last executing test programs: 2m46.118019119s ago: executing program 2 (id=35044): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) 2m45.869712021s ago: executing program 2 (id=35047): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000e7eba5ea024a2ab2556a412c4b300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000001000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socket$kcm(0x10, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) 2m45.47788996s ago: executing program 2 (id=35051): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000008ab0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x322) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4088, 0xff8}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7e, &(0x7f0000000180)='/mroc/s\xc9\v/net/ipv/syG\x8a^=\xcd,\xb8)u\x8b[\xcdnc_\x00le\xf44.\xab%nN\xd4\x03\x00\x00\x001=\x11\xc8\xdd\x0fR\xd3s\x87`B\x92\xd0}\xbe\xdd\xc4\x01\xc2s\xa3\xfd\xa7\xe2;\xf48\xe7\xab\x9b\x8e%3\xeb.HeX\xcf\"\xbf\x82\xa502\x86\x9f*K\xc6\x1d\"\xa0\xe6\x9b\x9f\x8f=\x8d\xad\xb3\xaa\xa8\xbc\xbd \xea\x97v\xe7\xd1\xfbP(\xa4'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f6", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[], 0xffdd) 2m44.725823228s ago: executing program 2 (id=35054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0600"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000999700008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r6, 0x0, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x800, 0x0, 0x7, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)) close(r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x3, 0x0) 2m43.990607455s ago: executing program 2 (id=35060): perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10048, 0x2, 0x0, 0x0, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000086e798c5ddd9db3000"/28], 0x48) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f940e1224fc60", 0x14}], 0x1}, 0x40010) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001280), 0x9}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0700000004000000000000000000000000007f00dc732993229f4b84683c73817f3fb421c7f3f39944a7ea0e144897462fc3c54c7896c489da1da89c4e55eb44fef9801a35e7b34bd5624700000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000001500)={0x2, 0x80, 0x9f, 0x77, 0x5, 0xfe, 0x0, 0x6, 0x84, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000014c0), 0xc}, 0x309, 0x1, 0x7b0, 0x9, 0x2, 0xbf61, 0x3, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xa, r0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000080)={r7, r9}) setsockopt$sock_attach_bpf(r7, 0x110, 0x2, &(0x7f0000000000), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x800, 0xfffffffe, 0x8, 0x4, 0x3, 0xfffb, 0x0, 0xfffffffb, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="180000002d8dc27a0973", @ANYRES32=r7, @ANYRES32, @ANYRES16=r9, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0) close(r6) 2m43.604338834s ago: executing program 2 (id=35069): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='\x00') r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r9) 2m28.505129558s ago: executing program 32 (id=35069): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='\x00') r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r9) 1.870438307s ago: executing program 1 (id=35615): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.618516969s ago: executing program 1 (id=35621): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.581806651s ago: executing program 4 (id=35624): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x2210, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.432339839s ago: executing program 1 (id=35626): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440), 0x8}, 0x8000, 0xa, 0x10001, 0x1, 0x3, 0x5, 0xc, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xf, r0, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000640)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x2, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x0, 0x0}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100021500bf050005001201", 0x67}], 0x1}, 0x0) 1.316163564s ago: executing program 5 (id=35627): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001000)) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={0x0, 0x0, 0x18}, 0x18) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x3e8) 1.233022408s ago: executing program 4 (id=35628): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x2000, 0x0, 0x0, 0x0, 0x46fa, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) perf_event_open(0x0, r3, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r7, 0x35, 0x1, 0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f80200", 0x16}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x800) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x400c084) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfa, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffe2fd, 0x8}, 0x2080, 0xff, 0x9, 0x5, 0x7303, 0x6, 0x0, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r2, 0x8) 1.154722282s ago: executing program 5 (id=35630): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='\x00') r10 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r10) 1.094751995s ago: executing program 1 (id=35631): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) 1.01787601s ago: executing program 0 (id=35632): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 965.764322ms ago: executing program 3 (id=35633): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040)=r2, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 953.639752ms ago: executing program 4 (id=35634): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x2000, 0x0, 0x0, 0x0, 0x46fa, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) perf_event_open(0x0, r3, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r7, 0x35, 0x1, 0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f80200", 0x16}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x800) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000", 0x17}], 0x1}, 0x400c084) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfa, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffe2fd, 0x8}, 0x2080, 0xff, 0x9, 0x5, 0x7303, 0x6, 0x0, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r2, 0x8) 920.752654ms ago: executing program 1 (id=35636): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) 792.8597ms ago: executing program 0 (id=35637): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 757.888222ms ago: executing program 3 (id=35639): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x2210, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 726.213374ms ago: executing program 4 (id=35640): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x2210, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 692.039095ms ago: executing program 3 (id=35641): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 673.550436ms ago: executing program 5 (id=35642): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x5}, 0x9408, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000180), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0), 0xc) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000903e24a391dfc916d93000001050000000800000000000000000000030000"], 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xc48, 0x8000}, 0x100018, 0xc8, 0x4, 0x5, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) close(r5) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, 0x0, 0xfdef) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', r6}, 0x18) close(r7) socket$kcm(0x10, 0x400000002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0x4, 0x2, 0x3, 0x3, 0xfffffff9}, @tail_call, @exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x47b51ccb, 0x30, &(0x7f0000000100)=""/48, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x1, 0xe, 0x6d}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x4, 0xe, 0x3}, {0x1, 0x2, 0x4, 0xc}, {0x4, 0x3, 0xf, 0x5}], 0x10, 0x800}, 0x94) setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f0000000180)=r8, 0x4) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="5c00000013006bcd9e3fe3dc6e48aa31086b8700300000007ea60264160af36504000a000d003f008bc3a0e640e517d34460bc24eab556a705251e61829408000000000000003bbd22708941b1436e000a84c9f5d1938037e786a6d0", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 523.160954ms ago: executing program 1 (id=35643): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001000)) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={0x0, 0x0, 0x18}, 0x18) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x3e8) 513.299575ms ago: executing program 0 (id=35653): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 477.160957ms ago: executing program 5 (id=35644): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x9, 0x6, 0x3, 0x6, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440), 0x8}, 0x8000, 0xa, 0x10001, 0x1, 0x3, 0x5, 0xc, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xf, r0, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000640)=r1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x2}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x2, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x81, 0x8}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x0, 0x0}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100021500bf050005001201", 0x67}], 0x1}, 0x0) 294.182026ms ago: executing program 5 (id=35645): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x41, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/35, 0x23}], 0x1}, 0x10100) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x3, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x4c, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000500)="7b813735f16fd50fa60942972e72ad90cff0a610a28a52f3a76d120de479a907bc59232cf018d9971a0ce6ddc620b70a5f1f04f2506e8300c5ba45b9ee797ebaa0ab6771fa2484e36ddc172ab583dd61191629295d0aa99efcdd9dff7b2a3c22256827128708f65e8f596096075cca6be77a175484894be11ff6a09dcc08ad01c2bf1174c14477a10d727c265c06052ccac8ba1ccbf24df1e2f9209d480e6a5aee0115e5619759358ca823d03424505b89c50b", 0xb3}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c25", 0xe}], 0x1}, 0x0) close(r1) 293.737056ms ago: executing program 3 (id=35646): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x2000, 0x0, 0x0, 0x0, 0x46fa, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) perf_event_open(0x0, r3, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r7, 0x35, 0x1, 0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f80200", 0x16}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x800) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x400c084) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfa, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffe2fd, 0x8}, 0x2080, 0xff, 0x9, 0x5, 0x7303, 0x6, 0x0, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r2, 0x8) 293.473665ms ago: executing program 4 (id=35647): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) socket$kcm(0x11, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) 290.188115ms ago: executing program 0 (id=35656): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvmsg$unix(r0, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r4 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 188.249091ms ago: executing program 0 (id=35648): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 187.839481ms ago: executing program 3 (id=35649): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0x2}, 0x14031, 0x1, 0xfffffffe, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000040)=r2, 0x4) socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x4895) socket$kcm(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7e}, 0xd1) perf_event_open(0x0, 0xffffffffffffffff, 0x10000002e, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 184.849441ms ago: executing program 4 (id=35650): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x2000, 0x0, 0x0, 0x0, 0x46fa, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) perf_event_open(0x0, r3, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r7, 0x35, 0x1, 0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}, 0x40) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f80200", 0x16}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x800) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000", 0x17}], 0x1}, 0x400c084) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfa, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffe2fd, 0x8}, 0x2080, 0xff, 0x9, 0x5, 0x7303, 0x6, 0x0, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r2, 0x8) 118.369454ms ago: executing program 5 (id=35651): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x2210, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) socket$kcm(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 38.495918ms ago: executing program 0 (id=35652): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r8}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='\x00') r10 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r10) 0s ago: executing program 3 (id=35654): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002340)='L', 0x1}], 0x1}, 0x8c1) socket$kcm(0x11, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) kernel console output (not intermixed with test programs): id length. [ 2825.149534][T17618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33180'. [ 2825.443939][T17625] netlink: 'syz.2.33179': attribute type 10 has an invalid length. [ 2826.948925][T17675] netlink: 'syz.3.33195': attribute type 10 has an invalid length. [ 2827.246190][T17686] netlink: 'syz.3.33198': attribute type 7 has an invalid length. [ 2827.303095][T17686] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33198'. [ 2827.849864][T17703] ip6gretap0: refused to change device tx_queue_len [ 2828.197558][T17718] netlink: 'syz.3.33208': attribute type 7 has an invalid length. [ 2828.230947][T17718] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33208'. [ 2829.077426][T17721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33209'. [ 2830.622861][T17774] netlink: 'syz.0.33223': attribute type 7 has an invalid length. [ 2830.655694][T17774] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33223'. [ 2830.741349][T17776] netlink: 'syz.4.33222': attribute type 27 has an invalid length. [ 2830.867651][T17776] .`: (slave bond_slave_0): Releasing backup interface [ 2832.965023][T17809] netlink: 188 bytes leftover after parsing attributes in process `syz.2.33233'. [ 2833.261388][T17817] netlink: 'syz.0.33236': attribute type 7 has an invalid length. [ 2833.312867][T17817] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33236'. [ 2833.558760][T17824] netlink: 'syz.2.33238': attribute type 7 has an invalid length. [ 2833.623124][T17824] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33238'. [ 2834.564092][T17842] syzkaller0: tun_net_xmit 1280 [ 2834.595600][T17842] syzkaller0: create flow: hash 2427427769 index 2 [ 2834.699053][T17841] syzkaller0: delete flow: hash 2427427769 index 2 [ 2835.061358][T17852] netlink: 188 bytes leftover after parsing attributes in process `syz.4.33245'. [ 2835.389370][T17858] netlink: 'syz.4.33248': attribute type 3 has an invalid length. [ 2835.405485][T17858] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.33248'. [ 2835.496594][T17855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.572895][T17861] netlink: 'syz.2.33249': attribute type 39 has an invalid length. [ 2835.727546][T17867] netlink: 'syz.2.33252': attribute type 7 has an invalid length. [ 2835.762117][T17867] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33252'. [ 2836.213961][T17876] netlink: 'syz.4.33254': attribute type 10 has an invalid length. [ 2836.224328][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.230909][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.414082][T17882] netlink: 'syz.1.33255': attribute type 10 has an invalid length. [ 2836.616508][T17891] netlink: 'syz.2.33256': attribute type 27 has an invalid length. [ 2836.939165][T17899] netlink: 188 bytes leftover after parsing attributes in process `syz.3.33261'. [ 2837.188665][T17907] netlink: 'syz.3.33263': attribute type 3 has an invalid length. [ 2837.212270][T17907] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.33263'. [ 2837.317000][T17905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2837.468733][T17920] netlink: 'syz.3.33267': attribute type 7 has an invalid length. [ 2837.477988][T17921] netlink: 'syz.4.33268': attribute type 7 has an invalid length. [ 2837.494000][T17920] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33267'. [ 2837.512183][T17921] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33268'. [ 2838.833516][T17945] netlink: 'syz.3.33275': attribute type 27 has an invalid length. [ 2838.915976][T17952] netlink: 188 bytes leftover after parsing attributes in process `syz.1.33277'. [ 2839.125341][T17957] netlink: 'syz.1.33279': attribute type 39 has an invalid length. [ 2839.630181][T17981] netlink: 'syz.2.33284': attribute type 10 has an invalid length. [ 2839.677869][T17980] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33287'. [ 2840.653955][T18004] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33304'. [ 2840.868370][T18005] netlink: 188 bytes leftover after parsing attributes in process `syz.0.33293'. [ 2840.884917][T18008] validate_nla: 3 callbacks suppressed [ 2840.884953][T18008] netlink: 'syz.1.33294': attribute type 27 has an invalid length. [ 2841.385045][T18019] netlink: 'syz.0.33295': attribute type 39 has an invalid length. [ 2841.444056][T18018] tap0: tun_chr_ioctl cmd 21731 [ 2841.849969][T18038] netlink: 'syz.4.33300': attribute type 10 has an invalid length. [ 2842.080027][T18047] netlink: 'syz.4.33305': attribute type 7 has an invalid length. [ 2842.118832][T18047] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33305'. [ 2842.819487][T18065] netlink: 'syz.4.33310': attribute type 7 has an invalid length. [ 2842.877096][T18065] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33310'. [ 2843.232490][T18074] netlink: 'syz.4.33311': attribute type 39 has an invalid length. [ 2843.262124][T24312] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2843.545911][T18093] netlink: 'syz.4.33316': attribute type 10 has an invalid length. [ 2843.793322][T18100] netlink: 'syz.2.33320': attribute type 7 has an invalid length. [ 2843.802595][T18100] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33320'. [ 2844.051534][T18106] tap0: tun_chr_ioctl cmd 21731 [ 2844.313735][T18113] netlink: 'syz.4.33324': attribute type 7 has an invalid length. [ 2844.385506][T18113] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33324'. [ 2845.030572][T18121] netlink: 'syz.2.33326': attribute type 3 has an invalid length. [ 2845.052242][T18121] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.33326'. [ 2845.183275][T18120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2846.711484][T18158] validate_nla: 1 callbacks suppressed [ 2846.711517][T18158] netlink: 'syz.1.33336': attribute type 7 has an invalid length. [ 2846.764422][T18158] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33336'. [ 2846.792957][T18161] tap3: tun_chr_ioctl cmd 21731 [ 2846.818307][T18168] netlink: 'syz.0.33335': attribute type 27 has an invalid length. [ 2847.099678][T18162] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.33338'. [ 2847.168694][T18175] netlink: 'syz.2.33339': attribute type 7 has an invalid length. [ 2847.191624][T18175] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33339'. [ 2847.296257][T18179] netlink: 'syz.0.33340': attribute type 3 has an invalid length. [ 2847.344511][T18179] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.33340'. [ 2848.180250][T18177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2848.343552][T18203] netlink: 'syz.4.33348': attribute type 7 has an invalid length. [ 2848.382864][T18203] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33348'. [ 2848.994826][T18219] netlink: 'syz.1.33349': attribute type 10 has an invalid length. [ 2849.022928][T18209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33349'. [ 2849.131157][T18231] netlink: 'syz.3.33352': attribute type 27 has an invalid length. [ 2849.237974][T18236] netlink: 'syz.2.33355': attribute type 7 has an invalid length. [ 2849.296623][T18236] netlink: 'syz.2.33355': attribute type 1 has an invalid length. [ 2849.355970][T18236] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.33355'. [ 2849.461161][T18248] netlink: 'syz.3.33358': attribute type 7 has an invalid length. [ 2849.532351][T18248] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33358'. [ 2849.994987][T18270] tun0: tun_chr_ioctl cmd 1074025677 [ 2850.041906][T18270] tun0: linktype set to 768 [ 2850.556477][T18276] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.33365'. [ 2850.820972][T18285] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33367'. [ 2851.483503][T18297] tap0: tun_chr_ioctl cmd 21731 [ 2851.836547][T18321] validate_nla: 2 callbacks suppressed [ 2851.836582][T18321] netlink: 'syz.1.33377': attribute type 7 has an invalid length. [ 2851.872140][T18321] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33377'. [ 2852.664375][T18342] netlink: 'syz.0.33382': attribute type 10 has an invalid length. [ 2852.691331][T18341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33382'. [ 2853.037500][T18352] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check. [ 2853.503745][T18376] netlink: 'syz.2.33393': attribute type 7 has an invalid length. [ 2853.511967][T18376] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33393'. [ 2854.017229][T18388] netlink: 'syz.0.33405': attribute type 7 has an invalid length. [ 2854.046728][T18388] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33405'. [ 2854.086043][T18391] tun0: tun_chr_ioctl cmd 1074025677 [ 2854.113703][T18391] tun0: linktype set to 768 [ 2854.343449][T18392] netlink: 'syz.2.33395': attribute type 10 has an invalid length. [ 2854.373723][T18395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33395'. [ 2855.369103][T18419] netlink: 'syz.0.33406': attribute type 7 has an invalid length. [ 2855.390236][T18419] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33406'. [ 2855.720964][T18427] netlink: 'syz.2.33407': attribute type 3 has an invalid length. [ 2855.745380][T18427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33407'. [ 2855.890883][T18436] netlink: 'syz.1.33410': attribute type 27 has an invalid length. [ 2856.183732][T18451] netlink: 'syz.4.33411': attribute type 10 has an invalid length. [ 2856.234577][T18451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33411'. [ 2856.575922][T18461] netlink: 'syz.4.33417': attribute type 7 has an invalid length. [ 2856.672388][T18461] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33417'. [ 2856.942474][T18469] netlink: 'syz.3.33418': attribute type 10 has an invalid length. [ 2856.976793][T18470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33418'. [ 2858.292719][T18494] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.33424'. [ 2858.863469][T18505] netlink: 'syz.3.33429': attribute type 10 has an invalid length. [ 2858.886366][T18505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33429'. [ 2858.912706][T18509] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 2859.636467][T18520] netlink: 'syz.3.33432': attribute type 7 has an invalid length. [ 2859.682154][T18520] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33432'. [ 2860.054156][T18528] netlink: 'syz.4.33434': attribute type 10 has an invalid length. [ 2860.080762][T18531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33434'. [ 2860.325203][T18533] netlink: 'syz.2.33445': attribute type 7 has an invalid length. [ 2860.368744][T18533] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33445'. [ 2861.356636][T18552] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.33440'. [ 2862.268040][T18568] netlink: 'syz.1.33443': attribute type 3 has an invalid length. [ 2862.287294][T18568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33443'. [ 2862.308253][T18573] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 2862.565470][T18586] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.33447'. [ 2862.647456][T18580] netlink: 'syz.0.33446': attribute type 10 has an invalid length. [ 2862.694497][T18587] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33446'. [ 2862.740284][T18589] netlink: 'syz.2.33451': attribute type 7 has an invalid length. [ 2862.780378][T18589] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33451'. [ 2862.799279][T18591] netlink: 'syz.1.33450': attribute type 10 has an invalid length. [ 2862.869838][T18591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33450'. [ 2863.945462][T18619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2863.979038][T18619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2864.755085][T18640] netlink: 'syz.1.33465': attribute type 10 has an invalid length. [ 2864.778973][T18641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33465'. [ 2864.868128][T18639] netlink: 'syz.0.33464': attribute type 3 has an invalid length. [ 2864.918999][T18639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33464'. [ 2865.329243][T18660] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.33470'. [ 2865.516440][T18671] netlink: 'syz.0.33474': attribute type 10 has an invalid length. [ 2866.086500][T18682] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check. [ 2867.871650][T18695] netlink: 'syz.3.33479': attribute type 10 has an invalid length. [ 2867.925685][T18695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33479'. [ 2867.959349][T18697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33478'. [ 2868.760875][T18717] netlink: 'syz.3.33484': attribute type 3 has an invalid length. [ 2868.804482][T18717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33484'. [ 2869.095275][T18732] netlink: 'syz.2.33487': attribute type 10 has an invalid length. [ 2869.245318][T18729] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.33488'. [ 2869.355533][T18735] netlink: 'syz.3.33491': attribute type 10 has an invalid length. [ 2869.374779][T18737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2869.416814][T18737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2869.628040][T18746] netlink: 'syz.3.33496': attribute type 21 has an invalid length. [ 2869.672811][T18746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2869.680720][T18746] IPv6: NLM_F_CREATE should be set when creating new route [ 2869.689080][T18746] IPv6: NLM_F_CREATE should be set when creating new route [ 2869.696601][T18746] IPv6: NLM_F_CREATE should be set when creating new route [ 2869.712530][T18747] netlink: 'syz.0.33495': attribute type 10 has an invalid length. [ 2869.734044][T18747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33495'. [ 2869.964747][T18754] netlink: 'syz.4.33499': attribute type 10 has an invalid length. [ 2870.036479][T18766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33499'. [ 2870.705176][T18788] netlink: 'syz.2.33506': attribute type 10 has an invalid length. [ 2870.795565][T18789] netlink: 'syz.3.33505': attribute type 10 has an invalid length. [ 2871.180815][T18794] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.33507'. [ 2872.129635][T18823] netlink: 156 bytes leftover after parsing attributes in process `syz.3.33514'. [ 2872.507659][T18844] netlink: 'syz.4.33520': attribute type 10 has an invalid length. [ 2872.955423][T18853] netlink: 'syz.4.33522': attribute type 10 has an invalid length. [ 2872.974828][T18853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.33522'. [ 2873.834567][T18870] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.33524'. [ 2873.982570][ T5440] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2873.998738][T18878] netlink: 'syz.4.33528': attribute type 21 has an invalid length. [ 2874.026193][T18878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2874.034121][T18878] IPv6: NLM_F_CREATE should be set when creating new route [ 2874.042108][T18878] IPv6: NLM_F_CREATE should be set when creating new route [ 2874.050263][T18878] IPv6: NLM_F_CREATE should be set when creating new route [ 2874.200178][T18884] netlink: 'syz.3.33530': attribute type 7 has an invalid length. [ 2874.217236][T18884] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33530'. [ 2874.975308][T18908] netlink: 'syz.4.33536': attribute type 10 has an invalid length. [ 2874.986363][T18902] netlink: 'syz.1.33535': attribute type 10 has an invalid length. [ 2875.183465][T18913] netlink: 'syz.3.33538': attribute type 10 has an invalid length. [ 2875.211631][T18913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33538'. [ 2875.289029][T18922] netlink: 156 bytes leftover after parsing attributes in process `syz.2.33541'. [ 2875.564257][T18928] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.33544'. [ 2876.257744][T18960] netlink: 'syz.4.33550': attribute type 10 has an invalid length. [ 2876.610160][T18963] netlink: 'syz.3.33551': attribute type 10 has an invalid length. [ 2877.408894][T18991] netlink: 'syz.1.33558': attribute type 21 has an invalid length. [ 2877.472421][T18991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2877.480355][T18991] IPv6: NLM_F_CREATE should be set when creating new route [ 2877.488714][T18991] IPv6: NLM_F_CREATE should be set when creating new route [ 2877.496559][T18991] IPv6: NLM_F_CREATE should be set when creating new route [ 2878.097906][T19021] netlink: 'syz.3.33564': attribute type 10 has an invalid length. [ 2878.256226][T19022] netlink: 'syz.2.33565': attribute type 10 has an invalid length. [ 2878.505668][T19034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.33568'. [ 2879.437101][T19062] netlink: 'syz.1.33577': attribute type 7 has an invalid length. [ 2879.501833][T19062] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33577'. [ 2879.583518][T19071] netlink: 'syz.3.33578': attribute type 10 has an invalid length. [ 2880.283457][T19087] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.33584'. [ 2881.375223][T19125] netlink: 'syz.1.33593': attribute type 10 has an invalid length. [ 2881.706876][T19135] netlink: 'syz.2.33596': attribute type 7 has an invalid length. [ 2881.715276][T19135] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33596'. [ 2881.943483][T19143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33598'. [ 2881.959240][T19141] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.33597'. [ 2881.985664][T19141] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2881.995164][T19141] CPU: 0 PID: 19141 Comm: syz.3.33597 Not tainted syzkaller #0 [ 2882.002832][T19141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2882.013033][T19141] Call Trace: [ 2882.016338][T19141] [ 2882.019285][T19141] dump_stack_lvl+0x188/0x250 [ 2882.023992][T19141] ? show_regs_print_info+0x20/0x20 [ 2882.029260][T19141] ? load_image+0x400/0x400 [ 2882.033905][T19141] sysfs_warn_dup+0x8a/0xa0 [ 2882.038570][T19141] sysfs_do_create_link_sd+0xc0/0x110 [ 2882.043974][T19141] device_add+0x7ed/0xfb0 [ 2882.048401][T19141] wiphy_register+0x1e81/0x2c30 [ 2882.054079][T19141] ? cfg80211_event_work+0x40/0x40 [ 2882.059214][T19141] ? minstrel_ht_alloc+0x808/0x980 [ 2882.064360][T19141] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2882.070704][T19141] ieee80211_register_hw+0x2aa1/0x3af0 [ 2882.076220][T19141] ? lockdep_hardirqs_on+0x94/0x140 [ 2882.081441][T19141] ? ieee80211_tasklet_handler+0x20/0x20 [ 2882.087080][T19141] ? rcu_is_watching+0x11/0xa0 [ 2882.091843][T19141] ? memset+0x1e/0x40 [ 2882.095819][T19141] ? hrtimer_init+0x10c/0x220 [ 2882.101134][T19141] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2882.106907][T19141] hwsim_new_radio_nl+0xa6f/0xc40 [ 2882.112198][T19141] genl_rcv_msg+0xcea/0xf90 [ 2882.116935][T19141] ? genl_bind+0x380/0x380 [ 2882.121376][T19141] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2882.126915][T19141] ? verify_lock_unused+0x140/0x140 [ 2882.132113][T19141] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2882.132148][T19141] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2882.144572][T19141] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2882.151203][T19141] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2882.157855][T19141] netlink_rcv_skb+0x1f5/0x440 [ 2882.162623][T19141] ? genl_bind+0x380/0x380 [ 2882.167032][T19141] ? netlink_ack+0xb50/0xb50 [ 2882.171716][T19141] ? __lock_acquire+0x7d10/0x7d10 [ 2882.176737][T19141] ? down_read+0x1aa/0x2e0 [ 2882.181155][T19141] genl_rcv+0x24/0x40 [ 2882.185151][T19141] netlink_unicast+0x774/0x920 [ 2882.190088][T19141] netlink_sendmsg+0x8ba/0xbe0 [ 2882.194900][T19141] ? netlink_getsockopt+0x570/0x570 [ 2882.200091][T19141] ? aa_sock_msg_perm+0x94/0x150 [ 2882.205140][T19141] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2882.210421][T19141] ? security_socket_sendmsg+0x7c/0xa0 [ 2882.215892][T19141] ? netlink_getsockopt+0x570/0x570 [ 2882.221280][T19141] ____sys_sendmsg+0x5b7/0x8f0 [ 2882.226090][T19141] ? __sys_sendmsg_sock+0x30/0x30 [ 2882.231132][T19141] ? import_iovec+0x6f/0xa0 [ 2882.235644][T19141] ___sys_sendmsg+0x236/0x2e0 [ 2882.240523][T19141] ? __sys_sendmsg+0x2a0/0x2a0 [ 2882.245434][T19141] ? percpu_counter_add_batch+0x13b/0x160 [ 2882.251408][T19141] __se_sys_sendmsg+0x1af/0x290 [ 2882.256801][T19141] ? __x64_sys_sendmsg+0x80/0x80 [ 2882.261910][T19141] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2882.268264][T19141] ? lockdep_hardirqs_on+0x94/0x140 [ 2882.273485][T19141] do_syscall_64+0x4c/0xa0 [ 2882.278056][T19141] ? clear_bhb_loop+0x30/0x80 [ 2882.282749][T19141] ? clear_bhb_loop+0x30/0x80 [ 2882.287429][T19141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2882.293563][T19141] RIP: 0033:0x7f01f43c5799 [ 2882.298417][T19141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2882.318225][T19141] RSP: 002b:00007f01f25fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2882.326666][T19141] RAX: ffffffffffffffda RBX: 00007f01f463f090 RCX: 00007f01f43c5799 [ 2882.334727][T19141] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2882.342876][T19141] RBP: 00007f01f445bc99 R08: 0000000000000000 R09: 0000000000000000 [ 2882.350833][T19141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2882.358792][T19141] R13: 00007f01f463f128 R14: 00007f01f463f090 R15: 00007ffe6036f798 [ 2882.367543][T19141] [ 2883.614024][T19164] netlink: 64 bytes leftover after parsing attributes in process `syz.1.33603'. [ 2884.764374][T19193] netlink: 'syz.3.33610': attribute type 7 has an invalid length. [ 2884.796076][T19193] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33610'. [ 2885.454313][T19208] netlink: 'syz.1.33613': attribute type 10 has an invalid length. [ 2885.514332][T19207] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.33612'. [ 2885.554527][T19207] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2885.613611][T19207] CPU: 0 PID: 19207 Comm: syz.2.33612 Not tainted syzkaller #0 [ 2885.621211][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2885.631278][T19207] Call Trace: [ 2885.634562][T19207] [ 2885.637495][T19207] dump_stack_lvl+0x188/0x250 [ 2885.642192][T19207] ? show_regs_print_info+0x20/0x20 [ 2885.647411][T19207] ? load_image+0x400/0x400 [ 2885.651948][T19207] sysfs_warn_dup+0x8a/0xa0 [ 2885.656481][T19207] sysfs_do_create_link_sd+0xc0/0x110 [ 2885.661964][T19207] device_add+0x7ed/0xfb0 [ 2885.666524][T19207] wiphy_register+0x1e81/0x2c30 [ 2885.671512][T19207] ? cfg80211_event_work+0x40/0x40 [ 2885.676861][T19207] ? minstrel_ht_alloc+0x808/0x980 [ 2885.681997][T19207] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2885.688086][T19207] ieee80211_register_hw+0x2aa1/0x3af0 [ 2885.693745][T19207] ? lockdep_hardirqs_on+0x94/0x140 [ 2885.698996][T19207] ? ieee80211_tasklet_handler+0x20/0x20 [ 2885.704745][T19207] ? rcu_is_watching+0x11/0xa0 [ 2885.709545][T19207] ? memset+0x1e/0x40 [ 2885.713556][T19207] ? hrtimer_init+0x10c/0x220 [ 2885.718260][T19207] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2885.723999][T19207] hwsim_new_radio_nl+0xa6f/0xc40 [ 2885.729032][T19207] genl_rcv_msg+0xcea/0xf90 [ 2885.733537][T19207] ? genl_bind+0x380/0x380 [ 2885.738154][T19207] ? perf_trace_lock+0xe4/0x390 [ 2885.743011][T19207] ? verify_lock_unused+0x140/0x140 [ 2885.748205][T19207] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2885.753854][T19207] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2885.760474][T19207] ? perf_trace_lock+0xe4/0x390 [ 2885.765430][T19207] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2885.771949][T19207] netlink_rcv_skb+0x1f5/0x440 [ 2885.776713][T19207] ? genl_bind+0x380/0x380 [ 2885.781233][T19207] ? netlink_ack+0xb50/0xb50 [ 2885.786000][T19207] ? __lock_acquire+0x7d10/0x7d10 [ 2885.791023][T19207] ? down_read+0x1aa/0x2e0 [ 2885.795440][T19207] genl_rcv+0x24/0x40 [ 2885.799410][T19207] netlink_unicast+0x774/0x920 [ 2885.804185][T19207] netlink_sendmsg+0x8ba/0xbe0 [ 2885.809070][T19207] ? netlink_getsockopt+0x570/0x570 [ 2885.814412][T19207] ? aa_sock_msg_perm+0x94/0x150 [ 2885.819428][T19207] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2885.824722][T19207] ? security_socket_sendmsg+0x7c/0xa0 [ 2885.830178][T19207] ? netlink_getsockopt+0x570/0x570 [ 2885.835423][T19207] ____sys_sendmsg+0x5b7/0x8f0 [ 2885.840194][T19207] ? __sys_sendmsg_sock+0x30/0x30 [ 2885.845222][T19207] ? import_iovec+0x6f/0xa0 [ 2885.849808][T19207] ___sys_sendmsg+0x236/0x2e0 [ 2885.854574][T19207] ? __sys_sendmsg+0x2a0/0x2a0 [ 2885.859341][T19207] ? trace_event_raw_event_lock+0x270/0x270 [ 2885.865345][T19207] __se_sys_sendmsg+0x1af/0x290 [ 2885.870196][T19207] ? __x64_sys_sendmsg+0x80/0x80 [ 2885.875124][T19207] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2885.881371][T19207] ? lockdep_hardirqs_on+0x94/0x140 [ 2885.887110][T19207] do_syscall_64+0x4c/0xa0 [ 2885.891631][T19207] ? clear_bhb_loop+0x30/0x80 [ 2885.896397][T19207] ? clear_bhb_loop+0x30/0x80 [ 2885.901185][T19207] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2885.907101][T19207] RIP: 0033:0x7fbcef29e799 [ 2885.911531][T19207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2885.931146][T19207] RSP: 002b:00007fbced4d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2885.939569][T19207] RAX: ffffffffffffffda RBX: 00007fbcef518090 RCX: 00007fbcef29e799 [ 2885.947544][T19207] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2885.955532][T19207] RBP: 00007fbcef334c99 R08: 0000000000000000 R09: 0000000000000000 [ 2885.963683][T19207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2885.971661][T19207] R13: 00007fbcef518128 R14: 00007fbcef518090 R15: 00007ffea2074108 [ 2885.979668][T19207] [ 2886.297026][T19216] netlink: 'syz.3.33615': attribute type 7 has an invalid length. [ 2886.328035][T19216] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33615'. [ 2887.072997][T19228] netlink: 'syz.1.33618': attribute type 10 has an invalid length. [ 2887.116601][T19232] netlink: 'syz.3.33619': attribute type 29 has an invalid length. [ 2887.153062][T19232] netlink: 'syz.3.33619': attribute type 29 has an invalid length. [ 2887.203496][T19233] netlink: 'syz.3.33619': attribute type 29 has an invalid length. [ 2887.303905][T19232] netlink: 'syz.3.33619': attribute type 4 has an invalid length. [ 2887.382267][T19232] netlink: 205252 bytes leftover after parsing attributes in process `syz.3.33619'. [ 2887.532702][T19249] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.33623'. [ 2887.743631][T19253] netlink: 'syz.1.33624': attribute type 10 has an invalid length. [ 2888.061238][T19256] netlink: 'syz.0.33625': attribute type 7 has an invalid length. [ 2888.124805][T19256] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33625'. [ 2889.444593][T19291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33635'. [ 2889.654260][T19297] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.33636'. [ 2889.998904][T19304] netlink: 'syz.0.33638': attribute type 10 has an invalid length. [ 2890.146698][T19306] netlink: 64 bytes leftover after parsing attributes in process `syz.2.33640'. [ 2891.423332][T19326] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.33644'. [ 2891.463644][T19332] netlink: 'syz.2.33643': attribute type 10 has an invalid length. [ 2891.529359][T19326] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2891.537925][T19326] CPU: 1 PID: 19326 Comm: syz.0.33644 Not tainted syzkaller #0 [ 2891.545587][T19326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2891.555780][T19326] Call Trace: [ 2891.559075][T19326] [ 2891.562213][T19326] dump_stack_lvl+0x188/0x250 [ 2891.567077][T19326] ? show_regs_print_info+0x20/0x20 [ 2891.572296][T19326] ? load_image+0x400/0x400 [ 2891.576953][T19326] sysfs_warn_dup+0x8a/0xa0 [ 2891.581833][T19326] sysfs_do_create_link_sd+0xc0/0x110 [ 2891.587236][T19326] device_add+0x7ed/0xfb0 [ 2891.591603][T19326] wiphy_register+0x1e81/0x2c30 [ 2891.596574][T19326] ? cfg80211_event_work+0x40/0x40 [ 2891.601725][T19326] ? minstrel_ht_alloc+0x808/0x980 [ 2891.606868][T19326] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2891.612972][T19326] ieee80211_register_hw+0x2aa1/0x3af0 [ 2891.618445][T19326] ? lockdep_hardirqs_on+0x94/0x140 [ 2891.623763][T19326] ? ieee80211_tasklet_handler+0x20/0x20 [ 2891.629414][T19326] ? rcu_is_watching+0x11/0xa0 [ 2891.634275][T19326] ? memset+0x1e/0x40 [ 2891.638382][T19326] ? hrtimer_init+0x10c/0x220 [ 2891.643175][T19326] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2891.649027][T19326] hwsim_new_radio_nl+0xa6f/0xc40 [ 2891.654072][T19326] genl_rcv_msg+0xcea/0xf90 [ 2891.658594][T19326] ? genl_bind+0x380/0x380 [ 2891.663122][T19326] ? perf_trace_lock+0xe4/0x390 [ 2891.668161][T19326] ? verify_lock_unused+0x140/0x140 [ 2891.673391][T19326] ? verify_lock_unused+0x140/0x140 [ 2891.678904][T19326] ? perf_trace_lock+0xe4/0x390 [ 2891.683761][T19326] ? perf_trace_lock+0xe4/0x390 [ 2891.688794][T19326] ? perf_trace_lock+0xe4/0x390 [ 2891.693669][T19326] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2891.700663][T19326] netlink_rcv_skb+0x1f5/0x440 [ 2891.705437][T19326] ? genl_bind+0x380/0x380 [ 2891.709946][T19326] ? netlink_ack+0xb50/0xb50 [ 2891.714544][T19326] ? __lock_acquire+0x7d10/0x7d10 [ 2891.719580][T19326] ? down_read+0x1aa/0x2e0 [ 2891.724180][T19326] genl_rcv+0x24/0x40 [ 2891.728168][T19326] netlink_unicast+0x774/0x920 [ 2891.733030][T19326] netlink_sendmsg+0x8ba/0xbe0 [ 2891.737942][T19326] ? netlink_getsockopt+0x570/0x570 [ 2891.743301][T19326] ? aa_sock_msg_perm+0x94/0x150 [ 2891.748428][T19326] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2891.753717][T19326] ? security_socket_sendmsg+0x7c/0xa0 [ 2891.759628][T19326] ? netlink_getsockopt+0x570/0x570 [ 2891.764827][T19326] ____sys_sendmsg+0x5b7/0x8f0 [ 2891.769612][T19326] ? __sys_sendmsg_sock+0x30/0x30 [ 2891.774649][T19326] ? import_iovec+0x6f/0xa0 [ 2891.779162][T19326] ___sys_sendmsg+0x236/0x2e0 [ 2891.783940][T19326] ? __sys_sendmsg+0x2a0/0x2a0 [ 2891.788732][T19326] ? trace_event_raw_event_lock+0x270/0x270 [ 2891.794670][T19326] __se_sys_sendmsg+0x1af/0x290 [ 2891.799552][T19326] ? __x64_sys_sendmsg+0x80/0x80 [ 2891.804519][T19326] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2891.810539][T19326] ? lockdep_hardirqs_on+0x94/0x140 [ 2891.815751][T19326] do_syscall_64+0x4c/0xa0 [ 2891.820177][T19326] ? clear_bhb_loop+0x30/0x80 [ 2891.824880][T19326] ? clear_bhb_loop+0x30/0x80 [ 2891.829567][T19326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2891.835549][T19326] RIP: 0033:0x7fa66f657799 [ 2891.840035][T19326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2891.859913][T19326] RSP: 002b:00007fa66d8b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2891.868525][T19326] RAX: ffffffffffffffda RBX: 00007fa66f8d0fa0 RCX: 00007fa66f657799 [ 2891.876687][T19326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2891.884939][T19326] RBP: 00007fa66f6edc99 R08: 0000000000000000 R09: 0000000000000000 [ 2891.893569][T19326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2891.901562][T19326] R13: 00007fa66f8d1038 R14: 00007fa66f8d0fa0 R15: 00007ffd36fbe928 [ 2891.909762][T19326] [ 2892.059385][T19338] netlink: 'syz.2.33646': attribute type 10 has an invalid length. [ 2892.282424][T19346] netlink: 'syz.2.33649': attribute type 7 has an invalid length. [ 2892.311180][T19346] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33649'. [ 2892.945976][T19361] netlink: 'syz.3.33650': attribute type 10 has an invalid length. [ 2893.411687][T19366] netlink: 'syz.2.33653': attribute type 29 has an invalid length. [ 2893.453651][T19366] netlink: 'syz.2.33653': attribute type 29 has an invalid length. [ 2893.492427][T19369] netlink: 'syz.2.33653': attribute type 29 has an invalid length. [ 2893.528243][T19366] netlink: 'syz.2.33653': attribute type 4 has an invalid length. [ 2893.553576][T19366] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.33653'. [ 2893.556887][T19373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.33655'. [ 2893.945133][T19386] netlink: 'syz.3.33656': attribute type 10 has an invalid length. [ 2894.069044][T19384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.33658'. [ 2894.656631][T19404] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.33659'. [ 2894.679365][T19404] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2894.766804][T19404] CPU: 1 PID: 19404 Comm: syz.4.33659 Not tainted syzkaller #0 [ 2894.774712][T19404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2894.785311][T19404] Call Trace: [ 2894.788638][T19404] [ 2894.791582][T19404] dump_stack_lvl+0x188/0x250 [ 2894.796378][T19404] ? show_regs_print_info+0x20/0x20 [ 2894.801608][T19404] ? load_image+0x400/0x400 [ 2894.806158][T19404] sysfs_warn_dup+0x8a/0xa0 [ 2894.810875][T19404] sysfs_do_create_link_sd+0xc0/0x110 [ 2894.816361][T19404] device_add+0x7ed/0xfb0 [ 2894.820871][T19404] wiphy_register+0x1e81/0x2c30 [ 2894.825773][T19404] ? cfg80211_event_work+0x40/0x40 [ 2894.830905][T19404] ? minstrel_ht_alloc+0x808/0x980 [ 2894.836149][T19404] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2894.842255][T19404] ieee80211_register_hw+0x2aa1/0x3af0 [ 2894.847751][T19404] ? lockdep_hardirqs_on+0x94/0x140 [ 2894.853243][T19404] ? ieee80211_tasklet_handler+0x20/0x20 [ 2894.858975][T19404] ? rcu_is_watching+0x11/0xa0 [ 2894.863780][T19404] ? memset+0x1e/0x40 [ 2894.867792][T19404] ? hrtimer_init+0x10c/0x220 [ 2894.872497][T19404] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2894.878266][T19404] hwsim_new_radio_nl+0xa6f/0xc40 [ 2894.883336][T19404] genl_rcv_msg+0xcea/0xf90 [ 2894.888292][T19404] ? genl_bind+0x380/0x380 [ 2894.892828][T19404] ? perf_trace_lock+0xe4/0x390 [ 2894.897729][T19404] ? verify_lock_unused+0x140/0x140 [ 2894.902969][T19404] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2894.908768][T19404] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2894.915390][T19404] ? perf_trace_lock+0xe4/0x390 [ 2894.920288][T19404] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2894.926925][T19404] netlink_rcv_skb+0x1f5/0x440 [ 2894.931729][T19404] ? genl_bind+0x380/0x380 [ 2894.936182][T19404] ? netlink_ack+0xb50/0xb50 [ 2894.940893][T19404] ? __lock_acquire+0x7d10/0x7d10 [ 2894.946088][T19404] ? down_read+0x1aa/0x2e0 [ 2894.950842][T19404] genl_rcv+0x24/0x40 [ 2894.954849][T19404] netlink_unicast+0x774/0x920 [ 2894.959646][T19404] netlink_sendmsg+0x8ba/0xbe0 [ 2894.964435][T19404] ? netlink_getsockopt+0x570/0x570 [ 2894.969843][T19404] ? aa_sock_msg_perm+0x94/0x150 [ 2894.974824][T19404] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2894.980311][T19404] ? security_socket_sendmsg+0x7c/0xa0 [ 2894.985979][T19404] ? netlink_getsockopt+0x570/0x570 [ 2894.991295][T19404] ____sys_sendmsg+0x5b7/0x8f0 [ 2894.996113][T19404] ? __sys_sendmsg_sock+0x30/0x30 [ 2895.001263][T19404] ? import_iovec+0x6f/0xa0 [ 2895.005797][T19404] ___sys_sendmsg+0x236/0x2e0 [ 2895.010516][T19404] ? __sys_sendmsg+0x2a0/0x2a0 [ 2895.015368][T19404] __se_sys_sendmsg+0x1af/0x290 [ 2895.020339][T19404] ? __x64_sys_sendmsg+0x80/0x80 [ 2895.025813][T19404] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2895.031859][T19404] ? lockdep_hardirqs_on+0x94/0x140 [ 2895.037121][T19404] do_syscall_64+0x4c/0xa0 [ 2895.041870][T19404] ? clear_bhb_loop+0x30/0x80 [ 2895.046997][T19404] ? clear_bhb_loop+0x30/0x80 [ 2895.051824][T19404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2895.057825][T19404] RIP: 0033:0x7f468e222799 [ 2895.062350][T19404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2895.082219][T19404] RSP: 002b:00007f468c45b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2895.090652][T19404] RAX: ffffffffffffffda RBX: 00007f468e49c090 RCX: 00007f468e222799 [ 2895.098629][T19404] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2895.106642][T19404] RBP: 00007f468e2b8c99 R08: 0000000000000000 R09: 0000000000000000 [ 2895.114890][T19404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2895.123164][T19404] R13: 00007f468e49c128 R14: 00007f468e49c090 R15: 00007ffeb73cf4b8 [ 2895.131149][T19404] [ 2895.358627][T19416] validate_nla: 4 callbacks suppressed [ 2895.358657][T19416] netlink: 'syz.1.33663': attribute type 7 has an invalid length. [ 2895.385432][T19416] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33663'. [ 2896.254749][T19440] netlink: 'syz.0.33668': attribute type 29 has an invalid length. [ 2896.356626][T19437] netlink: 'syz.3.33671': attribute type 10 has an invalid length. [ 2896.366821][T19444] netlink: 'syz.0.33668': attribute type 4 has an invalid length. [ 2896.395599][T19440] netlink: 'syz.0.33668': attribute type 29 has an invalid length. [ 2896.414225][T19444] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.33668'. [ 2896.508416][T19443] netlink: 'syz.0.33668': attribute type 29 has an invalid length. [ 2896.534061][T19449] netlink: 64 bytes leftover after parsing attributes in process `syz.4.33672'. [ 2897.575210][T19488] netlink: 'syz.4.33683': attribute type 7 has an invalid length. [ 2897.649062][T19488] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33683'. [ 2897.797016][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.803559][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.203629][T19500] netlink: 'syz.3.33684': attribute type 7 has an invalid length. [ 2898.212271][T19500] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33684'. [ 2899.175499][T19522] netlink: 64 bytes leftover after parsing attributes in process `syz.3.33690'. [ 2900.775752][T19555] netlink: 'syz.3.33696': attribute type 10 has an invalid length. [ 2900.894543][T19560] netlink: 'syz.1.33699': attribute type 7 has an invalid length. [ 2900.922157][T19560] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33699'. [ 2901.168695][T19566] netlink: 'syz.3.33701': attribute type 7 has an invalid length. [ 2901.221282][T19566] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33701'. [ 2901.448005][T19574] netlink: 'syz.2.33703': attribute type 29 has an invalid length. [ 2901.704294][T19574] netlink: 'syz.2.33703': attribute type 29 has an invalid length. [ 2901.748079][T19576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33703'. [ 2901.779835][T19575] netlink: 'syz.2.33703': attribute type 29 has an invalid length. [ 2902.109729][T19594] netlink: 'syz.3.33708': attribute type 7 has an invalid length. [ 2902.118809][T19594] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33708'. [ 2902.382423][T19596] netlink: 64 bytes leftover after parsing attributes in process `syz.4.33709'. [ 2903.089404][T19612] netlink: 'syz.2.33713': attribute type 10 has an invalid length. [ 2903.180772][T19623] netlink: 'syz.4.33716': attribute type 7 has an invalid length. [ 2903.220521][T19623] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33716'. [ 2903.297113][T19627] netlink: 'syz.2.33718': attribute type 7 has an invalid length. [ 2903.336106][T19627] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33718'. [ 2904.017898][T19639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.33720'. [ 2904.401705][T19654] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33734'. [ 2905.109345][T19682] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33730'. [ 2906.167743][T19701] validate_nla: 13 callbacks suppressed [ 2906.167797][T19701] netlink: 'syz.4.33735': attribute type 29 has an invalid length. [ 2906.271306][T19706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33735'. [ 2906.327435][T19705] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.33736'. [ 2906.412898][T19701] netlink: 'syz.4.33735': attribute type 29 has an invalid length. [ 2906.613111][T19703] netlink: 'syz.4.33735': attribute type 29 has an invalid length. [ 2907.044159][T19719] netlink: 'syz.4.33740': attribute type 29 has an invalid length. [ 2907.092102][T19719] netlink: 'syz.4.33740': attribute type 29 has an invalid length. [ 2907.112592][T19722] netlink: 'syz.4.33740': attribute type 29 has an invalid length. [ 2907.337424][T19731] netlink: 'syz.3.33743': attribute type 7 has an invalid length. [ 2907.347658][T19731] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33743'. [ 2909.013309][T19772] netlink: 'syz.1.33752': attribute type 29 has an invalid length. [ 2909.065089][T19772] netlink: 'syz.1.33752': attribute type 29 has an invalid length. [ 2909.104196][T19775] netlink: 'syz.1.33752': attribute type 29 has an invalid length. [ 2910.421691][T19808] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33762'. [ 2911.060030][T19827] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33768'. [ 2912.809042][T19873] validate_nla: 2 callbacks suppressed [ 2912.809073][T19873] netlink: 'syz.2.33778': attribute type 7 has an invalid length. [ 2912.837739][T19873] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33778'. [ 2913.027972][T19880] netlink: 'syz.0.33779': attribute type 29 has an invalid length. [ 2913.345035][T19880] netlink: 'syz.0.33779': attribute type 29 has an invalid length. [ 2913.729154][T19896] netlink: 'syz.3.33783': attribute type 7 has an invalid length. [ 2913.792228][T19896] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33783'. [ 2915.169329][T19937] netlink: 'syz.1.33792': attribute type 29 has an invalid length. [ 2915.245099][T19937] netlink: 'syz.1.33792': attribute type 29 has an invalid length. [ 2915.278644][T19943] netlink: 'syz.1.33792': attribute type 29 has an invalid length. [ 2915.419768][T19939] netlink: 'syz.3.33794': attribute type 10 has an invalid length. [ 2915.441550][T19937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.33792'. [ 2915.529203][T19937] netlink: 'syz.1.33792': attribute type 29 has an invalid length. [ 2915.665640][T19956] netlink: 'syz.2.33798': attribute type 7 has an invalid length. [ 2915.688498][T19956] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33798'. [ 2917.920552][T20013] validate_nla: 3 callbacks suppressed [ 2917.920595][T20013] netlink: 'syz.0.33812': attribute type 29 has an invalid length. [ 2917.960371][T20013] netlink: 'syz.0.33812': attribute type 29 has an invalid length. [ 2918.023336][T20013] netlink: 'syz.0.33812': attribute type 29 has an invalid length. [ 2918.990143][T20047] netlink: 'syz.2.33823': attribute type 29 has an invalid length. [ 2919.050495][T20047] netlink: 'syz.2.33823': attribute type 29 has an invalid length. [ 2919.092183][T20048] netlink: 'syz.2.33823': attribute type 29 has an invalid length. [ 2919.223078][T20048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.33823'. [ 2919.281526][T20047] netlink: 'syz.2.33823': attribute type 29 has an invalid length. [ 2919.444081][T20059] netlink: 'syz.3.33827': attribute type 7 has an invalid length. [ 2919.500172][T20059] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33827'. [ 2920.067475][T20070] netlink: 'syz.2.33829': attribute type 29 has an invalid length. [ 2920.088608][T20070] netlink: 'syz.2.33829': attribute type 29 has an invalid length. [ 2920.800759][T20096] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33836'. [ 2921.802302][T20117] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.33840'. [ 2922.188554][T20129] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.33844'. [ 2923.270728][T20159] validate_nla: 10 callbacks suppressed [ 2923.270748][T20159] netlink: 'syz.3.33854': attribute type 7 has an invalid length. [ 2923.329064][T20159] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33854'. [ 2923.822952][T20175] netlink: 'syz.0.33858': attribute type 7 has an invalid length. [ 2923.845821][T20175] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33858'. [ 2923.903985][T20178] netlink: 'syz.4.33860': attribute type 29 has an invalid length. [ 2924.112354][T20178] netlink: 'syz.4.33860': attribute type 29 has an invalid length. [ 2924.187149][T20186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33860'. [ 2924.257546][T20185] netlink: 'syz.4.33860': attribute type 29 has an invalid length. [ 2925.016069][T20215] netlink: 'syz.0.33869': attribute type 7 has an invalid length. [ 2925.056113][T20215] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.33869'. [ 2925.947729][T20226] device wlan0 left promiscuous mode [ 2925.995802][T20226] device wlan0 entered promiscuous mode [ 2926.044059][T20232] netlink: 'syz.4.33872': attribute type 9 has an invalid length. [ 2926.064008][T20231] netlink: 'syz.2.33874': attribute type 29 has an invalid length. [ 2926.089899][T20235] netlink: 'syz.3.33875': attribute type 7 has an invalid length. [ 2926.099891][T20235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33875'. [ 2926.104008][T20231] netlink: 'syz.2.33874': attribute type 29 has an invalid length. [ 2926.119579][T20232] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.33872'. [ 2927.325212][T20277] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33887'. [ 2928.047044][T20294] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33893'. [ 2929.399308][T20323] validate_nla: 4 callbacks suppressed [ 2929.399327][T20323] netlink: 'syz.3.33899': attribute type 10 has an invalid length. [ 2930.199803][T20333] netlink: 'syz.2.33903': attribute type 7 has an invalid length. [ 2930.222145][T20333] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33903'. [ 2931.082128][T20342] netlink: 'syz.4.33905': attribute type 10 has an invalid length. [ 2931.178699][T20345] netlink: 'syz.3.33906': attribute type 7 has an invalid length. [ 2931.212081][T20345] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33906'. [ 2931.242768][T20347] device wlan0 left promiscuous mode [ 2931.290861][T20347] device wlan0 entered promiscuous mode [ 2932.295947][T20347] netlink: 'syz.2.33907': attribute type 9 has an invalid length. [ 2932.322289][T20347] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.33907'. [ 2932.912899][T20369] netlink: 'syz.2.33911': attribute type 10 has an invalid length. [ 2933.156579][T20380] netlink: 'syz.2.33918': attribute type 7 has an invalid length. [ 2933.221232][T20380] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33918'. [ 2933.640737][T20398] netlink: 'syz.1.33920': attribute type 7 has an invalid length. [ 2933.678757][T20398] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33920'. [ 2934.141779][T20409] device wlan0 left promiscuous mode [ 2934.232116][T20417] device wlan0 entered promiscuous mode [ 2934.337139][T20409] netlink: 'syz.3.33923': attribute type 9 has an invalid length. [ 2934.382939][T20418] netlink: 'syz.0.33924': attribute type 10 has an invalid length. [ 2934.417513][T20409] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.33923'. [ 2935.531429][T20448] netlink: 'syz.2.33933': attribute type 10 has an invalid length. [ 2935.867435][T20457] netlink: 'syz.2.33935': attribute type 7 has an invalid length. [ 2935.925045][T20457] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33935'. [ 2936.583736][T20472] netlink: 'syz.1.33938': attribute type 10 has an invalid length. [ 2937.657866][T20489] device wlan0 left promiscuous mode [ 2937.743553][T20489] device wlan0 entered promiscuous mode [ 2937.785470][T20489] netlink: 'syz.1.33942': attribute type 9 has an invalid length. [ 2937.816205][T20489] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.33942'. [ 2938.610278][T20520] netlink: 'syz.1.33951': attribute type 7 has an invalid length. [ 2938.638455][T20520] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.33951'. [ 2938.936808][T20535] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.33954'. [ 2939.448399][T12448] tipc: Subscription rejected, illegal request [ 2940.391899][T20581] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.33967'. [ 2940.773706][T20596] netlink: 'syz.2.33971': attribute type 7 has an invalid length. [ 2940.797317][T20596] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.33971'. [ 2943.460436][T20676] netlink: 'syz.1.33987': attribute type 10 has an invalid length. [ 2943.549684][T20680] device wlan0 left promiscuous mode [ 2943.652658][T20680] device wlan0 entered promiscuous mode [ 2943.676899][T20680] netlink: 'syz.0.33988': attribute type 9 has an invalid length. [ 2943.685401][T20680] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.33988'. [ 2944.157359][T20688] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.33990'. [ 2944.213031][T20685] netlink: 'syz.3.33992': attribute type 7 has an invalid length. [ 2944.259663][T20685] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.33992'. [ 2945.419025][T20725] netlink: 'syz.3.34001': attribute type 7 has an invalid length. [ 2945.428597][T20725] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34001'. [ 2945.961214][T12448] tipc: Subscription rejected, illegal request [ 2946.091711][T20729] netlink: 'syz.0.34002': attribute type 10 has an invalid length. [ 2946.295897][T20742] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.34004'. [ 2947.014926][T20762] netlink: 'syz.4.34008': attribute type 7 has an invalid length. [ 2947.047504][T20762] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34008'. [ 2947.977258][T20778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34013'. [ 2948.002215][T20778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34013'. [ 2948.013719][T20778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34013'. [ 2948.063153][T20778] netlink: 60 bytes leftover after parsing attributes in process `syz.4.34013'. [ 2948.095968][T20778] netlink: 'syz.4.34013': attribute type 1 has an invalid length. [ 2948.348430][T20786] netlink: 'syz.3.34015': attribute type 10 has an invalid length. [ 2948.514589][T20791] netlink: 'syz.0.34017': attribute type 7 has an invalid length. [ 2949.801855][T20814] device wlan0 left promiscuous mode [ 2949.865003][T20814] device wlan0 entered promiscuous mode [ 2949.897544][T20814] netlink: 'syz.3.34022': attribute type 9 has an invalid length. [ 2949.939709][T20814] __nla_validate_parse: 2 callbacks suppressed [ 2949.939744][T20814] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.34022'. [ 2950.310358][T20823] netlink: 'syz.0.34026': attribute type 10 has an invalid length. [ 2950.776302][T20836] netlink: 'syz.0.34028': attribute type 10 has an invalid length. [ 2950.814674][T20839] netlink: 'syz.3.34031': attribute type 7 has an invalid length. [ 2950.827792][T20839] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34031'. [ 2951.182159][T20845] netlink: 'syz.0.34032': attribute type 10 has an invalid length. [ 2951.417843][T12448] tipc: Subscription rejected, illegal request [ 2952.196525][T20872] netlink: 'syz.3.34040': attribute type 10 has an invalid length. [ 2952.391204][T20879] netlink: 'syz.0.34041': attribute type 7 has an invalid length. [ 2952.440253][T20879] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34041'. [ 2952.939637][T20884] netlink: 'syz.1.34043': attribute type 10 has an invalid length. [ 2953.391299][T20894] netlink: 'syz.1.34046': attribute type 7 has an invalid length. [ 2953.430071][T20894] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34046'. [ 2953.965575][T12448] tipc: Subscription rejected, illegal request [ 2955.124654][T20922] netlink: 'syz.1.34053': attribute type 10 has an invalid length. [ 2955.483492][T20930] netlink: 'syz.0.34055': attribute type 10 has an invalid length. [ 2955.498916][T20933] netlink: 'syz.2.34056': attribute type 7 has an invalid length. [ 2955.515500][T20933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34056'. [ 2956.640757][T20952] netlink: 'syz.0.34060': attribute type 7 has an invalid length. [ 2956.673841][T20952] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34060'. [ 2958.005637][T20979] netlink: 144 bytes leftover after parsing attributes in process `syz.2.34065'. [ 2958.060448][T20981] netlink: 'syz.4.34069': attribute type 10 has an invalid length. [ 2958.144366][T20986] netlink: 'syz.3.34072': attribute type 10 has an invalid length. [ 2958.277102][ T5440] tipc: Subscription rejected, illegal request [ 2958.543711][T21008] netlink: 'syz.0.34078': attribute type 3 has an invalid length. [ 2958.592658][T21008] netlink: 'syz.0.34078': attribute type 1 has an invalid length. [ 2958.687026][T21008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34078'. [ 2959.122071][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.128911][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.827644][T21037] netlink: 'syz.1.34085': attribute type 10 has an invalid length. [ 2959.926066][T21046] netlink: 'syz.4.34087': attribute type 7 has an invalid length. [ 2959.962801][T21046] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34087'. [ 2959.963482][T21042] netlink: 'syz.3.34086': attribute type 10 has an invalid length. [ 2961.416028][T21069] netlink: 144 bytes leftover after parsing attributes in process `syz.4.34091'. [ 2962.162036][T21093] netlink: 'syz.3.34098': attribute type 10 has an invalid length. [ 2962.302700][T21098] netlink: 'syz.3.34101': attribute type 3 has an invalid length. [ 2962.334280][T21098] netlink: 'syz.3.34101': attribute type 1 has an invalid length. [ 2962.373716][T21091] netlink: 'syz.1.34099': attribute type 10 has an invalid length. [ 2962.385183][T21098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34101'. [ 2964.151679][T21144] netlink: 'syz.3.34111': attribute type 10 has an invalid length. [ 2964.273234][T21147] netlink: 'syz.2.34112': attribute type 10 has an invalid length. [ 2965.937557][T21203] netlink: 'syz.1.34125': attribute type 10 has an invalid length. [ 2966.020523][T21202] netlink: 'syz.3.34126': attribute type 10 has an invalid length. [ 2966.073597][T21210] netlink: 'syz.2.34128': attribute type 3 has an invalid length. [ 2966.126736][T21210] netlink: 'syz.2.34128': attribute type 1 has an invalid length. [ 2966.184425][T21210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34128'. [ 2966.362302][T12448] tipc: Subscription rejected, illegal request [ 2966.875242][T21228] netlink: 144 bytes leftover after parsing attributes in process `syz.1.34127'. [ 2967.802225][T21251] netlink: 'syz.4.34138': attribute type 10 has an invalid length. [ 2967.892935][T21268] netlink: 'syz.0.34139': attribute type 10 has an invalid length. [ 2968.123715][ T416] tipc: Subscription rejected, illegal request [ 2968.488280][T21283] netlink: 'syz.0.34155': attribute type 10 has an invalid length. [ 2968.949028][T21307] netlink: 144 bytes leftover after parsing attributes in process `syz.0.34149'. [ 2969.740676][T12448] tipc: Subscription rejected, illegal request [ 2970.025792][T21349] netlink: 'syz.0.34161': attribute type 10 has an invalid length. [ 2970.572285][T21362] netlink: 'syz.3.34167': attribute type 10 has an invalid length. [ 2971.073929][T21388] netlink: 144 bytes leftover after parsing attributes in process `syz.3.34170'. [ 2971.325214][T12448] tipc: Subscription rejected, illegal request [ 2971.346849][T21393] netlink: 'syz.1.34174': attribute type 10 has an invalid length. [ 2971.826676][T21404] netlink: 'syz.2.34188': attribute type 10 has an invalid length. [ 2971.937037][T21419] netlink: 'syz.4.34180': attribute type 10 has an invalid length. [ 2972.601587][ T416] tipc: Subscription rejected, illegal request [ 2973.280515][T21457] netlink: 144 bytes leftover after parsing attributes in process `syz.0.34191'. [ 2973.861763][T21492] netlink: 'syz.3.34202': attribute type 7 has an invalid length. [ 2973.917683][T21492] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34202'. [ 2976.600648][T21571] syzkaller: port 1(erspan0) entered blocking state [ 2976.620246][T21571] syzkaller: port 1(erspan0) entered disabled state [ 2976.631783][T21571] device erspan0 entered promiscuous mode [ 2976.650806][T21571] syzkaller: port 1(erspan0) entered blocking state [ 2976.657560][T21571] syzkaller: port 1(erspan0) entered forwarding state [ 2977.662467][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready [ 2977.706973][T21604] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34230'. [ 2977.959887][T21614] netlink: 'syz.1.34232': attribute type 7 has an invalid length. [ 2977.983026][T21614] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34232'. [ 2979.236159][T21639] syzkaller: port 1(erspan0) entered blocking state [ 2979.293159][T21639] syzkaller: port 1(erspan0) entered disabled state [ 2979.301146][T21639] device erspan0 entered promiscuous mode [ 2979.363093][T21642] syzkaller: port 1(erspan0) entered blocking state [ 2979.369809][T21642] syzkaller: port 1(erspan0) entered forwarding state [ 2979.992859][T21658] netlink: 'syz.3.34243': attribute type 7 has an invalid length. [ 2980.000925][T21658] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34243'. [ 2980.459650][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready [ 2981.064726][T21691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34251'. [ 2981.119065][T21695] netlink: 'syz.4.34253': attribute type 21 has an invalid length. [ 2981.143484][T21695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2981.587978][T21714] netlink: 'syz.1.34259': attribute type 7 has an invalid length. [ 2981.612306][T21714] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34259'. [ 2981.754005][T21710] netlink: 'syz.3.34257': attribute type 10 has an invalid length. [ 2982.789458][T21750] syzkaller: port 1(erspan0) entered blocking state [ 2982.816371][T21750] syzkaller: port 1(erspan0) entered disabled state [ 2982.827654][T21750] device erspan0 entered promiscuous mode [ 2982.857185][T21754] netlink: 'syz.3.34268': attribute type 21 has an invalid length. [ 2982.876938][T21754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2982.912651][T21756] syzkaller: port 1(erspan0) entered blocking state [ 2982.919372][T21756] syzkaller: port 1(erspan0) entered forwarding state [ 2983.486567][T21771] netlink: 'syz.4.34273': attribute type 7 has an invalid length. [ 2983.531304][T21771] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34273'. [ 2983.992323][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready [ 2984.302515][T21786] netlink: 'syz.3.34276': attribute type 10 has an invalid length. [ 2984.572248][T21800] syzkaller: port 1(erspan0) entered blocking state [ 2984.650549][T21800] syzkaller: port 1(erspan0) entered disabled state [ 2984.675651][T21800] device erspan0 entered promiscuous mode [ 2984.689056][T21813] syzkaller: port 1(erspan0) entered blocking state [ 2984.695929][T21813] syzkaller: port 1(erspan0) entered forwarding state [ 2984.732778][T21813] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready [ 2984.740772][T21812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34283'. [ 2985.012211][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready [ 2986.187743][T21856] netlink: 'syz.4.34293': attribute type 7 has an invalid length. [ 2986.257356][T21856] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34293'. [ 2986.819800][T21871] netlink: 'syz.0.34297': attribute type 21 has an invalid length. [ 2986.829047][T21871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2986.836674][T21871] IPv6: NLM_F_CREATE should be set when creating new route [ 2986.844442][T21871] IPv6: NLM_F_CREATE should be set when creating new route [ 2986.852071][T21871] IPv6: NLM_F_CREATE should be set when creating new route [ 2988.040120][T21912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.34309'. [ 2988.576094][T21935] netlink: 'syz.2.34311': attribute type 21 has an invalid length. [ 2988.627303][T21935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2988.634792][T21935] IPv6: NLM_F_CREATE should be set when creating new route [ 2988.642517][T21935] IPv6: NLM_F_CREATE should be set when creating new route [ 2988.650066][T21935] IPv6: NLM_F_CREATE should be set when creating new route [ 2990.317884][T21981] netlink: 'syz.2.34322': attribute type 10 has an invalid length. [ 2990.508588][T21984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34325'. [ 2991.763006][T22017] netlink: 'syz.4.34333': attribute type 10 has an invalid length. [ 2993.162808][T22060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34343'. [ 2993.826431][T22093] netlink: 'syz.3.34351': attribute type 10 has an invalid length. [ 2993.874136][T22098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.34351'. [ 2994.216532][T22109] netlink: 'syz.3.34356': attribute type 7 has an invalid length. [ 2994.253117][T22109] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34356'. [ 2995.050925][T22122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34359'. [ 2995.758291][T22141] netlink: 'syz.4.34363': attribute type 10 has an invalid length. [ 2996.162076][T22160] netlink: 'syz.4.34367': attribute type 10 has an invalid length. [ 2996.219389][T22160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.34367'. [ 2996.279085][T22166] netlink: 'syz.3.34368': attribute type 7 has an invalid length. [ 2996.332797][T22166] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34368'. [ 2996.355545][T22171] netlink: 'syz.1.34370': attribute type 7 has an invalid length. [ 2996.404115][T22171] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34370'. [ 2996.564286][T22178] netlink: 'syz.0.34371': attribute type 7 has an invalid length. [ 2996.589621][T22178] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34371'. [ 2997.351817][T22188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34374'. [ 2997.538399][T22197] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.34376'. [ 2997.780463][T22197] Ÿë: port 2(ip6gretap0) entered blocking state [ 2997.796177][T22197] Ÿë: port 2(ip6gretap0) entered disabled state [ 2997.906179][T22197] device ip6gretap0 entered promiscuous mode [ 2998.066153][T22204] netlink: 'syz.0.34378': attribute type 10 has an invalid length. [ 2998.539464][T22234] netlink: 'syz.4.34388': attribute type 7 has an invalid length. [ 2998.578951][T22234] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34388'. [ 2998.668609][T22241] netlink: 'syz.0.34386': attribute type 10 has an invalid length. [ 2998.712157][T22236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34386'. [ 2999.465081][T22261] netlink: 'syz.0.34393': attribute type 10 has an invalid length. [ 3000.027642][T22276] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.34398'. [ 3000.080256][T22278] Ÿë: port 2(ip6gretap0) entered blocking state [ 3000.088356][T22278] Ÿë: port 2(ip6gretap0) entered disabled state [ 3000.110760][T22278] device ip6gretap0 entered promiscuous mode [ 3000.196949][T22282] netlink: 'syz.0.34399': attribute type 46 has an invalid length. [ 3000.212291][T22282] netlink: 2 bytes leftover after parsing attributes in process `syz.0.34399'. [ 3000.386985][T22290] netlink: 'syz.2.34402': attribute type 10 has an invalid length. [ 3000.408700][T22290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.34402'. [ 3000.689203][T22297] netlink: 'syz.1.34415': attribute type 10 has an invalid length. [ 3000.723864][T22305] netlink: 'syz.2.34407': attribute type 7 has an invalid length. [ 3000.772283][T22305] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34407'. [ 3000.984958][T22304] netlink: 'syz.4.34406': attribute type 10 has an invalid length. [ 3001.477315][T22314] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.34409'. [ 3001.763506][T22319] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.34409'. [ 3002.000058][T22334] netlink: 'syz.1.34413': attribute type 7 has an invalid length. [ 3002.065836][T22334] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34413'. [ 3002.575356][T22347] device syzkaller0 left promiscuous mode [ 3002.711047][T22356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34416'. [ 3003.848007][T22389] validate_nla: 3 callbacks suppressed [ 3003.848041][T22389] netlink: 'syz.4.34427': attribute type 7 has an invalid length. [ 3003.916457][T22389] __nla_validate_parse: 1 callbacks suppressed [ 3003.916491][T22389] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34427'. [ 3004.386839][T22396] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.34428'. [ 3004.552282][T22396] Ÿë: port 4(ip6gretap0) entered blocking state [ 3004.617762][T22396] Ÿë: port 4(ip6gretap0) entered disabled state [ 3004.695139][T22396] device ip6gretap0 entered promiscuous mode [ 3007.480793][T22452] netlink: 'syz.4.34442': attribute type 10 has an invalid length. [ 3008.993177][T22506] netlink: 'syz.1.34458': attribute type 7 has an invalid length. [ 3009.083176][T22506] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34458'. [ 3009.213844][T22514] netlink: 'syz.3.34457': attribute type 10 has an invalid length. [ 3009.635022][T22523] netlink: 'syz.3.34461': attribute type 46 has an invalid length. [ 3009.725602][T22523] netlink: 2 bytes leftover after parsing attributes in process `syz.3.34461'. [ 3010.333642][T22543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34467'. [ 3010.814754][T22563] netlink: 'syz.4.34471': attribute type 10 has an invalid length. [ 3010.874627][T22562] netlink: 'syz.3.34472': attribute type 7 has an invalid length. [ 3010.934177][T22562] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34472'. [ 3011.329038][T22572] netlink: 'syz.1.34475': attribute type 7 has an invalid length. [ 3011.362299][T22572] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34475'. [ 3011.533615][T22577] netlink: 'syz.3.34486': attribute type 7 has an invalid length. [ 3011.552175][T22577] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34486'. [ 3011.999038][T22580] netlink: 'syz.4.34476': attribute type 46 has an invalid length. [ 3012.031813][T22580] netlink: 2 bytes leftover after parsing attributes in process `syz.4.34476'. [ 3012.323679][T22586] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.34477'. [ 3012.440205][T22583] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.34477'. [ 3013.005213][T22605] netlink: 'syz.3.34483': attribute type 7 has an invalid length. [ 3013.050685][T22605] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34483'. [ 3013.748847][T22614] netlink: 'syz.4.34487': attribute type 10 has an invalid length. [ 3014.310115][T22630] validate_nla: 1 callbacks suppressed [ 3014.310161][T22630] netlink: 'syz.1.34489': attribute type 46 has an invalid length. [ 3014.381452][T22630] netlink: 2 bytes leftover after parsing attributes in process `syz.1.34489'. [ 3015.055949][T22661] netlink: 'syz.1.34500': attribute type 7 has an invalid length. [ 3015.105977][T22661] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34500'. [ 3015.341111][T22668] netlink: 'syz.2.34501': attribute type 10 has an invalid length. [ 3015.734452][T22681] netlink: 'syz.3.34502': attribute type 10 has an invalid length. [ 3017.328691][T22718] netlink: 'syz.1.34515': attribute type 7 has an invalid length. [ 3017.350972][T22718] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34515'. [ 3018.222473][T22731] netlink: 'syz.3.34517': attribute type 10 has an invalid length. [ 3019.685384][T22776] netlink: 'syz.4.34531': attribute type 7 has an invalid length. [ 3019.712308][T22776] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34531'. [ 3020.550659][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.557203][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.193106][T22816] netlink: 'syz.2.34543': attribute type 7 has an invalid length. [ 3021.201231][T22816] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34543'. [ 3021.631425][T22828] netlink: 'syz.4.34547': attribute type 7 has an invalid length. [ 3021.681230][T22828] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34547'. [ 3022.944097][T22862] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.34556'. [ 3023.006165][T22862] netlink: zone id is out of range [ 3023.072459][T22862] netlink: zone id is out of range [ 3023.077724][T22862] netlink: zone id is out of range [ 3023.132338][T22862] netlink: zone id is out of range [ 3023.137966][T22862] netlink: zone id is out of range [ 3023.172146][T22862] netlink: zone id is out of range [ 3023.177302][T22862] netlink: zone id is out of range [ 3023.219337][T22862] netlink: zone id is out of range [ 3023.236841][T22862] netlink: zone id is out of range [ 3023.246972][T22862] netlink: zone id is out of range [ 3023.320442][T22873] netlink: 'syz.4.34560': attribute type 7 has an invalid length. [ 3023.337345][T22875] netlink: 'syz.1.34561': attribute type 7 has an invalid length. [ 3023.348215][T22873] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34560'. [ 3023.367244][T22875] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34561'. [ 3023.585099][T22877] netlink: 'syz.3.34562': attribute type 10 has an invalid length. [ 3025.525853][T22926] netlink: 'syz.4.34575': attribute type 7 has an invalid length. [ 3025.552788][T22926] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34575'. [ 3026.058583][T22938] netlink: 'syz.3.34576': attribute type 7 has an invalid length. [ 3026.093685][T22938] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.34576'. [ 3027.661641][T22980] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.34590'. [ 3028.336080][T22995] netlink: 'syz.0.34594': attribute type 7 has an invalid length. [ 3028.362110][T22995] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34594'. [ 3030.396741][T23019] net_ratelimit: 18 callbacks suppressed [ 3030.396783][T23019] netlink: set zone limit has 8 unknown bytes [ 3030.694201][T23029] netlink: 'syz.4.34603': attribute type 10 has an invalid length. [ 3031.060431][T23037] netlink: 1 bytes leftover after parsing attributes in process `syz.4.34606'. [ 3031.908069][T23056] netlink: 'syz.2.34611': attribute type 7 has an invalid length. [ 3031.937046][T23056] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34611'. [ 3032.082748][T23055] delete_channel: no stack [ 3032.389793][T23061] netlink: 'syz.4.34612': attribute type 10 has an invalid length. [ 3032.726628][T23077] netlink: 'syz.2.34616': attribute type 10 has an invalid length. [ 3033.020874][T23087] device syzkaller0 left promiscuous mode [ 3033.252675][T23093] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.34622'. [ 3033.311743][T23093] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3033.349422][T23093] CPU: 1 PID: 23093 Comm: syz.2.34622 Not tainted syzkaller #0 [ 3033.357023][T23093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3033.367111][T23093] Call Trace: [ 3033.370405][T23093] [ 3033.373445][T23093] dump_stack_lvl+0x188/0x250 [ 3033.378274][T23093] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3033.384459][T23093] ? show_regs_print_info+0x20/0x20 [ 3033.390407][T23093] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3033.396790][T23093] sysfs_warn_dup+0x8a/0xa0 [ 3033.401418][T23093] sysfs_do_create_link_sd+0xc0/0x110 [ 3033.407218][T23093] device_add+0x7ed/0xfb0 [ 3033.411686][T23093] wiphy_register+0x1e81/0x2c30 [ 3033.416753][T23093] ? __rtnl_unlock+0xa/0xa0 [ 3033.423317][T23093] ? cfg80211_event_work+0x40/0x40 [ 3033.428459][T23093] ? minstrel_ht_alloc+0x808/0x980 [ 3033.433692][T23093] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3033.439816][T23093] ieee80211_register_hw+0x2aa1/0x3af0 [ 3033.445334][T23093] ? ieee80211_tasklet_handler+0x20/0x20 [ 3033.451173][T23093] ? rcu_is_watching+0x11/0xa0 [ 3033.456243][T23093] ? memset+0x1e/0x40 [ 3033.460421][T23093] ? hrtimer_init+0x10c/0x220 [ 3033.465134][T23093] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3033.471169][T23093] hwsim_new_radio_nl+0xa6f/0xc40 [ 3033.476368][T23093] genl_rcv_msg+0xcea/0xf90 [ 3033.480917][T23093] ? genl_bind+0x380/0x380 [ 3033.485726][T23093] ? perf_trace_lock+0xe4/0x390 [ 3033.490890][T23093] ? verify_lock_unused+0x140/0x140 [ 3033.496384][T23093] ? perf_trace_lock_acquire+0xed/0x3e0 [ 3033.501978][T23093] ? mark_lock+0x94/0x320 [ 3033.506472][T23093] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3033.513118][T23093] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3033.519173][T23093] netlink_rcv_skb+0x1f5/0x440 [ 3033.523970][T23093] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3033.530588][T23093] ? genl_bind+0x380/0x380 [ 3033.535032][T23093] ? netlink_ack+0xb50/0xb50 [ 3033.539659][T23093] ? down_read+0x5f/0x2e0 [ 3033.544112][T23093] ? down_read+0x1aa/0x2e0 [ 3033.548754][T23093] genl_rcv+0x24/0x40 [ 3033.552849][T23093] netlink_unicast+0x774/0x920 [ 3033.557657][T23093] netlink_sendmsg+0x8ba/0xbe0 [ 3033.562637][T23093] ? netlink_getsockopt+0x570/0x570 [ 3033.567965][T23093] ? aa_sock_msg_perm+0x94/0x150 [ 3033.572931][T23093] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3033.578337][T23093] ? security_socket_sendmsg+0x7c/0xa0 [ 3033.585385][T23093] ? netlink_getsockopt+0x570/0x570 [ 3033.590784][T23093] ____sys_sendmsg+0x5b7/0x8f0 [ 3033.595601][T23093] ? __sys_sendmsg_sock+0x30/0x30 [ 3033.600768][T23093] ? import_iovec+0x6f/0xa0 [ 3033.606181][T23093] ___sys_sendmsg+0x236/0x2e0 [ 3033.611087][T23093] ? __sys_sendmsg+0x2a0/0x2a0 [ 3033.615947][T23093] __se_sys_sendmsg+0x1af/0x290 [ 3033.621035][T23093] ? __x64_sys_sendmsg+0x80/0x80 [ 3033.625996][T23093] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3033.632040][T23093] ? trace_sys_enter+0x1f/0x80 [ 3033.636915][T23093] do_syscall_64+0x4c/0xa0 [ 3033.641355][T23093] ? clear_bhb_loop+0x30/0x80 [ 3033.646536][T23093] ? clear_bhb_loop+0x30/0x80 [ 3033.651542][T23093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3033.657869][T23093] RIP: 0033:0x7fbcef29e799 [ 3033.662311][T23093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3033.682771][T23093] RSP: 002b:00007fbced4f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3033.691538][T23093] RAX: ffffffffffffffda RBX: 00007fbcef517fa0 RCX: 00007fbcef29e799 [ 3033.699717][T23093] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3033.707864][T23093] RBP: 00007fbcef334c99 R08: 0000000000000000 R09: 0000000000000000 [ 3033.716035][T23093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3033.724382][T23093] R13: 00007fbcef518038 R14: 00007fbcef517fa0 R15: 00007ffea2074108 [ 3033.732653][T23093] [ 3034.541254][T23109] netlink: 'syz.3.34624': attribute type 10 has an invalid length. [ 3034.761034][T23116] netlink: 'syz.1.34626': attribute type 7 has an invalid length. [ 3034.865567][T23116] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34626'. [ 3035.381024][T23125] netlink: 'syz.4.34629': attribute type 10 has an invalid length. [ 3035.590198][T23140] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.34632'. [ 3035.601301][T23140] netlink: zone id is out of range [ 3035.606812][T23140] netlink: zone id is out of range [ 3035.612755][T23140] netlink: zone id is out of range [ 3035.617897][T23140] netlink: zone id is out of range [ 3035.623919][T23140] netlink: zone id is out of range [ 3035.677469][T23140] netlink: zone id is out of range [ 3035.782485][T23140] netlink: zone id is out of range [ 3035.862305][T23140] netlink: zone id is out of range [ 3035.867473][T23140] netlink: zone id is out of range [ 3035.913079][T23140] netlink: zone id is out of range [ 3036.362174][T23160] netlink: 'syz.0.34638': attribute type 10 has an invalid length. [ 3037.637423][T23184] netlink: 'syz.0.34645': attribute type 7 has an invalid length. [ 3037.672433][T23184] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.34645'. [ 3038.478778][T23186] netlink: 'syz.4.34646': attribute type 10 has an invalid length. [ 3039.283508][T23213] netlink: 'syz.4.34651': attribute type 10 has an invalid length. [ 3039.791792][T23221] netlink: 1 bytes leftover after parsing attributes in process `syz.0.34654'. [ 3040.224131][T23232] netlink: 'syz.0.34657': attribute type 5 has an invalid length. [ 3040.978976][T23256] netlink: 'syz.2.34664': attribute type 7 has an invalid length. [ 3041.022999][T23256] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34664'. [ 3041.645745][T23268] delete_channel: no stack [ 3041.841229][T23277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.34669'. [ 3042.115316][T23285] netlink: 'syz.2.34672': attribute type 5 has an invalid length. [ 3044.903186][T23326] delete_channel: no stack [ 3044.967169][T23331] netlink: 'syz.1.34681': attribute type 21 has an invalid length. [ 3044.992148][T23331] netlink: 156 bytes leftover after parsing attributes in process `syz.1.34681'. [ 3045.288449][T23340] netlink: 'syz.4.34685': attribute type 7 has an invalid length. [ 3045.338543][T23340] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.34685'. [ 3045.848477][T23347] netlink: 1 bytes leftover after parsing attributes in process `syz.3.34686'. [ 3045.882095][T23352] netlink: 'syz.1.34687': attribute type 10 has an invalid length. [ 3047.145733][T23368] netlink: 'syz.1.34699': attribute type 10 has an invalid length. [ 3047.533207][T23377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34692'. [ 3047.606962][T23377] net_ratelimit: 5 callbacks suppressed [ 3047.606974][T23377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3048.440715][T23393] delete_channel: no stack [ 3048.528360][T23407] netlink: 1 bytes leftover after parsing attributes in process `syz.1.34701'. [ 3048.953540][T23422] netlink: 'syz.1.34705': attribute type 10 has an invalid length. [ 3048.983892][T23419] netlink: 'syz.3.34706': attribute type 10 has an invalid length. [ 3049.070081][T23419] netlink: 209860 bytes leftover after parsing attributes in process `syz.3.34706'. [ 3049.142475][T23419] openvswitch: netlink: Message has 4 unknown bytes. [ 3049.845600][T23443] netlink: 'syz.3.34714': attribute type 21 has an invalid length. [ 3049.874354][T23443] netlink: 156 bytes leftover after parsing attributes in process `syz.3.34714'. [ 3050.242624][T23451] delete_channel: no stack [ 3050.473217][T23466] IPv6: NLM_F_CREATE should be specified when creating new route [ 3050.554708][T23466] netlink: 1 bytes leftover after parsing attributes in process `syz.2.34717'. [ 3050.594372][T23470] netlink: 'syz.1.34720': attribute type 10 has an invalid length. [ 3054.236433][T23500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.34726'. [ 3054.247672][T23500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3054.342267][T23502] delete_channel: no stack [ 3054.366712][T23512] netlink: 'syz.0.34729': attribute type 21 has an invalid length. [ 3054.382284][T23512] netlink: 156 bytes leftover after parsing attributes in process `syz.0.34729'. [ 3054.495880][T23521] netlink: 'syz.1.34732': attribute type 5 has an invalid length. [ 3054.662327][T23524] netlink: 'syz.4.34731': attribute type 10 has an invalid length. [ 3055.080492][T23544] device syzkaller0 entered promiscuous mode [ 3056.083556][T23564] netlink: 'syz.2.34743': attribute type 10 has an invalid length. [ 3056.236696][T23568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.34744'. [ 3056.320496][T23568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3056.722407][T23590] netlink: 'syz.2.34750': attribute type 10 has an invalid length. [ 3056.813180][T23595] netlink: 'syz.4.34752': attribute type 5 has an invalid length. [ 3057.197702][T23606] netlink: 'syz.4.34755': attribute type 10 has an invalid length. [ 3059.001421][T23643] netlink: 'syz.4.34765': attribute type 10 has an invalid length. [ 3059.343505][T23658] netlink: 'syz.4.34768': attribute type 10 has an invalid length. [ 3059.477439][T23662] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.34769'. [ 3059.524905][T23662] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 3059.543656][T23662] CPU: 0 PID: 23662 Comm: syz.0.34769 Not tainted syzkaller #0 [ 3059.551345][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3059.561604][T23662] Call Trace: [ 3059.564924][T23662] [ 3059.567876][T23662] dump_stack_lvl+0x188/0x250 [ 3059.572571][T23662] ? show_regs_print_info+0x20/0x20 [ 3059.577776][T23662] ? load_image+0x400/0x400 [ 3059.582392][T23662] sysfs_warn_dup+0x8a/0xa0 [ 3059.586894][T23662] sysfs_do_create_link_sd+0xc0/0x110 [ 3059.592378][T23662] device_add+0x7ed/0xfb0 [ 3059.596815][T23662] wiphy_register+0x1e81/0x2c30 [ 3059.601883][T23662] ? cfg80211_event_work+0x40/0x40 [ 3059.607384][T23662] ? minstrel_ht_alloc+0x808/0x980 [ 3059.612563][T23662] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3059.618638][T23662] ieee80211_register_hw+0x2aa1/0x3af0 [ 3059.624120][T23662] ? ieee80211_tasklet_handler+0x20/0x20 [ 3059.629758][T23662] ? rcu_is_watching+0x11/0xa0 [ 3059.634559][T23662] ? memset+0x1e/0x40 [ 3059.638553][T23662] ? hrtimer_init+0x10c/0x220 [ 3059.643252][T23662] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 3059.649009][T23662] hwsim_new_radio_nl+0xa6f/0xc40 [ 3059.654059][T23662] genl_rcv_msg+0xcea/0xf90 [ 3059.658698][T23662] ? genl_bind+0x380/0x380 [ 3059.663289][T23662] ? perf_trace_lock+0xe4/0x390 [ 3059.668183][T23662] ? verify_lock_unused+0x140/0x140 [ 3059.673383][T23662] ? verify_lock_unused+0x140/0x140 [ 3059.678665][T23662] ? perf_trace_lock+0xe4/0x390 [ 3059.683511][T23662] ? perf_trace_lock+0xe4/0x390 [ 3059.688356][T23662] ? perf_trace_lock+0xe4/0x390 [ 3059.693199][T23662] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 3059.699717][T23662] netlink_rcv_skb+0x1f5/0x440 [ 3059.704482][T23662] ? genl_bind+0x380/0x380 [ 3059.709062][T23662] ? netlink_ack+0xb50/0xb50 [ 3059.713642][T23662] ? __lock_acquire+0x7d10/0x7d10 [ 3059.718667][T23662] ? down_read+0x1aa/0x2e0 [ 3059.723082][T23662] genl_rcv+0x24/0x40 [ 3059.727060][T23662] netlink_unicast+0x774/0x920 [ 3059.731835][T23662] netlink_sendmsg+0x8ba/0xbe0 [ 3059.736606][T23662] ? netlink_getsockopt+0x570/0x570 [ 3059.741797][T23662] ? aa_sock_msg_perm+0x94/0x150 [ 3059.746728][T23662] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3059.752090][T23662] ? security_socket_sendmsg+0x7c/0xa0 [ 3059.757630][T23662] ? netlink_getsockopt+0x570/0x570 [ 3059.762889][T23662] ____sys_sendmsg+0x5b7/0x8f0 [ 3059.767686][T23662] ? __sys_sendmsg_sock+0x30/0x30 [ 3059.772726][T23662] ? import_iovec+0x6f/0xa0 [ 3059.777234][T23662] ___sys_sendmsg+0x236/0x2e0 [ 3059.781921][T23662] ? __sys_sendmsg+0x2a0/0x2a0 [ 3059.786841][T23662] __se_sys_sendmsg+0x1af/0x290 [ 3059.791705][T23662] ? __x64_sys_sendmsg+0x80/0x80 [ 3059.796663][T23662] ? syscall_enter_from_user_mode+0x2a/0x70 [ 3059.802570][T23662] do_syscall_64+0x4c/0xa0 [ 3059.806977][T23662] ? clear_bhb_loop+0x30/0x80 [ 3059.811655][T23662] ? clear_bhb_loop+0x30/0x80 [ 3059.816329][T23662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3059.822223][T23662] RIP: 0033:0x7fa66f657799 [ 3059.826632][T23662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3059.846346][T23662] RSP: 002b:00007fa66d8b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3059.854842][T23662] RAX: ffffffffffffffda RBX: 00007fa66f8d0fa0 RCX: 00007fa66f657799 [ 3059.862824][T23662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3059.870890][T23662] RBP: 00007fa66f6edc99 R08: 0000000000000000 R09: 0000000000000000 [ 3059.878935][T23662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3059.886893][T23662] R13: 00007fa66f8d1038 R14: 00007fa66f8d0fa0 R15: 00007ffd36fbe928 [ 3059.894896][T23662] [ 3061.390627][T23692] netlink: 'syz.1.34778': attribute type 10 has an invalid length. [ 3061.766957][T23702] netlink: 'syz.3.34779': attribute type 5 has an invalid length. [ 3062.595206][T23718] device syzkaller0 left promiscuous mode [ 3066.429980][T23800] netlink: 'syz.4.34808': attribute type 5 has an invalid length. [ 3066.578080][T23804] netlink: 'syz.1.34810': attribute type 9 has an invalid length. [ 3066.647401][T23804] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.34810'. [ 3068.626394][T23824] delete_channel: no stack [ 3069.273198][T23854] netlink: 'syz.4.34824': attribute type 9 has an invalid length. [ 3069.281532][T23854] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.34824'. [ 3069.369890][T23851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34823'. [ 3069.417884][T23851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3070.478862][T23879] netlink: 'syz.4.34829': attribute type 10 has an invalid length. [ 3070.633516][T23884] netlink: 'syz.2.34831': attribute type 11 has an invalid length. [ 3070.704212][T23884] netlink: 'syz.2.34831': attribute type 10 has an invalid length. [ 3070.752292][T23884] netlink: 2 bytes leftover after parsing attributes in process `syz.2.34831'. [ 3072.739496][T23933] netlink: 'syz.2.34843': attribute type 10 has an invalid length. [ 3074.904206][T23976] netlink: 'syz.2.34853': attribute type 10 has an invalid length. [ 3075.293698][T23990] netlink: 'syz.4.34856': attribute type 10 has an invalid length. [ 3075.952857][T23996] device wlan0 left promiscuous mode [ 3077.157418][T24016] netlink: 36 bytes leftover after parsing attributes in process `syz.4.34863'. [ 3077.182606][T24016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3077.863477][T24038] netlink: 'syz.3.34867': attribute type 10 has an invalid length. [ 3078.809378][T24064] netlink: 'syz.2.34876': attribute type 9 has an invalid length. [ 3078.879600][T24064] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.34876'. [ 3079.518024][T24085] netlink: 'syz.1.34882': attribute type 10 has an invalid length. [ 3079.791416][T24088] netlink: 'syz.2.34883': attribute type 39 has an invalid length. [ 3080.076872][T24093] IPv6: Can't replace route, no match found [ 3080.124002][T24096] mac80211_hwsim hwsim166 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3081.580054][T24126] device wlan0 left promiscuous mode [ 3081.793763][T24128] netlink: 'syz.1.34895': attribute type 10 has an invalid length. [ 3081.875915][T24137] netlink: 'syz.0.34896': attribute type 7 has an invalid length. [ 3081.934005][T24137] netlink: 'syz.0.34896': attribute type 1 has an invalid length. [ 3081.949444][T24137] netlink: 'syz.0.34896': attribute type 4 has an invalid length. [ 3081.958030][T24137] netlink: 'syz.0.34896': attribute type 7 has an invalid length. [ 3081.981800][T24137] netlink: 207220 bytes leftover after parsing attributes in process `syz.0.34896'. [ 3081.993992][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.994080][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.483361][T24152] IPv6: Can't replace route, no match found [ 3082.509411][T24152] mac80211_hwsim hwsim142 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3082.795990][T24160] netlink: 'syz.1.34904': attribute type 10 has an invalid length. [ 3083.901496][T24176] netlink: 'syz.4.34907': attribute type 10 has an invalid length. [ 3083.986040][T24180] device wlan0 left promiscuous mode [ 3084.090649][T24186] .`: (slave geneve0): Error: Slave device does not support XDP [ 3085.102829][T24211] IPv6: Can't replace route, no match found [ 3085.120503][T24211] mac80211_hwsim hwsim149 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3085.180414][T24218] netlink: 'syz.0.34919': attribute type 10 has an invalid length. [ 3085.729617][T24226] netlink: 'syz.1.34921': attribute type 10 has an invalid length. [ 3086.511901][T24248] netlink: 'syz.4.34931': attribute type 7 has an invalid length. [ 3086.533747][T24248] netlink: 'syz.4.34931': attribute type 1 has an invalid length. [ 3086.553507][T24248] netlink: 'syz.4.34931': attribute type 4 has an invalid length. [ 3086.573384][T24248] netlink: 'syz.4.34931': attribute type 7 has an invalid length. [ 3086.591462][T24254] IPv6: Can't replace route, no match found [ 3086.611684][T24248] netlink: 207220 bytes leftover after parsing attributes in process `syz.4.34931'. [ 3086.957100][T24258] mac80211_hwsim hwsim145 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3086.998053][T24259] netlink: 'syz.0.34934': attribute type 10 has an invalid length. [ 3087.012962][T24265] netlink: 'syz.4.34935': attribute type 10 has an invalid length. [ 3087.152285][T24275] netlink: 'syz.4.34939': attribute type 10 has an invalid length. [ 3089.354166][T24313] device wlan0 left promiscuous mode [ 3089.482033][T24315] netlink: 'syz.4.34947': attribute type 10 has an invalid length. [ 3090.160990][T24326] netlink: 'syz.4.34952': attribute type 39 has an invalid length. [ 3090.218142][T24325] netlink: 'syz.2.34949': attribute type 10 has an invalid length. [ 3090.252557][T24328] IPv6: Can't replace route, no match found [ 3090.283565][T24328] mac80211_hwsim hwsim143 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3090.454885][T24333] netlink: 144 bytes leftover after parsing attributes in process `syz.4.34953'. [ 3090.745596][T24349] netlink: 'syz.0.34967': attribute type 10 has an invalid length. [ 3091.645564][T24366] .`: (slave geneve0): Error: Slave device does not support XDP [ 3092.078409][T24372] device wlan0 left promiscuous mode [ 3092.176533][T24378] IPv6: Can't replace route, no match found [ 3092.219633][T24380] mac80211_hwsim hwsim143 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3093.034163][T24401] netlink: 'syz.3.34975': attribute type 10 has an invalid length. [ 3094.640463][T24427] netlink: 'syz.3.34982': attribute type 39 has an invalid length. [ 3094.835571][T24431] netlink: 144 bytes leftover after parsing attributes in process `syz.3.34984'. [ 3095.399313][T24440] netlink: 'syz.1.34987': attribute type 10 has an invalid length. [ 3095.845514][T24462] netlink: 'syz.4.34994': attribute type 6 has an invalid length. [ 3095.892508][T24465] netlink: 'syz.2.34992': attribute type 10 has an invalid length. [ 3096.111512][T24472] netlink: 'syz.1.34996': attribute type 39 has an invalid length. [ 3096.144440][T24473] IPv6: Can't replace route, no match found [ 3096.182270][T24473] mac80211_hwsim hwsim149 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3096.775393][T24484] netlink: 'syz.4.35001': attribute type 10 has an invalid length. [ 3097.917954][T24517] netlink: 'syz.0.35011': attribute type 39 has an invalid length. [ 3098.754778][T24535] netlink: 'syz.2.35016': attribute type 10 has an invalid length. [ 3099.588504][T24563] netlink: 'syz.2.35025': attribute type 6 has an invalid length. [ 3099.608950][T24560] IPv6: Can't replace route, no match found [ 3099.641451][T24560] mac80211_hwsim hwsim149 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3100.071313][T24578] netlink: 'syz.3.35030': attribute type 10 has an invalid length. [ 3101.440417][T24606] netlink: 'syz.0.35039': attribute type 6 has an invalid length. [ 3101.892927][T24623] netlink: 'syz.4.35042': attribute type 10 has an invalid length. [ 3102.177381][T24631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35047'. [ 3103.268372][T24650] netlink: 'syz.0.35062': attribute type 7 has an invalid length. [ 3103.289705][T24650] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35062'. [ 3103.301024][T24652] netlink: 'syz.3.35052': attribute type 6 has an invalid length. [ 3103.793971][T24664] netlink: 'syz.3.35056': attribute type 10 has an invalid length. [ 3103.934532][T24671] netlink: 830 bytes leftover after parsing attributes in process `syz.1.35058'. [ 3104.018744][T24675] netlink: 'syz.2.35060': attribute type 21 has an invalid length. [ 3104.047970][T24675] netlink: 156 bytes leftover after parsing attributes in process `syz.2.35060'. [ 3104.117188][T24675] netlink: 'syz.2.35060': attribute type 1 has an invalid length. [ 3104.142093][T24675] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.35060'. [ 3104.158786][T24685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35065'. [ 3104.492501][T24694] netlink: 'syz.1.35068': attribute type 6 has an invalid length. [ 3105.739860][T24717] netlink: 'syz.0.35075': attribute type 7 has an invalid length. [ 3105.783748][T24717] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35075'. [ 3105.849164][T24720] netlink: 'syz.4.35073': attribute type 10 has an invalid length. [ 3106.551756][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35079'. [ 3106.587200][T24735] IPv6: Can't replace route, no match found [ 3106.607150][T24738] netlink: 'syz.3.35081': attribute type 6 has an invalid length. [ 3106.635060][T24735] mac80211_hwsim hwsim142 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3107.468438][T24758] netlink: 'syz.4.35087': attribute type 10 has an invalid length. [ 3107.701403][T24763] netlink: 830 bytes leftover after parsing attributes in process `syz.4.35089'. [ 3107.711851][T24765] netlink: 'syz.3.35090': attribute type 21 has an invalid length. [ 3107.720057][T24765] netlink: 156 bytes leftover after parsing attributes in process `syz.3.35090'. [ 3107.780886][T24765] netlink: 'syz.3.35090': attribute type 1 has an invalid length. [ 3107.804164][T24765] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.35090'. [ 3107.896626][T24770] netlink: 'syz.4.35092': attribute type 7 has an invalid length. [ 3107.905425][T24770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.35092'. [ 3108.942716][T24781] netlink: 'syz.4.35095': attribute type 6 has an invalid length. [ 3109.162636][T24784] IPv6: Can't replace route, no match found [ 3109.191443][T24784] mac80211_hwsim hwsim149 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3110.312106][T24802] device sit0 left promiscuous mode [ 3111.494575][T24816] netlink: 'syz.1.35106': attribute type 7 has an invalid length. [ 3111.511291][T24818] netlink: 'syz.4.35107': attribute type 4 has an invalid length. [ 3111.519464][T24816] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35106'. [ 3111.530003][T24818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.35107'. [ 3112.071701][T24820] netlink: 830 bytes leftover after parsing attributes in process `syz.0.35104'. [ 3112.084269][T24826] netlink: 'syz.4.35108': attribute type 10 has an invalid length. [ 3112.279957][T24836] IPv6: Can't replace route, no match found [ 3112.289460][T24836] mac80211_hwsim hwsim149 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3112.746393][T24861] netlink: 'syz.3.35118': attribute type 8 has an invalid length. [ 3112.765150][T24859] netlink: 'syz.0.35119': attribute type 6 has an invalid length. [ 3112.782682][T24861] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.35118'. [ 3112.854093][T24865] device lo left promiscuous mode [ 3113.003001][T24870] netlink: 'syz.0.35121': attribute type 10 has an invalid length. [ 3113.157925][T24872] netlink: 'syz.0.35123': attribute type 7 has an invalid length. [ 3113.166335][T24872] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35123'. [ 3113.275090][T24874] netlink: 830 bytes leftover after parsing attributes in process `syz.3.35124'. [ 3114.159913][T24891] IPv6: Can't replace route, no match found [ 3114.169335][T24891] mac80211_hwsim hwsim143 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3115.146698][T24906] device sit0 left promiscuous mode [ 3115.254953][T24907] netlink: 'syz.3.35133': attribute type 10 has an invalid length. [ 3115.272119][T24909] netlink: 'syz.1.35132': attribute type 6 has an invalid length. [ 3115.398210][T24913] tun0: tun_chr_ioctl cmd 1074025677 [ 3115.405042][T24913] tun0: linktype set to 768 [ 3115.511585][T24919] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.35136'. [ 3115.542149][T24919] netlink: 18430 bytes leftover after parsing attributes in process `syz.4.35136'. [ 3115.660591][T24925] netlink: 'syz.3.35139': attribute type 7 has an invalid length. [ 3115.732224][T24925] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.35139'. [ 3116.040455][T24933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35143'. [ 3116.824924][T24961] validate_nla: 2 callbacks suppressed [ 3116.824946][T24961] netlink: 'syz.1.35153': attribute type 7 has an invalid length. [ 3116.842275][T24961] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35153'. [ 3116.858596][T24962] netlink: 'syz.3.35156': attribute type 21 has an invalid length. [ 3116.880269][T24965] netlink: 'syz.0.35155': attribute type 4 has an invalid length. [ 3116.890552][T24965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.35155'. [ 3117.586636][T24968] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check. [ 3117.691023][T24976] netlink: 'syz.0.35160': attribute type 10 has an invalid length. [ 3118.230351][T24993] netlink: 'syz.3.35174': attribute type 10 has an invalid length. [ 3118.691318][T25013] netlink: 'syz.0.35171': attribute type 10 has an invalid length. [ 3119.216422][T25032] netlink: 'syz.4.35177': attribute type 10 has an invalid length. [ 3119.327985][T25030] netlink: 'syz.1.35178': attribute type 8 has an invalid length. [ 3119.346760][T25030] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35178'. [ 3119.822568][T25044] mac80211_hwsim hwsim65 »»»»»»: renamed from wlan0 [ 3120.014095][T25051] netlink: 'syz.1.35185': attribute type 4 has an invalid length. [ 3120.032021][T25051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35185'. [ 3120.159168][T25045] chnl_net:caif_netlink_parms(): no params data found [ 3120.220591][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.228049][T25045] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.237876][T25045] device bridge_slave_0 entered promiscuous mode [ 3120.246963][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 3120.255616][T25045] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.264339][T25045] device bridge_slave_1 entered promiscuous mode [ 3120.293806][T25045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3120.306321][T25045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3120.339380][T25045] team0: Port device team_slave_0 added [ 3120.347902][T25045] team0: Port device team_slave_1 added [ 3120.371172][T25045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3120.378493][T25045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3120.405447][T25045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3120.418333][T25045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3120.425719][T25045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3120.452086][T25045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3120.487669][T25045] device hsr_slave_0 entered promiscuous mode [ 3120.494938][T25045] device hsr_slave_1 entered promiscuous mode [ 3120.501744][T25045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3120.510058][T25045] Cannot create hsr debugfs directory [ 3120.693415][T25045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3120.754133][T25045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3120.809031][T25045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3120.819815][T25045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3120.859166][T25045] bridge0: port 2(bridge_slave_1) entered blocking state [ 3120.866407][T25045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3120.873867][T25045] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.880943][T25045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3120.975213][T25074] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.35189'. [ 3121.003442][T25074] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.35189'. [ 3121.040699][T25078] netlink: 'syz.4.35192': attribute type 7 has an invalid length. [ 3121.075281][T25078] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.35192'. [ 3121.135931][T25045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3121.163652][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3121.259908][T31099] bridge0: port 1(bridge_slave_0) entered disabled state [ 3121.821987][T15552] Bluetooth: hci5: command 0x0409 tx timeout [ 3123.902031][T10054] Bluetooth: hci5: command 0x041b tx timeout [ 3123.940241][T31099] bridge0: port 2(bridge_slave_1) entered disabled state [ 3123.961548][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3124.018977][T25045] 8021q: adding VLAN 0 to HW filter on device team0 [ 3124.044389][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3124.057676][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3124.068260][T31099] bridge0: port 1(bridge_slave_0) entered blocking state [ 3124.075467][T31099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3124.092135][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3124.104774][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3124.114251][T31099] bridge0: port 2(bridge_slave_1) entered blocking state [ 3124.121312][T31099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3124.129925][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3124.145810][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3124.156763][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3124.166041][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3124.175039][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3124.188346][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3124.197670][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3124.209438][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3124.218241][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3124.235422][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3124.244062][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3124.255554][T25045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3124.326437][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3124.335528][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3124.350219][T25045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3124.446797][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3124.458611][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3124.480110][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3124.489161][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3124.498571][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3124.506693][ T5440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3124.517545][T25045] device veth0_vlan entered promiscuous mode [ 3124.530672][T25045] device veth1_vlan entered promiscuous mode [ 3124.554082][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3124.563986][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3124.573970][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3124.584333][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3124.597898][T25045] device veth0_macvtap entered promiscuous mode [ 3124.609638][T25045] device veth1_macvtap entered promiscuous mode [ 3124.633675][T25045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3124.641407][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3124.650439][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3124.659134][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3124.668484][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3124.681785][T25045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3124.690966][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3124.700623][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3124.712978][T25045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.721832][T25045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.733401][T25045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.742246][T25045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.842127][T31099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3124.849968][T31099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.894440][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3124.926606][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3124.935099][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.946072][T31099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3125.982275][T29235] Bluetooth: hci5: command 0x040f tx timeout [ 3128.062686][ T9536] Bluetooth: hci5: command 0x0419 tx timeout [ 3143.424235][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.430876][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.863380][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.869885][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 3230.584747][T25131] netlink: 'syz.5.35196': attribute type 11 has an invalid length. [ 3230.597611][T25131] netlink: 140 bytes leftover after parsing attributes in process `syz.5.35196'. [ 3230.783844][T25143] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.35201'. [ 3230.829185][T25146] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.35203'. [ 3230.901410][T25149] delete_channel: no stack [ 3230.937755][T25149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3230.947357][T25154] sctp: [Deprecated]: syz.0.35205 (pid 25154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3230.947357][T25154] Use struct sctp_sack_info instead [ 3230.999904][T25149] netlink: 'syz.3.35204': attribute type 10 has an invalid length. [ 3231.020185][T25154] netlink: 'syz.0.35205': attribute type 3 has an invalid length. [ 3231.029478][T25149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35204'. [ 3231.039592][T25149] device dummy0 entered promiscuous mode [ 3231.046017][T25154] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.35205'. [ 3231.062214][T25149] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 3231.196327][T25158] netlink: 7962 bytes leftover after parsing attributes in process `syz.0.35206'. [ 3233.862852][T25164] netlink: 'syz.3.35207': attribute type 2 has an invalid length. [ 3233.875344][T25164] netlink: 'syz.3.35207': attribute type 8 has an invalid length. [ 3233.892165][T25164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35207'. [ 3233.933862][T25162] netlink: 'syz.4.35208': attribute type 10 has an invalid length. [ 3233.949148][T25162] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 3233.967849][T25162] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 3233.988934][T25162] .`: (slave hsr0): Error -95 calling set_mac_address [ 3234.049627][T25168] netlink: 14 bytes leftover after parsing attributes in process `syz.5.35209'. [ 3234.069682][T25168] device hsr_slave_0 left promiscuous mode [ 3234.235097][T25168] device hsr_slave_1 left promiscuous mode [ 3234.717760][T25192] netlink: 'syz.1.35217': attribute type 10 has an invalid length. [ 3234.790792][T25191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.35217'. [ 3234.879875][T25200] netlink: 'syz.5.35221': attribute type 21 has an invalid length. [ 3234.889004][T25200] netlink: 156 bytes leftover after parsing attributes in process `syz.5.35221'. [ 3234.930981][T25194] netlink: 'syz.3.35218': attribute type 10 has an invalid length. [ 3234.942826][T25198] netlink: 'syz.0.35220': attribute type 6 has an invalid length. [ 3235.109035][T28508] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 3235.660196][T25234] validate_nla: 4 callbacks suppressed [ 3235.660229][T25234] netlink: 'syz.5.35235': attribute type 6 has an invalid length. [ 3235.812953][T25244] delete_channel: no stack [ 3235.873207][T25244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3235.880680][T25244] IPv6: NLM_F_CREATE should be set when creating new route [ 3235.888356][T25244] IPv6: NLM_F_CREATE should be set when creating new route [ 3235.895777][T25244] IPv6: NLM_F_CREATE should be set when creating new route [ 3236.011294][T25250] __nla_validate_parse: 3 callbacks suppressed [ 3236.011329][T25250] netlink: 180 bytes leftover after parsing attributes in process `syz.4.35240'. [ 3236.113660][T25253] netlink: 1 bytes leftover after parsing attributes in process `syz.4.35240'. [ 3236.206642][T25255] netlink: 'syz.5.35241': attribute type 39 has an invalid length. [ 3236.327916][T25255] netlink: 'syz.5.35241': attribute type 10 has an invalid length. [ 3236.345294][T25255] netlink: 55 bytes leftover after parsing attributes in process `syz.5.35241'. [ 3236.497137][T25265] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check. [ 3236.927048][T25281] device wlan0 entered promiscuous mode [ 3237.118923][T25287] netlink: 'syz.4.35252': attribute type 7 has an invalid length. [ 3237.155853][T25287] netlink: 140 bytes leftover after parsing attributes in process `syz.4.35252'. [ 3237.178827][T25291] netlink: 207496 bytes leftover after parsing attributes in process `syz.5.35254'. [ 3237.208624][T25289] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.35253'. [ 3237.230621][T25285] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.35251'. [ 3237.240434][T25289] openvswitch: netlink: Tunnel attr 8692 out of range max 16 [ 3237.341681][T25291] netlink: 'syz.5.35254': attribute type 2 has an invalid length. [ 3237.356968][T25291] netlink: 132 bytes leftover after parsing attributes in process `syz.5.35254'. [ 3237.616213][T25308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.35259'. [ 3237.775537][T25308] netlink: 'syz.0.35259': attribute type 1 has an invalid length. [ 3237.796720][T25308] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.35259'. [ 3237.798648][T25318] netlink: 'syz.1.35262': attribute type 10 has an invalid length. [ 3237.987368][T25324] netlink: 'syz.0.35263': attribute type 10 has an invalid length. [ 3238.407829][T25344] netlink: 'syz.3.35271': attribute type 21 has an invalid length. [ 3238.518335][T25344] netlink: 'syz.3.35271': attribute type 1 has an invalid length. [ 3238.649931][T31099] tipc: Subscription rejected, illegal request [ 3241.328011][T25435] __nla_validate_parse: 14 callbacks suppressed [ 3241.328033][T25435] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.35306'. [ 3241.428318][T25405] delete_channel: no stack [ 3241.430531][T25431] validate_nla: 9 callbacks suppressed [ 3241.430645][T25431] netlink: 'syz.0.35304': attribute type 41 has an invalid length. [ 3241.612599][T25438] netlink: 'syz.4.35307': attribute type 10 has an invalid length. [ 3241.930588][T25442] netlink: 'syz.1.35308': attribute type 10 has an invalid length. [ 3242.159392][T25466] netlink: 'syz.1.35322': attribute type 10 has an invalid length. [ 3242.209965][T25465] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.35313'. [ 3242.252110][T25465] netlink: 18430 bytes leftover after parsing attributes in process `syz.3.35313'. [ 3242.478414][T25476] netlink: 'syz.1.35318': attribute type 21 has an invalid length. [ 3242.513660][T25479] netlink: 'syz.5.35319': attribute type 21 has an invalid length. [ 3242.719041][T25488] netlink: 'syz.0.35323': attribute type 10 has an invalid length. [ 3242.792910][T29235] Bluetooth: hci5: command 0x0406 tx timeout [ 3243.156128][T25502] netlink: 'syz.0.35326': attribute type 10 has an invalid length. [ 3243.736921][T25518] netlink: 'syz.1.35334': attribute type 21 has an invalid length. [ 3243.754048][T25516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 3243.886145][T25524] netlink: 'syz.4.35336': attribute type 21 has an invalid length. [ 3244.063053][T25529] netlink: 191416 bytes leftover after parsing attributes in process `syz.5.35338'. [ 3244.172277][T25529] netlink: 18430 bytes leftover after parsing attributes in process `syz.5.35338'. [ 3244.977059][T25559] netlink: 40 bytes leftover after parsing attributes in process `syz.5.35349'. [ 3245.007262][T25559] device team0 entered promiscuous mode [ 3245.014966][T25559] device team_slave_0 entered promiscuous mode [ 3245.074102][T25559] device team_slave_1 entered promiscuous mode [ 3245.125816][T25559] bridge0: port 3(team0) entered blocking state [ 3245.160459][T25559] bridge0: port 3(team0) entered disabled state [ 3245.235214][T25559] bridge0: port 3(team0) entered blocking state [ 3245.242009][T25559] bridge0: port 3(team0) entered forwarding state [ 3246.398030][T25582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3246.523283][T25582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3246.622438][T25582] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 3246.653102][T25589] validate_nla: 7 callbacks suppressed [ 3246.653135][T25589] netlink: 'syz.1.35358': attribute type 10 has an invalid length. [ 3246.904003][T25601] netlink: 'syz.4.35364': attribute type 10 has an invalid length. [ 3246.944967][T25601] netlink: 40 bytes leftover after parsing attributes in process `syz.4.35364'. [ 3247.137928][T25606] netlink: 'syz.1.35374': attribute type 10 has an invalid length. [ 3247.522480][T25624] netlink: 'syz.4.35368': attribute type 21 has an invalid length. [ 3247.566546][T25623] netlink: 'syz.0.35367': attribute type 21 has an invalid length. [ 3248.083386][T25642] netlink: 'syz.0.35375': attribute type 10 has an invalid length. [ 3248.412443][T25645] netlink: 'syz.4.35377': attribute type 10 has an invalid length. [ 3248.643672][T25651] netlink: 'syz.3.35381': attribute type 10 has an invalid length. [ 3248.656920][T25651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35381'. [ 3248.686623][T25655] netlink: 'syz.4.35382': attribute type 21 has an invalid length. [ 3248.726006][T25659] netlink: 'syz.0.35383': attribute type 21 has an invalid length. [ 3249.755529][T25702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.35399'. [ 3249.849013][T25706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.35401'. [ 3249.974759][T25706] device veth0_to_bridge left promiscuous mode [ 3249.995328][T25706] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 3250.686663][T25741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35414'. [ 3250.849096][T25750] netlink: 399 bytes leftover after parsing attributes in process `syz.3.35417'. [ 3251.112898][T25758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.35419'. [ 3251.185294][T25748] delete_channel: no stack [ 3251.255410][T25758] device veth0_to_bridge left promiscuous mode [ 3251.269513][T25758] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 3251.671491][T25789] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.35433'. [ 3251.973485][T25798] validate_nla: 12 callbacks suppressed [ 3251.973503][T25798] netlink: 'syz.1.35435': attribute type 10 has an invalid length. [ 3252.139527][T25810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.35438'. [ 3252.418532][T25810] device veth0_to_bridge left promiscuous mode [ 3252.428678][T25810] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 3252.452684][T25814] netlink: 'syz.3.35439': attribute type 21 has an invalid length. [ 3252.469719][T25821] netlink: 399 bytes leftover after parsing attributes in process `syz.5.35441'. [ 3252.885235][T25819] netlink: 'syz.4.35440': attribute type 21 has an invalid length. [ 3252.998239][T25820] delete_channel: no stack [ 3253.106253][T25838] netlink: 'syz.1.35446': attribute type 2 has an invalid length. [ 3253.119110][T25840] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.35450'. [ 3253.184524][T25838] netlink: 14 bytes leftover after parsing attributes in process `syz.1.35446'. [ 3253.279764][T25842] netlink: 'syz.4.35451': attribute type 10 has an invalid length. [ 3253.462647][T25857] netlink: 'syz.0.35455': attribute type 21 has an invalid length. [ 3253.629654][T25867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.35459'. [ 3253.708351][T25867] bridge0: port 1(bridge_slave_0) entered disabled state [ 3253.796628][T25867] device bridge_slave_0 left promiscuous mode [ 3253.812337][T25867] bridge0: port 1(bridge_slave_0) entered disabled state [ 3253.887423][T25875] netlink: 'syz.3.35462': attribute type 21 has an invalid length. [ 3254.041678][T25882] netlink: 399 bytes leftover after parsing attributes in process `syz.0.35463'. [ 3254.164197][T25890] netlink: 'syz.3.35465': attribute type 2 has an invalid length. [ 3254.215986][T25886] netlink: 14 bytes leftover after parsing attributes in process `syz.3.35465'. [ 3254.456377][T25899] netlink: 'syz.5.35470': attribute type 21 has an invalid length. [ 3254.467162][T25881] delete_channel: no stack [ 3254.487245][T25902] netlink: 'syz.4.35467': attribute type 10 has an invalid length. [ 3255.129353][T25928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.35480'. [ 3255.691544][T25949] netlink: 399 bytes leftover after parsing attributes in process `syz.4.35484'. [ 3256.226949][T25948] delete_channel: no stack [ 3256.322311][T25967] netlink: 14 bytes leftover after parsing attributes in process `syz.0.35492'. [ 3257.101504][T26002] validate_nla: 6 callbacks suppressed [ 3257.101533][T26002] netlink: 'syz.0.35505': attribute type 21 has an invalid length. [ 3257.325504][T26009] netlink: 399 bytes leftover after parsing attributes in process `syz.0.35508'. [ 3257.504923][T26018] netlink: 'syz.4.35512': attribute type 2 has an invalid length. [ 3257.603405][T26019] netlink: 'syz.3.35511': attribute type 21 has an invalid length. [ 3257.675629][T26018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.35512'. [ 3258.417166][T26009] delete_channel: no stack [ 3258.830071][T26046] netlink: 'syz.5.35519': attribute type 21 has an invalid length. [ 3259.069154][T26053] netlink: 'syz.4.35525': attribute type 21 has an invalid length. [ 3259.280828][T26063] netlink: 'syz.1.35527': attribute type 9 has an invalid length. [ 3259.333646][T26063] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.35527'. [ 3259.598870][T26079] netlink: 399 bytes leftover after parsing attributes in process `syz.5.35531'. [ 3259.737416][T26087] netlink: 'syz.1.35536': attribute type 21 has an invalid length. [ 3260.053339][T26096] netlink: 'syz.1.35539': attribute type 21 has an invalid length. [ 3260.094981][T26070] delete_channel: no stack [ 3260.699345][T26116] netlink: 'syz.5.35544': attribute type 9 has an invalid length. [ 3260.734884][T26116] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.35544'. [ 3260.942107][T26133] netlink: 'syz.0.35550': attribute type 21 has an invalid length. [ 3261.074771][T26137] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.35551'. [ 3262.027387][T26171] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.35561'. [ 3262.055973][T26174] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.35563'. [ 3262.181639][T26177] validate_nla: 3 callbacks suppressed [ 3262.181692][T26177] netlink: 'syz.4.35567': attribute type 21 has an invalid length. [ 3262.308870][T26183] netlink: 'syz.3.35568': attribute type 21 has an invalid length. [ 3262.556014][T26185] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.35570'. [ 3262.556570][T26192] netlink: 'syz.1.35571': attribute type 10 has an invalid length. [ 3263.382287][T26219] netlink: 'syz.0.35582': attribute type 21 has an invalid length. [ 3263.487707][T26224] netlink: 'syz.1.35584': attribute type 21 has an invalid length. [ 3263.491709][T26223] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.35585'. [ 3263.864788][T26239] netlink: 'syz.4.35598': attribute type 21 has an invalid length. [ 3264.192920][T26245] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.35587'. [ 3264.219609][T26251] netlink: 'syz.4.35589': attribute type 10 has an invalid length. [ 3264.559893][T26263] netlink: 'syz.1.35596': attribute type 21 has an invalid length. [ 3264.726645][T26276] netlink: 'syz.1.35602': attribute type 21 has an invalid length. [ 3264.784936][T26275] netlink: 'syz.0.35600': attribute type 4 has an invalid length. [ 3264.863353][T26275] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.35600'. [ 3265.078502][T26291] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.35607'. [ 3265.894558][T26310] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.35611'. [ 3266.313810][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.320440][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.387549][T26331] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.35623'. [ 3266.420753][T26336] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.35624'. [ 3266.675634][T26342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.35626'. [ 3267.085459][T26369] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.35636'. [ 3267.340650][T26379] validate_nla: 10 callbacks suppressed [ 3267.340837][T26379] netlink: 'syz.5.35642': attribute type 10 has an invalid length. [ 3267.364606][T26380] netlink: 'syz.3.35641': attribute type 21 has an invalid length. [ 3267.438094][T26385] netlink: 'syz.1.35643': attribute type 21 has an invalid length. [ 3267.521489][T26387] netlink: 'syz.5.35644': attribute type 4 has an invalid length. [ 3267.678636][T26393] netlink: 'syz.0.35656': attribute type 21 has an invalid length. [ 3267.781477][T26400] netlink: 'syz.0.35648': attribute type 21 has an invalid length. [ 3267.856799][T26406] __nla_validate_parse: 3 callbacks suppressed [ 3267.856838][T26406] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.35651'. [ 3268.044429][T26411] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.35654'. [ 3268.222154][ T27] INFO: task syz.2.35069:24692 blocked for more than 143 seconds. [ 3268.229990][ T27] Not tainted syzkaller #0 [ 3268.236849][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3268.246412][ T27] task:syz.2.35069 state:D stack:25680 pid:24692 ppid: 699 flags:0x00004004 [ 3268.255769][ T27] Call Trace: [ 3268.259060][ T27] [ 3268.262168][ T27] __schedule+0x11ef/0x43c0 [ 3268.266709][ T27] ? lock_chain_count+0x20/0x20 [ 3268.271591][ T27] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3268.277841][ T27] ? release_firmware_map_entry+0x190/0x190 [ 3268.286150][ T27] schedule+0x11b/0x1e0 [ 3268.290815][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 3268.296512][ T27] ? perf_mmap+0x13e0/0x13e0 [ 3268.301204][ T27] _free_event+0x34/0xe60 [ 3268.306482][ T27] ? perf_mmap+0x13e0/0x13e0 [ 3268.311114][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 3268.316800][ T27] ? __might_sleep+0xf0/0xf0 [ 3268.321394][ T27] ? calc_timer_values+0x410/0x410 [ 3268.326567][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 3268.331087][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3268.337274][ T27] ? perf_mmap+0x13e0/0x13e0 [ 3268.343168][ T27] perf_release+0x37/0x40 [ 3268.347593][ T27] __fput+0x234/0x930 [ 3268.351574][ T27] task_work_run+0x125/0x1a0 [ 3268.356297][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 3268.361967][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 3268.367507][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 3268.373026][ T27] do_syscall_64+0x58/0xa0 [ 3268.377451][ T27] ? clear_bhb_loop+0x30/0x80 [ 3268.382189][ T27] ? clear_bhb_loop+0x30/0x80 [ 3268.386904][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3268.392832][ T27] RIP: 0033:0x7fbcef29e799 [ 3268.397262][ T27] RSP: 002b:00007fbced4f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3268.405922][ T27] RAX: 0000000000000000 RBX: 00007fbcef517fa0 RCX: 00007fbcef29e799 [ 3268.414120][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 3268.422329][ T27] RBP: 00007fbcef334c99 R08: 0000000000000000 R09: 0000000000000000 [ 3268.430347][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3268.438573][ T27] R13: 00007fbcef518038 R14: 00007fbcef517fa0 R15: 00007ffea2074108 [ 3268.446609][ T27] [ 3268.450075][ T27] [ 3268.450075][ T27] Showing all locks held in the system: [ 3268.459700][ T27] 1 lock held by khungtaskd/27: [ 3268.465373][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 3268.474931][ T27] 1 lock held by klogd/3551: [ 3268.479613][ T27] #0: ffff8880b903a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 3268.489634][ T27] 2 locks held by getty/3952: [ 3268.494479][ T27] #0: ffff88814c98f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 3268.504289][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 3268.514534][ T27] 2 locks held by kworker/0:31/10060: [ 3268.520181][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 3268.530590][ T27] #1: ffffc9000350fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 3268.542265][ T27] 2 locks held by syz.0.35652/26408: [ 3268.547660][ T27] #0: ffffffff8c36c168 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 3268.557322][ T27] #1: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 3268.569999][ T27] [ 3268.572747][ T27] ============================================= [ 3268.572747][ T27] [ 3268.581470][ T27] NMI backtrace for cpu 1 [ 3268.585985][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 3268.593194][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3268.603266][ T27] Call Trace: [ 3268.606575][ T27] [ 3268.609509][ T27] dump_stack_lvl+0x188/0x250 [ 3268.614194][ T27] ? show_regs_print_info+0x20/0x20 [ 3268.619405][ T27] ? load_image+0x400/0x400 [ 3268.623912][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 3268.629280][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 3268.634556][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 3268.639485][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 3268.645727][ T27] ? _printk+0xda/0x130 [ 3268.649977][ T27] ? load_image+0x400/0x400 [ 3268.654592][ T27] ? load_image+0x400/0x400 [ 3268.659102][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 3268.665176][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 3268.671169][ T27] watchdog+0xe0f/0xe50 [ 3268.675333][ T27] kthread+0x436/0x520 [ 3268.679399][ T27] ? hungtask_pm_notify+0x40/0x40 [ 3268.684582][ T27] ? kthread_blkcg+0xd0/0xd0 [ 3268.689200][ T27] ret_from_fork+0x1f/0x30 [ 3268.693631][ T27] [ 3268.697034][ T27] Sending NMI from CPU 1 to CPUs 0: [ 3268.702292][ C0] NMI backtrace for cpu 0 [ 3268.702306][ C0] CPU: 0 PID: 5440 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 3268.702324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3268.702334][ C0] Workqueue: bat_events batadv_nc_worker [ 3268.702433][ C0] RIP: 0010:__lock_acquire+0x689/0x7d10 [ 3268.702455][ C0] Code: b6 04 00 84 c0 0f 85 8f 62 00 00 41 f6 44 24 01 80 0f 85 04 05 00 00 84 db 41 0f b6 c6 0f b6 cb 0f 44 c8 89 8c 24 c8 00 00 00 <48> 8b 84 24 88 00 00 00 42 0f b6 04 00 84 c0 0f 85 05 64 00 00 45 [ 3268.702469][ C0] RSP: 0018:ffffc900031cf820 EFLAGS: 00000002 [ 3268.702481][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: 0000000000000001 [ 3268.702495][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d40c0 [ 3268.702505][ C0] RBP: ffffc900031cfa70 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 3268.702517][ C0] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffff888021a00b60 [ 3268.702529][ C0] R13: ffff888021a00000 R14: 0000000000000002 R15: ffff888021a00b40 [ 3268.702540][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 3268.702554][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3268.702564][ C0] CR2: 00007fb456c5e078 CR3: 00000000238f2000 CR4: 00000000003506f0 [ 3268.702577][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3268.702586][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3268.702597][ C0] Call Trace: [ 3268.702603][ C0] [ 3268.702614][ C0] ? mark_lock+0x94/0x320 [ 3268.702635][ C0] ? verify_lock_unused+0x140/0x140 [ 3268.702651][ C0] ? mark_lock+0x94/0x320 [ 3268.702665][ C0] ? __lock_acquire+0x13bc/0x7d10 [ 3268.702683][ C0] ? verify_lock_unused+0x140/0x140 [ 3268.702703][ C0] lock_acquire+0x19e/0x400 [ 3268.702719][ C0] ? rcu_lock_acquire+0x5/0x30 [ 3268.702735][ C0] ? rcu_lock_release+0x5/0x20 [ 3268.702749][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3268.702766][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 3268.702789][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 3268.702808][ C0] rcu_lock_acquire+0x2a/0x30 [ 3268.702822][ C0] ? rcu_lock_acquire+0x5/0x30 [ 3268.702835][ C0] batadv_nc_worker+0xc9/0x5c0 [ 3268.702852][ C0] process_one_work+0x85f/0x1010 [ 3268.702874][ C0] ? worker_detach_from_pool+0x240/0x240 [ 3268.702889][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 3268.702908][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3268.702922][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3268.702938][ C0] ? wq_worker_running+0x97/0x170 [ 3268.702952][ C0] worker_thread+0xaa6/0x1290 [ 3268.702978][ C0] kthread+0x436/0x520 [ 3268.702991][ C0] ? rcu_lock_release+0x20/0x20 [ 3268.703006][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3268.703019][ C0] ret_from_fork+0x1f/0x30 [ 3268.703041][ C0] [ 3268.713512][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 3268.992360][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 3268.999583][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3269.009632][ T27] Call Trace: [ 3269.013007][ T27] [ 3269.015925][ T27] dump_stack_lvl+0x188/0x250 [ 3269.020606][ T27] ? show_regs_print_info+0x20/0x20 [ 3269.025818][ T27] ? load_image+0x400/0x400 [ 3269.030469][ T27] panic+0x2e5/0x810 [ 3269.034432][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 3269.040056][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 3269.044569][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 3269.050113][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 3269.056273][ T27] watchdog+0xe4e/0xe50 [ 3269.060428][ T27] kthread+0x436/0x520 [ 3269.064494][ T27] ? hungtask_pm_notify+0x40/0x40 [ 3269.069526][ T27] ? kthread_blkcg+0xd0/0xd0 [ 3269.074117][ T27] ret_from_fork+0x1f/0x30 [ 3269.078539][ T27] [ 3269.081878][ T27] Kernel Offset: disabled [ 3269.086204][ T27] Rebooting in 86400 seconds..