last executing test programs: 4.462195837s ago: executing program 3 (id=5057): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x6e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.437866609s ago: executing program 3 (id=5059): socketpair(0x3, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000380)={'a', ' *:* ', 'r\x00'}, 0x6a) 4.322324817s ago: executing program 3 (id=5065): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x2, 0x3, 0x3, &(0x7f0000000240)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44cc5a86, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500000000000000b74bb4f5bd4350d82e7fff50205f0a828b341ca0bfba9df6820a32307975947e0a2f9f2cce540da8b9e95f404945ecd0d81f5bebb55d022c109e3e558d7e05a3997ec775417d537b9e3330f5aaeef5270d4e84ed4b0103121bdde134f4f8f9e488ac8339803c7b7b2e1a3369e8ff000000000000007d5e6f5ca1b3c9fcbbe0cc0a51018fafddffba550ff7f5ecfabeafda91c533d3a6415f11ce0614a9f8bf85"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x20}, 0x0) 4.042525935s ago: executing program 3 (id=5072): socketpair(0x3, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f50, @void, @value}, 0x90) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000380)={'a', ' *:* ', 'r\x00'}, 0x6a) 3.899547436s ago: executing program 3 (id=5076): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000000c0)}, 0x4008891) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) 3.762801024s ago: executing program 3 (id=5083): socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0xc884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140)={'veth0_to_bridge', 0x32, 0x38}, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) 1.248434425s ago: executing program 2 (id=5136): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.203941618s ago: executing program 1 (id=5137): r0 = socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES16], 0xfdef) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff03076844268cff9e14f088a847e0ffff00124000632177fbac141416e000030a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300006d0033"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64}}) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x24000059) 1.121862164s ago: executing program 2 (id=5138): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x0, 0x7}, {0x0, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000001c0)="672cf2ac5528d313", 0x8}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0xff, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x7000, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 1.077094487s ago: executing program 0 (id=5140): socketpair(0x3, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f50, @void, @value}, 0x90) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000380)={'a', ' *:* ', 'r\x00'}, 0x6a) 1.061265918s ago: executing program 2 (id=5141): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000000c0)}, 0x4008891) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) 992.073293ms ago: executing program 0 (id=5142): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 916.194458ms ago: executing program 1 (id=5144): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x113111, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000f495ae52c8aac52ca16a7a7f0cd6579300000000070000000000000071105300000000009500000000000000b9efaa106e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r3, 0x12) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 841.861263ms ago: executing program 2 (id=5145): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x9, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89fc, &(0x7f0000000080)) 777.474607ms ago: executing program 1 (id=5146): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x38}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006d600000000000000b30949f6a190918d7fa19a1cf0eab529d1dc6ec4fe462d04f923bda962843a388071552c40603338b3a5b28a", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001d0081054e81f783db4cb904021d080006000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="1800000000000000000000000000000065f5f95f6437cbb6e7adff3745c856330407855d30a889e7aed1ff2b2de3fae33848cec854c5ff4783cf16d3cf3ea9fd29415dcad6", @ANYRESHEX, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRESDEC], 0xe0, 0x20000001}, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00014000000000f6000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 776.681198ms ago: executing program 0 (id=5147): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000000c0)}, 0x4008891) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) 776.114217ms ago: executing program 4 (id=5148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x38}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006d600000000000000b30949f6a190918d7fa19a1cf0eab529d1dc6ec4fe462d04f923bda962843a388071552c40603338b3a5b28a", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d339707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf90a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089070000009876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13a0100000082c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72705edfa2cddb01f44c850e4ea450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e8894680600000000000000db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534c88d443ac8b3685135dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6faa21b0f5a0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f416661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7ea6a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d136ecc87185f2437c4fce146d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae0000000000007c012779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53d2f64ec521f6fa1cd02843a5e16074d86c9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a1167b948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfea4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f0000b2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d01005a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303d000000000000000000000000000000b17fedd6b6501a47d0e5"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00014000000000f6000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 664.630905ms ago: executing program 4 (id=5149): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x3, &(0x7f0000000240)) 603.138209ms ago: executing program 4 (id=5150): getpid() socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="0210000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 501.422106ms ago: executing program 2 (id=5151): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x0, 0x7}, {0x0, 0x3}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000001c0)="672cf2ac5528d313", 0x8}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0xff, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x7000, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') 481.567577ms ago: executing program 1 (id=5152): socketpair(0x3, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f50, @void, @value}, 0x90) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) write$cgroup_devices(r2, &(0x7f0000000380)={'a', ' *:* ', 'r\x00'}, 0x6a) 411.330112ms ago: executing program 4 (id=5153): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x2, 0x3, 0x3, &(0x7f0000000240)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44cc5a86, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500000000000000b74bb4f5bd4350d82e7fff50205f0a828b341ca0bfba9df6820a32307975947e0a2f9f2cce540da8b9e95f404945ecd0d81f5bebb55d022c109e3e558d7e05a3997ec775417d537b9e3330f5aaeef5270d4e84ed4b0103121bdde134f4f8f9e488ac8339803c7b7b2e1a3369e8ff000000000000007d5e6f5ca1b3c9fcbbe0cc0a51018fafddffba550ff7f5ecfabeafda91c533d3a6415f11ce0614a9f8bf85"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x20}, 0x0) 404.169252ms ago: executing program 0 (id=5154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) 314.827309ms ago: executing program 1 (id=5155): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000000c0)}, 0x4008891) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) 265.158502ms ago: executing program 2 (id=5156): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a40)={@ifindex, 0xf, 0x1, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1108b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}, {&(0x7f0000001440)="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", 0x490}], 0x2}, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) recvmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="2000000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000008, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 246.592153ms ago: executing program 0 (id=5157): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x2, 0x3, 0x3, &(0x7f0000000240)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44cc5a86, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500000000000000b74bb4f5bd4350d82e7fff50205f0a828b341ca0bfba9df6820a32307975947e0a2f9f2cce540da8b9e95f404945ecd0d81f5bebb55d022c109e3e558d7e05a3997ec775417d537b9e3330f5aaeef5270d4e84ed4b0103121bdde134f4f8f9e488ac8339803c7b7b2e1a3369e8ff000000000000007d5e6f5ca1b3c9fcbbe0cc0a51018fafddffba550ff7f5ecfabeafda91c533d3a6415f11ce0614a9f8bf85"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x20}, 0x0) 130.909951ms ago: executing program 4 (id=5158): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x9f, 0x1b, &(0x7f0000000200)="c8e1dd04f104c41c6fa351a4579bc960966882196bfd58d39f7840c4310f7999c79f537c94b2e05153438cde285941536709f4e4318fa709d7d937c51f8a6b600963c4b448084764118e05003357d74c8e691f353311895a71fa40901da626c8621b75ce70b9a940e61d7aef0ee3e0571a518d4834182468f15025da9bfbd624ddc580fb6ec2817a0a5f0c0a774c7bf2b7a3b873d589e0ff944a4e92a3e428", &(0x7f0000000340)=""/27, 0x1, 0x0, 0x78, 0x0, &(0x7f0000000500)="caff20b6ab85088b8e251783d57a0a4ae6d914960ed33d77e560d740b3035a4cd69fb8f601af5a25f228d75a95254313eaa4365d0493deda3356dc747251430ddf67d340943a09c951fcc513b1c7fc7591ace89aba852b34e6a468fe6035a0c1c78b1f48c5c96e8d84926a737d750dc8b1835b80d231d8d8", 0x0, 0x3, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x32, &(0x7f0000000040), 0xcf) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f93224fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, &(0x7f0000000000), 0x4) 130.046271ms ago: executing program 1 (id=5168): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f00000000c0)}, 0x4008891) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) 21.121208ms ago: executing program 0 (id=5159): bpf$OBJ_PIN_MAP(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x127) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x80000, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=5160): socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1a, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={0xffffffffffffffff, 0x0, 0x2a, 0x30, &(0x7f00000015c0)="d2aade5767232234c057dcb87c1110020c02effaf1e5302f4377e0d536e455bd8301824d4e71771a9aaf", &(0x7f0000001800)=""/48, 0x81, 0x0, 0x7a, 0x0, &(0x7f0000001840)="41114f9e485e39eb6275ab3b0ce6e58f61939d99dc7511f31d5ff4f4d15bdb23d682dcd651bf3b7c433935149186fa43169cda870729597780f71e8f0bc58270e82add662c934243d9ec92324c3547226bd0fd3afd2bb4c46c81973618c13bbfa0b90792891fe84aa15936838dbb9b5457804d6bfe8f62410f24", &(0x7f00000018c0), 0x3, 0x0, 0x3}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, 0x0, &(0x7f00000002c0)=""/255}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000002a000000005f2e610800000000612e00"], &(0x7f0000001600)=""/43, 0x24, 0x2b, 0x1, 0xfff, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x26, &(0x7f0000000440)=@raw=[@exit, @generic={0x9, 0x5, 0x2, 0x6, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @jmp={0x5, 0x1, 0xc, 0x4, 0x3, 0x8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x0, 0x9, 0x2, 0x4, 0xad1f39e77ff709d6, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x77}}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001680)=[{0x4, 0x4, 0xc, 0x9}, {0x1, 0x4, 0x2, 0x1}, {0x3, 0x2, 0x5, 0xc}, {0x0, 0x2, 0x9, 0x1}, {0x5, 0x1, 0x1, 0x2}, {0x4, 0x2, 0xa}, {0x2, 0x5, 0x7, 0x6}, {0x3, 0x3, 0xb, 0xa}, {0x3, 0x3, 0x5, 0x6}], 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x6, 0x6, 0x3, 0x61, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xd, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.2.3302'. [ 325.807229][T13109] netlink: 'syz.3.3313': attribute type 2 has an invalid length. [ 326.045448][T13109] device 0 entered promiscuous mode [ 326.736542][T13149] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.3324'. [ 326.881495][T13149] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 327.001156][T13151] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3324'. [ 327.409292][T13166] netlink: 'syz.2.3332': attribute type 2 has an invalid length. [ 327.494484][T13166] device 1 entered promiscuous mode [ 327.496050][T13171] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.3349'. [ 327.553745][T13177] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3349'. [ 327.595637][T13171] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 327.934259][T13188] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 327.991332][T13188] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3341'. [ 328.580088][T13221] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 328.686990][T13221] device 1 entered promiscuous mode [ 328.779533][T13231] netlink: 'syz.2.3360': attribute type 3 has an invalid length. [ 328.782005][T13228] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.3359'. [ 328.846546][T13231] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3360'. [ 328.931994][T13234] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3359'. [ 329.099762][T13228] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 329.119611][T13228] CPU: 0 PID: 13228 Comm: syz.0.3359 Not tainted 5.15.167-syzkaller #0 [ 329.127929][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.138087][T13228] Call Trace: [ 329.141371][T13228] [ 329.144309][T13228] dump_stack_lvl+0x1e3/0x2d0 [ 329.149105][T13228] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 329.154736][T13228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 329.160908][T13228] sysfs_warn_dup+0x8a/0xa0 [ 329.165409][T13228] sysfs_do_create_link_sd+0xbe/0x100 [ 329.170894][T13228] device_add+0x7d4/0xfd0 [ 329.175232][T13228] wiphy_register+0x1d30/0x2bb0 [ 329.180092][T13228] ? cfg80211_event_work+0x40/0x40 [ 329.185346][T13228] ? minstrel_ht_alloc+0x7cf/0x940 [ 329.190483][T13228] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 329.196559][T13228] ieee80211_register_hw+0x2986/0x39d0 [ 329.202034][T13228] ? ieee80211_register_hw+0xb41/0x39d0 [ 329.207584][T13228] ? ieee80211_tasklet_handler+0x20/0x20 [ 329.213225][T13228] ? memset+0x1f/0x40 [ 329.217201][T13228] ? __hrtimer_init+0x181/0x260 [ 329.222049][T13228] mac80211_hwsim_new_radio+0x223d/0x4200 [ 329.227784][T13228] hwsim_new_radio_nl+0xbae/0x1090 [ 329.232904][T13228] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 329.239420][T13228] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 329.245747][T13228] genl_rcv_msg+0xfbd/0x14a0 [ 329.250346][T13228] ? genl_bind+0x420/0x420 [ 329.254760][T13228] ? local_bh_enable+0x5/0x20 [ 329.259441][T13228] ? mark_lock+0x98/0x340 [ 329.263775][T13228] ? __lock_acquire+0x1295/0x1ff0 [ 329.268806][T13228] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 329.275322][T13228] netlink_rcv_skb+0x1cf/0x410 [ 329.280097][T13228] ? genl_bind+0x420/0x420 [ 329.284511][T13228] ? netlink_ack+0xb10/0xb10 [ 329.289140][T13228] ? down_read+0x1b3/0x2e0 [ 329.293570][T13228] ? genl_rcv+0x9/0x40 [ 329.297637][T13228] genl_rcv+0x24/0x40 [ 329.301612][T13228] netlink_unicast+0x7b6/0x980 [ 329.306407][T13228] ? netlink_detachskb+0x90/0x90 [ 329.311388][T13228] ? __virt_addr_valid+0xb7/0x460 [ 329.316410][T13228] ? 0xffffffff81000000 [ 329.320569][T13228] ? __check_object_size+0x300/0x410 [ 329.325853][T13228] ? bpf_lsm_netlink_send+0x5/0x10 [ 329.330963][T13228] netlink_sendmsg+0xa30/0xd60 [ 329.335736][T13228] ? netlink_getsockopt+0x5b0/0x5b0 [ 329.340933][T13228] ? aa_sock_msg_perm+0x91/0x150 [ 329.345874][T13228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 329.351156][T13228] ? security_socket_sendmsg+0x7d/0xa0 [ 329.356611][T13228] ? netlink_getsockopt+0x5b0/0x5b0 [ 329.361898][T13228] ____sys_sendmsg+0x59e/0x8f0 [ 329.366671][T13228] ? iovec_from_user+0x300/0x390 [ 329.371618][T13228] ? __sys_sendmsg_sock+0x30/0x30 [ 329.376681][T13228] ___sys_sendmsg+0x252/0x2e0 [ 329.381386][T13228] ? __sys_sendmsg+0x260/0x260 [ 329.386193][T13228] ? __fdget+0x191/0x220 [ 329.390434][T13228] __se_sys_sendmsg+0x19a/0x260 [ 329.395284][T13228] ? __x64_sys_sendmsg+0x80/0x80 [ 329.400226][T13228] ? syscall_enter_from_user_mode+0x2e/0x240 [ 329.406203][T13228] ? lockdep_hardirqs_on+0x94/0x130 [ 329.411404][T13228] ? syscall_enter_from_user_mode+0x2e/0x240 [ 329.417383][T13228] do_syscall_64+0x3b/0xb0 [ 329.421794][T13228] ? clear_bhb_loop+0x15/0x70 [ 329.426463][T13228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 329.432362][T13228] RIP: 0033:0x7f942ed68ef9 [ 329.436771][T13228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.456380][T13228] RSP: 002b:00007f942d1e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.464877][T13228] RAX: ffffffffffffffda RBX: 00007f942ef20f80 RCX: 00007f942ed68ef9 [ 329.473022][T13228] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 329.481098][T13228] RBP: 00007f942eddbb76 R08: 0000000000000000 R09: 0000000000000000 [ 329.489061][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.497111][T13228] R13: 0000000000000000 R14: 00007f942ef20f80 R15: 00007ffdeeab5cf8 [ 329.505093][T13228] [ 329.992661][T13264] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.3372'. [ 330.351087][T13280] netlink: 'syz.1.3378': attribute type 3 has an invalid length. [ 330.361914][T13280] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3378'. [ 330.479067][T13282] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 330.517466][T13282] CPU: 1 PID: 13282 Comm: syz.4.3379 Not tainted 5.15.167-syzkaller #0 [ 330.525745][T13282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 330.535836][T13282] Call Trace: [ 330.539127][T13282] [ 330.542057][T13282] dump_stack_lvl+0x1e3/0x2d0 [ 330.546750][T13282] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 330.552384][T13282] ? panic+0x860/0x860 [ 330.556469][T13282] ? kmem_cache_alloc_trace+0x143/0x290 [ 330.562025][T13282] ? sysfs_warn_dup+0x4d/0xa0 [ 330.566723][T13282] sysfs_warn_dup+0x8a/0xa0 [ 330.571239][T13282] sysfs_do_create_link_sd+0xbe/0x100 [ 330.576634][T13282] device_add+0x7d4/0xfd0 [ 330.580989][T13282] wiphy_register+0x1d30/0x2bb0 [ 330.585863][T13282] ? cfg80211_event_work+0x40/0x40 [ 330.590974][T13282] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 330.597232][T13282] ? ieee80211_register_hw+0x26fc/0x39d0 [ 330.602880][T13282] ? ieee80211_register_hw+0x27cd/0x39d0 [ 330.608538][T13282] ieee80211_register_hw+0x2986/0x39d0 [ 330.614013][T13282] ? ieee80211_register_hw+0xb41/0x39d0 [ 330.619686][T13282] ? ieee80211_tasklet_handler+0x20/0x20 [ 330.625442][T13282] ? memset+0x1f/0x40 [ 330.629438][T13282] ? __hrtimer_init+0x181/0x260 [ 330.634302][T13282] mac80211_hwsim_new_radio+0x223d/0x4200 [ 330.640052][T13282] hwsim_new_radio_nl+0xbae/0x1090 [ 330.645171][T13282] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 330.651958][T13282] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 330.658314][T13282] genl_rcv_msg+0xfbd/0x14a0 [ 330.662931][T13282] ? genl_bind+0x420/0x420 [ 330.667354][T13282] ? local_bh_enable+0x5/0x20 [ 330.672047][T13282] ? mark_lock+0x98/0x340 [ 330.676406][T13282] ? __lock_acquire+0x1295/0x1ff0 [ 330.681461][T13282] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 330.687992][T13282] netlink_rcv_skb+0x1cf/0x410 [ 330.692776][T13282] ? genl_bind+0x420/0x420 [ 330.697204][T13282] ? netlink_ack+0xb10/0xb10 [ 330.701818][T13282] ? down_read+0x1b3/0x2e0 [ 330.706235][T13282] ? genl_rcv+0x9/0x40 [ 330.710309][T13282] genl_rcv+0x24/0x40 [ 330.714295][T13282] netlink_unicast+0x7b6/0x980 [ 330.719080][T13282] ? netlink_detachskb+0x90/0x90 [ 330.724031][T13282] ? __virt_addr_valid+0xb7/0x460 [ 330.729065][T13282] ? 0xffffffff81000000 [ 330.733221][T13282] ? __check_object_size+0x300/0x410 [ 330.738514][T13282] ? bpf_lsm_netlink_send+0x5/0x10 [ 330.743643][T13282] netlink_sendmsg+0xa30/0xd60 [ 330.748692][T13282] ? netlink_getsockopt+0x5b0/0x5b0 [ 330.753898][T13282] ? aa_sock_msg_perm+0x91/0x150 [ 330.758845][T13282] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.764129][T13282] ? security_socket_sendmsg+0x7d/0xa0 [ 330.769588][T13282] ? netlink_getsockopt+0x5b0/0x5b0 [ 330.774799][T13282] ____sys_sendmsg+0x59e/0x8f0 [ 330.779656][T13282] ? iovec_from_user+0x300/0x390 [ 330.784607][T13282] ? __sys_sendmsg_sock+0x30/0x30 [ 330.789656][T13282] ___sys_sendmsg+0x252/0x2e0 [ 330.794342][T13282] ? __sys_sendmsg+0x260/0x260 [ 330.799182][T13282] ? __fdget+0x191/0x220 [ 330.803430][T13282] __se_sys_sendmsg+0x19a/0x260 [ 330.808297][T13282] ? __x64_sys_sendmsg+0x80/0x80 [ 330.813336][T13282] ? syscall_enter_from_user_mode+0x2e/0x240 [ 330.819332][T13282] ? lockdep_hardirqs_on+0x94/0x130 [ 330.824624][T13282] ? syscall_enter_from_user_mode+0x2e/0x240 [ 330.830610][T13282] do_syscall_64+0x3b/0xb0 [ 330.835025][T13282] ? clear_bhb_loop+0x15/0x70 [ 330.839699][T13282] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.845592][T13282] RIP: 0033:0x7fd817132ef9 [ 330.850011][T13282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.869750][T13282] RSP: 002b:00007fd8155ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.878184][T13282] RAX: ffffffffffffffda RBX: 00007fd8172eaf80 RCX: 00007fd817132ef9 [ 330.886252][T13282] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 330.894224][T13282] RBP: 00007fd8171a5b76 R08: 0000000000000000 R09: 0000000000000000 [ 330.902279][T13282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.910248][T13282] R13: 0000000000000000 R14: 00007fd8172eaf80 R15: 00007ffe11ca6728 [ 330.918241][T13282] [ 331.484223][T13314] netlink: 'syz.3.3392': attribute type 3 has an invalid length. [ 331.685161][T13322] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 331.704018][T13322] CPU: 1 PID: 13322 Comm: syz.4.3396 Not tainted 5.15.167-syzkaller #0 [ 331.712299][T13322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 331.722358][T13322] Call Trace: [ 331.725715][T13322] [ 331.728630][T13322] dump_stack_lvl+0x1e3/0x2d0 [ 331.733301][T13322] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 331.738929][T13322] ? panic+0x860/0x860 [ 331.743022][T13322] ? kmem_cache_alloc_trace+0x143/0x290 [ 331.748591][T13322] ? sysfs_warn_dup+0x4d/0xa0 [ 331.753263][T13322] sysfs_warn_dup+0x8a/0xa0 [ 331.757754][T13322] sysfs_do_create_link_sd+0xbe/0x100 [ 331.763114][T13322] device_add+0x7d4/0xfd0 [ 331.767452][T13322] wiphy_register+0x1d30/0x2bb0 [ 331.772304][T13322] ? cfg80211_event_work+0x40/0x40 [ 331.777398][T13322] ? minstrel_ht_alloc+0x7cf/0x940 [ 331.782506][T13322] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 331.788567][T13322] ieee80211_register_hw+0x2986/0x39d0 [ 331.794199][T13322] ? ieee80211_register_hw+0xb41/0x39d0 [ 331.799741][T13322] ? ieee80211_tasklet_handler+0x20/0x20 [ 331.805458][T13322] ? memset+0x1f/0x40 [ 331.809427][T13322] ? __hrtimer_init+0x181/0x260 [ 331.814298][T13322] mac80211_hwsim_new_radio+0x223d/0x4200 [ 331.820029][T13322] hwsim_new_radio_nl+0xbae/0x1090 [ 331.825138][T13322] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 331.831638][T13322] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 331.837961][T13322] genl_rcv_msg+0xfbd/0x14a0 [ 331.842630][T13322] ? genl_bind+0x420/0x420 [ 331.847027][T13322] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 331.852915][T13322] ? mark_lock+0x98/0x340 [ 331.857235][T13322] ? __lock_acquire+0x1295/0x1ff0 [ 331.862255][T13322] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 331.868756][T13322] netlink_rcv_skb+0x1cf/0x410 [ 331.873632][T13322] ? genl_bind+0x420/0x420 [ 331.878488][T13322] ? netlink_ack+0xb10/0xb10 [ 331.883083][T13322] ? down_read+0x1b3/0x2e0 [ 331.887495][T13322] ? genl_rcv+0x9/0x40 [ 331.891557][T13322] genl_rcv+0x24/0x40 [ 331.895528][T13322] netlink_unicast+0x7b6/0x980 [ 331.900298][T13322] ? netlink_detachskb+0x90/0x90 [ 331.905224][T13322] ? __sanitizer_cov_trace_pc+0x50/0x60 [ 331.910759][T13322] ? bpf_lsm_netlink_send+0x5/0x10 [ 331.915858][T13322] netlink_sendmsg+0xa30/0xd60 [ 331.920628][T13322] ? netlink_getsockopt+0x5b0/0x5b0 [ 331.925809][T13322] ? plist_check_list+0x20d/0x220 [ 331.930822][T13322] ? aa_sock_msg_perm+0x91/0x150 [ 331.935765][T13322] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 331.941038][T13322] ? security_socket_sendmsg+0x7d/0xa0 [ 331.946490][T13322] ? netlink_getsockopt+0x5b0/0x5b0 [ 331.951679][T13322] ____sys_sendmsg+0x59e/0x8f0 [ 331.956440][T13322] ? lockdep_hardirqs_on+0x94/0x130 [ 331.961626][T13322] ? __sys_sendmsg_sock+0x30/0x30 [ 331.966642][T13322] ? ___sys_sendmsg+0x237/0x2e0 [ 331.971481][T13322] ___sys_sendmsg+0x252/0x2e0 [ 331.976154][T13322] ? __sys_sendmsg+0x260/0x260 [ 331.980944][T13322] ? __fdget+0x191/0x220 [ 331.985177][T13322] __se_sys_sendmsg+0x19a/0x260 [ 331.990015][T13322] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 331.996159][T13322] ? __x64_sys_sendmsg+0x80/0x80 [ 332.001115][T13322] ? syscall_enter_from_user_mode+0x37/0x240 [ 332.007108][T13322] ? syscall_enter_from_user_mode+0x2e/0x240 [ 332.013095][T13322] do_syscall_64+0x3b/0xb0 [ 332.017511][T13322] ? clear_bhb_loop+0x15/0x70 [ 332.022177][T13322] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.028087][T13322] RIP: 0033:0x7fd817132ef9 [ 332.032494][T13322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.052086][T13322] RSP: 002b:00007fd8155ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.060488][T13322] RAX: ffffffffffffffda RBX: 00007fd8172eaf80 RCX: 00007fd817132ef9 [ 332.068458][T13322] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 332.076426][T13322] RBP: 00007fd8171a5b76 R08: 0000000000000000 R09: 0000000000000000 [ 332.084474][T13322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.092433][T13322] R13: 0000000000000000 R14: 00007fd8172eaf80 R15: 00007ffe11ca6728 [ 332.100409][T13322] [ 332.117101][T13324] __nla_validate_parse: 5 callbacks suppressed [ 332.117116][T13324] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3396'. [ 332.171091][T13325] device lo left promiscuous mode [ 332.820906][T13356] netlink: 'syz.0.3407': attribute type 3 has an invalid length. [ 332.850691][T13356] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3407'. [ 332.960372][T13358] device lo left promiscuous mode [ 333.161483][T13368] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.3414'. [ 333.194868][T13372] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3414'. [ 333.231277][T13368] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 333.247884][T13368] CPU: 1 PID: 13368 Comm: syz.2.3414 Not tainted 5.15.167-syzkaller #0 [ 333.256172][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 333.266290][T13368] Call Trace: [ 333.269581][T13368] [ 333.272513][T13368] dump_stack_lvl+0x1e3/0x2d0 [ 333.277198][T13368] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 333.282833][T13368] ? panic+0x860/0x860 [ 333.286911][T13368] ? kmem_cache_alloc_trace+0x143/0x290 [ 333.292458][T13368] ? sysfs_warn_dup+0x4d/0xa0 [ 333.297144][T13368] sysfs_warn_dup+0x8a/0xa0 [ 333.301655][T13368] sysfs_do_create_link_sd+0xbe/0x100 [ 333.307032][T13368] device_add+0x7d4/0xfd0 [ 333.311378][T13368] wiphy_register+0x1d30/0x2bb0 [ 333.316244][T13368] ? cfg80211_event_work+0x40/0x40 [ 333.321351][T13368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.327512][T13368] ? ieee80211_register_hw+0x27af/0x39d0 [ 333.333142][T13368] ? ieee80211_register_hw+0x28eb/0x39d0 [ 333.338781][T13368] ieee80211_register_hw+0x2986/0x39d0 [ 333.344246][T13368] ? ieee80211_register_hw+0xb41/0x39d0 [ 333.349799][T13368] ? ieee80211_tasklet_handler+0x20/0x20 [ 333.355520][T13368] ? __hrtimer_init+0x91/0x260 [ 333.360283][T13368] ? __hrtimer_init+0xc9/0x260 [ 333.365041][T13368] ? __hrtimer_init+0x181/0x260 [ 333.369890][T13368] mac80211_hwsim_new_radio+0x223d/0x4200 [ 333.375639][T13368] hwsim_new_radio_nl+0xbae/0x1090 [ 333.380758][T13368] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 333.387272][T13368] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 333.393693][T13368] genl_rcv_msg+0xfbd/0x14a0 [ 333.398291][T13368] ? genl_bind+0x420/0x420 [ 333.402709][T13368] ? print_irqtrace_events+0x210/0x210 [ 333.408213][T13368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.414366][T13368] ? lockdep_hardirqs_on+0x94/0x130 [ 333.419577][T13368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.425736][T13368] ? validate_chain+0x112/0x5930 [ 333.430668][T13368] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 333.437185][T13368] netlink_rcv_skb+0x1cf/0x410 [ 333.441950][T13368] ? genl_bind+0x420/0x420 [ 333.446365][T13368] ? netlink_ack+0xb10/0xb10 [ 333.450966][T13368] ? down_read+0x1b3/0x2e0 [ 333.455374][T13368] ? genl_rcv+0x9/0x40 [ 333.459528][T13368] genl_rcv+0x24/0x40 [ 333.463503][T13368] netlink_unicast+0x7b6/0x980 [ 333.468276][T13368] ? netlink_detachskb+0x90/0x90 [ 333.473210][T13368] ? __virt_addr_valid+0xb7/0x460 [ 333.478230][T13368] ? 0xffffffff81000000 [ 333.482378][T13368] ? __check_object_size+0x300/0x410 [ 333.487661][T13368] ? bpf_lsm_netlink_send+0x5/0x10 [ 333.492769][T13368] netlink_sendmsg+0xa30/0xd60 [ 333.497548][T13368] ? netlink_getsockopt+0x5b0/0x5b0 [ 333.502746][T13368] ? aa_sock_msg_perm+0x91/0x150 [ 333.507685][T13368] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.512965][T13368] ? security_socket_sendmsg+0x7d/0xa0 [ 333.518423][T13368] ? netlink_getsockopt+0x5b0/0x5b0 [ 333.523710][T13368] ____sys_sendmsg+0x59e/0x8f0 [ 333.528470][T13368] ? iovec_from_user+0x300/0x390 [ 333.533414][T13368] ? __sys_sendmsg_sock+0x30/0x30 [ 333.538457][T13368] ___sys_sendmsg+0x252/0x2e0 [ 333.543140][T13368] ? __sys_sendmsg+0x260/0x260 [ 333.547966][T13368] ? __fdget+0x191/0x220 [ 333.552207][T13368] __se_sys_sendmsg+0x19a/0x260 [ 333.557052][T13368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 333.563205][T13368] ? __x64_sys_sendmsg+0x80/0x80 [ 333.568152][T13368] ? syscall_enter_from_user_mode+0x37/0x240 [ 333.574130][T13368] ? syscall_enter_from_user_mode+0x2e/0x240 [ 333.580110][T13368] do_syscall_64+0x3b/0xb0 [ 333.584520][T13368] ? clear_bhb_loop+0x15/0x70 [ 333.589195][T13368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.595259][T13368] RIP: 0033:0x7fc29acccef9 [ 333.599700][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.619396][T13368] RSP: 002b:00007fc299145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.627898][T13368] RAX: ffffffffffffffda RBX: 00007fc29ae84f80 RCX: 00007fc29acccef9 [ 333.635867][T13368] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 333.643833][T13368] RBP: 00007fc29ad3fb76 R08: 0000000000000000 R09: 0000000000000000 [ 333.651798][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.659758][T13368] R13: 0000000000000000 R14: 00007fc29ae84f80 R15: 00007ffe018bf7a8 [ 333.667742][T13368] [ 334.095159][T13396] netlink: 'syz.3.3427': attribute type 3 has an invalid length. [ 334.152800][T13396] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3427'. [ 334.488022][T13409] device lo left promiscuous mode [ 334.557976][T13414] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.3434'. [ 334.598598][T13417] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3434'. [ 334.618036][T13414] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 334.628591][T13414] CPU: 0 PID: 13414 Comm: syz.2.3434 Not tainted 5.15.167-syzkaller #0 [ 334.636853][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 334.646924][T13414] Call Trace: [ 334.650210][T13414] [ 334.653147][T13414] dump_stack_lvl+0x1e3/0x2d0 [ 334.657839][T13414] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 334.663569][T13414] ? panic+0x860/0x860 [ 334.667729][T13414] ? kmem_cache_alloc_trace+0x143/0x290 [ 334.673286][T13414] ? sysfs_warn_dup+0x4d/0xa0 [ 334.677982][T13414] sysfs_warn_dup+0x8a/0xa0 [ 334.682496][T13414] sysfs_do_create_link_sd+0xbe/0x100 [ 334.687890][T13414] device_add+0x7d4/0xfd0 [ 334.692250][T13414] wiphy_register+0x1d30/0x2bb0 [ 334.697135][T13414] ? cfg80211_event_work+0x40/0x40 [ 334.702251][T13414] ? minstrel_ht_alloc+0x7cf/0x940 [ 334.707383][T13414] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 334.713454][T13414] ieee80211_register_hw+0x2986/0x39d0 [ 334.718917][T13414] ? ieee80211_register_hw+0xb41/0x39d0 [ 334.724467][T13414] ? ieee80211_tasklet_handler+0x20/0x20 [ 334.730100][T13414] ? memset+0x1f/0x40 [ 334.734070][T13414] ? __hrtimer_init+0x181/0x260 [ 334.738995][T13414] mac80211_hwsim_new_radio+0x223d/0x4200 [ 334.744721][T13414] hwsim_new_radio_nl+0xbae/0x1090 [ 334.749825][T13414] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 334.756326][T13414] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 334.762652][T13414] genl_rcv_msg+0xfbd/0x14a0 [ 334.767238][T13414] ? genl_bind+0x420/0x420 [ 334.771653][T13414] ? print_irqtrace_events+0x210/0x210 [ 334.777107][T13414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 334.783249][T13414] ? lockdep_hardirqs_on+0x94/0x130 [ 334.788434][T13414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 334.794580][T13414] ? validate_chain+0x112/0x5930 [ 334.799503][T13414] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 334.806006][T13414] netlink_rcv_skb+0x1cf/0x410 [ 334.810760][T13414] ? genl_bind+0x420/0x420 [ 334.815260][T13414] ? netlink_ack+0xb10/0xb10 [ 334.819877][T13414] ? down_read+0x1b3/0x2e0 [ 334.824294][T13414] ? genl_rcv+0x9/0x40 [ 334.828368][T13414] genl_rcv+0x24/0x40 [ 334.832337][T13414] netlink_unicast+0x7b6/0x980 [ 334.837097][T13414] ? netlink_detachskb+0x90/0x90 [ 334.842023][T13414] ? security_netlink_send+0x30/0x90 [ 334.847293][T13414] ? bpf_lsm_netlink_send+0x5/0x10 [ 334.852397][T13414] netlink_sendmsg+0xa30/0xd60 [ 334.857163][T13414] ? netlink_getsockopt+0x5b0/0x5b0 [ 334.862358][T13414] ? aa_sock_msg_perm+0x91/0x150 [ 334.867376][T13414] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 334.872661][T13414] ? security_socket_sendmsg+0x7d/0xa0 [ 334.878104][T13414] ? netlink_getsockopt+0x5b0/0x5b0 [ 334.883305][T13414] ____sys_sendmsg+0x59e/0x8f0 [ 334.888081][T13414] ? iovec_from_user+0x300/0x390 [ 334.893032][T13414] ? __sys_sendmsg_sock+0x30/0x30 [ 334.898064][T13414] ___sys_sendmsg+0x252/0x2e0 [ 334.902737][T13414] ? __sys_sendmsg+0x260/0x260 [ 334.907531][T13414] ? __fdget+0x191/0x220 [ 334.911771][T13414] __se_sys_sendmsg+0x19a/0x260 [ 334.916608][T13414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 334.922752][T13414] ? __x64_sys_sendmsg+0x80/0x80 [ 334.927702][T13414] ? syscall_enter_from_user_mode+0x37/0x240 [ 334.933679][T13414] ? syscall_enter_from_user_mode+0x2e/0x240 [ 334.939687][T13414] do_syscall_64+0x3b/0xb0 [ 334.944095][T13414] ? clear_bhb_loop+0x15/0x70 [ 334.948758][T13414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.954638][T13414] RIP: 0033:0x7fc29acccef9 [ 334.959041][T13414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.978629][T13414] RSP: 002b:00007fc299145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.987030][T13414] RAX: ffffffffffffffda RBX: 00007fc29ae84f80 RCX: 00007fc29acccef9 [ 334.994988][T13414] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 335.002943][T13414] RBP: 00007fc29ad3fb76 R08: 0000000000000000 R09: 0000000000000000 [ 335.010948][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.018924][T13414] R13: 0000000000000000 R14: 00007fc29ae84f80 R15: 00007ffe018bf7a8 [ 335.026910][T13414] [ 335.292730][T13435] netlink: 'syz.4.3438': attribute type 7 has an invalid length. [ 335.304776][T13437] netlink: 'syz.3.3443': attribute type 3 has an invalid length. [ 335.317973][T13435] netlink: 'syz.4.3438': attribute type 6 has an invalid length. [ 335.360411][T13437] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3443'. [ 335.742376][T13462] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.3455'. [ 335.781118][T13462] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 335.792579][T13462] CPU: 0 PID: 13462 Comm: syz.0.3455 Not tainted 5.15.167-syzkaller #0 [ 335.800851][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 335.810919][T13462] Call Trace: [ 335.814207][T13462] [ 335.817150][T13462] dump_stack_lvl+0x1e3/0x2d0 [ 335.821838][T13462] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 335.827484][T13462] ? panic+0x860/0x860 [ 335.831581][T13462] ? kmem_cache_alloc_trace+0x143/0x290 [ 335.837137][T13462] ? sysfs_warn_dup+0x4d/0xa0 [ 335.841970][T13462] sysfs_warn_dup+0x8a/0xa0 [ 335.846500][T13462] sysfs_do_create_link_sd+0xbe/0x100 [ 335.851910][T13462] device_add+0x7d4/0xfd0 [ 335.856275][T13462] wiphy_register+0x1d30/0x2bb0 [ 335.861164][T13462] ? cfg80211_event_work+0x40/0x40 [ 335.866290][T13462] ? minstrel_ht_alloc+0x5d6/0x940 [ 335.871420][T13462] ? minstrel_ht_alloc+0x53f/0x940 [ 335.876557][T13462] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 335.882641][T13462] ieee80211_register_hw+0x2986/0x39d0 [ 335.888123][T13462] ? ieee80211_register_hw+0xb41/0x39d0 [ 335.893696][T13462] ? ieee80211_tasklet_handler+0x20/0x20 [ 335.899341][T13462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 335.905522][T13462] ? memset+0x1f/0x40 [ 335.909520][T13462] ? __hrtimer_init+0x181/0x260 [ 335.914376][T13462] mac80211_hwsim_new_radio+0x223d/0x4200 [ 335.920126][T13462] hwsim_new_radio_nl+0xbae/0x1090 [ 335.925257][T13462] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 335.931781][T13462] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 335.938124][T13462] genl_rcv_msg+0xfbd/0x14a0 [ 335.942734][T13462] ? genl_bind+0x420/0x420 [ 335.947144][T13462] ? local_bh_enable+0x5/0x20 [ 335.951833][T13462] ? mark_lock+0x98/0x340 [ 335.956169][T13462] ? __lock_acquire+0x1295/0x1ff0 [ 335.961206][T13462] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 335.967737][T13462] netlink_rcv_skb+0x1cf/0x410 [ 335.972515][T13462] ? genl_bind+0x420/0x420 [ 335.976941][T13462] ? netlink_ack+0xb10/0xb10 [ 335.981550][T13462] ? down_read+0x1b3/0x2e0 [ 335.985967][T13462] ? genl_rcv+0x9/0x40 [ 335.990041][T13462] genl_rcv+0x24/0x40 [ 335.994025][T13462] netlink_unicast+0x7b6/0x980 [ 335.998804][T13462] ? netlink_detachskb+0x90/0x90 [ 336.003744][T13462] ? __virt_addr_valid+0xb7/0x460 [ 336.008771][T13462] ? 0xffffffff81000000 [ 336.012921][T13462] ? __check_object_size+0x300/0x410 [ 336.018209][T13462] ? bpf_lsm_netlink_send+0x5/0x10 [ 336.023327][T13462] netlink_sendmsg+0xa30/0xd60 [ 336.028126][T13462] ? netlink_getsockopt+0x5b0/0x5b0 [ 336.033344][T13462] ? aa_sock_msg_perm+0x91/0x150 [ 336.038298][T13462] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 336.043596][T13462] ? security_socket_sendmsg+0x7d/0xa0 [ 336.049059][T13462] ? netlink_getsockopt+0x5b0/0x5b0 [ 336.054265][T13462] ____sys_sendmsg+0x59e/0x8f0 [ 336.059050][T13462] ? iovec_from_user+0x300/0x390 [ 336.064008][T13462] ? __sys_sendmsg_sock+0x30/0x30 [ 336.069065][T13462] ___sys_sendmsg+0x252/0x2e0 [ 336.073771][T13462] ? __sys_sendmsg+0x260/0x260 [ 336.078588][T13462] ? __fdget+0x191/0x220 [ 336.082835][T13462] __se_sys_sendmsg+0x19a/0x260 [ 336.087695][T13462] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.093844][T13462] ? __x64_sys_sendmsg+0x80/0x80 [ 336.098869][T13462] ? syscall_enter_from_user_mode+0x37/0x240 [ 336.104840][T13462] ? syscall_enter_from_user_mode+0x2e/0x240 [ 336.110811][T13462] do_syscall_64+0x3b/0xb0 [ 336.115212][T13462] ? clear_bhb_loop+0x15/0x70 [ 336.119871][T13462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.125755][T13462] RIP: 0033:0x7f942ed68ef9 [ 336.130157][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.149745][T13462] RSP: 002b:00007f942d1e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.158146][T13462] RAX: ffffffffffffffda RBX: 00007f942ef20f80 RCX: 00007f942ed68ef9 [ 336.166114][T13462] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 336.174085][T13462] RBP: 00007f942eddbb76 R08: 0000000000000000 R09: 0000000000000000 [ 336.182043][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.189998][T13462] R13: 0000000000000000 R14: 00007f942ef20f80 R15: 00007ffdeeab5cf8 [ 336.197969][T13462] [ 336.268166][T13464] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3455'. [ 336.476050][T13478] netlink: 'syz.1.3461': attribute type 3 has an invalid length. [ 336.590176][T13483] netlink: 'syz.1.3462': attribute type 7 has an invalid length. [ 336.632543][T13483] netlink: 'syz.1.3462': attribute type 6 has an invalid length. [ 336.960334][T13508] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 336.992734][T13508] CPU: 1 PID: 13508 Comm: syz.2.3472 Not tainted 5.15.167-syzkaller #0 [ 337.001016][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 337.011082][T13508] Call Trace: [ 337.014370][T13508] [ 337.017299][T13508] dump_stack_lvl+0x1e3/0x2d0 [ 337.021985][T13508] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 337.027621][T13508] ? panic+0x860/0x860 [ 337.031705][T13508] ? kmem_cache_alloc_trace+0x143/0x290 [ 337.037249][T13508] ? sysfs_warn_dup+0x4d/0xa0 [ 337.041936][T13508] sysfs_warn_dup+0x8a/0xa0 [ 337.046447][T13508] sysfs_do_create_link_sd+0xbe/0x100 [ 337.051833][T13508] device_add+0x7d4/0xfd0 [ 337.056301][T13508] wiphy_register+0x1d30/0x2bb0 [ 337.061182][T13508] ? cfg80211_event_work+0x40/0x40 [ 337.066303][T13508] ? minstrel_ht_alloc+0x7cf/0x940 [ 337.071446][T13508] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 337.077533][T13508] ieee80211_register_hw+0x2986/0x39d0 [ 337.083060][T13508] ? ieee80211_register_hw+0xb41/0x39d0 [ 337.088628][T13508] ? ieee80211_tasklet_handler+0x20/0x20 [ 337.094362][T13508] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 337.100554][T13508] ? memset+0x1f/0x40 [ 337.104555][T13508] ? __hrtimer_init+0x181/0x260 [ 337.109433][T13508] mac80211_hwsim_new_radio+0x223d/0x4200 [ 337.115195][T13508] hwsim_new_radio_nl+0xbae/0x1090 [ 337.120335][T13508] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 337.126962][T13508] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 337.133395][T13508] genl_rcv_msg+0xfbd/0x14a0 [ 337.138012][T13508] ? genl_bind+0x420/0x420 [ 337.142462][T13508] ? mark_lock+0x98/0x340 [ 337.146798][T13508] ? __lock_acquire+0x1295/0x1ff0 [ 337.151840][T13508] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 337.158372][T13508] netlink_rcv_skb+0x1cf/0x410 [ 337.163160][T13508] ? genl_bind+0x420/0x420 [ 337.167587][T13508] ? netlink_ack+0xb10/0xb10 [ 337.172201][T13508] ? down_read+0x1b3/0x2e0 [ 337.176632][T13508] ? genl_rcv+0x9/0x40 [ 337.180720][T13508] genl_rcv+0x24/0x40 [ 337.184713][T13508] netlink_unicast+0x7b6/0x980 [ 337.189499][T13508] ? netlink_detachskb+0x90/0x90 [ 337.194445][T13508] ? __virt_addr_valid+0xb7/0x460 [ 337.199473][T13508] ? 0xffffffff81000000 [ 337.203637][T13508] ? __check_object_size+0x300/0x410 [ 337.208933][T13508] ? bpf_lsm_netlink_send+0x5/0x10 [ 337.214055][T13508] netlink_sendmsg+0xa30/0xd60 [ 337.218942][T13508] ? netlink_getsockopt+0x5b0/0x5b0 [ 337.224159][T13508] ? aa_sock_msg_perm+0x91/0x150 [ 337.229104][T13508] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 337.234391][T13508] ? security_socket_sendmsg+0x7d/0xa0 [ 337.239854][T13508] ? netlink_getsockopt+0x5b0/0x5b0 [ 337.245062][T13508] ____sys_sendmsg+0x59e/0x8f0 [ 337.249832][T13508] ? __import_iovec+0x315/0x4b0 [ 337.254702][T13508] ? __sys_sendmsg_sock+0x30/0x30 [ 337.259756][T13508] ___sys_sendmsg+0x252/0x2e0 [ 337.264465][T13508] ? __sys_sendmsg+0x260/0x260 [ 337.269290][T13508] ? __fdget+0x191/0x220 [ 337.273538][T13508] __se_sys_sendmsg+0x19a/0x260 [ 337.278392][T13508] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 337.284552][T13508] ? __x64_sys_sendmsg+0x80/0x80 [ 337.289598][T13508] ? syscall_enter_from_user_mode+0x37/0x240 [ 337.295674][T13508] ? syscall_enter_from_user_mode+0x2e/0x240 [ 337.301662][T13508] do_syscall_64+0x3b/0xb0 [ 337.306086][T13508] ? clear_bhb_loop+0x15/0x70 [ 337.310771][T13508] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.316673][T13508] RIP: 0033:0x7fc29acccef9 [ 337.321090][T13508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.340834][T13508] RSP: 002b:00007fc299145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.349276][T13508] RAX: ffffffffffffffda RBX: 00007fc29ae84f80 RCX: 00007fc29acccef9 [ 337.357352][T13508] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 337.365334][T13508] RBP: 00007fc29ad3fb76 R08: 0000000000000000 R09: 0000000000000000 [ 337.373314][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.381291][T13508] R13: 0000000000000000 R14: 00007fc29ae84f80 R15: 00007ffe018bf7a8 [ 337.389284][T13508] [ 337.436589][T13512] __nla_validate_parse: 2 callbacks suppressed [ 337.436605][T13512] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3472'. [ 338.284975][T13566] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.3491'. [ 338.327623][T13566] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 338.376940][T13566] CPU: 1 PID: 13566 Comm: syz.1.3491 Not tainted 5.15.167-syzkaller #0 [ 338.385300][T13566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 338.395355][T13566] Call Trace: [ 338.398623][T13566] [ 338.401543][T13566] dump_stack_lvl+0x1e3/0x2d0 [ 338.406209][T13566] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 338.411834][T13566] ? panic+0x860/0x860 [ 338.415894][T13566] ? kmem_cache_alloc_trace+0x143/0x290 [ 338.421427][T13566] ? sysfs_warn_dup+0x4d/0xa0 [ 338.426093][T13566] sysfs_warn_dup+0x8a/0xa0 [ 338.430579][T13566] sysfs_do_create_link_sd+0xbe/0x100 [ 338.435940][T13566] device_add+0x7d4/0xfd0 [ 338.440276][T13566] wiphy_register+0x1d30/0x2bb0 [ 338.445136][T13566] ? cfg80211_event_work+0x40/0x40 [ 338.450237][T13566] ? minstrel_ht_alloc+0x7cf/0x940 [ 338.455340][T13566] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 338.461396][T13566] ieee80211_register_hw+0x2986/0x39d0 [ 338.466854][T13566] ? ieee80211_register_hw+0xb41/0x39d0 [ 338.472392][T13566] ? ieee80211_tasklet_handler+0x20/0x20 [ 338.478054][T13566] ? memset+0x1f/0x40 [ 338.482107][T13566] ? __hrtimer_init+0x181/0x260 [ 338.486942][T13566] mac80211_hwsim_new_radio+0x223d/0x4200 [ 338.492940][T13566] hwsim_new_radio_nl+0xbae/0x1090 [ 338.498042][T13566] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 338.504530][T13566] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 338.510688][T13566] genl_rcv_msg+0xfbd/0x14a0 [ 338.515268][T13566] ? genl_bind+0x420/0x420 [ 338.519671][T13566] ? local_bh_enable+0x5/0x20 [ 338.524338][T13566] ? mark_lock+0x98/0x340 [ 338.528651][T13566] ? __lock_acquire+0x1295/0x1ff0 [ 338.533669][T13566] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 338.540165][T13566] netlink_rcv_skb+0x1cf/0x410 [ 338.544914][T13566] ? genl_bind+0x420/0x420 [ 338.549310][T13566] ? netlink_ack+0xb10/0xb10 [ 338.553892][T13566] ? down_read+0x1b3/0x2e0 [ 338.558289][T13566] ? genl_rcv+0x9/0x40 [ 338.562339][T13566] genl_rcv+0x24/0x40 [ 338.566302][T13566] netlink_unicast+0x7b6/0x980 [ 338.571054][T13566] ? netlink_detachskb+0x90/0x90 [ 338.575972][T13566] ? __virt_addr_valid+0xb7/0x460 [ 338.580978][T13566] ? 0xffffffff81000000 [ 338.585198][T13566] ? __check_object_size+0x300/0x410 [ 338.590490][T13566] ? bpf_lsm_netlink_send+0x5/0x10 [ 338.595717][T13566] netlink_sendmsg+0xa30/0xd60 [ 338.600498][T13566] ? netlink_getsockopt+0x5b0/0x5b0 [ 338.605690][T13566] ? aa_sock_msg_perm+0x91/0x150 [ 338.610623][T13566] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 338.615900][T13566] ? security_socket_sendmsg+0x7d/0xa0 [ 338.621343][T13566] ? netlink_getsockopt+0x5b0/0x5b0 [ 338.626528][T13566] ____sys_sendmsg+0x59e/0x8f0 [ 338.631277][T13566] ? iovec_from_user+0x300/0x390 [ 338.636207][T13566] ? __sys_sendmsg_sock+0x30/0x30 [ 338.641230][T13566] ___sys_sendmsg+0x252/0x2e0 [ 338.645896][T13566] ? __sys_sendmsg+0x260/0x260 [ 338.650681][T13566] ? __fdget+0x191/0x220 [ 338.654913][T13566] __se_sys_sendmsg+0x19a/0x260 [ 338.659755][T13566] ? __x64_sys_sendmsg+0x80/0x80 [ 338.664687][T13566] ? syscall_enter_from_user_mode+0x2e/0x240 [ 338.670651][T13566] ? lockdep_hardirqs_on+0x94/0x130 [ 338.675833][T13566] ? syscall_enter_from_user_mode+0x2e/0x240 [ 338.681806][T13566] do_syscall_64+0x3b/0xb0 [ 338.686226][T13566] ? clear_bhb_loop+0x15/0x70 [ 338.690903][T13566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.696797][T13566] RIP: 0033:0x7fa30c7b1ef9 [ 338.701214][T13566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.720819][T13566] RSP: 002b:00007fa30ac2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.729234][T13566] RAX: ffffffffffffffda RBX: 00007fa30c969f80 RCX: 00007fa30c7b1ef9 [ 338.737190][T13566] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 338.745157][T13566] RBP: 00007fa30c824b76 R08: 0000000000000000 R09: 0000000000000000 [ 338.753108][T13566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.761060][T13566] R13: 0000000000000000 R14: 00007fa30c969f80 R15: 00007ffff929bed8 [ 338.769030][T13566] [ 338.876361][T13575] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3491'. [ 338.886716][T13573] netlink: 'syz.3.3496': attribute type 10 has an invalid length. [ 338.934095][T13580] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 338.940871][T13580] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 339.201675][T13595] netlink: 'syz.4.3504': attribute type 3 has an invalid length. [ 339.209666][T13595] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3504'. [ 339.362916][T13602] netlink: 'syz.1.3517': attribute type 3 has an invalid length. [ 339.417007][T13602] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3517'. [ 339.758488][T13620] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.3514'. [ 339.795201][T13620] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 339.844305][T13620] CPU: 0 PID: 13620 Comm: syz.3.3514 Not tainted 5.15.167-syzkaller #0 [ 339.852579][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 339.862641][T13620] Call Trace: [ 339.866090][T13620] [ 339.869011][T13620] dump_stack_lvl+0x1e3/0x2d0 [ 339.873708][T13620] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 339.879455][T13620] ? panic+0x860/0x860 [ 339.883550][T13620] ? kmem_cache_alloc_trace+0x143/0x290 [ 339.889099][T13620] ? sysfs_warn_dup+0x4d/0xa0 [ 339.893790][T13620] sysfs_warn_dup+0x8a/0xa0 [ 339.898301][T13620] sysfs_do_create_link_sd+0xbe/0x100 [ 339.903688][T13620] device_add+0x7d4/0xfd0 [ 339.908042][T13620] wiphy_register+0x1d30/0x2bb0 [ 339.912917][T13620] ? cfg80211_event_work+0x40/0x40 [ 339.918037][T13620] ? minstrel_ht_alloc+0x7cf/0x940 [ 339.923167][T13620] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 339.929247][T13620] ieee80211_register_hw+0x2986/0x39d0 [ 339.931101][T13627] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 339.934708][T13620] ? ieee80211_register_hw+0xb41/0x39d0 [ 339.934746][T13620] ? ieee80211_tasklet_handler+0x20/0x20 [ 339.941336][T13627] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 339.946583][T13620] ? memset+0x1f/0x40 [ 339.946609][T13620] ? __hrtimer_init+0x181/0x260 [ 339.946631][T13620] mac80211_hwsim_new_radio+0x223d/0x4200 [ 339.973136][T13620] hwsim_new_radio_nl+0xbae/0x1090 [ 339.978284][T13620] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 339.984800][T13620] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 339.990950][T13620] genl_rcv_msg+0xfbd/0x14a0 [ 339.995532][T13620] ? genl_bind+0x420/0x420 [ 339.999927][T13620] ? local_bh_enable+0x5/0x20 [ 340.004595][T13620] ? mark_lock+0x98/0x340 [ 340.008909][T13620] ? __lock_acquire+0x1295/0x1ff0 [ 340.013945][T13620] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 340.020468][T13620] netlink_rcv_skb+0x1cf/0x410 [ 340.025223][T13620] ? genl_bind+0x420/0x420 [ 340.029619][T13620] ? netlink_ack+0xb10/0xb10 [ 340.034187][T13620] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.040329][T13620] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 340.046494][T13620] ? down_read+0x1b3/0x2e0 [ 340.050915][T13620] ? genl_rcv+0x9/0x40 [ 340.055001][T13620] genl_rcv+0x24/0x40 [ 340.059063][T13620] netlink_unicast+0x7b6/0x980 [ 340.063975][T13620] ? netlink_detachskb+0x90/0x90 [ 340.068898][T13620] ? __virt_addr_valid+0xb7/0x460 [ 340.073908][T13620] ? 0xffffffff81000000 [ 340.078060][T13620] ? __check_object_size+0x300/0x410 [ 340.083340][T13620] ? bpf_lsm_netlink_send+0x5/0x10 [ 340.088456][T13620] netlink_sendmsg+0xa30/0xd60 [ 340.093246][T13620] ? netlink_getsockopt+0x5b0/0x5b0 [ 340.098454][T13620] ? aa_sock_msg_perm+0x91/0x150 [ 340.103556][T13620] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 340.108825][T13620] ? security_socket_sendmsg+0x7d/0xa0 [ 340.114273][T13620] ? netlink_getsockopt+0x5b0/0x5b0 [ 340.119489][T13620] ____sys_sendmsg+0x59e/0x8f0 [ 340.124257][T13620] ? iovec_from_user+0x300/0x390 [ 340.129201][T13620] ? __sys_sendmsg_sock+0x30/0x30 [ 340.134220][T13620] ___sys_sendmsg+0x252/0x2e0 [ 340.138885][T13620] ? __sys_sendmsg+0x260/0x260 [ 340.143652][T13620] ? __fdget+0x191/0x220 [ 340.147878][T13620] __se_sys_sendmsg+0x19a/0x260 [ 340.152721][T13620] ? __x64_sys_sendmsg+0x80/0x80 [ 340.157667][T13620] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.163635][T13620] ? lockdep_hardirqs_on+0x94/0x130 [ 340.168820][T13620] ? syscall_enter_from_user_mode+0x2e/0x240 [ 340.174793][T13620] do_syscall_64+0x3b/0xb0 [ 340.179212][T13620] ? clear_bhb_loop+0x15/0x70 [ 340.183868][T13620] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.189751][T13620] RIP: 0033:0x7fee9fb97ef9 [ 340.194166][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.213847][T13620] RSP: 002b:00007fee9e010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.222276][T13620] RAX: ffffffffffffffda RBX: 00007fee9fd4ff80 RCX: 00007fee9fb97ef9 [ 340.230258][T13620] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 340.238223][T13620] RBP: 00007fee9fc0ab76 R08: 0000000000000000 R09: 0000000000000000 [ 340.246184][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.254149][T13620] R13: 0000000000000000 R14: 00007fee9fd4ff80 R15: 00007ffe1765bd58 [ 340.262153][T13620] [ 340.270636][T13622] netlink: 'syz.1.3512': attribute type 10 has an invalid length. [ 340.291834][T13626] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3514'. [ 340.620296][T13652] netlink: 'syz.0.3525': attribute type 3 has an invalid length. [ 340.630902][T13652] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3525'. [ 341.294166][T13664] netlink: 'syz.2.3531': attribute type 10 has an invalid length. [ 341.436301][T13675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3532'. [ 341.468769][T13676] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.3533'. [ 341.528768][T13676] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 341.552798][T13676] CPU: 1 PID: 13676 Comm: syz.2.3533 Not tainted 5.15.167-syzkaller #0 [ 341.561069][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 341.571134][T13676] Call Trace: [ 341.574406][T13676] [ 341.577323][T13676] dump_stack_lvl+0x1e3/0x2d0 [ 341.581994][T13676] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 341.587612][T13676] ? panic+0x860/0x860 [ 341.591668][T13676] ? kmem_cache_alloc_trace+0x143/0x290 [ 341.597197][T13676] ? sysfs_warn_dup+0x4d/0xa0 [ 341.601864][T13676] sysfs_warn_dup+0x8a/0xa0 [ 341.606355][T13676] sysfs_do_create_link_sd+0xbe/0x100 [ 341.611709][T13676] device_add+0x7d4/0xfd0 [ 341.616038][T13676] wiphy_register+0x1d30/0x2bb0 [ 341.620884][T13676] ? cfg80211_event_work+0x40/0x40 [ 341.625978][T13676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 341.632121][T13676] ? ieee80211_register_hw+0x276f/0x39d0 [ 341.637743][T13676] ieee80211_register_hw+0x2986/0x39d0 [ 341.643192][T13676] ? ieee80211_register_hw+0xb41/0x39d0 [ 341.648729][T13676] ? ieee80211_tasklet_handler+0x20/0x20 [ 341.654352][T13676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 341.660498][T13676] ? memset+0x1f/0x40 [ 341.664466][T13676] ? __hrtimer_init+0x181/0x260 [ 341.669390][T13676] mac80211_hwsim_new_radio+0x223d/0x4200 [ 341.675115][T13676] hwsim_new_radio_nl+0xbae/0x1090 [ 341.680218][T13676] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 341.686711][T13676] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 341.693026][T13676] genl_rcv_msg+0xfbd/0x14a0 [ 341.697603][T13676] ? genl_bind+0x420/0x420 [ 341.701996][T13676] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 341.707879][T13676] ? mark_lock+0x98/0x340 [ 341.712192][T13676] ? __lock_acquire+0x1295/0x1ff0 [ 341.717212][T13676] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 341.723707][T13676] netlink_rcv_skb+0x1cf/0x410 [ 341.728551][T13676] ? genl_bind+0x420/0x420 [ 341.733037][T13676] ? netlink_ack+0xb10/0xb10 [ 341.737621][T13676] ? down_read+0x1b3/0x2e0 [ 341.742014][T13676] ? genl_rcv+0x9/0x40 [ 341.746064][T13676] genl_rcv+0x24/0x40 [ 341.750023][T13676] netlink_unicast+0x7b6/0x980 [ 341.754775][T13676] ? netlink_detachskb+0x90/0x90 [ 341.759693][T13676] ? __virt_addr_valid+0xb7/0x460 [ 341.764697][T13676] ? 0xffffffff81000000 [ 341.768918][T13676] ? __check_object_size+0x300/0x410 [ 341.774188][T13676] ? bpf_lsm_netlink_send+0x5/0x10 [ 341.779284][T13676] netlink_sendmsg+0xa30/0xd60 [ 341.784041][T13676] ? netlink_getsockopt+0x5b0/0x5b0 [ 341.789227][T13676] ? aa_sock_msg_perm+0x91/0x150 [ 341.794149][T13676] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 341.799418][T13676] ? security_socket_sendmsg+0x7d/0xa0 [ 341.804943][T13676] ? netlink_getsockopt+0x5b0/0x5b0 [ 341.810128][T13676] ____sys_sendmsg+0x59e/0x8f0 [ 341.814875][T13676] ? iovec_from_user+0x300/0x390 [ 341.819806][T13676] ? __sys_sendmsg_sock+0x30/0x30 [ 341.824824][T13676] ___sys_sendmsg+0x252/0x2e0 [ 341.829486][T13676] ? __sys_sendmsg+0x260/0x260 [ 341.834269][T13676] ? __fdget+0x191/0x220 [ 341.838501][T13676] __se_sys_sendmsg+0x19a/0x260 [ 341.843346][T13676] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 341.849485][T13676] ? __x64_sys_sendmsg+0x80/0x80 [ 341.854415][T13676] ? syscall_enter_from_user_mode+0x37/0x240 [ 341.860398][T13676] ? syscall_enter_from_user_mode+0x2e/0x240 [ 341.866472][T13676] do_syscall_64+0x3b/0xb0 [ 341.870876][T13676] ? clear_bhb_loop+0x15/0x70 [ 341.875551][T13676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.881452][T13676] RIP: 0033:0x7fc29acccef9 [ 341.885856][T13676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.905443][T13676] RSP: 002b:00007fc299145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.913840][T13676] RAX: ffffffffffffffda RBX: 00007fc29ae84f80 RCX: 00007fc29acccef9 [ 341.921792][T13676] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 341.929743][T13676] RBP: 00007fc29ad3fb76 R08: 0000000000000000 R09: 0000000000000000 [ 341.937691][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.945642][T13676] R13: 0000000000000000 R14: 00007fc29ae84f80 R15: 00007ffe018bf7a8 [ 341.953612][T13676] [ 342.084712][T13692] netlink: 'syz.2.3539': attribute type 3 has an invalid length. [ 342.288807][T13705] netlink: 'syz.2.3547': attribute type 10 has an invalid length. [ 342.687035][T13722] __nla_validate_parse: 2 callbacks suppressed [ 342.687074][T13722] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.3553'. [ 342.717762][T13722] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 342.728928][T13722] CPU: 0 PID: 13722 Comm: syz.4.3553 Not tainted 5.15.167-syzkaller #0 [ 342.737201][T13722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 342.747253][T13722] Call Trace: [ 342.750631][T13722] [ 342.753560][T13722] dump_stack_lvl+0x1e3/0x2d0 [ 342.758241][T13722] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 342.763867][T13722] ? panic+0x860/0x860 [ 342.767937][T13722] ? kmem_cache_alloc_trace+0x143/0x290 [ 342.773473][T13722] ? sysfs_warn_dup+0x4d/0xa0 [ 342.778148][T13722] sysfs_warn_dup+0x8a/0xa0 [ 342.782638][T13722] sysfs_do_create_link_sd+0xbe/0x100 [ 342.788002][T13722] device_add+0x7d4/0xfd0 [ 342.792336][T13722] wiphy_register+0x1d30/0x2bb0 [ 342.797192][T13722] ? cfg80211_event_work+0x40/0x40 [ 342.802284][T13722] ? minstrel_ht_alloc+0x7cf/0x940 [ 342.807394][T13722] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 342.813455][T13722] ieee80211_register_hw+0x2986/0x39d0 [ 342.818914][T13722] ? ieee80211_register_hw+0xb41/0x39d0 [ 342.824456][T13722] ? ieee80211_tasklet_handler+0x20/0x20 [ 342.830089][T13722] ? memset+0x1f/0x40 [ 342.834057][T13722] ? __hrtimer_init+0x181/0x260 [ 342.838898][T13722] mac80211_hwsim_new_radio+0x223d/0x4200 [ 342.844632][T13722] hwsim_new_radio_nl+0xbae/0x1090 [ 342.849737][T13722] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 342.856234][T13722] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 342.862644][T13722] genl_rcv_msg+0xfbd/0x14a0 [ 342.867233][T13722] ? genl_bind+0x420/0x420 [ 342.871637][T13722] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 342.877524][T13722] ? mark_lock+0x98/0x340 [ 342.881940][T13722] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 342.887926][T13722] ? print_irqtrace_events+0x210/0x210 [ 342.893379][T13722] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 342.899525][T13722] ? lockdep_hardirqs_on+0x94/0x130 [ 342.904720][T13722] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 342.911244][T13722] netlink_rcv_skb+0x1cf/0x410 [ 342.916004][T13722] ? genl_bind+0x420/0x420 [ 342.920413][T13722] ? netlink_ack+0xb10/0xb10 [ 342.925001][T13722] ? down_read+0x1b3/0x2e0 [ 342.929402][T13722] ? genl_rcv+0x9/0x40 [ 342.933455][T13722] genl_rcv+0x24/0x40 [ 342.937423][T13722] netlink_unicast+0x7b6/0x980 [ 342.942184][T13722] ? netlink_detachskb+0x90/0x90 [ 342.947106][T13722] ? __virt_addr_valid+0xb7/0x460 [ 342.952117][T13722] ? 0xffffffff81000000 [ 342.956252][T13722] ? __check_object_size+0x300/0x410 [ 342.961525][T13722] ? bpf_lsm_netlink_send+0x5/0x10 [ 342.966627][T13722] netlink_sendmsg+0xa30/0xd60 [ 342.971390][T13722] ? netlink_getsockopt+0x5b0/0x5b0 [ 342.976574][T13722] ? plist_check_list+0x20d/0x220 [ 342.981588][T13722] ? aa_sock_msg_perm+0x91/0x150 [ 342.986511][T13722] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 342.991775][T13722] ? security_socket_sendmsg+0x7d/0xa0 [ 342.997562][T13722] ? netlink_getsockopt+0x5b0/0x5b0 [ 343.002748][T13722] ____sys_sendmsg+0x59e/0x8f0 [ 343.007516][T13722] ? iovec_from_user+0x300/0x390 [ 343.012470][T13722] ? __sys_sendmsg_sock+0x30/0x30 [ 343.017533][T13722] ___sys_sendmsg+0x252/0x2e0 [ 343.022225][T13722] ? __sys_sendmsg+0x260/0x260 [ 343.027040][T13722] ? __fdget+0x191/0x220 [ 343.031283][T13722] __se_sys_sendmsg+0x19a/0x260 [ 343.036125][T13722] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.042274][T13722] ? __x64_sys_sendmsg+0x80/0x80 [ 343.047220][T13722] ? syscall_enter_from_user_mode+0x37/0x240 [ 343.053188][T13722] ? syscall_enter_from_user_mode+0x2e/0x240 [ 343.059157][T13722] do_syscall_64+0x3b/0xb0 [ 343.063558][T13722] ? clear_bhb_loop+0x15/0x70 [ 343.068217][T13722] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.074095][T13722] RIP: 0033:0x7fd817132ef9 [ 343.078589][T13722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.098179][T13722] RSP: 002b:00007fd8155ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.106664][T13722] RAX: ffffffffffffffda RBX: 00007fd8172eaf80 RCX: 00007fd817132ef9 [ 343.114621][T13722] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 343.122579][T13722] RBP: 00007fd8171a5b76 R08: 0000000000000000 R09: 0000000000000000 [ 343.130535][T13722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.138592][T13722] R13: 0000000000000000 R14: 00007fd8172eaf80 R15: 00007ffe11ca6728 [ 343.146569][T13722] [ 343.210624][T13722] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.3553'. [ 343.291056][T13730] netlink: 'syz.2.3554': attribute type 3 has an invalid length. [ 343.319636][T13730] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3554'. [ 343.468316][T13739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3559'. [ 343.926055][T13761] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.3569'. [ 343.947905][T13761] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 343.957096][T13761] CPU: 0 PID: 13761 Comm: syz.0.3569 Not tainted 5.15.167-syzkaller #0 [ 343.965351][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 343.975392][T13761] Call Trace: [ 343.978653][T13761] [ 343.981561][T13761] dump_stack_lvl+0x1e3/0x2d0 [ 343.986221][T13761] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 343.991835][T13761] ? panic+0x860/0x860 [ 343.995887][T13761] ? kmem_cache_alloc_trace+0x143/0x290 [ 344.001411][T13761] ? sysfs_warn_dup+0x4d/0xa0 [ 344.006074][T13761] sysfs_warn_dup+0x8a/0xa0 [ 344.010561][T13761] sysfs_do_create_link_sd+0xbe/0x100 [ 344.015911][T13761] device_add+0x7d4/0xfd0 [ 344.020231][T13761] wiphy_register+0x1d30/0x2bb0 [ 344.025074][T13761] ? cfg80211_event_work+0x40/0x40 [ 344.030334][T13761] ? minstrel_ht_alloc+0x7cf/0x940 [ 344.035460][T13761] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 344.041521][T13761] ieee80211_register_hw+0x2986/0x39d0 [ 344.046977][T13761] ? ieee80211_register_hw+0xb41/0x39d0 [ 344.052526][T13761] ? ieee80211_tasklet_handler+0x20/0x20 [ 344.058176][T13761] ? memset+0x1f/0x40 [ 344.062146][T13761] ? __hrtimer_init+0x181/0x260 [ 344.066982][T13761] mac80211_hwsim_new_radio+0x223d/0x4200 [ 344.072787][T13761] hwsim_new_radio_nl+0xbae/0x1090 [ 344.077887][T13761] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 344.084378][T13761] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 344.090785][T13761] genl_rcv_msg+0xfbd/0x14a0 [ 344.095366][T13761] ? genl_bind+0x420/0x420 [ 344.099768][T13761] ? mark_lock+0x98/0x340 [ 344.104093][T13761] ? __lock_acquire+0x1295/0x1ff0 [ 344.109126][T13761] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 344.115644][T13761] netlink_rcv_skb+0x1cf/0x410 [ 344.120422][T13761] ? genl_bind+0x420/0x420 [ 344.124868][T13761] ? netlink_ack+0xb10/0xb10 [ 344.129470][T13761] ? down_read+0x1b3/0x2e0 [ 344.133871][T13761] ? genl_rcv+0x9/0x40 [ 344.137931][T13761] genl_rcv+0x24/0x40 [ 344.141908][T13761] netlink_unicast+0x7b6/0x980 [ 344.146689][T13761] ? netlink_detachskb+0x90/0x90 [ 344.151618][T13761] ? __virt_addr_valid+0xb7/0x460 [ 344.156637][T13761] ? 0xffffffff81000000 [ 344.160799][T13761] ? __check_object_size+0x300/0x410 [ 344.166071][T13761] ? bpf_lsm_netlink_send+0x5/0x10 [ 344.171172][T13761] netlink_sendmsg+0xa30/0xd60 [ 344.175945][T13761] ? netlink_getsockopt+0x5b0/0x5b0 [ 344.181232][T13761] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 344.187806][T13761] ? aa_sock_msg_perm+0x91/0x150 [ 344.192732][T13761] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 344.198008][T13761] ? security_socket_sendmsg+0x7d/0xa0 [ 344.203453][T13761] ? netlink_getsockopt+0x5b0/0x5b0 [ 344.208666][T13761] ____sys_sendmsg+0x59e/0x8f0 [ 344.213440][T13761] ? iovec_from_user+0x300/0x390 [ 344.218383][T13761] ? __sys_sendmsg_sock+0x30/0x30 [ 344.223409][T13761] ___sys_sendmsg+0x252/0x2e0 [ 344.228073][T13761] ? __sys_sendmsg+0x260/0x260 [ 344.232814][T13761] ? lock_release+0x655/0x9a0 [ 344.237496][T13761] ? __fdget+0x191/0x220 [ 344.241750][T13761] __se_sys_sendmsg+0x19a/0x260 [ 344.246585][T13761] ? __x64_sys_sendmsg+0x80/0x80 [ 344.251510][T13761] ? syscall_enter_from_user_mode+0x2e/0x240 [ 344.257477][T13761] ? lockdep_hardirqs_on+0x94/0x130 [ 344.262667][T13761] ? syscall_enter_from_user_mode+0x2e/0x240 [ 344.268629][T13761] do_syscall_64+0x3b/0xb0 [ 344.273026][T13761] ? clear_bhb_loop+0x15/0x70 [ 344.277685][T13761] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.283566][T13761] RIP: 0033:0x7f942ed68ef9 [ 344.287981][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.307571][T13761] RSP: 002b:00007f942d1e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.315973][T13761] RAX: ffffffffffffffda RBX: 00007f942ef20f80 RCX: 00007f942ed68ef9 [ 344.324031][T13761] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 344.331993][T13761] RBP: 00007f942eddbb76 R08: 0000000000000000 R09: 0000000000000000 [ 344.339949][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.347900][T13761] R13: 0000000000000000 R14: 00007f942ef20f80 R15: 00007ffdeeab5cf8 [ 344.355903][T13761] [ 344.364066][T13765] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3569'. [ 344.463785][T13771] netlink: 'syz.3.3571': attribute type 3 has an invalid length. [ 344.473457][T13771] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3571'. [ 344.768122][T13783] netlink: 'syz.1.3586': attribute type 3 has an invalid length. [ 344.798495][T13783] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3586'. [ 345.182113][T13806] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.3584'. [ 345.227216][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3582'. [ 345.248869][T13806] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 345.267169][T13806] CPU: 1 PID: 13806 Comm: syz.4.3584 Not tainted 5.15.167-syzkaller #0 [ 345.275446][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.285502][T13806] Call Trace: [ 345.288801][T13806] [ 345.291729][T13806] dump_stack_lvl+0x1e3/0x2d0 [ 345.296424][T13806] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 345.302063][T13806] ? panic+0x860/0x860 [ 345.306147][T13806] ? kmem_cache_alloc_trace+0x143/0x290 [ 345.311697][T13806] ? sysfs_warn_dup+0x4d/0xa0 [ 345.316381][T13806] sysfs_warn_dup+0x8a/0xa0 [ 345.321017][T13806] sysfs_do_create_link_sd+0xbe/0x100 [ 345.326399][T13806] device_add+0x7d4/0xfd0 [ 345.330749][T13806] wiphy_register+0x1d30/0x2bb0 [ 345.335628][T13806] ? cfg80211_event_work+0x40/0x40 [ 345.340742][T13806] ? minstrel_ht_alloc+0x5d6/0x940 [ 345.345863][T13806] ? minstrel_ht_alloc+0x53f/0x940 [ 345.350985][T13806] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 345.357062][T13806] ieee80211_register_hw+0x2986/0x39d0 [ 345.362538][T13806] ? ieee80211_register_hw+0xb41/0x39d0 [ 345.368101][T13806] ? ieee80211_tasklet_handler+0x20/0x20 [ 345.373753][T13806] ? memset+0x1f/0x40 [ 345.377745][T13806] ? __hrtimer_init+0x181/0x260 [ 345.382608][T13806] mac80211_hwsim_new_radio+0x223d/0x4200 [ 345.388368][T13806] hwsim_new_radio_nl+0xbae/0x1090 [ 345.393498][T13806] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 345.400021][T13806] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 345.406369][T13806] genl_rcv_msg+0xfbd/0x14a0 [ 345.410990][T13806] ? genl_bind+0x420/0x420 [ 345.415412][T13806] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 345.421324][T13806] ? mark_lock+0x98/0x340 [ 345.425742][T13806] ? __lock_acquire+0x1295/0x1ff0 [ 345.430799][T13806] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 345.437326][T13806] netlink_rcv_skb+0x1cf/0x410 [ 345.442106][T13806] ? genl_bind+0x420/0x420 [ 345.446623][T13806] ? netlink_ack+0xb10/0xb10 [ 345.451236][T13806] ? down_read+0x1b3/0x2e0 [ 345.455654][T13806] ? genl_rcv+0x9/0x40 [ 345.459728][T13806] genl_rcv+0x24/0x40 [ 345.463715][T13806] netlink_unicast+0x7b6/0x980 [ 345.468497][T13806] ? netlink_detachskb+0x90/0x90 [ 345.473440][T13806] ? __virt_addr_valid+0xb7/0x460 [ 345.478563][T13806] ? 0xffffffff81000000 [ 345.482716][T13806] ? __check_object_size+0x300/0x410 [ 345.488013][T13806] ? bpf_lsm_netlink_send+0x5/0x10 [ 345.493133][T13806] netlink_sendmsg+0xa30/0xd60 [ 345.497924][T13806] ? netlink_getsockopt+0x5b0/0x5b0 [ 345.503133][T13806] ? aa_sock_msg_perm+0x91/0x150 [ 345.508084][T13806] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 345.513368][T13806] ? security_socket_sendmsg+0x7d/0xa0 [ 345.518830][T13806] ? netlink_getsockopt+0x5b0/0x5b0 [ 345.524038][T13806] ____sys_sendmsg+0x59e/0x8f0 [ 345.528810][T13806] ? iovec_from_user+0x300/0x390 [ 345.533769][T13806] ? __sys_sendmsg_sock+0x30/0x30 [ 345.538821][T13806] ___sys_sendmsg+0x252/0x2e0 [ 345.543512][T13806] ? __sys_sendmsg+0x260/0x260 [ 345.548277][T13806] ? lock_release+0x62d/0x9a0 [ 345.553019][T13806] ? __fdget+0x191/0x220 [ 345.557277][T13806] __se_sys_sendmsg+0x19a/0x260 [ 345.562225][T13806] ? __x64_sys_sendmsg+0x80/0x80 [ 345.567184][T13806] ? syscall_enter_from_user_mode+0x2e/0x240 [ 345.573171][T13806] ? lockdep_hardirqs_on+0x94/0x130 [ 345.578380][T13806] ? syscall_enter_from_user_mode+0x2e/0x240 [ 345.584368][T13806] do_syscall_64+0x3b/0xb0 [ 345.588803][T13806] ? clear_bhb_loop+0x15/0x70 [ 345.593483][T13806] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.599381][T13806] RIP: 0033:0x7fd817132ef9 [ 345.603800][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.623409][T13806] RSP: 002b:00007fd8155ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.631834][T13806] RAX: ffffffffffffffda RBX: 00007fd8172eaf80 RCX: 00007fd817132ef9 [ 345.639819][T13806] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 345.647799][T13806] RBP: 00007fd8171a5b76 R08: 0000000000000000 R09: 0000000000000000 [ 345.655778][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.663753][T13806] R13: 0000000000000000 R14: 00007fd8172eaf80 R15: 00007ffe11ca6728 [ 345.671755][T13806] [ 346.096489][T13826] netlink: 'syz.3.3591': attribute type 21 has an invalid length. [ 346.104421][T13826] netlink: 'syz.3.3591': attribute type 5 has an invalid length. [ 346.202013][T13830] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 346.224371][T13830] CPU: 1 PID: 13830 Comm: syz.2.3603 Not tainted 5.15.167-syzkaller #0 [ 346.232645][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 346.242722][T13830] Call Trace: [ 346.246002][T13830] [ 346.248926][T13830] dump_stack_lvl+0x1e3/0x2d0 [ 346.253617][T13830] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 346.259259][T13830] ? panic+0x860/0x860 [ 346.263338][T13830] ? sysfs_warn_dup+0x61/0xa0 [ 346.268017][T13830] ? kernfs_path_from_node+0x1/0xb00 [ 346.273312][T13830] sysfs_warn_dup+0x8a/0xa0 [ 346.277819][T13830] sysfs_do_create_link_sd+0xbe/0x100 [ 346.283192][T13830] device_add+0x7d4/0xfd0 [ 346.287535][T13830] wiphy_register+0x1d30/0x2bb0 [ 346.292400][T13830] ? cfg80211_event_work+0x40/0x40 [ 346.297531][T13830] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 346.303704][T13830] ieee80211_register_hw+0x2986/0x39d0 [ 346.309173][T13830] ? ieee80211_register_hw+0xb41/0x39d0 [ 346.314727][T13830] ? ieee80211_tasklet_handler+0x20/0x20 [ 346.320370][T13830] ? memset+0x1f/0x40 [ 346.324349][T13830] ? __hrtimer_init+0x181/0x260 [ 346.329202][T13830] mac80211_hwsim_new_radio+0x223d/0x4200 [ 346.334944][T13830] hwsim_new_radio_nl+0xbae/0x1090 [ 346.340062][T13830] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 346.346573][T13830] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 346.352902][T13830] genl_rcv_msg+0xfbd/0x14a0 [ 346.357500][T13830] ? genl_bind+0x420/0x420 [ 346.361910][T13830] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 346.367812][T13830] ? mark_lock+0x98/0x340 [ 346.372149][T13830] ? __lock_acquire+0x1295/0x1ff0 [ 346.377184][T13830] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 346.383724][T13830] netlink_rcv_skb+0x1cf/0x410 [ 346.388487][T13830] ? genl_bind+0x420/0x420 [ 346.392904][T13830] ? netlink_ack+0xb10/0xb10 [ 346.397508][T13830] ? down_read+0x1b3/0x2e0 [ 346.401921][T13830] ? genl_rcv+0x9/0x40 [ 346.405994][T13830] genl_rcv+0x24/0x40 [ 346.409974][T13830] netlink_unicast+0x7b6/0x980 [ 346.414744][T13830] ? netlink_detachskb+0x90/0x90 [ 346.419685][T13830] ? __virt_addr_valid+0xb7/0x460 [ 346.424703][T13830] ? 0xffffffff81000000 [ 346.428848][T13830] ? __check_object_size+0x300/0x410 [ 346.434128][T13830] ? bpf_lsm_netlink_send+0x5/0x10 [ 346.439324][T13830] netlink_sendmsg+0xa30/0xd60 [ 346.444103][T13830] ? netlink_getsockopt+0x5b0/0x5b0 [ 346.449303][T13830] ? aa_sock_msg_perm+0x91/0x150 [ 346.454241][T13830] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 346.459519][T13830] ? security_socket_sendmsg+0x7d/0xa0 [ 346.464970][T13830] ? netlink_getsockopt+0x5b0/0x5b0 [ 346.470166][T13830] ____sys_sendmsg+0x59e/0x8f0 [ 346.474928][T13830] ? iovec_from_user+0x300/0x390 [ 346.479870][T13830] ? __sys_sendmsg_sock+0x30/0x30 [ 346.484916][T13830] ___sys_sendmsg+0x252/0x2e0 [ 346.489702][T13830] ? __sys_sendmsg+0x260/0x260 [ 346.494697][T13830] ? __se_sys_sendmsg+0xbb/0x260 [ 346.499642][T13830] __se_sys_sendmsg+0x19a/0x260 [ 346.504581][T13830] ? __x64_sys_sendmsg+0x80/0x80 [ 346.509617][T13830] ? syscall_enter_from_user_mode+0x2e/0x240 [ 346.515615][T13830] ? lockdep_hardirqs_on+0x94/0x130 [ 346.520834][T13830] ? syscall_enter_from_user_mode+0x2e/0x240 [ 346.526816][T13830] do_syscall_64+0x3b/0xb0 [ 346.531233][T13830] ? clear_bhb_loop+0x15/0x70 [ 346.535903][T13830] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.541882][T13830] RIP: 0033:0x7fc29acccef9 [ 346.546302][T13830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.565901][T13830] RSP: 002b:00007fc299145038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.574313][T13830] RAX: ffffffffffffffda RBX: 00007fc29ae84f80 RCX: 00007fc29acccef9 [ 346.582289][T13830] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 346.590249][T13830] RBP: 00007fc29ad3fb76 R08: 0000000000000000 R09: 0000000000000000 [ 346.598212][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.606178][T13830] R13: 0000000000000000 R14: 00007fc29ae84f80 R15: 00007ffe018bf7a8 [ 346.614174][T13830] [ 346.676737][T13834] netlink: 'syz.3.3593': attribute type 3 has an invalid length. [ 346.978702][T13853] netlink: 'syz.3.3599': attribute type 2 has an invalid length. [ 346.986782][T13853] netlink: 'syz.3.3599': attribute type 8 has an invalid length. [ 347.344127][T13867] netlink: 'syz.2.3608': attribute type 3 has an invalid length. [ 347.717707][T13873] __nla_validate_parse: 8 callbacks suppressed [ 347.717746][T13873] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.3610'. [ 347.755044][T13875] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3610'. [ 347.833344][T13873] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 347.857016][T13873] CPU: 1 PID: 13873 Comm: syz.0.3610 Not tainted 5.15.167-syzkaller #0 [ 347.865389][T13873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 347.875459][T13873] Call Trace: [ 347.878750][T13873] [ 347.881695][T13873] dump_stack_lvl+0x1e3/0x2d0 [ 347.886392][T13873] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 347.892042][T13873] ? panic+0x860/0x860 [ 347.896137][T13873] ? kmem_cache_alloc_trace+0x143/0x290 [ 347.901691][T13873] ? sysfs_warn_dup+0x4d/0xa0 [ 347.906475][T13873] sysfs_warn_dup+0x8a/0xa0 [ 347.911011][T13873] sysfs_do_create_link_sd+0xbe/0x100 [ 347.916392][T13873] device_add+0x7d4/0xfd0 [ 347.920740][T13873] wiphy_register+0x1d30/0x2bb0 [ 347.925611][T13873] ? cfg80211_event_work+0x40/0x40 [ 347.930718][T13873] ? minstrel_ht_alloc+0x7cf/0x940 [ 347.935837][T13873] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 347.941913][T13873] ieee80211_register_hw+0x2986/0x39d0 [ 347.947383][T13873] ? ieee80211_register_hw+0xb41/0x39d0 [ 347.952937][T13873] ? ieee80211_tasklet_handler+0x20/0x20 [ 347.958575][T13873] ? __hrtimer_init+0x173/0x260 [ 347.963429][T13873] ? __sanitizer_cov_trace_const_cmp4+0x30/0x80 [ 347.969766][T13873] ? __hrtimer_init+0x181/0x260 [ 347.974620][T13873] mac80211_hwsim_new_radio+0x223d/0x4200 [ 347.980360][T13873] hwsim_new_radio_nl+0xbae/0x1090 [ 347.985476][T13873] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 347.991990][T13873] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 347.998322][T13873] genl_rcv_msg+0xfbd/0x14a0 [ 348.002917][T13873] ? genl_bind+0x420/0x420 [ 348.007415][T13873] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 348.013414][T13873] ? mark_lock+0x98/0x340 [ 348.017751][T13873] ? __lock_acquire+0x1295/0x1ff0 [ 348.022785][T13873] ? hwsim_tx_info_frame_received_nl+0x1070/0x1070 [ 348.029302][T13873] netlink_rcv_skb+0x1cf/0x410 [ 348.034066][T13873] ? genl_bind+0x420/0x420 [ 348.038482][T13873] ? netlink_ack+0xb10/0xb10 [ 348.043090][T13873] ? down_read+0x1b3/0x2e0 [ 348.047505][T13873] ? genl_rcv+0x9/0x40 [ 348.051578][T13873] genl_rcv+0x24/0x40 [ 348.055641][T13873] netlink_unicast+0x7b6/0x980 [ 348.060418][T13873] ? netlink_detachskb+0x90/0x90 [ 348.065405][T13873] ? bpf_lsm_netlink_send+0x5/0x10 [ 348.070799][T13873] netlink_sendmsg+0xa30/0xd60 [ 348.075587][T13873] ? netlink_getsockopt+0x5b0/0x5b0 [ 348.080797][T13873] ? aa_sock_msg_perm+0x91/0x150 [ 348.085739][T13873] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 348.091019][T13873] ? security_socket_sendmsg+0x7d/0xa0 [ 348.096475][T13873] ? netlink_getsockopt+0x5b0/0x5b0 [ 348.101848][T13873] ____sys_sendmsg+0x59e/0x8f0 [ 348.106611][T13873] ? iovec_from_user+0x300/0x390 [ 348.111560][T13873] ? __sys_sendmsg_sock+0x30/0x30 [ 348.116611][T13873] ___sys_sendmsg+0x252/0x2e0 [ 348.121314][T13873] ? __sys_sendmsg+0x260/0x260 [ 348.126209][T13873] ? __fdget+0x191/0x220 [ 348.130488][T13873] __se_sys_sendmsg+0x19a/0x260 [ 348.135352][T13873] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.141519][T13873] ? __x64_sys_sendmsg+0x80/0x80 [ 348.146479][T13873] ? syscall_enter_from_user_mode+0x37/0x240 [ 348.152467][T13873] ? syscall_enter_from_user_mode+0x2e/0x240 [ 348.158458][T13873] do_syscall_64+0x3b/0xb0 [ 348.162870][T13873] ? clear_bhb_loop+0x15/0x70 [ 348.167542][T13873] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.173432][T13873] RIP: 0033:0x7f942ed68ef9 [ 348.177850][T13873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.197454][T13873] RSP: 002b:00007f942d1e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.205867][T13873] RAX: ffffffffffffffda RBX: 00007f942ef20f80 RCX: 00007f942ed68ef9 [ 348.213832][T13873] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008 [ 348.221799][T13873] RBP: 00007f942eddbb76 R08: 0000000000000000 R09: 0000000000000000 [ 348.229759][T13873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.237721][T13873] R13: 0000000000000000 R14: 00007f942ef20f80 R15: 00007ffdeeab5cf8 [ 348.245707][T13873] [ 348.310948][T13878] netlink: 'syz.1.3612': attribute type 21 has an invalid length. [ 348.340805][T13878] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3612'. [ 348.377629][T13878] netlink: 'syz.1.3612': attribute type 5 has an invalid length. [ 348.396605][T13878] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3612'. [ 348.569202][T13893] netlink: 'syz.2.3620': attribute type 3 has an invalid length. [ 348.621985][T13893] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3620'. [ 348.678277][T13896] netlink: 'syz.0.3617': attribute type 2 has an invalid length. [ 348.695073][T13896] netlink: 'syz.0.3617': attribute type 8 has an invalid length. [ 348.706223][T13896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3617'. [ 349.862016][T13933] netlink: 'syz.1.3631': attribute type 3 has an invalid length. [ 349.870593][T13933] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3631'. [ 349.924799][T13935] netlink: 'syz.2.3629': attribute type 21 has an invalid length. [ 349.966969][T13935] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3629'. [ 350.008770][T13935] netlink: 'syz.2.3629': attribute type 5 has an invalid length. [ 350.033064][T13935] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3629'. [ 350.803228][T13974] tap0: tun_chr_ioctl cmd 1074025677 [ 350.811129][T13974] tap0: linktype set to 823 [ 350.860771][T13976] netlink: 'syz.4.3648': attribute type 3 has an invalid length. [ 350.869111][T13976] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3648'. [ 351.922239][T14014] tap0: tun_chr_ioctl cmd 1074025677 [ 351.928614][T14014] tap0: linktype set to 823 [ 352.387009][T14030] validate_nla: 3 callbacks suppressed [ 352.387027][T14030] netlink: 'syz.2.3668': attribute type 21 has an invalid length. [ 352.427918][T14030] netlink: 'syz.2.3668': attribute type 5 has an invalid length. [ 352.673836][T14044] netlink: 'syz.2.3675': attribute type 3 has an invalid length. [ 353.397895][T14072] netlink: 'syz.4.3685': attribute type 21 has an invalid length. [ 353.416128][T14072] __nla_validate_parse: 6 callbacks suppressed [ 353.416144][T14072] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3685'. [ 353.467586][T14072] netlink: 'syz.4.3685': attribute type 5 has an invalid length. [ 353.475651][T14072] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3685'. [ 353.548871][T14075] netlink: 'syz.4.3689': attribute type 3 has an invalid length. [ 353.573987][T14075] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3689'. [ 353.678597][T14082] tap0: tun_chr_ioctl cmd 1074025677 [ 353.684300][T14082] tap0: linktype set to 773 [ 355.039299][T14118] netlink: 'syz.3.3703': attribute type 3 has an invalid length. [ 355.084129][T14118] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3703'. [ 355.286990][T14127] tap0: tun_chr_ioctl cmd 1074025677 [ 355.295201][T14127] tap0: linktype set to 773 [ 355.920112][T14154] netlink: 'syz.3.3716': attribute type 3 has an invalid length. [ 355.929349][T14154] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3716'. [ 356.769153][T14183] tap0: tun_chr_ioctl cmd 1074025677 [ 356.790902][T14183] tap0: linktype set to 773 [ 357.040069][T14194] netlink: 'syz.4.3730': attribute type 3 has an invalid length. [ 357.090236][T14194] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3730'. [ 357.597323][T14213] netlink: 'syz.1.3747': attribute type 3 has an invalid length. [ 357.606891][T14213] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3747'. [ 358.037226][T14229] netlink: 'syz.0.3753': attribute type 10 has an invalid length. [ 358.119634][T14230] tap0: tun_chr_ioctl cmd 1074025677 [ 358.128847][T14230] tap0: linktype set to 773 [ 358.163298][T14233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3743'. [ 358.736492][T14264] netlink: 'syz.3.3752': attribute type 3 has an invalid length. [ 358.754868][T14264] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3752'. [ 358.950914][T14271] netlink: 'syz.0.3755': attribute type 4 has an invalid length. [ 358.992377][T14273] netlink: 'syz.4.3757': attribute type 10 has an invalid length. [ 359.017581][T14271] 0: renamed from pim6reg1 [ 359.405664][T14294] netlink: 'syz.3.3767': attribute type 3 has an invalid length. [ 359.431322][T14294] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3767'. [ 359.577489][T14301] netlink: 'syz.1.3771': attribute type 10 has an invalid length. [ 359.827319][T14313] device wg2 left promiscuous mode [ 359.889286][T14318] device wg2 entered promiscuous mode [ 359.940685][T14320] netlink: 'syz.1.3776': attribute type 8 has an invalid length. [ 359.976518][T14320] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3776'. [ 360.030493][T14326] netlink: 'syz.3.3779': attribute type 3 has an invalid length. [ 360.064119][T14326] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3779'. [ 360.170859][T14340] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 360.520270][T14351] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3788'. [ 360.785842][T14364] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.807357][T14364] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3792'. [ 360.982169][T14366] device syzkaller0 entered promiscuous mode [ 361.250035][T14375] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3796'. [ 362.037528][T14426] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3812'. [ 362.443689][T14441] device syzkaller0 entered promiscuous mode [ 362.954990][T14464] validate_nla: 5 callbacks suppressed [ 362.955027][T14464] netlink: 'syz.2.3825': attribute type 10 has an invalid length. [ 363.014454][T14465] netlink: 'syz.1.3826': attribute type 3 has an invalid length. [ 363.104973][T14465] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3826'. [ 363.562412][T14474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.647791][T14474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.704903][T14474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.741025][T14474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.791033][T14474] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 363.799508][T14474] batman_adv: batadv0: Removing interface: ipvlan1 [ 363.934336][T14490] sock: sock_set_timeout: `syz.2.3832' (pid 14490) tries to set negative timeout [ 364.808320][T14496] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 365.151041][T14507] netlink: 'syz.3.3838': attribute type 3 has an invalid length. [ 365.186415][T14507] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3838'. [ 365.231323][T14515] netlink: 'syz.0.3841': attribute type 10 has an invalid length. [ 365.242676][T14515] device hsr_slave_0 left promiscuous mode [ 365.342758][T14515] device hsr_slave_1 left promiscuous mode [ 365.388081][T14521] netlink: 'syz.0.3841': attribute type 7 has an invalid length. [ 365.448856][T14521] netlink: 'syz.0.3841': attribute type 1 has an invalid length. [ 365.461309][T14521] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3841'. [ 365.505336][T14519] netlink: 'syz.2.3842': attribute type 1 has an invalid length. [ 365.516993][T14519] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.3842'. [ 365.658332][T14536] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3845'. [ 365.704745][T14535] netlink: 'syz.3.3847': attribute type 3 has an invalid length. [ 365.721121][T14531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3845'. [ 365.762245][T14535] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3847'. [ 365.888795][T14547] netlink: 'syz.2.3850': attribute type 10 has an invalid length. [ 366.232118][T14560] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3855'. [ 366.503911][T14532] delete_channel: no stack [ 366.577814][T14570] netlink: 48569 bytes leftover after parsing attributes in process `syz.4.3858'. [ 366.763052][T14575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3860'. [ 367.162051][T14583] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3862'. [ 368.058389][T14618] validate_nla: 6 callbacks suppressed [ 368.058431][T14618] netlink: 'syz.3.3874': attribute type 29 has an invalid length. [ 368.091320][T14621] netlink: 'syz.2.3875': attribute type 10 has an invalid length. [ 368.105690][T14618] netlink: 'syz.3.3874': attribute type 3 has an invalid length. [ 368.339243][T14631] netlink: 'syz.0.3879': attribute type 10 has an invalid length. [ 368.347706][T14630] netlink: 'syz.3.3878': attribute type 3 has an invalid length. [ 368.558827][T14638] netlink: 'syz.2.3882': attribute type 3 has an invalid length. [ 369.123741][T14660] sock: sock_set_timeout: `syz.0.3888' (pid 14660) tries to set negative timeout [ 369.908367][T14668] netlink: 'syz.4.3890': attribute type 29 has an invalid length. [ 369.931525][T14671] netlink: 'syz.3.3891': attribute type 10 has an invalid length. [ 369.956186][T14668] netlink: 'syz.4.3890': attribute type 3 has an invalid length. [ 370.080482][T14676] netlink: 'syz.2.3894': attribute type 10 has an invalid length. [ 370.234002][T14686] __nla_validate_parse: 7 callbacks suppressed [ 370.234040][T14686] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3897'. [ 370.237461][T14684] device syzkaller0 entered promiscuous mode [ 370.477572][T14699] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3905'. [ 370.884022][T14717] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3914'. [ 370.994121][T14720] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3915'. [ 371.256360][T14738] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3919'. [ 371.523780][T14746] device wg2 left promiscuous mode [ 371.586962][T14750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3926'. [ 371.629609][T14746] device wg2 entered promiscuous mode [ 371.704859][T14757] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3929'. [ 372.166479][T14780] 0: renamed from pim6reg1 [ 372.570350][T14797] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3943'. [ 372.711512][T14805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3945'. [ 373.007906][T14821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3951'. [ 373.064131][T14824] validate_nla: 15 callbacks suppressed [ 373.064169][T14824] netlink: 'syz.4.3954': attribute type 3 has an invalid length. [ 373.558580][T14844] netlink: 'syz.4.3963': attribute type 10 has an invalid length. [ 373.754086][T14848] netlink: 'syz.3.3964': attribute type 29 has an invalid length. [ 373.788761][T14848] netlink: 'syz.3.3964': attribute type 3 has an invalid length. [ 373.836236][T14852] netlink: 'syz.2.3967': attribute type 3 has an invalid length. [ 374.104657][T14863] netlink: 'syz.1.3980': attribute type 3 has an invalid length. [ 374.368271][T14878] netlink: 'syz.0.3976': attribute type 21 has an invalid length. [ 374.414418][T14878] netlink: 'syz.0.3976': attribute type 1 has an invalid length. [ 374.433855][T14887] netlink: 'syz.0.3976': attribute type 9 has an invalid length. [ 374.576591][T14892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.727564][T14898] netlink: 'syz.0.3984': attribute type 3 has an invalid length. [ 375.449869][T14917] __nla_validate_parse: 10 callbacks suppressed [ 375.449887][T14917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4000'. [ 375.627052][T14927] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3995'. [ 375.636644][T14927] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 375.808798][T14934] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3997'. [ 375.845359][T14936] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3998'. [ 375.912426][T14940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4001'. [ 375.998513][T14945] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4003'. [ 376.986277][T14983] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4016'. [ 377.308473][T14992] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4019'. [ 377.442266][T14997] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4032'. [ 377.506844][T15001] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4022'. [ 378.394178][T15044] validate_nla: 12 callbacks suppressed [ 378.394215][T15044] netlink: 'syz.4.4037': attribute type 3 has an invalid length. [ 378.451676][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.460097][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.718512][T15082] netlink: 'syz.2.4051': attribute type 3 has an invalid length. [ 381.073455][T15119] __nla_validate_parse: 5 callbacks suppressed [ 381.073474][T15119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4060'. [ 381.327648][T15126] netlink: 'syz.1.4063': attribute type 3 has an invalid length. [ 381.376275][T15126] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4063'. [ 381.545079][T15131] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4067'. [ 381.634950][T15136] netlink: 'syz.0.4079': attribute type 3 has an invalid length. [ 381.667888][T15136] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4079'. [ 382.136595][T15147] netlink: 'syz.2.4084': attribute type 3 has an invalid length. [ 382.151872][T15147] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4084'. [ 382.338694][T15150] @: renamed from veth0_vlan [ 382.553915][T15154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4076'. [ 383.020650][T15164] delete_channel: no stack [ 383.385381][T15177] netlink: 'syz.1.4087': attribute type 3 has an invalid length. [ 383.422366][T15177] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4087'. [ 383.436204][T15179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4085'. [ 383.553671][T15184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4098'. [ 384.535724][T15203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4104'. [ 384.822831][T15213] netlink: 'syz.2.4099': attribute type 3 has an invalid length. [ 386.477779][T15258] netlink: 'syz.0.4114': attribute type 3 has an invalid length. [ 386.492434][T15258] __nla_validate_parse: 3 callbacks suppressed [ 386.492526][T15258] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4114'. [ 386.739065][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4117'. [ 386.827337][T15275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4122'. [ 386.829607][T15278] netlink: 'syz.3.4123': attribute type 11 has an invalid length. [ 386.846046][T15278] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4123'. [ 387.148358][T15291] device wg2 left promiscuous mode [ 387.209690][T15294] netlink: 'syz.1.4130': attribute type 3 has an invalid length. [ 387.218200][T15294] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4130'. [ 387.218822][T15291] device wg2 entered promiscuous mode [ 387.445238][T15301] netlink: 'syz.1.4141': attribute type 3 has an invalid length. [ 387.453371][T15301] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4141'. [ 387.652026][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4144'. [ 388.009691][T15330] netlink: 'syz.1.4143': attribute type 4 has an invalid length. [ 388.025842][T15330] netlink: 'syz.1.4143': attribute type 1 has an invalid length. [ 388.034255][T15330] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4143'. [ 388.318807][T15341] netlink: 'syz.1.4148': attribute type 3 has an invalid length. [ 388.327324][T15341] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4148'. [ 388.504626][T15348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4151'. [ 388.531683][T15347] netlink: 'syz.0.4160': attribute type 3 has an invalid length. [ 388.718371][T15353] device wg2 entered promiscuous mode [ 388.890625][T15361] netlink: 'syz.0.4164': attribute type 3 has an invalid length. [ 389.749646][T15396] netlink: 'syz.1.4168': attribute type 10 has an invalid length. [ 389.855682][T15401] validate_nla: 1 callbacks suppressed [ 389.855714][T15401] netlink: 'syz.2.4183': attribute type 3 has an invalid length. [ 390.411766][T15433] netlink: 'syz.4.4181': attribute type 10 has an invalid length. [ 390.832834][T15447] netlink: 'syz.4.4188': attribute type 3 has an invalid length. [ 391.317662][T15461] netlink: 'syz.0.4196': attribute type 21 has an invalid length. [ 391.375045][T15461] netlink: 'syz.0.4196': attribute type 1 has an invalid length. [ 391.524385][T15470] device wg2 left promiscuous mode [ 391.556829][T15470] device wg2 entered promiscuous mode [ 392.039283][T15482] __nla_validate_parse: 10 callbacks suppressed [ 392.039315][T15482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4206'. [ 392.072996][T15481] netlink: 'syz.3.4204': attribute type 3 has an invalid length. [ 392.142042][T15481] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4204'. [ 392.196971][T15483] netlink: 'syz.2.4202': attribute type 10 has an invalid length. [ 392.427133][T15487] netlink: 'syz.0.4217': attribute type 3 has an invalid length. [ 392.444827][T15487] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4217'. [ 392.513690][T15495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4208'. [ 392.787088][T15504] netlink: 'syz.0.4221': attribute type 3 has an invalid length. [ 392.795735][T15504] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4221'. [ 392.918418][T15510] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4212'. [ 393.478084][T15530] netlink: 'syz.2.4225': attribute type 3 has an invalid length. [ 393.497406][T15530] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4225'. [ 393.708340][T15537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4227'. [ 393.905402][T15547] netlink: 11834 bytes leftover after parsing attributes in process `syz.0.4229'. [ 394.040125][T15551] sock: sock_set_timeout: `syz.0.4232' (pid 15551) tries to set negative timeout [ 394.138737][T15557] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4234'. [ 395.175646][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.216820][T15603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.266180][T15603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.288204][T15603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.208021][T15640] validate_nla: 10 callbacks suppressed [ 396.208058][T15640] netlink: 'syz.1.4265': attribute type 3 has an invalid length. [ 397.214517][T15663] __nla_validate_parse: 15 callbacks suppressed [ 397.214554][T15663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4284'. [ 397.533154][T15677] netlink: 'syz.3.4279': attribute type 21 has an invalid length. [ 397.543895][T15677] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 397.554642][T15677] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4279'. [ 397.685412][T15685] netlink: 'syz.4.4281': attribute type 6 has an invalid length. [ 397.756993][T15685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.764246][T15685] IPv6: NLM_F_CREATE should be set when creating new route [ 397.771565][T15685] IPv6: NLM_F_CREATE should be set when creating new route [ 397.778817][T15685] IPv6: NLM_F_CREATE should be set when creating new route [ 397.819086][T15688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4282'. [ 398.051406][T15700] netlink: 'syz.1.4289': attribute type 12 has an invalid length. [ 398.098537][T15700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4289'. [ 398.179757][T15698] netlink: 'syz.4.4288': attribute type 10 has an invalid length. [ 398.913336][T15714] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4296'. [ 398.921161][T15713] netlink: 'syz.1.4294': attribute type 21 has an invalid length. [ 398.961928][T15713] netlink: 'syz.1.4294': attribute type 1 has an invalid length. [ 398.977712][T15713] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4294'. [ 399.002064][T15715] netlink: 'syz.2.4295': attribute type 21 has an invalid length. [ 399.014927][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4295'. [ 399.044665][T15715] netlink: 'syz.2.4295': attribute type 1 has an invalid length. [ 399.197700][T15727] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4308'. [ 399.243842][T15726] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4309'. [ 399.725148][T15740] device wg2 entered promiscuous mode [ 399.834348][T15747] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4317'. [ 400.238133][T15754] device wg2 left promiscuous mode [ 400.269286][T15754] device wg2 entered promiscuous mode [ 400.364311][T15761] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 400.754039][T15768] device wg2 left promiscuous mode [ 400.831165][T15768] device wg2 entered promiscuous mode [ 401.270467][T15797] validate_nla: 12 callbacks suppressed [ 401.270503][T15797] netlink: 'syz.4.4337': attribute type 3 has an invalid length. [ 402.347575][T15821] netlink: 'syz.2.4330': attribute type 10 has an invalid length. [ 402.395279][T15823] netlink: 'syz.3.4327': attribute type 1 has an invalid length. [ 402.420332][T15827] netlink: 'syz.4.4348': attribute type 10 has an invalid length. [ 402.439614][T15823] __nla_validate_parse: 11 callbacks suppressed [ 402.439633][T15823] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.4327'. [ 402.460820][T15827] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4348'. [ 402.483600][T15827] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 402.674176][T15834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4335'. [ 402.817949][T15840] netlink: 'syz.2.4340': attribute type 3 has an invalid length. [ 402.860074][T15840] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4340'. [ 403.155133][T15850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4342'. [ 403.363131][T15857] netlink: 'syz.2.4359': attribute type 40 has an invalid length. [ 403.386773][T15857] device team0 left promiscuous mode [ 403.396661][T15857] device team_slave_0 left promiscuous mode [ 403.404388][T15857] device team_slave_1 left promiscuous mode [ 403.665820][T15862] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 403.706586][T15867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4362'. [ 403.807155][T15874] device wg2 left promiscuous mode [ 403.908402][T15874] device wg2 entered promiscuous mode [ 404.138638][T15882] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4354'. [ 404.550607][T15891] delete_channel: no stack [ 404.725747][T15902] netlink: 'syz.3.4363': attribute type 40 has an invalid length. [ 404.772844][T15902] device team0 left promiscuous mode [ 404.778450][T15902] device team_slave_0 left promiscuous mode [ 404.802870][T15902] device team_slave_1 left promiscuous mode [ 404.868507][T15906] netlink: 'syz.0.4366': attribute type 10 has an invalid length. [ 404.966264][T15913] device wg2 left promiscuous mode [ 404.977296][T15910] netlink: 'syz.4.4367': attribute type 3 has an invalid length. [ 405.004076][T15910] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4367'. [ 405.054734][T15913] device wg2 entered promiscuous mode [ 405.682072][T15935] delete_channel: no stack [ 406.520709][T15943] device wg2 left promiscuous mode [ 406.790513][T15954] validate_nla: 1 callbacks suppressed [ 406.790558][T15954] netlink: 'syz.1.4380': attribute type 40 has an invalid length. [ 406.818305][T15955] netlink: 'syz.3.4382': attribute type 3 has an invalid length. [ 406.885831][T15955] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4382'. [ 407.310255][T15954] device team0 left promiscuous mode [ 407.317803][T15954] device team_slave_0 left promiscuous mode [ 407.328950][T15954] device team_slave_1 left promiscuous mode [ 407.588820][T15966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4384'. [ 407.611516][T15967] netlink: 'syz.1.4398': attribute type 3 has an invalid length. [ 407.619704][T15967] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4398'. [ 408.529106][T15977] netlink: 'syz.0.4390': attribute type 10 has an invalid length. [ 408.692524][T15986] delete_channel: no stack [ 408.920196][T15996] device wg2 left promiscuous mode [ 408.954916][T16000] netlink: 'syz.3.4399': attribute type 40 has an invalid length. [ 408.973109][T15996] device wg2 entered promiscuous mode [ 409.044200][T16006] netlink: 'syz.2.4414': attribute type 40 has an invalid length. [ 409.094250][T16010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4404'. [ 409.635722][T16032] netlink: 'syz.1.4408': attribute type 3 has an invalid length. [ 409.644846][T16032] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4408'. [ 409.862493][T16033] delete_channel: no stack [ 410.031140][T16044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4426'. [ 410.100334][T16048] netlink: 'syz.3.4416': attribute type 21 has an invalid length. [ 410.125000][T16048] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4416'. [ 410.337458][T16062] netlink: 'syz.3.4425': attribute type 3 has an invalid length. [ 410.349610][T16062] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4425'. [ 410.374482][T16065] delete_channel: no stack [ 410.926798][T16074] device wg2 left promiscuous mode [ 410.960046][T16074] device wg2 entered promiscuous mode [ 411.286160][T16095] netlink: 'syz.3.4438': attribute type 10 has an invalid length. [ 411.302186][T16095] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4438'. [ 411.329677][T16095] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 411.364525][T16097] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4437'. [ 411.909374][T16102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4442'. [ 412.010492][T16106] delete_channel: no stack [ 413.856848][T16144] validate_nla: 1 callbacks suppressed [ 413.856871][T16144] netlink: 'syz.0.4464': attribute type 3 has an invalid length. [ 413.871517][T16144] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4464'. [ 414.667720][T16143] device wg2 left promiscuous mode [ 414.718753][T16147] netlink: 'syz.3.4453': attribute type 10 has an invalid length. [ 414.745246][T16147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4453'. [ 414.765868][T16147] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 414.784728][T16155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4459'. [ 414.821574][T16158] netlink: 'syz.0.4458': attribute type 21 has an invalid length. [ 414.829693][T16158] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4458'. [ 415.788070][T16176] delete_channel: no stack [ 415.915188][T16186] netlink: 'syz.2.4470': attribute type 3 has an invalid length. [ 415.923977][T16186] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4470'. [ 416.074967][T16196] netlink: 'syz.4.4484': attribute type 3 has an invalid length. [ 416.102005][T16196] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4484'. [ 416.765227][T16201] netlink: 'syz.4.4486': attribute type 10 has an invalid length. [ 416.790774][T16202] netlink: 'syz.3.4474': attribute type 3 has an invalid length. [ 416.798625][T16202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4474'. [ 416.858133][T16206] netlink: 'syz.1.4489': attribute type 10 has an invalid length. [ 416.871587][T16206] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4489'. [ 416.914594][T16206] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 417.149630][T16215] device wg2 left promiscuous mode [ 417.277225][T16215] device wg2 entered promiscuous mode [ 417.297225][T16221] netlink: 'syz.0.4494': attribute type 10 has an invalid length. [ 417.490485][T16234] device syzkaller0 entered promiscuous mode [ 417.515554][T16237] delete_channel: no stack [ 418.421653][T16261] device wg2 left promiscuous mode [ 418.488778][T16268] device wg2 entered promiscuous mode [ 418.499396][T16265] netlink: 'syz.2.4502': attribute type 10 has an invalid length. [ 418.507985][T16265] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4502'. [ 418.527445][T16265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 418.612738][T16270] delete_channel: no stack [ 418.791226][T16280] delete_channel: no stack [ 418.915405][T16290] delete_channel: no stack [ 420.125060][T16326] delete_channel: no stack [ 420.213961][T16331] validate_nla: 1 callbacks suppressed [ 420.213977][T16331] netlink: 'syz.2.4527': attribute type 21 has an invalid length. [ 420.228633][T16331] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4527'. [ 420.875932][T16343] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4532'. [ 420.942792][T16350] netlink: 'syz.2.4538': attribute type 10 has an invalid length. [ 420.957956][T16350] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4538'. [ 420.979721][T16350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 421.863897][T16358] delete_channel: no stack [ 422.019273][T16374] netlink: 'syz.0.4545': attribute type 21 has an invalid length. [ 422.029377][T16374] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4545'. [ 422.274543][T16390] netlink: 'syz.0.4553': attribute type 10 has an invalid length. [ 422.293809][T16390] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4553'. [ 422.328288][T16390] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 423.319974][T16404] delete_channel: no stack [ 423.799053][T16435] netlink: 'syz.2.4567': attribute type 10 has an invalid length. [ 423.858965][T16435] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4567'. [ 423.901102][T16435] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 424.826372][T16452] delete_channel: no stack [ 424.887328][T16456] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4574'. [ 424.930252][T16462] netlink: 'syz.2.4576': attribute type 17 has an invalid length. [ 424.951078][T16462] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4576'. [ 425.018168][T16463] device wg2 left promiscuous mode [ 425.146215][T16463] device wg2 entered promiscuous mode [ 425.563528][T16482] netlink: 'syz.2.4596': attribute type 10 has an invalid length. [ 425.593980][T16482] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4596'. [ 425.655977][T16482] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 425.896582][T16496] netlink: 'syz.2.4600': attribute type 10 has an invalid length. [ 425.927921][T16496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4600'. [ 425.938234][T16501] delete_channel: no stack [ 425.946257][T16496] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.018977][T16504] device veth0_vlan left promiscuous mode [ 426.036570][T16504] device veth0_vlan entered promiscuous mode [ 426.062414][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.080655][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 426.134129][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.194304][T16513] netlink: 'syz.0.4598': attribute type 16 has an invalid length. [ 426.219974][T16513] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4598'. [ 426.535129][T16528] netlink: 'syz.1.4604': attribute type 3 has an invalid length. [ 426.578207][T16528] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4604'. [ 426.653441][T16536] netlink: 'syz.2.4607': attribute type 10 has an invalid length. [ 426.692888][T16536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4607'. [ 426.728573][T16536] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.773628][T16537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4606'. [ 426.895391][T16546] netlink: 'syz.0.4610': attribute type 3 has an invalid length. [ 426.930857][T16546] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4610'. [ 427.126302][T16554] device wg2 entered promiscuous mode [ 427.542854][T16570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4626'. [ 428.046449][T16591] netlink: 'syz.2.4628': attribute type 10 has an invalid length. [ 428.065343][T16591] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4628'. [ 428.129156][T16591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 428.383030][T16594] device wg2 left promiscuous mode [ 428.678474][T16595] device wg2 entered promiscuous mode [ 429.344165][T16633] device wg2 left promiscuous mode [ 429.482201][T16638] device wg2 entered promiscuous mode [ 430.053556][T16646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4647'. [ 430.124192][T16648] netlink: 'syz.1.4648': attribute type 10 has an invalid length. [ 430.165071][T16648] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 430.546815][T16662] delete_channel: no stack [ 430.867415][T16675] netlink: 'syz.1.4658': attribute type 10 has an invalid length. [ 431.303175][T16692] netlink: 'syz.1.4663': attribute type 10 has an invalid length. [ 431.333427][T16692] __nla_validate_parse: 2 callbacks suppressed [ 431.333466][T16692] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4663'. [ 431.398988][T16692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 431.415849][T16695] netlink: 'syz.0.4664': attribute type 10 has an invalid length. [ 431.428978][T16695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4664'. [ 431.466148][T16695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 431.687618][T16698] delete_channel: no stack [ 431.902853][T16703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4668'. [ 432.767130][T16715] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4673'. [ 432.806074][T16719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4680'. [ 433.590765][T16728] netlink: 'syz.0.4685': attribute type 10 has an invalid length. [ 433.605130][T16728] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4685'. [ 433.616986][T16728] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 433.661111][T16727] netlink: 'syz.1.4675': attribute type 10 has an invalid length. [ 433.684073][T16733] netlink: 'syz.4.4677': attribute type 10 has an invalid length. [ 433.735617][T16733] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4677'. [ 433.757425][T16733] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 433.784318][T16736] delete_channel: no stack [ 433.970341][T16747] netlink: 'syz.0.4691': attribute type 10 has an invalid length. [ 433.988782][T16747] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4691'. [ 434.050807][T16747] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.206345][T16756] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4684'. [ 434.230541][T16753] netlink: 'syz.3.4697': attribute type 10 has an invalid length. [ 434.244444][T16753] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4697'. [ 434.274036][T16753] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.749526][T16784] netlink: 'syz.0.4692': attribute type 10 has an invalid length. [ 434.758398][T16783] delete_channel: no stack [ 434.798415][T16784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 435.090527][T16793] netlink: 'syz.2.4700': attribute type 10 has an invalid length. [ 435.116595][T16793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 435.275588][T16800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 435.576877][T16810] delete_channel: no stack [ 435.667094][T16820] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 436.188942][T16848] validate_nla: 2 callbacks suppressed [ 436.188990][T16848] netlink: 'syz.0.4720': attribute type 10 has an invalid length. [ 436.258108][T16848] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 436.480234][T16856] netlink: 'syz.0.4724': attribute type 10 has an invalid length. [ 436.506142][T16856] __nla_validate_parse: 11 callbacks suppressed [ 436.506181][T16856] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4724'. [ 436.547733][T16856] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 436.989945][T16871] netlink: 'syz.2.4727': attribute type 3 has an invalid length. [ 437.007579][T16871] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4727'. [ 437.591321][T16881] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4729'. [ 438.372127][T16889] netlink: 'syz.3.4734': attribute type 10 has an invalid length. [ 438.404055][T16889] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4734'. [ 439.883414][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.889786][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.960494][T16938] netlink: 'syz.1.4752': attribute type 3 has an invalid length. [ 439.994587][T16938] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4752'. [ 440.186098][T16954] netlink: 'syz.3.4757': attribute type 4 has an invalid length. [ 440.986517][T16990] netlink: 'syz.0.4773': attribute type 10 has an invalid length. [ 440.995828][T16990] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4773'. [ 441.049684][T16990] net_ratelimit: 1 callbacks suppressed [ 441.049719][T16990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 441.687937][T17029] netlink: 'syz.0.4786': attribute type 3 has an invalid length. [ 441.700095][T17029] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4786'. [ 441.828377][T17032] netlink: 'syz.1.4790': attribute type 10 has an invalid length. [ 441.858238][T17032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4790'. [ 441.876365][T17032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 442.937989][T17068] netlink: 'syz.0.4799': attribute type 10 has an invalid length. [ 442.960463][T17068] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4799'. [ 443.858663][T17100] netlink: 'syz.1.4816': attribute type 10 has an invalid length. [ 443.877542][T17100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4816'. [ 443.893229][T17100] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 444.132806][T17120] netlink: 'syz.0.4826': attribute type 10 has an invalid length. [ 444.432398][T17136] netlink: 'syz.4.4829': attribute type 10 has an invalid length. [ 444.457135][T17136] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4829'. [ 444.507338][T17138] netlink: 'syz.1.4832': attribute type 10 has an invalid length. [ 444.517944][T17138] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4832'. [ 444.533067][T17138] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 444.641032][T17145] netlink: 'syz.0.4844': attribute type 3 has an invalid length. [ 444.664301][T17145] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4844'. [ 444.898082][T17161] delete_channel: no stack [ 445.035052][T17173] netlink: 'syz.0.4849': attribute type 10 has an invalid length. [ 445.047196][T17173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4849'. [ 445.064710][T17173] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 445.117563][T17169] netlink: 'syz.3.4848': attribute type 10 has an invalid length. [ 445.133783][T17169] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4848'. [ 445.156301][T17176] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4850'. [ 446.820899][T17227] validate_nla: 4 callbacks suppressed [ 446.820917][T17227] netlink: 'syz.0.4871': attribute type 10 has an invalid length. [ 446.849676][T17227] __nla_validate_parse: 2 callbacks suppressed [ 446.849693][T17227] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4871'. [ 446.972220][T17229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4872'. [ 447.939530][T17254] netlink: 'syz.2.4883': attribute type 3 has an invalid length. [ 447.957998][T17254] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4883'. [ 448.127990][T17268] netlink: 'syz.3.4887': attribute type 10 has an invalid length. [ 448.144046][T17268] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4887'. [ 448.162231][T17268] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 448.230186][T17277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4889'. [ 448.351562][T17286] netlink: 'syz.0.4896': attribute type 3 has an invalid length. [ 448.372242][T17286] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4896'. [ 448.449789][T17294] netlink: 'syz.3.4901': attribute type 29 has an invalid length. [ 448.484146][T17294] netlink: 'syz.3.4901': attribute type 29 has an invalid length. [ 448.535341][T17301] netlink: 'syz.3.4901': attribute type 29 has an invalid length. [ 449.054763][T17311] netlink: 'syz.0.4914': attribute type 10 has an invalid length. [ 449.074710][T17311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4914'. [ 449.108857][T17311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 449.125428][T17310] netlink: 'syz.1.4905': attribute type 10 has an invalid length. [ 449.133914][T17310] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4905'. [ 449.151937][T17310] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 449.256373][T17319] netlink: 'syz.2.4911': attribute type 2 has an invalid length. [ 449.373528][T17332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4915'. [ 449.526272][T17339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4919'. [ 450.210733][T17348] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 450.960204][T17380] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 451.350883][T17409] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 451.817024][T17440] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.109410][T17464] validate_nla: 14 callbacks suppressed [ 452.109446][T17464] netlink: 'syz.3.4974': attribute type 10 has an invalid length. [ 452.126786][T17464] __nla_validate_parse: 8 callbacks suppressed [ 452.126830][T17464] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4974'. [ 452.146246][T17464] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.178231][T17459] delete_channel: no stack [ 452.219471][T17474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4976'. [ 452.339759][T17479] netlink: 'syz.0.4981': attribute type 10 has an invalid length. [ 452.350540][T17479] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4981'. [ 452.361235][T17479] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.837996][T17499] delete_channel: no stack [ 453.011393][T17512] netlink: 'syz.1.4995': attribute type 10 has an invalid length. [ 453.197022][T17520] netlink: 'syz.0.5000': attribute type 29 has an invalid length. [ 453.250900][T17520] netlink: 'syz.0.5000': attribute type 3 has an invalid length. [ 453.268875][T17520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5000'. [ 453.425896][T17535] netlink: 'syz.2.5005': attribute type 3 has an invalid length. [ 453.429021][T17530] delete_channel: no stack [ 453.449421][T17535] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5005'. [ 453.636937][T17556] netlink: 'syz.3.5013': attribute type 10 has an invalid length. [ 453.846153][T17562] netlink: 'syz.0.5015': attribute type 10 has an invalid length. [ 453.871956][T17562] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5015'. [ 453.917263][T17566] netlink: 'syz.1.5018': attribute type 3 has an invalid length. [ 453.966096][T17562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 453.988340][T17566] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5018'. [ 454.096277][T17570] delete_channel: no stack [ 454.107968][T17569] netlink: 'syz.4.5020': attribute type 29 has an invalid length. [ 454.173751][T17569] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5020'. [ 454.758394][T17598] delete_channel: no stack [ 454.891611][T17614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5038'. [ 455.752478][T17642] delete_channel: no stack [ 456.129711][T17665] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5060'. [ 456.174347][T17665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.360028][T17681] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.839948][T17717] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 456.924663][T17721] device pim6reg1 entered promiscuous mode [ 457.431680][T17755] validate_nla: 4 callbacks suppressed [ 457.491586][T17755] netlink: 'syz.4.5099': attribute type 10 has an invalid length. [ 457.507596][T17755] __nla_validate_parse: 2 callbacks suppressed [ 457.507627][T17755] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5099'. [ 457.549711][T17755] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 457.769533][T17772] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 458.226624][T17795] netlink: 'syz.1.5116': attribute type 10 has an invalid length. [ 458.265853][T17795] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5116'. [ 458.295589][T17795] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 458.590113][T17814] delete_channel: no stack [ 458.628449][T17818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5121'. [ 458.946908][T17832] netlink: 'syz.1.5131': attribute type 10 has an invalid length. [ 458.965872][T17832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5131'. [ 458.996622][T17832] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 459.332358][T17848] netlink: 'syz.1.5137': attribute type 4 has an invalid length. [ 459.378156][T17849] delete_channel: no stack [ 459.440406][T17848] 0: renamed from pim6reg1 [ 459.585142][T17861] netlink: 'syz.4.5143': attribute type 10 has an invalid length. [ 459.723783][T17869] netlink: 'syz.4.5148': attribute type 10 has an invalid length. [ 459.738949][T17869] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5148'. [ 459.759354][T17869] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 459.839541][T17870] netlink: 'syz.1.5146': attribute type 10 has an invalid length. [ 459.861147][T17870] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5146'. [ 459.915262][T17870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 460.134855][T17880] delete_channel: no stack [ 460.370778][T17897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5156'. [ 460.523578][T17905] netlink: 'syz.4.5160': attribute type 3 has an invalid length. [ 460.527027][T17904] netlink: 'syz.0.5159': attribute type 10 has an invalid length. [ 460.538943][T17713] ODEBUG: Out of memory. ODEBUG disabled [ 460.540100][T17713] [ 460.540106][T17713] ====================================================== [ 460.540111][T17713] WARNING: possible circular locking dependency detected [ 460.540117][T17713] 5.15.167-syzkaller #0 Not tainted [ 460.540126][T17713] ------------------------------------------------------ [ 460.540130][T17713] syz.3.5083/17713 is trying to acquire lock: [ 460.540139][T17713] ffffffff8c9147e0 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 460.540183][T17713] [ 460.540183][T17713] but task is already holding lock: [ 460.540186][T17713] ffff88807d3cb9b8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 460.540222][T17713] [ 460.540222][T17713] which lock already depends on the new lock. [ 460.540222][T17713] [ 460.540227][T17713] [ 460.540227][T17713] the existing dependency chain (in reverse order) is: [ 460.540231][T17713] [ 460.540231][T17713] -> #5 (&trie->lock){....}-{2:2}: [ 460.540251][T17713] lock_acquire+0x1db/0x4f0 [ 460.540265][T17713] _raw_spin_lock_irqsave+0xd1/0x120 [ 460.540283][T17713] trie_delete_elem+0x90/0x690 [ 460.540299][T17713] 0xffffffffa001abe8 [ 460.540310][T17713] bpf_trace_run3+0x2ce/0x380 [ 460.540325][T17713] __traceiter_sched_switch+0x7d/0xb0 [ 460.540341][T17713] __schedule+0x1e8d/0x45b0 [ 460.540354][T17713] schedule+0x11b/0x1f0 [ 460.540367][T17713] futex_wait_queue_me+0x25b/0x480 [ 460.540384][T17713] futex_wait+0x2f8/0x740 [ 460.540400][T17713] do_futex+0x1414/0x1810 [ 460.540416][T17713] __se_sys_futex+0x407/0x490 [ 460.540438][T17713] do_syscall_64+0x3b/0xb0 [ 460.540452][T17713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.540470][T17713] [ 460.540470][T17713] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 460.540490][T17713] lock_acquire+0x1db/0x4f0 [ 460.540503][T17713] _raw_spin_lock_nested+0x2d/0x40 [ 460.540519][T17713] raw_spin_rq_lock_nested+0x26/0x140 [ 460.540536][T17713] task_fork_fair+0x5d/0x350 [ 460.540550][T17713] sched_cgroup_fork+0x2d3/0x330 [ 460.540566][T17713] copy_process+0x224a/0x3ef0 [ 460.540580][T17713] kernel_clone+0x210/0x960 [ 460.540594][T17713] kernel_thread+0x168/0x1e0 [ 460.540608][T17713] rest_init+0x21/0x330 [ 460.540624][T17713] start_kernel+0x48c/0x540 [ 460.540641][T17713] secondary_startup_64_no_verify+0xb1/0xbb [ 460.540659][T17713] [ 460.540659][T17713] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 460.540677][T17713] lock_acquire+0x1db/0x4f0 [ 460.540690][T17713] _raw_spin_lock_irqsave+0xd1/0x120 [ 460.540707][T17713] try_to_wake_up+0xae/0x1300 [ 460.540723][T17713] __wake_up_common+0x2a0/0x4e0 [ 460.540739][T17713] __wake_up+0x112/0x1c0 [ 460.540755][T17713] tty_port_default_wakeup+0xa8/0x100 [ 460.540772][T17713] serial8250_tx_chars+0x60d/0x800 [ 460.540789][T17713] serial8250_handle_irq+0x505/0x600 [ 460.540805][T17713] serial8250_default_handle_irq+0xc8/0x1e0 [ 460.540824][T17713] serial8250_interrupt+0xa1/0x1e0 [ 460.540840][T17713] __handle_irq_event_percpu+0x292/0xa70 [ 460.540857][T17713] handle_irq_event+0xff/0x2b0 [ 460.540872][T17713] handle_edge_irq+0x245/0xbf0 [ 460.540885][T17713] __common_interrupt+0xd7/0x1f0 [ 460.540900][T17713] common_interrupt+0x9f/0xc0 [ 460.540914][T17713] asm_common_interrupt+0x22/0x40 [ 460.540931][T17713] acpi_idle_do_entry+0x10f/0x340 [ 460.540947][T17713] acpi_idle_enter+0x352/0x4f0 [ 460.540962][T17713] cpuidle_enter_state+0x521/0xef0 [ 460.540976][T17713] cpuidle_enter+0x59/0x90 [ 460.540988][T17713] do_idle+0x3e4/0x670 [ 460.541003][T17713] cpu_startup_entry+0x14/0x20 [ 460.541020][T17713] start_secondary+0x371/0x500 [ 460.541037][T17713] secondary_startup_64_no_verify+0xb1/0xbb [ 460.541054][T17713] [ 460.541054][T17713] -> #2 (&tty->write_wait){-...}-{2:2}: [ 460.541072][T17713] lock_acquire+0x1db/0x4f0 [ 460.541085][T17713] _raw_spin_lock_irqsave+0xd1/0x120 [ 460.541101][T17713] __wake_up+0xf5/0x1c0 [ 460.541116][T17713] tty_port_default_wakeup+0xa8/0x100 [ 460.541133][T17713] serial8250_tx_chars+0x60d/0x800 [ 460.541150][T17713] serial8250_handle_irq+0x505/0x600 [ 460.541166][T17713] serial8250_default_handle_irq+0xc8/0x1e0 [ 460.541183][T17713] serial8250_interrupt+0xa1/0x1e0 [ 460.541200][T17713] __handle_irq_event_percpu+0x292/0xa70 [ 460.541217][T17713] handle_irq_event+0xff/0x2b0 [ 460.541233][T17713] handle_edge_irq+0x245/0xbf0 [ 460.541246][T17713] __common_interrupt+0xd7/0x1f0 [ 460.541260][T17713] common_interrupt+0x9f/0xc0 [ 460.541275][T17713] asm_common_interrupt+0x22/0x40 [ 460.541292][T17713] acpi_idle_do_entry+0x10f/0x340 [ 460.541307][T17713] acpi_idle_enter+0x352/0x4f0 [ 460.541322][T17713] cpuidle_enter_state+0x521/0xef0 [ 460.541336][T17713] cpuidle_enter+0x59/0x90 [ 460.541348][T17713] do_idle+0x3e4/0x670 [ 460.541363][T17713] cpu_startup_entry+0x14/0x20 [ 460.541379][T17713] start_secondary+0x371/0x500 [ 460.541395][T17713] secondary_startup_64_no_verify+0xb1/0xbb [ 460.541411][T17713] [ 460.541411][T17713] -> #1 (&port_lock_key){-...}-{2:2}: [ 460.541435][T17713] lock_acquire+0x1db/0x4f0 [ 460.541448][T17713] _raw_spin_lock_irqsave+0xd1/0x120 [ 460.541464][T17713] serial8250_console_write+0x19d/0x1180 [ 460.541482][T17713] console_unlock+0xced/0x12b0 [ 460.541496][T17713] vprintk_emit+0xbf/0x150 [ 460.541509][T17713] _printk+0xd1/0x120 [ 460.541525][T17713] register_console+0x65a/0x940 [ 460.541539][T17713] univ8250_console_init+0x41/0x50 [ 460.541554][T17713] console_init+0x18c/0x660 [ 460.541569][T17713] start_kernel+0x301/0x540 [ 460.541586][T17713] secondary_startup_64_no_verify+0xb1/0xbb [ 460.541602][T17713] [ 460.541602][T17713] -> #0 (console_owner){-...}-{0:0}: [ 460.541621][T17713] validate_chain+0x1649/0x5930 [ 460.541639][T17713] __lock_acquire+0x1295/0x1ff0 [ 460.541652][T17713] lock_acquire+0x1db/0x4f0 [ 460.541665][T17713] console_trylock_spinning+0x1a5/0x3f0 [ 460.541680][T17713] vprintk_emit+0xa6/0x150 [ 460.541693][T17713] _printk+0xd1/0x120 [ 460.541708][T17713] debug_objects_oom+0xb4/0x370 [ 460.541722][T17713] debug_object_activate+0x42d/0x4e0 [ 460.541736][T17713] kvfree_call_rcu+0xb6/0x8a0 [ 460.541750][T17713] trie_update_elem+0x808/0xc00 [ 460.541766][T17713] bpf_map_update_value+0x5d7/0x6c0 [ 460.541783][T17713] generic_map_update_batch+0x54d/0x8b0 [ 460.541800][T17713] bpf_map_do_batch+0x4d0/0x620 [ 460.541813][T17713] __sys_bpf+0x55c/0x670 [ 460.541829][T17713] __x64_sys_bpf+0x78/0x90 [ 460.541845][T17713] do_syscall_64+0x3b/0xb0 [ 460.541859][T17713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.541877][T17713] [ 460.541877][T17713] other info that might help us debug this: [ 460.541877][T17713] [ 460.541881][T17713] Chain exists of: [ 460.541881][T17713] console_owner --> &rq->__lock --> &trie->lock [ 460.541881][T17713] [ 460.541903][T17713] Possible unsafe locking scenario: [ 460.541903][T17713] [ 460.541907][T17713] CPU0 CPU1 [ 460.541911][T17713] ---- ---- [ 460.541914][T17713] lock(&trie->lock); [ 460.541923][T17713] lock(&rq->__lock); [ 460.541933][T17713] lock(&trie->lock); [ 460.541942][T17713] lock(console_owner); [ 460.541952][T17713] [ 460.541952][T17713] *** DEADLOCK *** [ 460.541952][T17713] [ 460.541954][T17713] 2 locks held by syz.3.5083/17713: [ 460.541963][T17713] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 460.542002][T17713] #1: ffff88807d3cb9b8 (&trie->lock){....}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 460.542040][T17713] [ 460.542040][T17713] stack backtrace: [ 460.542045][T17713] CPU: 1 PID: 17713 Comm: syz.3.5083 Not tainted 5.15.167-syzkaller #0 [ 460.542061][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 460.542070][T17713] Call Trace: [ 460.542075][T17713] [ 460.542080][T17713] dump_stack_lvl+0x1e3/0x2d0 [ 460.542098][T17713] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 460.542121][T17713] ? print_circular_bug+0x12b/0x1a0 [ 460.542138][T17713] check_noncircular+0x2f8/0x3b0 [ 460.542158][T17713] ? add_chain_block+0x850/0x850 [ 460.542174][T17713] ? lockdep_lock+0x11f/0x2a0 [ 460.542196][T17713] validate_chain+0x1649/0x5930 [ 460.542222][T17713] ? perf_trace_lock+0x138/0x440 [ 460.542240][T17713] ? reacquire_held_locks+0x660/0x660 [ 460.542257][T17713] ? reacquire_held_locks+0x660/0x660 [ 460.542275][T17713] ? trace_event_raw_event_lock+0x250/0x250 [ 460.542306][T17713] ? mark_lock+0x98/0x340 [ 460.542323][T17713] __lock_acquire+0x1295/0x1ff0 [ 460.542346][T17713] lock_acquire+0x1db/0x4f0 [ 460.542360][T17713] ? console_trylock_spinning+0x185/0x3f0 [ 460.542381][T17713] ? read_lock_is_recursive+0x10/0x10 [ 460.542397][T17713] ? __lock_acquire+0x1ff0/0x1ff0 [ 460.542411][T17713] ? do_raw_spin_lock+0x14a/0x370 [ 460.542441][T17713] ? do_raw_spin_unlock+0x137/0x8b0 [ 460.542457][T17713] ? is_bpf_text_address+0x24f/0x260 [ 460.542476][T17713] console_trylock_spinning+0x1a5/0x3f0 [ 460.542492][T17713] ? console_trylock_spinning+0x185/0x3f0 [ 460.542509][T17713] ? vprintk_emit+0x150/0x150 [ 460.542523][T17713] ? perf_trace_lock+0x138/0x440 [ 460.542546][T17713] ? trace_event_raw_event_lock+0x250/0x250 [ 460.542567][T17713] vprintk_emit+0xa6/0x150 [ 460.542584][T17713] _printk+0xd1/0x120 [ 460.542605][T17713] ? panic+0x860/0x860 [ 460.542623][T17713] ? do_raw_spin_lock+0x14a/0x370 [ 460.542639][T17713] ? __lock_acquire+0x1ff0/0x1ff0 [ 460.542658][T17713] debug_objects_oom+0xb4/0x370 [ 460.542676][T17713] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 460.542694][T17713] ? debug_object_activate+0x4e0/0x4e0 [ 460.542715][T17713] debug_object_activate+0x42d/0x4e0 [ 460.542734][T17713] kvfree_call_rcu+0xb6/0x8a0 [ 460.542753][T17713] ? call_rcu+0xa70/0xa70 [ 460.542767][T17713] ? __kmalloc_node+0x199/0x390 [ 460.542785][T17713] ? bpf_map_kmalloc_node+0xdb/0x160 [ 460.542801][T17713] ? _raw_spin_lock+0x40/0x40 [ 460.542818][T17713] ? longest_prefix_match+0x2db/0x640 [ 460.542841][T17713] trie_update_elem+0x808/0xc00 [ 460.542869][T17713] bpf_map_update_value+0x5d7/0x6c0 [ 460.542891][T17713] generic_map_update_batch+0x54d/0x8b0 [ 460.542917][T17713] ? rcu_read_unlock+0x90/0x90 [ 460.542936][T17713] ? __fdget+0x191/0x220 [ 460.542953][T17713] ? rcu_read_unlock+0x90/0x90 [ 460.542971][T17713] bpf_map_do_batch+0x4d0/0x620 [ 460.542988][T17713] __sys_bpf+0x55c/0x670 [ 460.543008][T17713] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 460.543041][T17713] ? syscall_enter_from_user_mode+0x2e/0x240 [ 460.543060][T17713] ? lockdep_hardirqs_on+0x94/0x130 [ 460.543079][T17713] __x64_sys_bpf+0x78/0x90 [ 460.543098][T17713] do_syscall_64+0x3b/0xb0 [ 460.543113][T17713] ? clear_bhb_loop+0x15/0x70 [ 460.543127][T17713] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.543145][T17713] RIP: 0033:0x7fee9fb97ef9 [ 460.543160][T17713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.543174][T17713] RSP: 002b:00007fee9e010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.543190][T17713] RAX: ffffffffffffffda RBX: 00007fee9fd4ff80 RCX: 00007fee9fb97ef9 [ 460.543202][T17713] RDX: 0000000000000038 RSI: 0000000020000640 RDI: 000000000000001a [ 460.543212][T17713] RBP: 00007fee9fc0ab76 R08: 0000000000000000 R09: 0000000000000000 [ 460.543223][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.543232][T17713] R13: 0000000000000000 R14: 00007fee9fd4ff80 R15: 00007ffe1765bd58 [ 460.543252][T17713] [ 460.548946][T17905] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5160'.