036.059697][ T5172] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2036.065753][ T5172] ? bpf_lsm_capable+0x5/0x10 [ 2036.070474][ T5172] ? security_capable+0x85/0xb0 [ 2036.075390][ T5172] genl_rcv_msg+0x601/0x790 [ 2036.079971][ T5172] ? genl_bind+0x360/0x360 [ 2036.084431][ T5172] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2036.090831][ T5172] netlink_rcv_skb+0x1ef/0x440 [ 2036.095647][ T5172] ? genl_bind+0x360/0x360 [ 2036.100121][ T5172] ? netlink_ack+0x1160/0x1160 [ 2036.104954][ T5172] ? down_read+0x1a8/0x2d0 [ 2036.109507][ T5172] genl_rcv+0x24/0x40 [ 2036.113543][ T5172] netlink_unicast+0x7ad/0x920 [ 2036.118494][ T5172] netlink_sendmsg+0x8ad/0xbd0 [ 2036.123338][ T5172] ? netlink_getsockopt+0x550/0x550 [ 2036.128594][ T5172] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2036.134198][ T5172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2036.139541][ T5172] ? security_socket_sendmsg+0x7c/0xa0 [ 2036.145065][ T5172] ? netlink_getsockopt+0x550/0x550 [ 2036.150328][ T5172] ____sys_sendmsg+0x5ed/0x9a0 [ 2036.155163][ T5172] ? __sys_sendmsg_sock+0x30/0x30 [ 2036.160240][ T5172] ? __import_iovec+0x306/0x510 [ 2036.165158][ T5172] ? import_iovec+0x6f/0xa0 [ 2036.169719][ T5172] ___sys_sendmsg+0x2a2/0x360 [ 2036.174571][ T5172] ? __sys_sendmsg+0x2a0/0x2a0 [ 2036.179477][ T5172] __se_sys_sendmsg+0x1c3/0x2b0 [ 2036.184447][ T5172] ? __x64_sys_sendmsg+0x80/0x80 [ 2036.189464][ T5172] ? lockdep_hardirqs_on+0x94/0x140 [ 2036.194712][ T5172] do_syscall_64+0x4c/0xa0 [ 2036.199346][ T5172] ? clear_bhb_loop+0x60/0xb0 [ 2036.204069][ T5172] ? clear_bhb_loop+0x60/0xb0 [ 2036.208837][ T5172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2036.214786][ T5172] RIP: 0033:0x7f437819de59 [ 2036.219251][ T5172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2036.238922][ T5172] RSP: 002b:00007f43763d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2036.247391][ T5172] RAX: ffffffffffffffda RBX: 00007f4378426090 RCX: 00007f437819de59 [ 2036.255411][ T5172] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2036.263861][ T5172] RBP: 00007f4378233e6f R08: 0000000000000000 R09: 0000000000000000 [ 2036.271883][ T5172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2036.279903][ T5172] R13: 00007f4378426128 R14: 00007f4378426090 R15: 00007ffdc13f74a8 [ 2036.287943][ T5172] [ 2037.084401][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10116'. [ 2037.327751][ T5200] device netdevsim0 entered promiscuous mode [ 2037.557434][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.563850][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.902833][ T5216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10121'. [ 2038.363266][ T5218] validate_nla: 2 callbacks suppressed [ 2038.363287][ T5218] netlink: 'syz.2.10120': attribute type 2 has an invalid length. [ 2038.415476][ T5218] netlink: 'syz.2.10120': attribute type 8 has an invalid length. [ 2038.959461][ T5225] __nla_validate_parse: 2 callbacks suppressed [ 2038.959507][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10122'. [ 2039.310620][ T5234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10125'. [ 2039.878071][ T5245] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10123'. [ 2040.042814][ T5250] netlink: 'syz.1.10131': attribute type 29 has an invalid length. [ 2040.084123][ T5250] netlink: 'syz.1.10131': attribute type 29 has an invalid length. [ 2040.093922][ T5251] netlink: 'syz.0.10141': attribute type 27 has an invalid length. [ 2040.140324][ T5251] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10141'. [ 2040.168521][ T5253] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2040.228934][ T5253] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2040.771155][ T5263] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.10134'. [ 2040.977475][ T5268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10135'. [ 2041.038965][ T5262] netlink: 'syz.3.10134': attribute type 16 has an invalid length. [ 2041.056630][ T5262] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10134'. [ 2041.233005][ T5273] netlink: 'syz.1.10136': attribute type 10 has an invalid length. [ 2041.265701][ T5273] device netdevsim0 entered promiscuous mode [ 2041.483912][ T5279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10138'. [ 2041.520546][ T5285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10139'. [ 2042.676248][ T5299] netlink: 'syz.2.10144': attribute type 2 has an invalid length. [ 2042.684992][ T5306] netlink: 'syz.4.10146': attribute type 29 has an invalid length. [ 2042.714100][ T5299] netlink: 'syz.2.10144': attribute type 8 has an invalid length. [ 2042.728041][ T5299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10144'. [ 2043.787038][ T5328] validate_nla: 2 callbacks suppressed [ 2043.787081][ T5328] netlink: 'syz.1.10154': attribute type 21 has an invalid length. [ 2043.863119][ T5332] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2044.804979][ T5344] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2045.042289][ T5350] __nla_validate_parse: 3 callbacks suppressed [ 2045.042309][ T5350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10157'. [ 2045.173019][ T5338] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10158'. [ 2045.362298][ T5338] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2045.474657][ T5338] CPU: 1 PID: 5338 Comm: syz.4.10158 Not tainted syzkaller #0 [ 2045.482320][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2045.492519][ T5338] Call Trace: [ 2045.495837][ T5338] [ 2045.498809][ T5338] dump_stack_lvl+0x188/0x24e [ 2045.503533][ T5338] ? show_regs_print_info+0x12/0x12 [ 2045.508782][ T5338] ? load_image+0x410/0x410 [ 2045.513339][ T5338] sysfs_warn_dup+0x8a/0xa0 [ 2045.517899][ T5338] sysfs_do_create_link_sd+0xc0/0x110 [ 2045.523314][ T5338] device_add+0x83b/0x1050 [ 2045.527957][ T5338] wiphy_register+0x1d8b/0x2aa0 [ 2045.532869][ T5338] ? cfg80211_event_work+0x40/0x40 [ 2045.538026][ T5338] ? minstrel_ht_alloc+0x894/0xa20 [ 2045.543197][ T5338] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2045.549409][ T5338] ieee80211_register_hw+0x2d48/0x39f0 [ 2045.554926][ T5338] ? ieee80211_register_hw+0xf61/0x39f0 [ 2045.560562][ T5338] ? ieee80211_register_hw+0xf61/0x39f0 [ 2045.566164][ T5338] ? ieee80211_tasklet_handler+0x20/0x20 [ 2045.571928][ T5338] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2045.577863][ T5338] ? __debug_object_init+0xed/0x440 [ 2045.583117][ T5338] ? memset+0x1e/0x40 [ 2045.587135][ T5338] ? __hrtimer_init+0x189/0x270 [ 2045.592027][ T5338] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2045.597799][ T5338] ? memcpy+0x3c/0x60 [ 2045.601822][ T5338] hwsim_new_radio_nl+0xab7/0xc90 [ 2045.606947][ T5338] genl_family_rcv_msg_doit+0x22f/0x350 [ 2045.612549][ T5338] ? end_current_label_crit_section+0x170/0x170 [ 2045.618840][ T5338] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2045.624790][ T5338] ? bpf_lsm_capable+0x5/0x10 [ 2045.629512][ T5338] ? security_capable+0x85/0xb0 [ 2045.634444][ T5338] genl_rcv_msg+0x601/0x790 [ 2045.639012][ T5338] ? genl_bind+0x360/0x360 [ 2045.643553][ T5338] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2045.649941][ T5338] netlink_rcv_skb+0x1ef/0x440 [ 2045.654832][ T5338] ? genl_bind+0x360/0x360 [ 2045.659296][ T5338] ? netlink_ack+0x1160/0x1160 [ 2045.664114][ T5338] ? down_read+0x1a8/0x2d0 [ 2045.668572][ T5338] genl_rcv+0x24/0x40 [ 2045.672612][ T5338] netlink_unicast+0x7ad/0x920 [ 2045.677425][ T5338] netlink_sendmsg+0x8ad/0xbd0 [ 2045.682243][ T5338] ? netlink_getsockopt+0x550/0x550 [ 2045.687577][ T5338] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2045.693185][ T5338] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2045.698513][ T5338] ? security_socket_sendmsg+0x7c/0xa0 [ 2045.704015][ T5338] ? netlink_getsockopt+0x550/0x550 [ 2045.709256][ T5338] ____sys_sendmsg+0x5ed/0x9a0 [ 2045.714073][ T5338] ? __sys_sendmsg_sock+0x30/0x30 [ 2045.719132][ T5338] ? __import_iovec+0x306/0x510 [ 2045.724032][ T5338] ? import_iovec+0x6f/0xa0 [ 2045.728587][ T5338] ___sys_sendmsg+0x2a2/0x360 [ 2045.733311][ T5338] ? __sys_sendmsg+0x2a0/0x2a0 [ 2045.738162][ T5338] __se_sys_sendmsg+0x1c3/0x2b0 [ 2045.743051][ T5338] ? ct_nmi_exit+0x145/0x1c0 [ 2045.747689][ T5338] ? __x64_sys_sendmsg+0x80/0x80 [ 2045.752696][ T5338] ? lockdep_hardirqs_on+0x94/0x140 [ 2045.757979][ T5338] do_syscall_64+0x4c/0xa0 [ 2045.762443][ T5338] ? clear_bhb_loop+0x60/0xb0 [ 2045.767250][ T5338] ? clear_bhb_loop+0x60/0xb0 [ 2045.771978][ T5338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2045.777915][ T5338] RIP: 0033:0x7f34bff9de59 [ 2045.782365][ T5338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.802013][ T5338] RSP: 002b:00007f34c0ef4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2045.810553][ T5338] RAX: ffffffffffffffda RBX: 00007f34c0225fa0 RCX: 00007f34bff9de59 [ 2045.818560][ T5338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2045.826572][ T5338] RBP: 00007f34c0033e6f R08: 0000000000000000 R09: 0000000000000000 [ 2045.834663][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2045.843021][ T5338] R13: 00007f34c0226038 R14: 00007f34c0225fa0 R15: 00007fffbcf3db28 [ 2045.851045][ T5338] [ 2046.357161][ T5362] netlink: 'syz.1.10163': attribute type 27 has an invalid length. [ 2046.373030][ T5362] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10163'. [ 2046.852261][ T5369] netlink: 'syz.2.10162': attribute type 9 has an invalid length. [ 2046.881738][ T5369] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.10162'. [ 2046.970580][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10166'. [ 2047.009776][ T5374] netlink: 'syz.2.10162': attribute type 4 has an invalid length. [ 2047.018339][ T5374] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10162'. [ 2047.098109][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10164'. [ 2047.331700][ T5388] netlink: 'syz.0.10170': attribute type 27 has an invalid length. [ 2047.362292][ T5388] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10170'. [ 2047.847708][ T5388] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2048.073749][ T5388] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2048.311574][ T5399] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10171'. [ 2048.672937][ T5406] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10169'. [ 2048.753797][ T5398] netlink: 'syz.2.10171': attribute type 16 has an invalid length. [ 2051.688914][ T5425] __nla_validate_parse: 2 callbacks suppressed [ 2051.688982][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10180'. [ 2051.805862][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10181'. [ 2051.860072][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10182'. [ 2052.459650][ T5448] netlink: 'syz.2.10187': attribute type 27 has an invalid length. [ 2052.494860][ T5448] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10187'. [ 2052.522376][ T5450] netlink: 'syz.0.10188': attribute type 27 has an invalid length. [ 2052.560548][ T5450] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2052.682609][ T5457] netlink: 'syz.4.10185': attribute type 1 has an invalid length. [ 2052.749885][ T5450] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2052.768742][ T5450] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2052.783183][ T5457] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.10185'. [ 2052.842927][ T5458] netlink: 'syz.4.10185': attribute type 29 has an invalid length. [ 2052.875158][ T5458] netlink: 'syz.4.10185': attribute type 29 has an invalid length. [ 2053.543649][ T5473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10192'. [ 2054.491510][ T5465] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10191'. [ 2054.625102][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10195'. [ 2054.789334][ T5484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10194'. [ 2055.923550][ T5497] netlink: 'syz.1.10198': attribute type 16 has an invalid length. [ 2056.485485][ T5519] netlink: 'syz.2.10205': attribute type 27 has an invalid length. [ 2057.211306][ T5527] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2057.257098][ T5522] __nla_validate_parse: 4 callbacks suppressed [ 2057.257124][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10207'. [ 2057.359328][ T5527] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.10206'. [ 2057.417629][ T5527] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2057.465440][ T5527] CPU: 0 PID: 5527 Comm: syz.0.10206 Not tainted syzkaller #0 [ 2057.473015][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2057.483317][ T5527] Call Trace: [ 2057.486664][ T5527] [ 2057.489655][ T5527] dump_stack_lvl+0x188/0x24e [ 2057.494452][ T5527] ? show_regs_print_info+0x12/0x12 [ 2057.499734][ T5527] ? load_image+0x410/0x410 [ 2057.504359][ T5527] sysfs_warn_dup+0x8a/0xa0 [ 2057.508951][ T5527] sysfs_do_create_link_sd+0xc0/0x110 [ 2057.514419][ T5527] device_add+0x83b/0x1050 [ 2057.519040][ T5527] wiphy_register+0x1d8b/0x2aa0 [ 2057.524036][ T5527] ? cfg80211_event_work+0x40/0x40 [ 2057.529337][ T5527] ? minstrel_ht_alloc+0x894/0xa20 [ 2057.534558][ T5527] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2057.540817][ T5527] ieee80211_register_hw+0x2d48/0x39f0 [ 2057.546372][ T5527] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2057.552682][ T5527] ? ieee80211_register_hw+0xf61/0x39f0 [ 2057.558353][ T5527] ? ieee80211_register_hw+0xf61/0x39f0 [ 2057.564012][ T5527] ? ieee80211_tasklet_handler+0x20/0x20 [ 2057.569735][ T5527] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2057.575736][ T5527] ? __debug_object_init+0xed/0x440 [ 2057.581103][ T5527] ? memset+0x1e/0x40 [ 2057.585251][ T5527] ? __hrtimer_init+0x189/0x270 [ 2057.590190][ T5527] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2057.596024][ T5527] ? memcpy+0x3c/0x60 [ 2057.600097][ T5527] hwsim_new_radio_nl+0xab7/0xc90 [ 2057.605249][ T5527] genl_family_rcv_msg_doit+0x22f/0x350 [ 2057.610973][ T5527] ? end_current_label_crit_section+0x170/0x170 [ 2057.617330][ T5527] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2057.623457][ T5527] ? bpf_lsm_capable+0x5/0x10 [ 2057.628213][ T5527] ? security_capable+0x85/0xb0 [ 2057.633204][ T5527] genl_rcv_msg+0x601/0x790 [ 2057.637829][ T5527] ? genl_bind+0x360/0x360 [ 2057.642325][ T5527] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2057.648792][ T5527] netlink_rcv_skb+0x1ef/0x440 [ 2057.653648][ T5527] ? genl_bind+0x360/0x360 [ 2057.658170][ T5527] ? netlink_ack+0x1160/0x1160 [ 2057.663054][ T5527] ? down_read+0x1a8/0x2d0 [ 2057.667553][ T5527] genl_rcv+0x24/0x40 [ 2057.671622][ T5527] netlink_unicast+0x7ad/0x920 [ 2057.676497][ T5527] netlink_sendmsg+0x8ad/0xbd0 [ 2057.681424][ T5527] ? netlink_getsockopt+0x550/0x550 [ 2057.686729][ T5527] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2057.692366][ T5527] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2057.697727][ T5527] ? security_socket_sendmsg+0x7c/0xa0 [ 2057.703273][ T5527] ? netlink_getsockopt+0x550/0x550 [ 2057.708647][ T5527] ____sys_sendmsg+0x5ed/0x9a0 [ 2057.713522][ T5527] ? __sys_sendmsg_sock+0x30/0x30 [ 2057.718643][ T5527] ? __import_iovec+0x306/0x510 [ 2057.723605][ T5527] ? import_iovec+0x6f/0xa0 [ 2057.728555][ T5527] ___sys_sendmsg+0x2a2/0x360 [ 2057.733340][ T5527] ? __sys_sendmsg+0x2a0/0x2a0 [ 2057.738327][ T5527] ? ktime_get+0x7b/0x270 [ 2057.742735][ T5527] ? trace_call_bpf+0xbf/0x6b0 [ 2057.747744][ T5527] __se_sys_sendmsg+0x1c3/0x2b0 [ 2057.752699][ T5527] ? perf_trace_preemptirq_template+0x268/0x320 [ 2057.759176][ T5527] ? __x64_sys_sendmsg+0x80/0x80 [ 2057.764339][ T5527] ? lockdep_hardirqs_on+0x94/0x140 [ 2057.769769][ T5527] do_syscall_64+0x4c/0xa0 [ 2057.774281][ T5527] ? clear_bhb_loop+0x60/0xb0 [ 2057.779060][ T5527] ? clear_bhb_loop+0x60/0xb0 [ 2057.783842][ T5527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2057.789918][ T5527] RIP: 0033:0x7f154a59de59 [ 2057.794418][ T5527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2057.814108][ T5527] RSP: 002b:00007f15487d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2057.822763][ T5527] RAX: ffffffffffffffda RBX: 00007f154a826090 RCX: 00007f154a59de59 [ 2057.830901][ T5527] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2057.839126][ T5527] RBP: 00007f154a633e6f R08: 0000000000000000 R09: 0000000000000000 [ 2057.847200][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2057.855252][ T5527] R13: 00007f154a826128 R14: 00007f154a826090 R15: 00007ffc1f8fdbf8 [ 2057.863428][ T5527] [ 2058.172552][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10211'. [ 2058.249678][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10209'. [ 2059.297266][ T5550] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10214'. [ 2059.416091][ T5550] ksmbd: Unknown IPC event: 10, ignore. [ 2060.030480][ T5569] netlink: 'syz.0.10219': attribute type 10 has an invalid length. [ 2060.063552][ T5569] device netdevsim0 entered promiscuous mode [ 2062.907166][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10223'. [ 2063.599779][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10225'. [ 2063.632795][ T5606] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10228'. [ 2063.708956][ T5609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10230'. [ 2065.861001][ T5657] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10241'. [ 2065.876674][ T5655] netlink: 'syz.4.10242': attribute type 27 has an invalid length. [ 2065.892550][ T5655] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10242'. [ 2067.148862][ T5681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10248'. [ 2067.896638][ T5701] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2068.209376][ T5701] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.10252'. [ 2068.251520][ T5701] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2068.277060][ T5701] CPU: 0 PID: 5701 Comm: syz.3.10252 Not tainted syzkaller #0 [ 2068.284633][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2068.294756][ T5701] Call Trace: [ 2068.298100][ T5701] [ 2068.301099][ T5701] dump_stack_lvl+0x188/0x24e [ 2068.305973][ T5701] ? show_regs_print_info+0x12/0x12 [ 2068.311265][ T5701] ? load_image+0x410/0x410 [ 2068.315886][ T5701] sysfs_warn_dup+0x8a/0xa0 [ 2068.320477][ T5701] sysfs_do_create_link_sd+0xc0/0x110 [ 2068.325931][ T5701] device_add+0x83b/0x1050 [ 2068.330446][ T5701] wiphy_register+0x1d8b/0x2aa0 [ 2068.335426][ T5701] ? cfg80211_event_work+0x40/0x40 [ 2068.340676][ T5701] ? minstrel_ht_alloc+0x894/0xa20 [ 2068.345905][ T5701] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2068.352070][ T5701] ieee80211_register_hw+0x2d48/0x39f0 [ 2068.357617][ T5701] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2068.363889][ T5701] ? ieee80211_register_hw+0xf61/0x39f0 [ 2068.369525][ T5701] ? ieee80211_register_hw+0xf61/0x39f0 [ 2068.375189][ T5701] ? ieee80211_tasklet_handler+0x20/0x20 [ 2068.381008][ T5701] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2068.387098][ T5701] ? __debug_object_init+0xed/0x440 [ 2068.392461][ T5701] ? memset+0x1e/0x40 [ 2068.396607][ T5701] ? __hrtimer_init+0x189/0x270 [ 2068.401620][ T5701] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2068.407611][ T5701] ? memcpy+0x3c/0x60 [ 2068.411661][ T5701] hwsim_new_radio_nl+0xab7/0xc90 [ 2068.416774][ T5701] genl_family_rcv_msg_doit+0x22f/0x350 [ 2068.422412][ T5701] ? end_current_label_crit_section+0x170/0x170 [ 2068.428713][ T5701] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2068.434694][ T5701] ? bpf_lsm_capable+0x5/0x10 [ 2068.439441][ T5701] ? security_capable+0x85/0xb0 [ 2068.444402][ T5701] genl_rcv_msg+0x601/0x790 [ 2068.448980][ T5701] ? genl_bind+0x360/0x360 [ 2068.453454][ T5701] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2068.459865][ T5701] netlink_rcv_skb+0x1ef/0x440 [ 2068.464949][ T5701] ? genl_bind+0x360/0x360 [ 2068.469558][ T5701] ? netlink_ack+0x1160/0x1160 [ 2068.474392][ T5701] ? down_read+0x1a8/0x2d0 [ 2068.478857][ T5701] genl_rcv+0x24/0x40 [ 2068.482932][ T5701] netlink_unicast+0x7ad/0x920 [ 2068.487860][ T5701] netlink_sendmsg+0x8ad/0xbd0 [ 2068.492696][ T5701] ? netlink_getsockopt+0x550/0x550 [ 2068.497970][ T5701] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2068.503673][ T5701] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2068.509255][ T5701] ? security_socket_sendmsg+0x7c/0xa0 [ 2068.514858][ T5701] ? netlink_getsockopt+0x550/0x550 [ 2068.520151][ T5701] ____sys_sendmsg+0x5ed/0x9a0 [ 2068.524996][ T5701] ? __sys_sendmsg_sock+0x30/0x30 [ 2068.530073][ T5701] ? __import_iovec+0x306/0x510 [ 2068.534992][ T5701] ? import_iovec+0x6f/0xa0 [ 2068.539558][ T5701] ___sys_sendmsg+0x2a2/0x360 [ 2068.544290][ T5701] ? sock_write_iter+0x30b/0x3e0 [ 2068.549288][ T5701] ? __sys_sendmsg+0x2a0/0x2a0 [ 2068.554111][ T5701] ? perf_trace_preemptirq_template+0xa8/0x320 [ 2068.560328][ T5701] ? irqentry_enter+0x33/0x50 [ 2068.565070][ T5701] ? rcu_is_watching+0x11/0xa0 [ 2068.569935][ T5701] __se_sys_sendmsg+0x1c3/0x2b0 [ 2068.574846][ T5701] ? __x64_sys_sendmsg+0x80/0x80 [ 2068.580045][ T5701] ? lockdep_hardirqs_on+0x94/0x140 [ 2068.585316][ T5701] do_syscall_64+0x4c/0xa0 [ 2068.589787][ T5701] ? clear_bhb_loop+0x60/0xb0 [ 2068.594522][ T5701] ? clear_bhb_loop+0x60/0xb0 [ 2068.599255][ T5701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2068.605221][ T5701] RIP: 0033:0x7fa8bbb9de59 [ 2068.609698][ T5701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.629366][ T5701] RSP: 002b:00007fa8b9dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.638009][ T5701] RAX: ffffffffffffffda RBX: 00007fa8bbe26090 RCX: 00007fa8bbb9de59 [ 2068.646021][ T5701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2068.654035][ T5701] RBP: 00007fa8bbc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2068.662200][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2068.670318][ T5701] R13: 00007fa8bbe26128 R14: 00007fa8bbe26090 R15: 00007ffe3c6ae678 [ 2068.678366][ T5701] [ 2069.426848][ T5724] netlink: 'syz.3.10257': attribute type 39 has an invalid length. [ 2069.551600][ T5729] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10259'. [ 2069.733051][ T5734] netlink: 'syz.3.10260': attribute type 27 has an invalid length. [ 2069.743165][ T5734] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10260'. [ 2070.887844][ T5761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10268'. [ 2072.551860][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10273'. [ 2073.461819][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10276'. [ 2073.473948][ T5790] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10277'. [ 2073.690755][ T5804] netlink: 'syz.4.10280': attribute type 27 has an invalid length. [ 2073.699566][ T5804] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10280'. [ 2074.670599][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10288'. [ 2076.044121][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10291'. [ 2076.897248][ T5843] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10294'. [ 2077.595478][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10300'. [ 2077.819111][ T5865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10302'. [ 2081.888210][ T5920] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10316'. [ 2082.059371][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10314'. [ 2082.181112][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10315'. [ 2083.458057][ T5936] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10331'. [ 2083.969662][ T5955] netlink: 175 bytes leftover after parsing attributes in process `syz.3.10326'. [ 2084.008205][ T5955] netlink: 'syz.3.10326': attribute type 10 has an invalid length. [ 2085.145992][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10330'. [ 2085.963504][ T5991] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2086.018141][ T5991] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.10332'. [ 2086.041462][ T5991] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2086.097744][ T5991] CPU: 0 PID: 5991 Comm: syz.2.10332 Not tainted syzkaller #0 [ 2086.105320][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2086.115536][ T5991] Call Trace: [ 2086.118876][ T5991] [ 2086.121862][ T5991] dump_stack_lvl+0x188/0x24e [ 2086.126633][ T5991] ? show_regs_print_info+0x12/0x12 [ 2086.132082][ T5991] ? load_image+0x410/0x410 [ 2086.136668][ T5991] sysfs_warn_dup+0x8a/0xa0 [ 2086.141254][ T5991] sysfs_do_create_link_sd+0xc0/0x110 [ 2086.146689][ T5991] device_add+0x83b/0x1050 [ 2086.151175][ T5991] wiphy_register+0x1d8b/0x2aa0 [ 2086.156148][ T5991] ? cfg80211_event_work+0x40/0x40 [ 2086.161435][ T5991] ? minstrel_ht_alloc+0x894/0xa20 [ 2086.166634][ T5991] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2086.172782][ T5991] ieee80211_register_hw+0x2d48/0x39f0 [ 2086.178325][ T5991] ? ieee80211_register_hw+0xf61/0x39f0 [ 2086.183925][ T5991] ? ieee80211_register_hw+0xf61/0x39f0 [ 2086.189568][ T5991] ? ieee80211_tasklet_handler+0x20/0x20 [ 2086.195258][ T5991] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2086.201366][ T5991] ? __debug_object_init+0xed/0x440 [ 2086.206725][ T5991] ? memset+0x1e/0x40 [ 2086.210849][ T5991] ? __hrtimer_init+0x189/0x270 [ 2086.215764][ T5991] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2086.221565][ T5991] ? memcpy+0x3c/0x60 [ 2086.225614][ T5991] hwsim_new_radio_nl+0xab7/0xc90 [ 2086.230734][ T5991] genl_family_rcv_msg_doit+0x22f/0x350 [ 2086.236344][ T5991] ? end_current_label_crit_section+0x170/0x170 [ 2086.242654][ T5991] ? lockdep_hardirqs_on+0x94/0x140 [ 2086.248360][ T5991] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2086.254336][ T5991] ? bpf_lsm_capable+0x5/0x10 [ 2086.259072][ T5991] ? security_capable+0x85/0xb0 [ 2086.264007][ T5991] genl_rcv_msg+0x601/0x790 [ 2086.268598][ T5991] ? genl_bind+0x360/0x360 [ 2086.273080][ T5991] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2086.279496][ T5991] netlink_rcv_skb+0x1ef/0x440 [ 2086.284326][ T5991] ? genl_bind+0x360/0x360 [ 2086.288892][ T5991] ? netlink_ack+0x1160/0x1160 [ 2086.293756][ T5991] ? down_read+0x1a8/0x2d0 [ 2086.298241][ T5991] genl_rcv+0x24/0x40 [ 2086.302287][ T5991] netlink_unicast+0x7ad/0x920 [ 2086.307232][ T5991] netlink_sendmsg+0x8ad/0xbd0 [ 2086.312083][ T5991] ? netlink_getsockopt+0x550/0x550 [ 2086.317348][ T5991] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2086.322967][ T5991] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2086.328318][ T5991] ? security_socket_sendmsg+0x7c/0xa0 [ 2086.333833][ T5991] ? netlink_getsockopt+0x550/0x550 [ 2086.339099][ T5991] ____sys_sendmsg+0x5ed/0x9a0 [ 2086.343950][ T5991] ? __sys_sendmsg_sock+0x30/0x30 [ 2086.349034][ T5991] ? __import_iovec+0x306/0x510 [ 2086.353967][ T5991] ? import_iovec+0x6f/0xa0 [ 2086.358542][ T5991] ___sys_sendmsg+0x2a2/0x360 [ 2086.363314][ T5991] ? __sys_sendmsg+0x2a0/0x2a0 [ 2086.368247][ T5991] __se_sys_sendmsg+0x1c3/0x2b0 [ 2086.373166][ T5991] ? __x64_sys_sendmsg+0x80/0x80 [ 2086.378211][ T5991] ? lockdep_hardirqs_on+0x94/0x140 [ 2086.383650][ T5991] do_syscall_64+0x4c/0xa0 [ 2086.388127][ T5991] ? clear_bhb_loop+0x60/0xb0 [ 2086.392872][ T5991] ? clear_bhb_loop+0x60/0xb0 [ 2086.397674][ T5991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2086.403792][ T5991] RIP: 0033:0x7f583b99de59 [ 2086.408283][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.427967][ T5991] RSP: 002b:00007f58397f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2086.436460][ T5991] RAX: ffffffffffffffda RBX: 00007f583bc26270 RCX: 00007f583b99de59 [ 2086.444500][ T5991] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2086.452626][ T5991] RBP: 00007f583ba33e6f R08: 0000000000000000 R09: 0000000000000000 [ 2086.460671][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2086.468981][ T5991] R13: 00007f583bc26308 R14: 00007f583bc26270 R15: 00007ffe1f3aad08 [ 2086.477072][ T5991] [ 2086.852086][ T5996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10337'. [ 2087.842661][ T6018] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10346'. [ 2088.113979][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10348'. [ 2088.239487][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10347'. [ 2089.456718][ T6061] netlink: 175 bytes leftover after parsing attributes in process `syz.1.10358'. [ 2089.521043][ T6061] netlink: 'syz.1.10358': attribute type 10 has an invalid length. [ 2090.324091][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10361'. [ 2090.339675][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10360'. [ 2090.448139][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10363'. [ 2091.094961][ T6089] device sit0 left promiscuous mode [ 2092.070947][ T6115] netlink: 175 bytes leftover after parsing attributes in process `syz.0.10374'. [ 2092.143502][ T6115] netlink: 'syz.0.10374': attribute type 10 has an invalid length. [ 2093.895409][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10376'. [ 2093.989556][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10378'. [ 2094.745921][ T6143] device sit0 left promiscuous mode [ 2096.643357][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10390'. [ 2097.179728][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10391'. [ 2098.997979][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.004735][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.412314][ T6196] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10397'. [ 2099.623074][ T6196] netlink: 'syz.1.10397': attribute type 20 has an invalid length. [ 2099.707996][ T6199] IPv6: NLM_F_CREATE should be specified when creating new route [ 2099.826955][ T6199] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10397'. [ 2099.875873][ T6199] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.10397'. [ 2099.945163][ T6199] netlink: 'syz.1.10397': attribute type 2 has an invalid length. [ 2099.953090][ T6199] netlink: 'syz.1.10397': attribute type 8 has an invalid length. [ 2099.971800][ T6199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10397'. [ 2100.731728][ T6208] device sit0 left promiscuous mode [ 2101.633576][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10403'. [ 2102.506400][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10404'. [ 2102.865303][ T6252] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10410'. [ 2102.932663][ T6246] Ÿë: port 2(veth0_to_team) entered blocking state [ 2102.972621][ T6246] Ÿë: port 2(veth0_to_team) entered disabled state [ 2103.258332][ T6246] device veth0_to_team entered promiscuous mode [ 2103.624439][ T6256] netlink: 'syz.0.10410': attribute type 20 has an invalid length. [ 2103.705700][ T6254] IPv6: NLM_F_CREATE should be specified when creating new route [ 2103.713882][ T6254] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10410'. [ 2103.743777][ T6264] netlink: 'syz.0.10410': attribute type 2 has an invalid length. [ 2103.769674][ T6264] netlink: 'syz.0.10410': attribute type 8 has an invalid length. [ 2103.794770][ T6264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10410'. [ 2105.798903][ T6271] netlink: 'syz.3.10412': attribute type 19 has an invalid length. [ 2105.850836][ T6271] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10412'. [ 2106.381860][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10416'. [ 2107.210518][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10420'. [ 2107.376366][ T6303] netlink: 'syz.0.10421': attribute type 10 has an invalid length. [ 2107.478733][ T6303] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.10421'. [ 2108.520765][ T6323] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10426'. [ 2108.591728][ T6323] netlink: 'syz.3.10426': attribute type 20 has an invalid length. [ 2108.649114][ T6323] IPv6: NLM_F_CREATE should be specified when creating new route [ 2108.686552][ T6323] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10426'. [ 2108.784080][ T6323] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.10426'. [ 2108.829694][ T6326] netlink: 'syz.3.10426': attribute type 2 has an invalid length. [ 2108.867717][ T6326] netlink: 'syz.3.10426': attribute type 8 has an invalid length. [ 2108.900152][ T6326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10426'. [ 2109.291566][ T6331] Ÿë: port 1(veth0_to_team) entered blocking state [ 2109.311195][ T6331] Ÿë: port 1(veth0_to_team) entered disabled state [ 2109.338804][ T6331] device veth0_to_team entered promiscuous mode [ 2109.551414][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10429'. [ 2109.753541][ T6343] netlink: 'syz.4.10430': attribute type 19 has an invalid length. [ 2109.817994][ T6343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10430'. [ 2111.110808][ T6368] Ÿë: port 2(veth0_to_team) entered blocking state [ 2111.161317][ T6368] Ÿë: port 2(veth0_to_team) entered disabled state [ 2111.706909][ T6368] device veth0_to_team entered promiscuous mode [ 2112.688234][ T6378] __nla_validate_parse: 2 callbacks suppressed [ 2112.688258][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10451'. [ 2114.113199][ T6392] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10443'. [ 2114.564967][ T6401] netlink: 'syz.0.10445': attribute type 19 has an invalid length. [ 2114.598855][ T6401] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10445'. [ 2114.889843][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10447'. [ 2116.311939][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10462'. [ 2116.357726][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10453'. [ 2116.490603][ T6427] Ÿë: port 2(veth0_to_team) entered blocking state [ 2116.558008][ T6427] Ÿë: port 2(veth0_to_team) entered disabled state [ 2116.642049][ T6427] device veth0_to_team entered promiscuous mode [ 2117.068454][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10467'. [ 2117.345801][ T6443] netlink: 21187 bytes leftover after parsing attributes in process `syz.1.10457'. [ 2119.136162][ T6531] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10474'. [ 2119.384767][ T6532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10461'. [ 2119.613791][ T6540] netlink: 'syz.2.10465': attribute type 19 has an invalid length. [ 2119.662277][ T6540] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10465'. [ 2120.160544][ T6551] netlink: 'syz.1.10471': attribute type 1 has an invalid length. [ 2120.178977][ T6551] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10471'. [ 2120.196972][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10469'. [ 2123.687263][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10473'. [ 2124.541111][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10487'. [ 2129.227164][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10483'. [ 2129.401966][ T6633] netlink: 'syz.1.10482': attribute type 19 has an invalid length. [ 2129.603177][ T6633] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10482'. [ 2130.019915][ T6636] netlink: 21187 bytes leftover after parsing attributes in process `syz.2.10486'. [ 2132.352405][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10491'. [ 2132.650998][ T6691] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.10497'. [ 2133.276445][ T6695] netlink: 'syz.3.10500': attribute type 10 has an invalid length. [ 2133.579587][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10501'. [ 2136.447024][ T6728] netlink: 21187 bytes leftover after parsing attributes in process `syz.3.10507'. [ 2136.510743][ T6729] netlink: 'syz.1.10516': attribute type 10 has an invalid length. [ 2136.532229][ T6723] netlink: 'syz.2.10506': attribute type 19 has an invalid length. [ 2136.589199][ T6723] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10506'. [ 2136.640258][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10508'. [ 2136.908703][ T6738] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10512'. [ 2138.084771][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10514'. [ 2138.593419][ T6764] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.10518'. [ 2138.628847][ T6764] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2141.001718][ T6772] netlink: 'syz.4.10520': attribute type 1 has an invalid length. [ 2141.034048][ T6772] netlink: 152 bytes leftover after parsing attributes in process `syz.4.10520'. [ 2141.150050][ T6776] netlink: 'syz.3.10523': attribute type 10 has an invalid length. [ 2142.263092][ T6796] netlink: 'syz.2.10537': attribute type 1 has an invalid length. [ 2142.299692][ T6796] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10537'. [ 2142.325282][ T6792] netlink: 21187 bytes leftover after parsing attributes in process `syz.4.10526'. [ 2143.002143][ T6810] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10528'. [ 2143.281782][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10529'. [ 2144.143344][ T6833] netlink: 'syz.4.10534': attribute type 10 has an invalid length. [ 2145.328330][ T6842] netlink: 'syz.4.10539': attribute type 10 has an invalid length. [ 2146.277095][ T6861] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10545'. [ 2146.458311][ T6860] netlink: 21187 bytes leftover after parsing attributes in process `syz.0.10543'. [ 2146.489677][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10544'. [ 2149.757399][ T6895] device wlan1 entered promiscuous mode [ 2149.938795][ T6902] netlink: 'syz.0.10556': attribute type 3 has an invalid length. [ 2150.046000][ T6899] netlink: 'syz.2.10554': attribute type 10 has an invalid length. [ 2150.155218][ T6905] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10557'. [ 2150.424752][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10559'. [ 2150.507027][ T6917] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10561'. [ 2150.646889][ T6915] device wlan1 left promiscuous mode [ 2154.394351][ T6954] netlink: 'syz.4.10569': attribute type 3 has an invalid length. [ 2156.102430][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10572'. [ 2156.635316][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10586'. [ 2157.288673][ T6977] device wlan1 left promiscuous mode [ 2157.713710][ T6986] netlink: 'syz.3.10581': attribute type 4 has an invalid length. [ 2157.965791][ T7000] netlink: 'syz.1.10584': attribute type 3 has an invalid length. [ 2160.493115][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.499619][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.555227][ T7014] netlink: 'syz.0.10590': attribute type 10 has an invalid length. [ 2161.663413][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10589'. [ 2161.820958][ T7023] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.10592'. [ 2161.872561][ T7025] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2161.949449][ T7025] dvmrp1: linktype set to 768 [ 2162.037981][ T7030] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10594'. [ 2162.984441][ T7037] device wlan1 entered promiscuous mode [ 2163.514452][ T7049] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2163.818663][ T7060] netlink: 'syz.2.10601': attribute type 3 has an invalid length. [ 2164.228640][ T7067] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2164.459307][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10604'. [ 2164.843038][ T7089] netlink: 'syz.0.10609': attribute type 4 has an invalid length. [ 2164.925827][ T7086] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10608'. [ 2165.175522][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10610'. [ 2165.579176][ T7106] netlink: 'syz.3.10614': attribute type 10 has an invalid length. [ 2165.847686][ T7111] netlink: 'syz.4.10616': attribute type 2 has an invalid length. [ 2165.979863][ T7111] netlink: 'syz.4.10616': attribute type 1 has an invalid length. [ 2166.073777][ T7111] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10616'. [ 2166.085017][ T7119] netlink: 'syz.3.10617': attribute type 10 has an invalid length. [ 2166.119500][ T7119] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.10617'. [ 2166.727115][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10621'. [ 2167.139738][ T7138] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2167.399362][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10625'. [ 2167.566929][ T7145] netlink: 'syz.1.10624': attribute type 4 has an invalid length. [ 2167.697221][ T7155] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10629'. [ 2167.887072][ T7157] device sit0 entered promiscuous mode [ 2168.619902][ T7170] -1: renamed from syzkaller0 [ 2169.144148][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10635'. [ 2169.582478][ T7192] netlink: 'syz.4.10641': attribute type 4 has an invalid length. [ 2169.676312][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10640'. [ 2169.893886][ T7203] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10644'. [ 2169.990419][ T7195] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2171.225739][ T7225] -1: renamed from syzkaller0 [ 2174.129697][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10654'. [ 2174.913171][ T7262] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10661'. [ 2175.096147][ T7259] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2176.414270][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10667'. [ 2176.744736][ T7292] -1: renamed from syzkaller0 [ 2178.753898][ T7314] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10675'. [ 2179.794578][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10681'. [ 2179.886861][ T7334] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10693'. [ 2180.227871][ T7332] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2180.233766][ T7332] dvmrp1: linktype set to 768 [ 2180.275182][ T7329] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.10680'. [ 2180.637683][ T7339] -1: renamed from syzkaller0 [ 2180.831119][ T7345] netlink: 'syz.3.10695': attribute type 10 has an invalid length. [ 2181.098872][ T7347] netlink: 'syz.0.10684': attribute type 10 has an invalid length. [ 2181.124720][ T7347] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10684'. [ 2184.373827][ T7375] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2184.387995][ T7375] dvmrp1: linktype set to 768 [ 2184.450801][ T7374] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.10696'. [ 2185.265185][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10697'. [ 2185.310229][ T7380] -1: renamed from syzkaller0 [ 2185.405296][ T7386] netlink: 'syz.3.10699': attribute type 10 has an invalid length. [ 2185.426166][ T7386] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10699'. [ 2186.085059][ T7398] syz.3.10705[7398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2186.085208][ T7398] syz.3.10705[7398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2186.999348][ T7408] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.10710'. [ 2187.074041][ T7413] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2187.086108][ T7413] dvmrp1: linktype set to 768 [ 2187.101441][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10711'. [ 2188.162210][ T7432] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10720'. [ 2188.560239][ T7437] -1: renamed from syzkaller0 [ 2188.843100][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10722'. [ 2192.107175][ T7470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2192.117079][ T7470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2192.125965][ T7470] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2192.136125][ T7470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2192.144151][ T7470] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2192.154682][T21455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2192.420381][ T7480] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10735'. [ 2192.523340][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 2192.594006][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10734'. [ 2192.677355][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.694105][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.721241][ T7467] device bridge_slave_0 entered promiscuous mode [ 2192.733304][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.741211][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.750687][ T7467] device bridge_slave_1 entered promiscuous mode [ 2192.784851][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2192.798960][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2192.837730][ T7467] team0: Port device team_slave_0 added [ 2192.848504][ T7467] team0: Port device team_slave_1 added [ 2192.878858][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2192.886395][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.912998][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2192.928362][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2192.935870][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2192.963066][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2193.014359][ T7467] device hsr_slave_0 entered promiscuous mode [ 2193.022242][ T7467] device hsr_slave_1 entered promiscuous mode [ 2193.221043][ T7467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2193.238434][ T7467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2193.260119][ T7467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2193.299183][ T7467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2193.362226][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.369469][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.376971][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.384127][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.447889][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2193.461728][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2193.471581][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.480597][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.491673][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2193.509397][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 2193.519777][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2193.528777][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2193.539635][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 2193.547031][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2193.563815][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2193.572859][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2193.582492][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.589707][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2193.601963][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2193.616149][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2193.630657][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2193.640256][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2193.650911][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2193.663056][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2193.672989][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2193.686761][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2193.695917][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2193.708445][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2193.717748][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2193.729493][ T7467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2193.923447][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2193.931436][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2193.947508][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2194.195116][ T7470] Bluetooth: hci5: command 0x0409 tx timeout [ 2194.229087][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2194.239032][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2194.261762][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2194.271794][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2194.281456][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2194.289900][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2194.301816][ T7467] device veth0_vlan entered promiscuous mode [ 2194.314400][ T7467] device veth1_vlan entered promiscuous mode [ 2194.338011][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2194.347146][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2194.356384][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2194.366269][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2194.379049][ T7467] device veth0_macvtap entered promiscuous mode [ 2194.389983][ T7467] device veth1_macvtap entered promiscuous mode [ 2194.407240][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2194.416395][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2194.427187][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2194.437503][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2194.447086][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2194.460853][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2194.469515][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2194.478595][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2194.490919][ T7467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.499836][ T7467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.509133][ T7467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.518023][ T7467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.609022][ T6518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.624602][ T6518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.643089][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2194.670514][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.682886][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.691050][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2194.783782][ T7499] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.10726'. [ 2194.798561][ T7499] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2194.805509][ T7499] dvmrp1: linktype set to 768 [ 2195.210558][ T7510] -1: renamed from syzkaller0 [ 2196.284728][ T7470] Bluetooth: hci5: command 0x041b tx timeout [ 2198.354829][ T7470] Bluetooth: hci5: command 0x040f tx timeout [ 2200.434605][ T7470] Bluetooth: hci5: command 0x0419 tx timeout [ 2221.876961][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.883346][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.316496][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.322832][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2316.114679][ T4289] Bluetooth: hci5: command 0x0406 tx timeout [ 2330.674851][ T28] INFO: task syz.1.10666:7286 blocked for more than 143 seconds. [ 2330.682696][ T28] Not tainted syzkaller #0 [ 2330.691001][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2330.703286][ T28] task:syz.1.10666 state:D stack:26320 pid:7286 ppid:4271 flags:0x00004004 [ 2330.712645][ T28] Call Trace: [ 2330.716187][ T28] [ 2330.719270][ T28] __schedule+0x107f/0x4030 [ 2330.724184][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 2330.729553][ T28] ? __sched_text_start+0x8/0x8 [ 2330.734577][ T28] ? task_work_cancel+0xa1/0x220 [ 2330.739665][ T28] ? task_work_cancel_func+0x210/0x210 [ 2330.745213][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2330.750909][ T28] schedule+0xb9/0x180 [ 2330.755148][ T28] ? _free_event+0x10d/0x1050 [ 2330.759991][ T28] _free_event+0x176/0x1050 [ 2330.764655][ T28] perf_event_release_kernel+0x7c4/0x850 [ 2330.770348][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2330.776673][ T28] ? calc_timer_values+0x410/0x410 [ 2330.781863][ T28] ? perf_mmap+0x1470/0x1470 [ 2330.786571][ T28] perf_release+0x37/0x40 [ 2330.790958][ T28] __fput+0x20a/0x8b0 [ 2330.795242][ T28] task_work_run+0x1d0/0x260 [ 2330.799898][ T28] ? task_work_cancel+0x220/0x220 [ 2330.805967][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 2330.811423][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 2330.817096][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 2330.822599][ T28] do_syscall_64+0x58/0xa0 [ 2330.827115][ T28] ? clear_bhb_loop+0x60/0xb0 [ 2330.831882][ T28] ? clear_bhb_loop+0x60/0xb0 [ 2330.841952][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2330.847994][ T28] RIP: 0033:0x7f437819de59 [ 2330.852455][ T28] RSP: 002b:00007f43763d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2330.861072][ T28] RAX: 0000000000000000 RBX: 00007f4378426090 RCX: 00007f437819de59 [ 2330.869120][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2330.877188][ T28] RBP: 00007f4378233e6f R08: 0000000000000000 R09: 0000000000000000 [ 2330.885420][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2330.893432][ T28] R13: 00007f4378426128 R14: 00007f4378426090 R15: 00007ffdc13f74a8 [ 2330.901572][ T28] [ 2330.904706][ T28] [ 2330.904706][ T28] Showing all locks held in the system: [ 2330.912469][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2330.918032][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2330.928719][ T28] 1 lock held by rcu_tasks_trace/13: [ 2330.934038][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2330.945339][ T28] 1 lock held by khungtaskd/28: [ 2330.950258][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2330.960282][ T28] 2 locks held by getty/4028: [ 2330.965023][ T28] #0: ffff88802f9d5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2330.974936][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 2330.985156][ T28] 5 locks held by kworker/u4:21/6508: [ 2330.990638][ T28] #0: ffff8880b8f3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 2331.000864][ T28] #1: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x184/0x6d0 [ 2331.010574][ T28] #2: ffff8880b8f28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 2331.020032][ T28] #3: ffffffff96ef7c70 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x68/0x4f0 [ 2331.030642][ T28] #4: ffffffff96f40d98 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x9a/0x520 [ 2331.041338][ T28] [ 2331.043700][ T28] ============================================= [ 2331.043700][ T28] [ 2331.052322][ T28] NMI backtrace for cpu 0 [ 2331.056761][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2331.063998][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2331.074272][ T28] Call Trace: [ 2331.077579][ T28] [ 2331.080548][ T28] dump_stack_lvl+0x188/0x24e [ 2331.085284][ T28] ? irq_work_queue+0xb8/0x140 [ 2331.090187][ T28] ? show_regs_print_info+0x12/0x12 [ 2331.095434][ T28] ? load_image+0x410/0x410 [ 2331.100004][ T28] ? vprintk_emit+0x59f/0x6a0 [ 2331.104813][ T28] ? printk_sprint+0x460/0x460 [ 2331.109626][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 2331.114632][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 2331.120829][ T28] ? _printk+0xda/0x130 [ 2331.125018][ T28] ? load_image+0x410/0x410 [ 2331.129560][ T28] ? load_image+0x410/0x410 [ 2331.134109][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 2331.140255][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2331.146514][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 2331.152542][ T28] watchdog+0xf0e/0xf50 [ 2331.157021][ T28] ? watchdog+0x1ed/0xf50 [ 2331.161436][ T28] kthread+0x29d/0x330 [ 2331.165592][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2331.170745][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2331.175374][ T28] ret_from_fork+0x1f/0x30 [ 2331.179971][ T28] [ 2331.183726][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2331.189146][ C1] NMI backtrace for cpu 1 [ 2331.189159][ C1] CPU: 1 PID: 6520 Comm: kworker/u4:27 Not tainted syzkaller #0 [ 2331.189176][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2331.189187][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 2331.189288][ C1] RIP: 0010:__lock_acquire+0x9b5/0x7c40 [ 2331.189316][ C1] Code: 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 28 01 00 00 45 0f b6 24 24 45 84 e4 74 3e 0f b6 84 24 80 00 00 00 41 0f b6 cc 44 38 e0 <0f> 42 c8 89 8c 24 80 00 00 00 49 81 c6 ba 00 00 00 4c 89 f0 48 c1 [ 2331.189331][ C1] RSP: 0018:ffffc90004c87500 EFLAGS: 00000002 [ 2331.189345][ C1] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000000000002 [ 2331.189355][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b10328 [ 2331.189366][ C1] RBP: ffffc90004c87730 R08: dffffc0000000000 R09: 1ffffffff2162065 [ 2331.189379][ C1] R10: dffffc0000000000 R11: fffffbfff2162066 R12: 0000000000000002 [ 2331.189391][ C1] R13: ffff88802a850b78 R14: ffffffff904f0600 R15: ffff88802a850b78 [ 2331.189404][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2331.189419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2331.189430][ C1] CR2: 000055b94a4e9168 CR3: 0000000030b22000 CR4: 00000000003506e0 [ 2331.189446][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 2331.189456][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2331.189467][ C1] Call Trace: [ 2331.189473][ C1] [ 2331.189483][ C1] ? mark_lock+0x94/0x320 [ 2331.189508][ C1] ? __lock_acquire+0x1465/0x7c40 [ 2331.189537][ C1] ? verify_lock_unused+0x140/0x140 [ 2331.189573][ C1] lock_acquire+0x1bb/0x4a0 [ 2331.189596][ C1] ? crng_make_state+0x1d1/0xb00 [ 2331.189653][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2331.189678][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2331.189702][ C1] ? lock_chain_count+0x20/0x20 [ 2331.189729][ C1] crng_make_state+0x1ee/0xb00 [ 2331.189746][ C1] ? crng_make_state+0x1d1/0xb00 [ 2331.189764][ C1] ? crng_make_state+0x1d1/0xb00 [ 2331.189781][ C1] ? urandom_read_iter+0x140/0x140 [ 2331.189813][ C1] _get_random_bytes+0xfc/0x250 [ 2331.189830][ C1] ? get_random_bytes+0x20/0x20 [ 2331.189849][ C1] ? nsim_dev_trap_report_work+0x24f/0xa80 [ 2331.189875][ C1] ? in_aton+0x3a4/0x440 [ 2331.189931][ C1] nsim_dev_trap_report_work+0x5fa/0xa80 [ 2331.189959][ C1] ? process_one_work+0x7b4/0x1160 [ 2331.189980][ C1] process_one_work+0x8ab/0x1160 [ 2331.190006][ C1] ? worker_detach_from_pool+0x240/0x240 [ 2331.190028][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2331.190048][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2331.190068][ C1] ? wq_worker_running+0x97/0x190 [ 2331.190133][ C1] worker_thread+0xaf5/0x12a0 [ 2331.190165][ C1] kthread+0x29d/0x330 [ 2331.190179][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 2331.190198][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2331.190214][ C1] ret_from_fork+0x1f/0x30 [ 2331.190243][ C1] [ 2331.198904][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2331.198949][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2331.199012][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2331.199055][ T28] Call Trace: [ 2331.199081][ T28] [ 2331.199103][ T28] dump_stack_lvl+0x188/0x24e [ 2331.199205][ T28] ? memcpy+0x3c/0x60 [ 2331.199263][ T28] ? show_regs_print_info+0x12/0x12 [ 2331.199342][ T28] ? load_image+0x410/0x410 [ 2331.199435][ T28] panic+0x2d3/0x710 [ 2331.199490][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 2331.199588][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2331.199645][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 2331.199746][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 2331.199833][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 2331.199923][ T28] watchdog+0xf4d/0xf50 [ 2331.200000][ T28] ? watchdog+0x1ed/0xf50 [ 2331.200092][ T28] kthread+0x29d/0x330 [ 2331.200137][ T28] ? hungtask_pm_notify+0x40/0x40 [ 2331.200202][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2331.200266][ T28] ret_from_fork+0x1f/0x30 [ 2331.200411][ T28] [ 2331.207069][ T28] Kernel Offset: disabled [ 2331.599756][ T28] Rebooting in 86400 seconds..