last executing test programs: 15.435285239s ago: executing program 1 (id=2383): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4d}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x602000, 0x0) close(r3) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) (async) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 15.126718877s ago: executing program 1 (id=2386): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007"], 0x0, 0x0, 0x0, 0x0, 0xbef9ba56fa5bafe, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query]}, &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f00000001c0)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f00000001c0)=r3, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb5a04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x8030, 0x7}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x122, 0x10000, 0x9e4, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x83, 0x45, 0x0, 0x0, 0x901, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe9, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x10, 0x4, 0x0, 0x1, 0x200, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, r7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x338bd4001d9e672f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x6d7c6c3eacb5c910, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) 14.852781853s ago: executing program 1 (id=2387): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000167c12000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x4000) ioctl$TUNGETSNDBUF(r0, 0x400454dc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) r2 = socket$kcm(0x2, 0x3, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x82, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) 12.817499341s ago: executing program 1 (id=2393): r0 = socket$kcm(0x2, 0x2, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x6d2d7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x200000000003, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) recvmsg$kcm(r3, &(0x7f0000003cc0)={0x0, 0x0, 0x0}, 0x2080) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 10.134220694s ago: executing program 1 (id=2395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff6}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="4eaa00004f3afcd244aa7481dfdafa77c6790000000071ff9cae2789f55b66d09739d79057d04db9a58c2cd0ae331b2213c81ebd38396b0507e738c18be942ffc5215e43a826e5825a6e96fc38a62baa2d7aa1057b9506c17bb84f3607d33dc73e357e47de1e563aa38dfca6c66fdf1bf91f74782434b47255dada2e65a6a07539e92a977d8e05c3d6fc23587ef0a9f61d3acf6d087dd3b49ead20983919815f5e859385a6d2d1e51f0994893ff1288fbcaead91fc7e60fa0730c0cdb1f508391b610359b494e37abd2771ed05c25abb5217d13c16246a582a20ed30829f1d94725569d0d5941f63"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b5020000140000005fe764acce31800f85000000d2000000bf09000000000000550901000000000095000000f8ff0000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r5, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x81d7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@in6={0xa, 0x4e23, 0xffffff22, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x80, 0x0}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x0, 0x3, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x5, 0x0, 0xfffff030}, {0x6, 0x4, 0x40}]}) 9.724186893s ago: executing program 1 (id=2399): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)="2958d950cc0d257d611bb2cbe739a92194ce2ce5738216f24f314127ba9f3a559611edd6f01908bf990718cebc55df37f75b0e23c55b4343b859fc09d318eb30f11f6bee2b9d912ffeee1f8b3c69", &(0x7f0000000080)=""/181}, 0x20) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b036, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 5.469781562s ago: executing program 3 (id=2421): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x26, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xda2}, @map_fd={0x18, 0x7, 0x1, 0x0, r1}, @alu={0x7, 0x0, 0x6, 0x4, 0x0, 0x100, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x87, &(0x7f0000000280)=""/135, 0x41100, 0x18, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x0, 0x3, 0x6, 0xc}, {0x3, 0x3, 0xf, 0xc}, {0x3, 0x5, 0x10, 0x1}, {0x3, 0x4, 0x1, 0x3}, {0x5, 0x5, 0x8}, {0x3, 0x2, 0x9, 0x4}, {0x3, 0x3, 0x8, 0x2}, {0x4, 0x1, 0x10, 0xb}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@ifindex=r3, r2, 0x22, 0x2000, 0x0, @value=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x98, 0x53, &(0x7f0000000680)="0350d0043b7f406c1095139ed35327330ba5737b5791ab1393764bb032457fa57a192ae415ce9dc4f62946cfe689240cb843363536a92d422c9ffe330a964c6c142e861162b8f7496c1e1298e1df80dd2165ef973a7f7c71bde34cbcc9200b5ae9e6701d4d2c1a6c5796f6f4dfb7b3ab1ef4bc23d6a3a5e5a020ba1cc10974ad0902a8883a91c10da7b95bfbcb0e8db4835edb94a402dc77", &(0x7f0000000740)=""/83, 0xfffffff7, 0x0, 0x67, 0x7a, &(0x7f00000007c0)="1a760f19aa78803c8927bda7f06ae9780d0210fe4e58f022fa9ade9ab7c9d4b1891297727440721f4b14484399c5f8a2140412c959cc551d893414fb82e1d714445fee3be07e81a14da3881853272777a75586cb93c92189b720bc196b2fa2745f1a848252ed7e", &(0x7f0000000840)="57a06f4356a32f0194869c4af617bf7f1eff8898152a2cba9cb88c6349d0f67095d96caf1773d58f2030a0cd00730be746fcfae0e821a7a5a289d67e7e411a4167a7bdf212e97be50e733fa9e28677d95ad34cc81670095ce5a241cda179eb38f15d94e69a3c4b7b22763825ae328c14aa1fd24cbff40e50532a", 0x1, 0x0, 0x80000001}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000940)={r4, r2, 0x4, r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c40)={&(0x7f0000000980)="b474", &(0x7f00000009c0)=""/202, &(0x7f0000000ac0)="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", &(0x7f0000000bc0)="f71662a7cdb75137692bf5236e90b7513f53fcfc5911f5c1ddecfccd1fcf023d1ae3b2d48f684f7ca9a16a35b416c3987a14d91ae5d10ade9f979b62f27198b28243f03793d70c", 0x6, r1, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0xa, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x5, 0x5}, @struct={0x5, 0x9, 0x0, 0x4, 0x0, 0x3, [{0x4}, {0x3, 0x0, 0x2}, {0x9, 0x1, 0x7fffffff}, {0x1, 0x4, 0x1}, {0xf, 0x1, 0x3}, {0xf, 0x2, 0xe74}, {0xf, 0x4}, {0xd, 0x2, 0x5}, {0xd, 0x5, 0x8}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x7}, @func={0x2, 0x0, 0x0, 0xc, 0x5}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @fwd={0x1}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0xb, 0x400}, {0xa, 0x5c2}, {0xc, 0x1be}, {0xd, 0x70}, {0xb, 0x2}, {0xb, 0x6}]}, @enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0xc, [{0x1, 0x4, 0xa4}]}]}, {0x0, [0x30, 0x71, 0x2e, 0x61, 0x61, 0x5f, 0x30, 0x30]}}, &(0x7f0000000f80)=""/242, 0x13e, 0xf2, 0x0, 0x3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x18, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e00)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x63, '\x00', r3, 0x25, r6, 0x8, &(0x7f00000010c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x4, 0xa, 0x800000, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001140)=[r1, r1], &(0x7f0000001180)=[{0x2, 0x1, 0x8}, {0x1, 0x1, 0xa, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x2, 0x4, 0x9}, {0x0, 0x3, 0xd, 0xa}, {0x3, 0x4, 0x10, 0xe}, {0x5, 0x1, 0xd, 0xb}], 0x10, 0x8}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0xc80f, '\x00', r3, r1, 0x0, 0x4}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x12, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0x8, 0x7, 0x7, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='GPL\x00', 0x69, 0xdb, &(0x7f0000001440)=""/219, 0x41000, 0x10, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000001540)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001580)=[{0x5, 0x2, 0x10, 0xb}, {0x0, 0x4, 0xa}, {0x3, 0x1, 0x1, 0x2}], 0x10, 0x4c2}, 0x94) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001680)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000016c0)={r10}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001700)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001740)=r11, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x19, 0x21, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xef6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0xb, 0x2, 0x9, 0xffffffffffffffa1, 0xfffffffffffffffc}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @generic={0x3, 0x2, 0x9, 0x3, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='syzkaller\x00', 0x4, 0xa8, &(0x7f0000001900)=""/168, 0x41100, 0x40, '\x00', r3, 0x0, r6, 0x8, &(0x7f00000019c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xa, 0x5, 0x5b}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001a40)=[{0x2, 0x4, 0x1, 0x1}, {0x1, 0x3, 0x3, 0x3}, {0x4, 0x3, 0x0, 0xc}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c40)={@fallback=r8, 0x0, 0x1, 0x0, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001b80)=[0x0], &(0x7f0000001bc0)=[0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c80)={@ifindex=r3, r2, 0x23, 0x4, 0x0, @void, @value=r8, @void, @void, r13}, 0x20) getpid() r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001cc0)={0x1b, 0x0, 0x0, 0x4b6, 0x0, 0xffffffffffffffff, 0x2325, '\x00', r3, r12, 0x1, 0x5, 0x1}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x19, 0x9, 0x10000, 0x8001, 0x80, r14, 0xfffffffd, '\x00', r3, r6, 0x1, 0x0, 0x3}, 0x50) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002040)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x4, [@datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x7666, 0x80}], '>'}, @volatile={0xd, 0x0, 0x0, 0x9, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x6}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000001f80)=""/146, 0x54, 0x92, 0x1, 0x1}, 0x28) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)=@generic={&(0x7f0000002100)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x1b, 0xe, &(0x7f0000001dc0)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r12}, @alu={0x0, 0x0, 0x1, 0x0, 0x5, 0x8, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}], &(0x7f0000001e40)='GPL\x00', 0x5, 0x78, &(0x7f0000001e80)=""/120, 0x41000, 0x10, '\x00', r3, @fallback=0x2a, r16, 0x8, &(0x7f0000002080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000020c0)={0x4, 0x2, 0x939e, 0xfff}, 0x10, 0x0, r2, 0x2, &(0x7f0000002180)=[0xffffffffffffffff, r14, r1, r5, r7, r1, r17, r7, r1], &(0x7f00000021c0)=[{0x0, 0x1, 0xd}, {0x5, 0x1, 0x6, 0x1}], 0x10, 0x62e95be9}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000022c0)=r11, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=@bloom_filter={0x1e, 0x40, 0x8, 0x401, 0x42000, r15, 0x81, '\x00', 0x0, r6, 0x5, 0x2, 0x2, 0x1}, 0x50) 5.027778763s ago: executing program 3 (id=2424): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x24, 0x22, 0x0, 0x0, [0x9, 0xffffffff, 0x0, 0xf22, 0x800, 0xfffffffa, 0x9, 0x2]}]}}}], 0x38}, 0x0) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.573427184s ago: executing program 2 (id=2427): r0 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x38, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r5, 0x4) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480)={0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x323, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x27, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2d7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf50}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0xaf, 0x6, 0x4, 0x10, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, @jmp={0x5, 0x1, 0x7, 0xa, 0x9, 0x18, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @ldst={0x2, 0x2, 0x3, 0xb, 0x4, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xa, &(0x7f00000003c0)=""/10, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x9, 0x4, 0x3}, 0x10, r5, r6, 0x5, &(0x7f0000000640)=[r7, r8], &(0x7f0000000680)=[{0x4, 0x2, 0x3, 0xb}, {0x0, 0x3, 0x1e, 0xb}, {0x1, 0x5, 0xa, 0x5}, {0x5, 0x4, 0xf, 0x7}, {0x0, 0x2, 0x6, 0xa}], 0x10, 0xa}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8970, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7, 0x20}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2, 0x0, 0x1}, 0x28) 4.463182836s ago: executing program 3 (id=2428): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x2}, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0xd, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 3.750407203s ago: executing program 2 (id=2430): sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, 0x0}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0x1, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8a220, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0xfff, 0x9}, 0x4000, 0x0, 0x1, 0x5, 0x800, 0xf94, 0xe7cd, 0x0, 0x1507, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000940)={0x2, 0x80, 0x8, 0xe, 0xc, 0x2, 0x0, 0x1, 0x4500, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf50, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x10a800, 0x810, 0x2, 0x9, 0x81, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfb}, r4, 0xc, r5, 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000000000184600000200000000001800000000001da437ed0000000049a0e600080000008c682000ffffffff5d6b1000f0ffffff"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x4, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[r6, r7, 0xffffffffffffffff, r8], &(0x7f0000000700)=[{0x5, 0x2, 0x10, 0xb}, {0x4, 0x2, 0xc, 0x5}, {0x3, 0x4, 0x10, 0x5}, {0x4, 0x5, 0x6, 0x1}, {0x0, 0x5, 0x3, 0x1}], 0x10, 0xffffff81}, 0x94) 3.473500079s ago: executing program 3 (id=2431): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) r0 = socket$kcm(0x2, 0x3, 0x84) socketpair(0x22, 0x2, 0x24, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x891b, &(0x7f0000000100)) socketpair(0x2, 0x800, 0x6, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x886c25ef308ee361, @perf_config_ext={0x20003, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) 2.705991297s ago: executing program 2 (id=2432): r0 = socket$kcm(0x2, 0x2, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x6d2d7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x200000000003, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) recvmsg$kcm(r3, &(0x7f0000003cc0)={0x0, 0x0, 0x0}, 0x2080) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0) getpid() 2.386295904s ago: executing program 2 (id=2434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000040850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000013800000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2.245872968s ago: executing program 3 (id=2435): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x7}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x7, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xb3, &(0x7f0000000340)=""/179, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x10, 0x5f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) (async, rerun: 64) r3 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, 0x0, 0xfdef) close(r4) (async) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x400120a1) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) (async, rerun: 64) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r2, 0x0, 0x4000000) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000900)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a7f74588a80a3888a82f1500000000", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) recvmsg$kcm(r5, 0x0, 0x2020) (async) recvmsg(r5, 0x0, 0x40010002) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x7, 0x6, 0x3, 0x3220, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x80000000000000b}, 0x50) 2.221660048s ago: executing program 2 (id=2437): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a40)={&(0x7f00000000c0)="6ba10959045ee63b396583177c90da", &(0x7f0000000100)=""/187, &(0x7f00000001c0), &(0x7f0000000a40)="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", 0x7, r3, 0x4}, 0x38) 1.404475127s ago: executing program 2 (id=2438): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x2}, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0xd, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 1.329965479s ago: executing program 3 (id=2439): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001300)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="02cb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xb0b, r7}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x480, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b83, 0x0, @perf_bp={0x0, 0x8}, 0x9000, 0x20000003, 0x81, 0x6, 0x0, 0x658, 0x3b1, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = socket$kcm(0xa, 0x2, 0x3a) write$cgroup_subtree(r8, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff033168acb89e14f008000000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000d00)=r12, 0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r15, &(0x7f0000000300)=ANY=[], 0xfdef) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="01000000030000000000000000000000000000100000000000000000"], 0x48) 1.31377715s ago: executing program 0 (id=2440): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x425e, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8383}, @map_val={0x18, 0xc, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @ldst={0x1, 0x1, 0x4, 0x1, 0xe, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) 362.243702ms ago: executing program 0 (id=2441): r0 = socket$kcm(0x2, 0x2, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0x6d2d7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5}, 0x0, 0x200000000003, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) recvmsg$kcm(r3, &(0x7f0000003cc0)={0x0, 0x0, 0x0}, 0x2080) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0) getpid() 131.041707ms ago: executing program 0 (id=2442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x7, 0xfbc5, 0x0, 0x1000, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1b, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@exit, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0x24, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r0, 0x1, 0x0, &(0x7f0000001240)=[{0x1, 0x2, 0x8, 0x6}], 0x10, 0x7}, 0x94) 124.009268ms ago: executing program 0 (id=2443): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000300), 0x100000000000009a}, 0x24008051) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="188864a688f0365d866cf3fa000000000000000000000000000000851000000200000030000000000000009580007b0000000085000000130016009500000000000000a463219dff0e7b50503d6bfdb0975422e2ecc91132cafb8b176eeabeb53eaf19d47825a47cae765f4b70ce89795891173499152de916903f888bf0d0bd7b2080afab877d3586d45cf3f625c3a65f8ce3a11cdbcfa3cbde07b6eac69b9ce4e4f30fabbcc1ab5befcd763383d4160617155d390358d03a3375f8c13364eb288df2955dce866bc6416068e37caa99"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x92, &(0x7f0000000240)=""/146}, 0x80) 68.815079ms ago: executing program 0 (id=2444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000040850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000013800000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 0s ago: executing program 0 (id=2445): r0 = socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x6, 0x0) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f0000000180)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) getpid() syz_clone(0x56114400, &(0x7f0000000180)="6c65298663438e28757e06b38c5c6d50167ec8de", 0x14, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000dffffffffff00900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) kernel console output (not intermixed with test programs): face team0 may have been left with an inconsistent configuration, please check. [ 270.740393][ T9361] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 270.780257][ T9361] netlink: 'syz.0.948': attribute type 7 has an invalid length. [ 270.795348][ T9361] netlink: 'syz.0.948': attribute type 6 has an invalid length. [ 271.208665][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 273.120687][ T142] wlan1: Creating new IBSS network, BSSID 7e:91:8e:d6:16:8a [ 273.380829][ T9392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.956'. [ 273.414456][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 273.452563][ T9392] bridge_slave_0: entered allmulticast mode [ 273.492601][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 273.988661][ T9411] netlink: 'syz.0.961': attribute type 33 has an invalid length. [ 274.100081][ T9414] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.962'. [ 274.112202][ T9414] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 274.120603][ T9414] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 274.916807][ T9439] netlink: 'syz.0.969': attribute type 3 has an invalid length. [ 274.949364][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.969'. [ 275.118384][ T9446] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 275.170006][ T9446] team0: Device hsr_slave_0 failed to register rx_handler [ 275.573353][ T9460] netlink: 'syz.1.976': attribute type 11 has an invalid length. [ 275.592617][ T9460] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.976'. [ 275.619416][ T9460] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 275.658299][ T9460] CPU: 1 PID: 9460 Comm: syz.1.976 Not tainted syzkaller #0 [ 275.665656][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.675739][ T9460] Call Trace: [ 275.679046][ T9460] [ 275.682013][ T9460] dump_stack_lvl+0x18c/0x250 [ 275.686742][ T9460] ? show_regs_print_info+0x20/0x20 [ 275.691979][ T9460] ? load_image+0x420/0x420 [ 275.696531][ T9460] sysfs_warn_dup+0x8e/0xa0 [ 275.701066][ T9460] sysfs_do_create_link_sd+0xc0/0x110 [ 275.706470][ T9460] device_add_class_symlinks+0x1cf/0x240 [ 275.712128][ T9460] device_add+0x4f9/0xc40 [ 275.716481][ T9460] wiphy_register+0x1d99/0x2ac0 [ 275.721365][ T9460] ? cfg80211_event_work+0x40/0x40 [ 275.726660][ T9460] ? minstrel_ht_alloc+0x88a/0x990 [ 275.731801][ T9460] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 275.737905][ T9460] ieee80211_register_hw+0x2dd8/0x3b30 [ 275.743389][ T9460] ? ieee80211_register_hw+0xf11/0x3b30 [ 275.748953][ T9460] ? ieee80211_tasklet_handler+0x20/0x20 [ 275.754587][ T9460] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 275.760487][ T9460] ? __debug_object_init+0xec/0x450 [ 275.765698][ T9460] ? __asan_memset+0x22/0x40 [ 275.770324][ T9460] ? __hrtimer_init+0x189/0x270 [ 275.775202][ T9460] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 275.780953][ T9460] ? mac80211_hwsim_free+0x220/0x220 [ 275.786240][ T9460] ? rcu_is_watching+0x15/0xb0 [ 275.791011][ T9460] ? kstrndup+0xbd/0x140 [ 275.795277][ T9460] hwsim_new_radio_nl+0xdad/0x1a70 [ 275.800495][ T9460] ? __nla_validate+0x50/0x50 [ 275.805195][ T9460] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 275.811537][ T9460] ? __nla_parse+0x40/0x50 [ 275.815968][ T9460] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 275.822310][ T9460] genl_family_rcv_msg_doit+0x21a/0x310 [ 275.827865][ T9460] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 275.833770][ T9460] ? bpf_lsm_capable+0x9/0x10 [ 275.838452][ T9460] ? security_capable+0x89/0xb0 [ 275.843310][ T9460] genl_rcv_msg+0x611/0x7a0 [ 275.847823][ T9460] ? genl_bind+0x360/0x360 [ 275.852238][ T9460] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 275.858582][ T9460] netlink_rcv_skb+0x235/0x4c0 [ 275.863351][ T9460] ? genl_bind+0x360/0x360 [ 275.867771][ T9460] ? netlink_ack+0x1160/0x1160 [ 275.872547][ T9460] ? __lock_acquire+0x7d80/0x7d80 [ 275.877576][ T9460] ? net_generic+0x1e/0x240 [ 275.882087][ T9460] ? down_read+0x1ac/0x2e0 [ 275.886509][ T9460] genl_rcv+0x28/0x40 [ 275.890493][ T9460] netlink_unicast+0x7b1/0x930 [ 275.895268][ T9460] netlink_sendmsg+0x8d0/0xbf0 [ 275.900048][ T9460] ? netlink_getsockopt+0x590/0x590 [ 275.905251][ T9460] ? apparmor_socket_sendmsg+0x8e/0x330 [ 275.910798][ T9460] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 275.916085][ T9460] ? security_socket_sendmsg+0x80/0xa0 [ 275.921545][ T9460] ? netlink_getsockopt+0x590/0x590 [ 275.926753][ T9460] ____sys_sendmsg+0x61b/0x980 [ 275.931523][ T9460] ? __asan_memset+0x22/0x40 [ 275.936117][ T9460] ? __sys_sendmsg_sock+0x30/0x30 [ 275.941151][ T9460] ? __import_iovec+0x5f2/0x850 [ 275.946014][ T9460] ? import_iovec+0x73/0xa0 [ 275.950522][ T9460] ___sys_sendmsg+0x2a6/0x360 [ 275.955205][ T9460] ? __sys_sendmsg+0x2b0/0x2b0 [ 275.960017][ T9460] __se_sys_sendmsg+0x1d0/0x2c0 [ 275.964874][ T9460] ? __x64_sys_sendmsg+0x80/0x80 [ 275.969832][ T9460] ? lockdep_hardirqs_on+0x98/0x150 [ 275.975037][ T9460] do_syscall_64+0x55/0xb0 [ 275.979457][ T9460] ? clear_bhb_loop+0x40/0x90 [ 275.984140][ T9460] ? clear_bhb_loop+0x40/0x90 [ 275.988818][ T9460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.994716][ T9460] RIP: 0033:0x7f2807f9e159 [ 275.999135][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.018744][ T9460] RSP: 002b:00007f2808eab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.027157][ T9460] RAX: ffffffffffffffda RBX: 00007f2808225fa0 RCX: 00007f2807f9e159 [ 276.035134][ T9460] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 276.043105][ T9460] RBP: 00007f2808035024 R08: 0000000000000000 R09: 0000000000000000 [ 276.051076][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.059043][ T9460] R13: 00007f2808226038 R14: 00007f2808225fa0 R15: 00007ffc002594f8 [ 276.067032][ T9460] [ 276.389914][ T9476] netlink: 'syz.1.980': attribute type 10 has an invalid length. [ 276.430674][ T9476] team0: Device hsr_slave_0 failed to register rx_handler [ 277.287072][ T9504] netlink: 'syz.0.991': attribute type 5 has an invalid length. [ 277.379168][ T9507] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 277.397420][ T9508] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 277.436184][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 277.848925][ T9522] sit0: entered allmulticast mode [ 278.138442][ T9522] sit0: entered promiscuous mode [ 279.710384][ T9561] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 279.821827][ T9561] team0: Device vxcan1 is of different type [ 279.857698][ T9563] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 279.948192][ T9563] team0: Device vxcan1 is of different type [ 280.309144][ T9590] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1015'. [ 280.778473][ T9597] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1018'. [ 280.824010][ T9596] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1018'. [ 281.154781][ T9598] syzkaller0: entered promiscuous mode [ 281.205235][ T9598] syzkaller0: entered allmulticast mode [ 282.364699][ T9614] netlink: 'syz.3.1021': attribute type 5 has an invalid length. [ 284.124466][ T9619] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 284.132197][ T9619] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 284.143321][ T9626] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 284.167170][ T9628] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 284.183286][ T9628] team0: Device hsr_slave_0 failed to register rx_handler [ 284.600656][ T9644] netlink: 'syz.1.1029': attribute type 2 has an invalid length. [ 284.764451][ T9646] delete_channel: no stack [ 284.817207][ T9654] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.1032'. [ 284.834347][ T9654] netlink: 166020 bytes leftover after parsing attributes in process `syz.2.1032'. [ 284.853436][ T9654] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 285.207172][ T9666] netlink: 'syz.2.1035': attribute type 5 has an invalid length. [ 285.637295][ T9672] netlink: 'syz.1.1037': attribute type 10 has an invalid length. [ 285.656237][ T9672] team0: Device hsr_slave_0 failed to register rx_handler [ 285.888398][ T9680] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1039'. [ 285.904587][ T9680] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 286.093342][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1042'. [ 288.104476][ T12] wlan1: Trigger new scan to find an IBSS to join [ 288.782058][ T9690] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1042'. [ 288.793553][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1042'. [ 288.802993][ T9689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1042'. [ 288.825061][ T9694] bridge0: port 3(hsr0) entered disabled state [ 288.831507][ T9694] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.839149][ T9694] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.878711][ T9694] bridge0: entered allmulticast mode [ 288.908059][ T9695] bridge0: port 3(hsr0) entered blocking state [ 288.914433][ T9695] bridge0: port 3(hsr0) entered forwarding state [ 288.921044][ T9695] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.928266][ T9695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.935771][ T9695] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.943019][ T9695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.953709][ T9700] netlink: 'syz.0.1046': attribute type 29 has an invalid length. [ 288.963984][ T9695] bridge0: entered promiscuous mode [ 288.985979][ T9700] netlink: 'syz.0.1046': attribute type 29 has an invalid length. [ 289.008228][ T9703] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1046'. [ 289.089202][ T9700] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 289.117931][ T9705] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.170510][ T9707] netlink: 'syz.1.1048': attribute type 21 has an invalid length. [ 289.198143][ T9707] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.208609][ T9707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.215985][ T9707] IPv6: NLM_F_CREATE should be set when creating new route [ 289.223468][ T9707] IPv6: NLM_F_CREATE should be set when creating new route [ 289.230769][ T9707] IPv6: NLM_F_CREATE should be set when creating new route [ 289.314839][ T9705] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 289.333933][ T9705] team0: Device hsr_slave_0 failed to register rx_handler [ 289.391139][ T9713] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.454891][ T9713] netlink: 'syz.3.1050': attribute type 10 has an invalid length. [ 289.460079][ T9718] netlink: 'syz.1.1051': attribute type 4 has an invalid length. [ 289.486201][ T9718] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1051'. [ 289.621101][ T9722] netlink: 'syz.1.1052': attribute type 5 has an invalid length. [ 289.644909][ T9725] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 289.760022][ T9725] team0: Device hsr_slave_0 failed to register rx_handler [ 290.060878][ T9732] netlink: 'syz.3.1055': attribute type 11 has an invalid length. [ 290.075148][ T9732] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1055'. [ 290.181993][ T9740] hsr0: left allmulticast mode [ 290.190431][ T9740] hsr_slave_0: left allmulticast mode [ 290.199134][ T9740] hsr_slave_1: left allmulticast mode [ 290.206434][ T9740] bridge0: port 3(hsr0) entered disabled state [ 290.243775][ T9740] bridge_slave_1: left allmulticast mode [ 290.266926][ T9740] bridge_slave_1: left promiscuous mode [ 290.282299][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.297050][ T9740] bridge_slave_0: left allmulticast mode [ 290.306402][ T9740] bridge_slave_0: left promiscuous mode [ 290.313489][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.451217][ T9749] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.546643][ T9749] validate_nla: 1 callbacks suppressed [ 290.546680][ T9749] netlink: 'syz.0.1060': attribute type 10 has an invalid length. [ 290.851569][ T9755] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 290.883988][ T9755] netlink: 'syz.2.1063': attribute type 10 has an invalid length. [ 290.892484][ T9755] team0: Device hsr_slave_0 failed to register rx_handler [ 291.231150][ T9770] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1069'. [ 291.381954][ T9780] netlink: 'syz.1.1071': attribute type 13 has an invalid length. [ 291.534355][ T9785] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1073'. [ 291.986676][ T9805] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 292.057433][ T9805] netlink: 'syz.3.1077': attribute type 10 has an invalid length. [ 292.364733][ T9811] syzkaller0: entered promiscuous mode [ 292.385615][ T9811] syzkaller0: entered allmulticast mode [ 292.986125][ T9834] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 293.023395][ T9838] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 293.109973][ T9838] team0: Device hsr_slave_0 failed to register rx_handler [ 293.154224][ T7645] wlan1: Trigger new scan to find an IBSS to join [ 293.171685][ T7645] wlan1: Trigger new scan to find an IBSS to join [ 293.478470][ T9841] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.522730][ T9846] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.533959][ T9841] netlink: 'syz.3.1087': attribute type 10 has an invalid length. [ 293.564327][ T9846] netlink: 'syz.0.1089': attribute type 10 has an invalid length. [ 294.018429][ T9862] sit0: left promiscuous mode [ 294.127238][ T9864] sit0: entered promiscuous mode [ 294.590025][ T9869] netlink: 'syz.3.1093': attribute type 21 has an invalid length. [ 294.622655][ T9869] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1093'. [ 294.738740][ T9874] netlink: 'syz.1.1094': attribute type 3 has an invalid length. [ 294.773966][ T9874] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1094'. [ 294.996232][ T9877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1096'. [ 295.071352][ T9882] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1096'. [ 296.103901][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 296.115777][ T7652] wlan1: Trigger new scan to find an IBSS to join [ 297.632310][ T9892] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 297.690217][ T9897] validate_nla: 2 callbacks suppressed [ 297.690236][ T9897] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 297.710489][ T9897] team0: Device hsr_slave_0 failed to register rx_handler [ 297.875655][ T9904] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 297.920616][ T9902] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1100'. [ 297.990917][ T9904] netlink: 'syz.3.1101': attribute type 10 has an invalid length. [ 298.073613][ T9900] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 298.842262][ T9922] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 298.929005][ T9922] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 298.947652][ T9933] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 298.959957][ T9927] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 299.023466][ T9919] delete_channel: no stack [ 299.029400][ T9928] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 299.038041][ T9927] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 299.081304][ T9927] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 299.090254][ T9927] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 299.381194][ T9943] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 300.102883][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 300.110518][ T7655] wlan1: Trigger new scan to find an IBSS to join [ 300.611807][ T9976] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 300.897494][ T9984] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 300.966062][ T9989] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 301.391763][T10007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1127'. [ 301.521243][T10013] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1129'. [ 301.605688][T10014] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1130'. [ 301.836549][T10014] syz.2.1130 (10014) used greatest stack depth: 18440 bytes left [ 301.961615][T10023] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1132'. [ 301.971191][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 302.668527][T10046] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1138'. [ 303.073532][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 304.049938][T10089] sctp: [Deprecated]: syz.3.1153 (pid 10089) Use of int in max_burst socket option deprecated. [ 304.049938][T10089] Use struct sctp_assoc_value instead [ 305.063835][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 305.070635][ T61] wlan1: Trigger new scan to find an IBSS to join [ 305.560774][T10110] validate_nla: 27 callbacks suppressed [ 305.560790][T10110] netlink: 'syz.3.1157': attribute type 29 has an invalid length. [ 305.582910][T10110] netlink: 'syz.3.1157': attribute type 29 has an invalid length. [ 305.682112][T10110] netlink: 'syz.3.1157': attribute type 29 has an invalid length. [ 306.041608][ T7655] wlan1: Creating new IBSS network, BSSID 86:2d:29:be:c0:b7 [ 307.154213][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 308.078378][T10115] netlink: 'syz.3.1157': attribute type 29 has an invalid length. [ 308.086712][T10110] netlink: 'syz.3.1157': attribute type 29 has an invalid length. [ 308.102975][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 308.139333][T10119] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1159'. [ 308.199952][T10119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.216374][T10119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.236267][T10119] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 308.246796][T10119] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 308.258747][T10119] bridge0: port 3(hsr0) entered disabled state [ 308.265085][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.272209][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.283895][T10119] bond0 (unregistering): Released all slaves [ 308.625875][T10129] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1161'. [ 308.645755][T10129] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 309.079542][ T61] wlan1: Creating new IBSS network, BSSID fa:68:57:8b:c1:ac [ 309.922362][ T61] wlan1: Creating new IBSS network, BSSID 36:4d:e2:e0:81:64 [ 309.959657][T10148] netlink: 'syz.1.1165': attribute type 13 has an invalid length. [ 309.983382][T10148] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.1165'. [ 310.068602][T10147] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 310.083410][T10147] netlink: 'syz.1.1165': attribute type 3 has an invalid length. [ 310.091570][T10147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1165'. [ 310.116435][T10147] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 310.127746][T10147] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1165'. [ 310.148248][T10152] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1166'. [ 310.158727][T10151] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1166'. [ 310.340236][T10151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1166'. [ 311.271858][T10188] delete_channel: no stack [ 311.281988][T10188] delete_channel: no stack [ 311.360604][T10196] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.384442][T10196] syzkaller1: linktype set to 769 [ 311.410199][T10196] netlink: 'syz.2.1178': attribute type 3 has an invalid length. [ 311.429163][T10196] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1178'. [ 312.609293][T10237] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 312.696313][T10239] netlink: 'syz.1.1189': attribute type 21 has an invalid length. [ 312.717415][T10239] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1189'. [ 313.323734][T10245] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 313.472958][T10245] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 313.532316][T10245] team0: Device hsr_slave_0 failed to register rx_handler [ 314.000553][T10265] syzkaller0: entered promiscuous mode [ 314.012610][T10265] syzkaller0: entered allmulticast mode [ 314.048997][T10266] netlink: 'syz.3.1197': attribute type 10 has an invalid length. [ 314.112593][T10266] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1197'. [ 314.149879][T10267] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1196'. [ 314.693306][T10287] netlink: 'syz.1.1200': attribute type 21 has an invalid length. [ 315.056119][T10301] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1204'. [ 315.332091][T10302] netlink: 'syz.1.1205': attribute type 10 has an invalid length. [ 315.341889][T10302] team0: Device hsr_slave_0 failed to register rx_handler [ 315.402677][T10309] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 315.669016][T10316] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 315.687954][T10316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1210'. [ 316.103803][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 316.439485][T10335] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1214'. [ 317.330016][T10351] netlink: 'syz.2.1227': attribute type 21 has an invalid length. [ 317.360707][T10351] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1227'. [ 317.432997][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439353][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.534832][T10352] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.886135][T10352] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 318.107993][ T7652] wlan1: Trigger new scan to find an IBSS to join [ 318.166562][T10364] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 320.404674][T10436] syzkaller0: entered promiscuous mode [ 320.410206][T10436] syzkaller0: entered allmulticast mode [ 320.455000][T10445] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.110513][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 322.118436][ T49] wlan1: Trigger new scan to find an IBSS to join [ 323.148009][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 323.874911][T10477] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.1242'. [ 323.915427][T10479] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 324.113073][ T7655] wlan1: Creating new IBSS network, BSSID d2:26:62:f6:bc:c9 [ 324.793420][T10507] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1249'. [ 325.701701][T10529] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 326.103401][ T49] wlan1: Trigger new scan to find an IBSS to join [ 326.212293][T10549] netlink: 'syz.0.1260': attribute type 6 has an invalid length. [ 326.225904][T10549] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 326.234355][T10549] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1260'. [ 326.597233][T10566] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 327.484698][T10582] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1272'. [ 327.661366][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 327.824515][T10592] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 327.872977][T10592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1276'. [ 328.112646][ T49] wlan1: Trigger new scan to find an IBSS to join [ 328.120961][T10601] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.072870][ T7154] wlan1: Trigger new scan to find an IBSS to join [ 329.694921][T10620] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1284'. [ 331.970114][T10617] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1284'. [ 332.105762][ T7652] wlan1: Trigger new scan to find an IBSS to join [ 332.113013][ T7655] wlan1: Trigger new scan to find an IBSS to join [ 332.113124][ T49] wlan1: Trigger new scan to find an IBSS to join [ 332.184862][T10646] netlink: 'syz.2.1291': attribute type 10 has an invalid length. [ 334.102730][ T7652] wlan1: Creating new IBSS network, BSSID ae:ed:10:5a:eb:db [ 335.166905][ T7154] wlan1: Creating new IBSS network, BSSID ea:29:ce:0c:41:ea [ 335.172898][ T7654] wlan1: Creating new IBSS network, BSSID 56:50:40:32:50:86 [ 335.472371][T10679] netlink: 'syz.1.1297': attribute type 5 has an invalid length. [ 335.503879][T10679] sit0: left promiscuous mode [ 335.509303][T10680] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1299'. [ 335.702005][T10683] sit0: entered promiscuous mode [ 336.330480][T10688] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 336.380546][T10688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.415903][T10688] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 337.081134][T10715] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1307'. [ 337.120000][T10715] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 338.615584][T10738] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.1314'. [ 338.690775][T10749] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1316'. [ 338.700314][T10749] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.1316'. [ 338.710055][T10749] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 338.938255][T10757] netlink: 'syz.2.1320': attribute type 3 has an invalid length. [ 338.954747][T10757] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1320'. [ 342.188162][ T5814] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 343.383467][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1329'. [ 343.605125][T10815] netlink: 'syz.1.1331': attribute type 3 has an invalid length. [ 343.622852][T10815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1331'. [ 346.668052][ T5087] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 347.193002][T10826] netlink: 'syz.0.1333': attribute type 21 has an invalid length. [ 347.227281][T10823] netlink: 'syz.0.1333': attribute type 39 has an invalid length. [ 347.911677][T10850] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.958946][T10853] netlink: 'syz.1.1341': attribute type 4 has an invalid length. [ 348.003831][T10857] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1343'. [ 348.025777][T10850] netlink: 'syz.3.1340': attribute type 10 has an invalid length. [ 348.048445][T10857] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 348.069170][T10857] CPU: 0 PID: 10857 Comm: syz.2.1343 Not tainted syzkaller #0 [ 348.076703][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.086780][T10857] Call Trace: [ 348.090082][T10857] [ 348.093045][T10857] dump_stack_lvl+0x18c/0x250 [ 348.097781][T10857] ? show_regs_print_info+0x20/0x20 [ 348.103028][T10857] ? load_image+0x420/0x420 [ 348.107611][T10857] sysfs_warn_dup+0x8e/0xa0 [ 348.112347][T10857] sysfs_do_create_link_sd+0xc0/0x110 [ 348.117769][T10857] device_add_class_symlinks+0x1cf/0x240 [ 348.123458][T10857] device_add+0x4f9/0xc40 [ 348.127840][T10857] wiphy_register+0x1d99/0x2ac0 [ 348.132788][T10857] ? cfg80211_event_work+0x40/0x40 [ 348.137938][T10857] ? minstrel_ht_alloc+0x88a/0x990 [ 348.143119][T10857] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 348.149232][T10857] ieee80211_register_hw+0x2dd8/0x3b30 [ 348.154754][T10857] ? ieee80211_register_hw+0xf11/0x3b30 [ 348.160333][T10857] ? ieee80211_tasklet_handler+0x20/0x20 [ 348.165997][T10857] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 348.171928][T10857] ? __debug_object_init+0xec/0x450 [ 348.177177][T10857] ? __asan_memset+0x22/0x40 [ 348.181791][T10857] ? __hrtimer_init+0x189/0x270 [ 348.186663][T10857] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 348.192434][T10857] ? mac80211_hwsim_free+0x220/0x220 [ 348.197733][T10857] ? rcu_is_watching+0x15/0xb0 [ 348.202513][T10857] ? kstrndup+0xbd/0x140 [ 348.206787][T10857] hwsim_new_radio_nl+0xdad/0x1a70 [ 348.211918][T10857] ? __nla_validate+0x50/0x50 [ 348.216647][T10857] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 348.223014][T10857] ? __nla_parse+0x40/0x50 [ 348.227454][T10857] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 348.233805][T10857] genl_family_rcv_msg_doit+0x21a/0x310 [ 348.239375][T10857] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 348.245292][T10857] ? bpf_lsm_capable+0x9/0x10 [ 348.249983][T10857] ? security_capable+0x89/0xb0 [ 348.254854][T10857] genl_rcv_msg+0x611/0x7a0 [ 348.259377][T10857] ? genl_bind+0x360/0x360 [ 348.263801][T10857] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 348.270146][T10857] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 348.276742][T10857] ? perf_trace_lock+0xfc/0x3b0 [ 348.281617][T10857] netlink_rcv_skb+0x235/0x4c0 [ 348.286402][T10857] ? genl_bind+0x360/0x360 [ 348.290865][T10857] ? netlink_ack+0x1160/0x1160 [ 348.295686][T10857] ? __lock_acquire+0x7d80/0x7d80 [ 348.300729][T10857] ? net_generic+0x1e/0x240 [ 348.305256][T10857] ? down_read+0x1ac/0x2e0 [ 348.309689][T10857] genl_rcv+0x28/0x40 [ 348.313683][T10857] netlink_unicast+0x7b1/0x930 [ 348.318480][T10857] netlink_sendmsg+0x8d0/0xbf0 [ 348.323273][T10857] ? netlink_getsockopt+0x590/0x590 [ 348.328483][T10857] ? apparmor_socket_sendmsg+0x8e/0x330 [ 348.334043][T10857] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 348.339336][T10857] ? security_socket_sendmsg+0x80/0xa0 [ 348.344797][T10857] ? netlink_getsockopt+0x590/0x590 [ 348.350039][T10857] ____sys_sendmsg+0x61b/0x980 [ 348.354867][T10857] ? __asan_memset+0x22/0x40 [ 348.359514][T10857] ? __sys_sendmsg_sock+0x30/0x30 [ 348.364569][T10857] ? __import_iovec+0x5f2/0x850 [ 348.369457][T10857] ? import_iovec+0x73/0xa0 [ 348.373986][T10857] ___sys_sendmsg+0x2a6/0x360 [ 348.378683][T10857] ? __sys_sendmsg+0x2b0/0x2b0 [ 348.383537][T10857] __se_sys_sendmsg+0x1d0/0x2c0 [ 348.388404][T10857] ? __x64_sys_sendmsg+0x80/0x80 [ 348.393402][T10857] ? lockdep_hardirqs_on+0x98/0x150 [ 348.398639][T10857] do_syscall_64+0x55/0xb0 [ 348.403074][T10857] ? clear_bhb_loop+0x40/0x90 [ 348.407761][T10857] ? clear_bhb_loop+0x40/0x90 [ 348.412470][T10857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.418371][T10857] RIP: 0033:0x7f808899e159 [ 348.422794][T10857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.442409][T10857] RSP: 002b:00007f80898ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.450842][T10857] RAX: ffffffffffffffda RBX: 00007f8088c25fa0 RCX: 00007f808899e159 [ 348.458820][T10857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 348.466794][T10857] RBP: 00007f8088a35024 R08: 0000000000000000 R09: 0000000000000000 [ 348.474780][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.482946][T10857] R13: 00007f8088c26038 R14: 00007f8088c25fa0 R15: 00007ffe558b92e8 [ 348.490980][T10857] [ 350.107600][ T2933] wlan1: Trigger new scan to find an IBSS to join [ 350.246282][T10884] syzkaller0: entered promiscuous mode [ 350.252050][T10884] syzkaller0: entered allmulticast mode [ 352.074709][T10917] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 352.088198][T10919] netlink: 'syz.0.1353': attribute type 10 has an invalid length. [ 352.193111][T10921] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1357'. [ 352.405977][T10927] netlink: 'syz.0.1356': attribute type 3 has an invalid length. [ 352.430854][T10927] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1356'. [ 352.456655][T10921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.529768][T10921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.564224][T10921] bond0 (unregistering): Released all slaves [ 352.599157][T10931] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 352.610612][T10931] team0: Device hsr_slave_0 failed to register rx_handler [ 352.715922][T10933] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1357'. [ 352.816743][T10940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.145724][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 353.334564][T10957] netlink: 'syz.0.1363': attribute type 40 has an invalid length. [ 353.665209][T10973] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 353.704924][T10973] team0: Device hsr_slave_0 failed to register rx_handler [ 354.099735][T10985] veth0_vlan: entered allmulticast mode [ 354.107303][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 354.695677][T10990] veth0_vlan: left promiscuous mode [ 354.701582][T10990] veth0_vlan: entered promiscuous mode [ 354.768702][T11005] netlink: 'syz.1.1371': attribute type 2 has an invalid length. [ 354.817453][T11005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1371'. [ 354.852521][T11007] netlink: 'syz.1.1371': attribute type 2 has an invalid length. [ 354.862752][T11007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1371'. [ 355.368776][T11023] netlink: 'syz.1.1379': attribute type 21 has an invalid length. [ 355.394861][T11023] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1379'. [ 355.406859][T11021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.414350][T11021] IPv6: NLM_F_CREATE should be set when creating new route [ 355.421959][T11021] IPv6: NLM_F_CREATE should be set when creating new route [ 355.429571][T11021] IPv6: NLM_F_CREATE should be set when creating new route [ 355.445836][T11030] netlink: 'syz.2.1378': attribute type 9 has an invalid length. [ 355.462520][T11030] netlink: 652 bytes leftover after parsing attributes in process `syz.2.1378'. [ 355.736552][T11041] netlink: 'syz.0.1384': attribute type 4 has an invalid length. [ 355.807368][T11041] netlink: 'syz.0.1384': attribute type 7 has an invalid length. [ 356.119939][ T49] wlan1: Trigger new scan to find an IBSS to join [ 356.561326][T11066] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1392'. [ 356.598613][T11066] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.1392'. [ 357.108722][ T49] wlan1: Creating new IBSS network, BSSID 4a:e2:f2:da:2b:14 [ 357.259421][T11079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1396'. [ 357.319640][T11079] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1396'. [ 357.344767][T11079] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1396'. [ 357.446319][T11081] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1397'. [ 358.198469][T11098] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.248033][T11100] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1405'. [ 358.285673][T11102] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1405'. [ 358.336390][T11098] validate_nla: 3 callbacks suppressed [ 358.336582][T11098] netlink: 'syz.3.1403': attribute type 10 has an invalid length. [ 358.618021][T11116] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1407'. [ 358.631396][T11116] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1407'. [ 358.997604][T11128] netlink: 'syz.2.1410': attribute type 13 has an invalid length. [ 359.022662][T11128] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1410'. [ 359.205264][T11138] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.341517][T11138] netlink: 'syz.0.1414': attribute type 10 has an invalid length. [ 360.736891][T11169] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1420'. [ 361.052123][T11171] hsr_slave_0: left promiscuous mode [ 361.100355][T11171] hsr_slave_1: left promiscuous mode [ 361.318480][T11171] hsr0 (unregistering): left allmulticast mode [ 361.332515][T11171] bridge0: port 3(hsr0) entered disabled state [ 361.518854][T11173] netlink: 'syz.2.1422': attribute type 12 has an invalid length. [ 361.543041][T11174] netlink: 'syz.2.1422': attribute type 4 has an invalid length. [ 361.552562][T11179] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.613015][T11182] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 361.755996][T11184] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.941237][T11189] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 361.975625][T11189] team0: Device hsr_slave_0 failed to register rx_handler [ 362.038748][T11188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.104055][ T7154] wlan1: Trigger new scan to find an IBSS to join [ 362.243125][T11198] netlink: 'syz.2.1430': attribute type 21 has an invalid length. [ 362.280558][T11198] __nla_validate_parse: 3 callbacks suppressed [ 362.280634][T11198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1430'. [ 362.346659][T11201] syz.0.1431[11201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.346955][T11201] syz.0.1431[11201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.106123][ T7652] wlan1: Trigger new scan to find an IBSS to join [ 364.124223][ T49] wlan1: Trigger new scan to find an IBSS to join [ 365.247873][ T49] wlan1: Creating new IBSS network, BSSID 56:0c:f2:db:1c:9a [ 365.812014][T11228] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 366.203243][T11239] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 366.283985][T11239] team0: Port device hsr_slave_0 added [ 366.303565][T11244] netlink: 'syz.0.1441': attribute type 13 has an invalid length. [ 366.311818][T11244] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1441'. [ 366.855171][T11261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.266674][T11262] syzkaller0: entered promiscuous mode [ 367.342632][T11262] syzkaller0: entered allmulticast mode [ 367.408892][T11264] netlink: 'syz.3.1448': attribute type 64 has an invalid length. [ 368.106345][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 369.144515][ T7154] wlan1: Trigger new scan to find an IBSS to join [ 370.093829][ T7154] wlan1: Creating new IBSS network, BSSID ca:e9:e2:23:12:89 [ 370.112985][ T2933] wlan1: Creating new IBSS network, BSSID 1a:98:1a:13:a1:e0 [ 371.669849][T11302] syzkaller0: entered promiscuous mode [ 371.699813][T11302] syzkaller0: entered allmulticast mode [ 371.917521][T11324] netlink: 'syz.2.1457': attribute type 28 has an invalid length. [ 371.933001][T11324] netlink: 'syz.2.1457': attribute type 29 has an invalid length. [ 371.943967][T11324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1457'. [ 373.578346][T11311] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1456'. [ 373.587636][T11311] bridge_slave_1: default FDB implementation only supports local addresses [ 373.606717][T11321] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1457'. [ 373.671700][T11327] À: port 1(vlan0) entered blocking state [ 373.705435][T11327] À: port 1(vlan0) entered disabled state [ 373.711409][T11327] vlan0: entered allmulticast mode [ 373.734065][T11327] vlan0: entered promiscuous mode [ 373.786251][T11333] netlink: 'syz.2.1461': attribute type 29 has an invalid length. [ 373.822886][T11333] netlink: 'syz.2.1461': attribute type 29 has an invalid length. [ 373.841023][T11336] netlink: 'syz.2.1461': attribute type 29 has an invalid length. [ 373.932111][T11333] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1461'. [ 373.987469][T11333] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 374.005988][T11333] CPU: 0 PID: 11333 Comm: syz.2.1461 Not tainted syzkaller #0 [ 374.013559][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.023624][T11333] Call Trace: [ 374.026906][T11333] [ 374.029836][T11333] dump_stack_lvl+0x18c/0x250 [ 374.034526][T11333] ? show_regs_print_info+0x20/0x20 [ 374.039722][T11333] ? load_image+0x420/0x420 [ 374.044233][T11333] sysfs_warn_dup+0x8e/0xa0 [ 374.048737][T11333] sysfs_do_create_link_sd+0xc0/0x110 [ 374.054112][T11333] device_add_class_symlinks+0x1cf/0x240 [ 374.059748][T11333] device_add+0x4f9/0xc40 [ 374.064083][T11333] wiphy_register+0x1d99/0x2ac0 [ 374.068954][T11333] ? cfg80211_event_work+0x40/0x40 [ 374.074072][T11333] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.080284][T11333] ieee80211_register_hw+0x2dd8/0x3b30 [ 374.085780][T11333] ? ieee80211_register_hw+0xf11/0x3b30 [ 374.091335][T11333] ? ieee80211_tasklet_handler+0x20/0x20 [ 374.096971][T11333] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 374.102874][T11333] ? __debug_object_init+0xec/0x450 [ 374.108099][T11333] ? __asan_memset+0x22/0x40 [ 374.112697][T11333] ? __hrtimer_init+0x189/0x270 [ 374.117553][T11333] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 374.123294][T11333] ? mac80211_hwsim_free+0x220/0x220 [ 374.128579][T11333] ? rcu_is_watching+0x15/0xb0 [ 374.133348][T11333] ? kstrndup+0xbd/0x140 [ 374.137605][T11333] hwsim_new_radio_nl+0xdad/0x1a70 [ 374.142742][T11333] ? __nla_validate+0x50/0x50 [ 374.147469][T11333] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 374.153820][T11333] ? __nla_parse+0x40/0x50 [ 374.158244][T11333] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 374.164585][T11333] genl_family_rcv_msg_doit+0x21a/0x310 [ 374.170141][T11333] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 374.176047][T11333] ? lockdep_hardirqs_on+0x98/0x150 [ 374.181262][T11333] ? genl_rcv_msg+0x5ef/0x7a0 [ 374.185949][T11333] genl_rcv_msg+0x611/0x7a0 [ 374.190459][T11333] ? genl_bind+0x360/0x360 [ 374.194875][T11333] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 374.201204][T11333] ? perf_trace_preemptirq_template+0xac/0x330 [ 374.207387][T11333] ? irqentry_enter+0x37/0x50 [ 374.212099][T11333] netlink_rcv_skb+0x235/0x4c0 [ 374.216877][T11333] ? genl_bind+0x360/0x360 [ 374.221298][T11333] ? netlink_ack+0x1160/0x1160 [ 374.226071][T11333] ? __lock_acquire+0x7d80/0x7d80 [ 374.231098][T11333] ? net_generic+0x1e/0x240 [ 374.235614][T11333] ? down_read+0x1ac/0x2e0 [ 374.240071][T11333] genl_rcv+0x28/0x40 [ 374.244115][T11333] netlink_unicast+0x7b1/0x930 [ 374.248897][T11333] netlink_sendmsg+0x8d0/0xbf0 [ 374.253671][T11333] ? netlink_getsockopt+0x590/0x590 [ 374.258874][T11333] ? apparmor_socket_sendmsg+0x8e/0x330 [ 374.264424][T11333] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.269714][T11333] ? security_socket_sendmsg+0x80/0xa0 [ 374.275188][T11333] ? netlink_getsockopt+0x590/0x590 [ 374.280412][T11333] ____sys_sendmsg+0x61b/0x980 [ 374.285188][T11333] ? lockdep_hardirqs_on+0x98/0x150 [ 374.290398][T11333] ? __asan_memset+0x22/0x40 [ 374.294989][T11333] ? __sys_sendmsg_sock+0x30/0x30 [ 374.300021][T11333] ? __import_iovec+0x5f2/0x850 [ 374.304884][T11333] ? import_iovec+0x73/0xa0 [ 374.309394][T11333] ___sys_sendmsg+0x2a6/0x360 [ 374.314080][T11333] ? __sys_sendmsg+0x2b0/0x2b0 [ 374.318884][T11333] __se_sys_sendmsg+0x1d0/0x2c0 [ 374.323737][T11333] ? __x64_sys_sendmsg+0x80/0x80 [ 374.328687][T11333] ? lockdep_hardirqs_on+0x98/0x150 [ 374.333918][T11333] do_syscall_64+0x55/0xb0 [ 374.338371][T11333] ? clear_bhb_loop+0x40/0x90 [ 374.343066][T11333] ? clear_bhb_loop+0x40/0x90 [ 374.347771][T11333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.353691][T11333] RIP: 0033:0x7f808899e159 [ 374.358114][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.377728][T11333] RSP: 002b:00007f80898ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.386149][T11333] RAX: ffffffffffffffda RBX: 00007f8088c25fa0 RCX: 00007f808899e159 [ 374.394123][T11333] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 374.402099][T11333] RBP: 00007f8088a35024 R08: 0000000000000000 R09: 0000000000000000 [ 374.410071][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.418041][T11333] R13: 00007f8088c26038 R14: 00007f8088c25fa0 R15: 00007ffe558b92e8 [ 374.426029][T11333] [ 374.678363][T11342] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1464'. [ 374.753765][T11342] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1464'. [ 375.927510][T11385] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1477'. [ 375.995927][T11385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1477'. [ 378.379010][T11387] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1479'. [ 378.421134][T11396] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1482'. [ 378.449088][T11399] netlink: 'syz.3.1483': attribute type 10 has an invalid length. [ 378.463484][T11399] bridge0: port 3(dummy0) entered disabled state [ 378.477928][T11399] dummy0: left allmulticast mode [ 378.483497][T11399] dummy0: left promiscuous mode [ 378.488732][T11399] bridge0: port 3(dummy0) entered disabled state [ 378.540152][T11401] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1484'. [ 378.560701][T11401] netlink: 'syz.1.1484': attribute type 1 has an invalid length. [ 378.568612][T11401] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1484'. [ 378.620618][T11401] netlink: 'syz.1.1484': attribute type 2 has an invalid length. [ 378.726559][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.734057][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.746121][T11409] bridge0: entered allmulticast mode [ 378.811375][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.818685][T11409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.826258][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.833494][T11409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.914145][T11409] bridge0: entered promiscuous mode [ 378.921723][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.928232][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.380496][T11427] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1490'. [ 379.447409][T11427] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1490'. [ 379.996634][T11453] netlink: 'syz.1.1494': attribute type 3 has an invalid length. [ 380.012461][T11453] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 380.020234][T11453] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1494'. [ 381.848758][T11465] syzkaller0: entered promiscuous mode [ 382.035014][T11465] syzkaller0: entered allmulticast mode [ 384.114398][ T7648] wlan1: Trigger new scan to find an IBSS to join [ 387.088070][T11502] syzkaller0: entered promiscuous mode [ 387.104025][T11502] syzkaller0: entered allmulticast mode [ 387.146638][ T142] wlan1: Trigger new scan to find an IBSS to join [ 389.393099][T11523] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1508'. [ 389.415058][T11523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.450833][T11534] netlink: 'syz.1.1513': attribute type 1 has an invalid length. [ 389.459158][T11532] netlink: 'syz.0.1512': attribute type 10 has an invalid length. [ 389.492874][T11534] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 389.509800][T11534] netlink: 'syz.1.1513': attribute type 2 has an invalid length. [ 389.525890][T11534] netlink: 'syz.1.1513': attribute type 3 has an invalid length. [ 389.549118][T11534] netlink: 'syz.1.1513': attribute type 4 has an invalid length. [ 389.568150][T11534] netlink: 'syz.1.1513': attribute type 5 has an invalid length. [ 389.590338][T11534] netlink: 'syz.1.1513': attribute type 6 has an invalid length. [ 389.623996][T11534] netlink: 'syz.1.1513': attribute type 7 has an invalid length. [ 389.631810][T11534] netlink: 'syz.1.1513': attribute type 9 has an invalid length. [ 389.664929][T11534] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1513'. [ 389.926433][T11534] team0: Device wg1 is of different type [ 390.118312][T11539] sit0: entered allmulticast mode [ 390.142677][ T7083] wlan1: Trigger new scan to find an IBSS to join [ 391.092336][ T7648] wlan1: Creating new IBSS network, BSSID be:78:28:de:48:28 [ 391.643151][T11588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1524'. [ 391.738635][T11586] team0: Device hsr_slave_0 failed to register rx_handler [ 393.362796][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'. [ 393.844125][T11636] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1534'. [ 394.127130][T11647] team0: Device hsr_slave_0 failed to register rx_handler [ 396.291963][T11692] validate_nla: 11 callbacks suppressed [ 396.291983][T11692] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 396.950512][T11702] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1548'. [ 397.385356][ T7153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.841465][T11738] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1557'. [ 398.984097][T11738] netlink: 'syz.2.1557': attribute type 29 has an invalid length. [ 399.059749][T11738] netlink: 'syz.2.1557': attribute type 29 has an invalid length. [ 399.107554][T11741] netlink: 'syz.3.1558': attribute type 22 has an invalid length. [ 399.149986][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 399.670396][ T5087] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 400.856979][T11754] syzkaller0: entered promiscuous mode [ 400.912739][T11754] syzkaller0: entered allmulticast mode [ 406.417811][ T5087] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 407.151330][T11828] netlink: 'syz.0.1581': attribute type 9 has an invalid length. [ 407.204007][T11828] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 407.313328][T11831] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1582'. [ 407.331723][T11831] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.485192][T11835] netlink: 'syz.0.1583': attribute type 9 has an invalid length. [ 407.502121][T11835] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1583'. [ 407.682837][ T5087] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 407.820260][T11849] bridge_slave_1: left allmulticast mode [ 407.841809][T11849] bridge_slave_1: left promiscuous mode [ 407.858176][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.916139][T11849] bridge_slave_0: left allmulticast mode [ 407.926092][T11849] bridge_slave_0: left promiscuous mode [ 407.937776][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.493953][T11868] netlink: 'syz.1.1592': attribute type 28 has an invalid length. [ 408.501824][T11868] netlink: 'syz.1.1592': attribute type 29 has an invalid length. [ 408.535944][T11868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1592'. [ 409.869656][T11867] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1592'. [ 410.195345][T11886] netlink: 'syz.0.1595': attribute type 4 has an invalid length. [ 410.229035][T11886] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1595'. [ 410.335866][T11890] netlink: 'syz.3.1597': attribute type 10 has an invalid length. [ 410.372159][T11890] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1597'. [ 412.734930][T11937] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 412.812599][T11937] team0: Device hsr_slave_0 failed to register rx_handler [ 413.478977][T11947] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 413.502672][T11947] netlink: 'syz.2.1613': attribute type 3 has an invalid length. [ 413.523834][T11947] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1613'. [ 413.583345][T11947] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 413.611932][T11947] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1613'. [ 414.199670][T11967] syzkaller0: entered promiscuous mode [ 414.244262][T11967] syzkaller0: entered allmulticast mode [ 414.629869][T11982] netlink: 'syz.2.1622': attribute type 9 has an invalid length. [ 414.656398][T11982] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1622'. [ 414.727429][T11988] netlink: 'syz.2.1622': attribute type 9 has an invalid length. [ 414.736025][T11988] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1622'. [ 414.882824][T11981] netlink: 'syz.2.1622': attribute type 9 has an invalid length. [ 414.914118][T11981] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1622'. [ 417.003778][T11996] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.1624'. [ 417.018741][T11997] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1624'. [ 417.065810][T11987] netlink: 'syz.2.1622': attribute type 9 has an invalid length. [ 417.084716][T11987] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1622'. [ 417.244382][T12002] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 417.268076][T12002] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 417.281325][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1625'. [ 417.329468][T12004] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1628'. [ 417.382363][T12004] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 417.396107][T12004] CPU: 0 PID: 12004 Comm: syz.2.1628 Not tainted syzkaller #0 [ 417.403630][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.413716][T12004] Call Trace: [ 417.417025][T12004] [ 417.419974][T12004] dump_stack_lvl+0x18c/0x250 [ 417.424683][T12004] ? show_regs_print_info+0x20/0x20 [ 417.429888][T12004] ? load_image+0x420/0x420 [ 417.434409][T12004] sysfs_warn_dup+0x8e/0xa0 [ 417.438914][T12004] sysfs_do_create_link_sd+0xc0/0x110 [ 417.444293][T12004] device_add_class_symlinks+0x1cf/0x240 [ 417.449930][T12004] device_add+0x4f9/0xc40 [ 417.454266][T12004] wiphy_register+0x1d99/0x2ac0 [ 417.459133][T12004] ? cfg80211_event_work+0x40/0x40 [ 417.464245][T12004] ? minstrel_ht_alloc+0x88a/0x990 [ 417.469364][T12004] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 417.475440][T12004] ieee80211_register_hw+0x2dd8/0x3b30 [ 417.480909][T12004] ? ieee80211_register_hw+0xf11/0x3b30 [ 417.486461][T12004] ? ieee80211_tasklet_handler+0x20/0x20 [ 417.492090][T12004] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 417.497989][T12004] ? __debug_object_init+0xec/0x450 [ 417.503192][T12004] ? __asan_memset+0x22/0x40 [ 417.507790][T12004] ? __hrtimer_init+0x189/0x270 [ 417.512645][T12004] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 417.518383][T12004] ? mac80211_hwsim_free+0x220/0x220 [ 417.523661][T12004] ? rcu_is_watching+0x15/0xb0 [ 417.528426][T12004] ? kstrndup+0xbd/0x140 [ 417.532679][T12004] hwsim_new_radio_nl+0xdad/0x1a70 [ 417.537795][T12004] ? __nla_validate+0x50/0x50 [ 417.542485][T12004] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 417.548821][T12004] ? __nla_parse+0x40/0x50 [ 417.553243][T12004] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 417.559575][T12004] genl_family_rcv_msg_doit+0x21a/0x310 [ 417.565126][T12004] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 417.571027][T12004] ? bpf_lsm_capable+0x9/0x10 [ 417.575710][T12004] ? security_capable+0x89/0xb0 [ 417.580574][T12004] genl_rcv_msg+0x611/0x7a0 [ 417.585087][T12004] ? genl_bind+0x360/0x360 [ 417.589501][T12004] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 417.595841][T12004] netlink_rcv_skb+0x235/0x4c0 [ 417.600604][T12004] ? genl_bind+0x360/0x360 [ 417.605024][T12004] ? netlink_ack+0x1160/0x1160 [ 417.609796][T12004] ? __lock_acquire+0x7d80/0x7d80 [ 417.614821][T12004] ? net_generic+0x1e/0x240 [ 417.619330][T12004] ? down_read+0x1ac/0x2e0 [ 417.623760][T12004] genl_rcv+0x28/0x40 [ 417.627751][T12004] netlink_unicast+0x7b1/0x930 [ 417.632523][T12004] netlink_sendmsg+0x8d0/0xbf0 [ 417.637295][T12004] ? netlink_getsockopt+0x590/0x590 [ 417.642494][T12004] ? apparmor_socket_sendmsg+0x8e/0x330 [ 417.648038][T12004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.653325][T12004] ? security_socket_sendmsg+0x80/0xa0 [ 417.658778][T12004] ? netlink_getsockopt+0x590/0x590 [ 417.663976][T12004] ____sys_sendmsg+0x61b/0x980 [ 417.668750][T12004] ? __sys_sendmsg_sock+0x30/0x30 [ 417.673785][T12004] ___sys_sendmsg+0x2a6/0x360 [ 417.678487][T12004] ? __sys_sendmsg+0x2b0/0x2b0 [ 417.683256][T12004] ? irqentry_enter+0x37/0x50 [ 417.687969][T12004] __se_sys_sendmsg+0x1d0/0x2c0 [ 417.692825][T12004] ? __x64_sys_sendmsg+0x80/0x80 [ 417.697788][T12004] ? syscall_enter_from_user_mode+0x2e/0x80 [ 417.703689][T12004] do_syscall_64+0x55/0xb0 [ 417.708122][T12004] ? clear_bhb_loop+0x40/0x90 [ 417.712800][T12004] ? clear_bhb_loop+0x40/0x90 [ 417.717477][T12004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.723369][T12004] RIP: 0033:0x7f808899e159 [ 417.727785][T12004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.747391][T12004] RSP: 002b:00007f80898ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.755803][T12004] RAX: ffffffffffffffda RBX: 00007f8088c25fa0 RCX: 00007f808899e159 [ 417.763771][T12004] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 417.771742][T12004] RBP: 00007f8088a35024 R08: 0000000000000000 R09: 0000000000000000 [ 417.779705][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.787713][T12004] R13: 00007f8088c26038 R14: 00007f8088c25fa0 R15: 00007ffe558b92e8 [ 417.795700][T12004] [ 421.655983][T12060] validate_nla: 1 callbacks suppressed [ 421.656022][T12060] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 421.690794][T12060] netlink: 'syz.1.1642': attribute type 3 has an invalid length. [ 421.738105][T12060] __nla_validate_parse: 2 callbacks suppressed [ 421.738149][T12060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1642'. [ 421.793499][T12061] netlink: 'syz.1.1642': attribute type 10 has an invalid length. [ 421.822736][T12061] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1642'. [ 421.948175][T12065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.156275][T12073] syzkaller0: entered promiscuous mode [ 422.161905][T12073] syzkaller0: entered allmulticast mode [ 423.553384][T12089] netlink: 'syz.1.1653': attribute type 29 has an invalid length. [ 423.752573][T12089] netlink: 'syz.1.1653': attribute type 29 has an invalid length. [ 423.783900][T12090] netlink: 'syz.1.1653': attribute type 29 has an invalid length. [ 423.792568][T12091] netlink: 'syz.1.1653': attribute type 29 has an invalid length. [ 423.804656][T12092] netlink: 'syz.1.1653': attribute type 29 has an invalid length. [ 423.937685][T12090] netlink: 'syz.1.1653': attribute type 29 has an invalid length. [ 424.228617][T12110] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.1657'. [ 424.795251][T12131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.816241][T12131] hsr0: entered allmulticast mode [ 424.821328][T12131] hsr_slave_0: entered allmulticast mode [ 424.855028][T12131] hsr_slave_1: entered allmulticast mode [ 425.001808][T12135] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1662'. [ 426.031365][T12162] .76žÿ: renamed from team_slave_1 (while UP) [ 427.298916][T12190] netlink: 'syz.2.1675': attribute type 63 has an invalid length. [ 427.310235][T12192] pim6reg1: entered promiscuous mode [ 427.315975][T12192] pim6reg1: entered allmulticast mode [ 427.324646][T12190] netlink: 'syz.2.1675': attribute type 63 has an invalid length. [ 427.334970][T12192] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1676'. [ 427.344609][T12192] tc_dump_action: action bad kind [ 427.351193][T12192] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1676'. [ 427.541454][T12200] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1678'. [ 427.626242][T12203] netlink: 'syz.2.1679': attribute type 39 has an invalid length. [ 427.720316][T12212] netlink: 'syz.3.1681': attribute type 3 has an invalid length. [ 427.737320][T12212] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1681'. [ 427.851931][T12203] hsr_slave_1 (unregistering): left promiscuous mode [ 427.908057][T12202] netlink: 'syz.2.1679': attribute type 39 has an invalid length. [ 428.970307][T12235] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 429.329894][T12250] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1693'. [ 429.392320][ T7153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.410893][T12250] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 429.432873][T12250] CPU: 0 PID: 12250 Comm: syz.2.1693 Not tainted syzkaller #0 [ 429.440415][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.450495][T12250] Call Trace: [ 429.453800][T12250] [ 429.456749][T12250] dump_stack_lvl+0x18c/0x250 [ 429.461457][T12250] ? show_regs_print_info+0x20/0x20 [ 429.466685][T12250] ? load_image+0x420/0x420 [ 429.471233][T12250] sysfs_warn_dup+0x8e/0xa0 [ 429.475765][T12250] sysfs_do_create_link_sd+0xc0/0x110 [ 429.481164][T12250] device_add_class_symlinks+0x1cf/0x240 [ 429.486826][T12250] device_add+0x4f9/0xc40 [ 429.491187][T12250] wiphy_register+0x1d99/0x2ac0 [ 429.496090][T12250] ? cfg80211_event_work+0x40/0x40 [ 429.501225][T12250] ? minstrel_ht_alloc+0x88a/0x990 [ 429.506372][T12250] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 429.512473][T12250] ieee80211_register_hw+0x2dd8/0x3b30 [ 429.517978][T12250] ? ieee80211_register_hw+0xf11/0x3b30 [ 429.523561][T12250] ? ieee80211_tasklet_handler+0x20/0x20 [ 429.529221][T12250] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 429.535138][T12250] ? __debug_object_init+0xec/0x450 [ 429.540363][T12250] ? __asan_memset+0x22/0x40 [ 429.544979][T12250] ? __hrtimer_init+0x189/0x270 [ 429.549855][T12250] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 429.555632][T12250] ? mac80211_hwsim_free+0x220/0x220 [ 429.560936][T12250] ? rcu_is_watching+0x15/0xb0 [ 429.565729][T12250] ? kstrndup+0xbd/0x140 [ 429.570009][T12250] hwsim_new_radio_nl+0xdad/0x1a70 [ 429.575155][T12250] ? __nla_validate+0x50/0x50 [ 429.579887][T12250] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 429.586262][T12250] ? __nla_parse+0x40/0x50 [ 429.590716][T12250] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 429.597086][T12250] genl_family_rcv_msg_doit+0x21a/0x310 [ 429.602672][T12250] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 429.608606][T12250] ? bpf_lsm_capable+0x9/0x10 [ 429.613317][T12250] ? security_capable+0x89/0xb0 [ 429.618479][T12250] genl_rcv_msg+0x611/0x7a0 [ 429.623030][T12250] ? genl_bind+0x360/0x360 [ 429.627483][T12250] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 429.633850][T12250] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 429.639711][T12250] netlink_rcv_skb+0x235/0x4c0 [ 429.644504][T12250] ? genl_bind+0x360/0x360 [ 429.648956][T12250] ? netlink_ack+0x1160/0x1160 [ 429.653761][T12250] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.659957][T12250] ? down_read+0x1ac/0x2e0 [ 429.664415][T12250] genl_rcv+0x28/0x40 [ 429.668425][T12250] netlink_unicast+0x7b1/0x930 [ 429.673226][T12250] netlink_sendmsg+0x8d0/0xbf0 [ 429.678033][T12250] ? netlink_getsockopt+0x590/0x590 [ 429.683273][T12250] ? netlink_getsockopt+0x590/0x590 [ 429.688508][T12250] ____sys_sendmsg+0x61b/0x980 [ 429.693328][T12250] ? __asan_memset+0x22/0x40 [ 429.697966][T12250] ? __sys_sendmsg_sock+0x30/0x30 [ 429.703036][T12250] ? __import_iovec+0x5f2/0x850 [ 429.707895][T12250] ? import_iovec+0x73/0xa0 [ 429.712400][T12250] ___sys_sendmsg+0x2a6/0x360 [ 429.717103][T12250] ? __sys_sendmsg+0x2b0/0x2b0 [ 429.721882][T12250] ? irqentry_enter+0x37/0x50 [ 429.726606][T12250] __se_sys_sendmsg+0x1d0/0x2c0 [ 429.731458][T12250] ? perf_trace_preemptirq_template+0x269/0x330 [ 429.737710][T12250] ? __x64_sys_sendmsg+0x80/0x80 [ 429.742661][T12250] ? lockdep_hardirqs_on+0x98/0x150 [ 429.747867][T12250] do_syscall_64+0x55/0xb0 [ 429.752283][T12250] ? clear_bhb_loop+0x40/0x90 [ 429.756960][T12250] ? clear_bhb_loop+0x40/0x90 [ 429.761639][T12250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.767560][T12250] RIP: 0033:0x7f808899e159 [ 429.771979][T12250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.791590][T12250] RSP: 002b:00007f80898ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.800008][T12250] RAX: ffffffffffffffda RBX: 00007f8088c25fa0 RCX: 00007f808899e159 [ 429.807978][T12250] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 429.815947][T12250] RBP: 00007f8088a35024 R08: 0000000000000000 R09: 0000000000000000 [ 429.823913][T12250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.831878][T12250] R13: 00007f8088c26038 R14: 00007f8088c25fa0 R15: 00007ffe558b92e8 [ 429.839867][T12250] [ 429.985349][T12256] netlink: 'syz.1.1694': attribute type 2 has an invalid length. [ 430.010860][T12256] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1694'. [ 430.488089][T12261] netlink: 4091 bytes leftover after parsing attributes in process `syz.2.1695'. [ 430.687128][T12269] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.718312][T12274] netlink: 'syz.2.1701': attribute type 21 has an invalid length. [ 430.726462][T12274] netlink: 'syz.2.1701': attribute type 20 has an invalid length. [ 430.781508][T12274] netlink: 'syz.2.1701': attribute type 46 has an invalid length. [ 430.789980][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1701'. [ 431.129256][T12295] netlink: 'syz.0.1705': attribute type 29 has an invalid length. [ 431.143007][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 431.284383][T12291] delete_channel: no stack [ 431.674854][T12312] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 432.229747][T12317] syzkaller0: entered promiscuous mode [ 432.250573][T12317] syzkaller0: entered allmulticast mode [ 434.102743][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 434.109393][ T7153] wlan1: Trigger new scan to find an IBSS to join [ 435.190230][T12343] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1729'. [ 435.200363][T12350] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.453439][T12374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1727'. [ 435.674250][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'. [ 436.108200][T12397] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.152152][T12396] validate_nla: 5 callbacks suppressed [ 436.152179][T12396] netlink: 'syz.0.1734': attribute type 13 has an invalid length. [ 436.618574][T12416] netlink: 'syz.3.1743': attribute type 9 has an invalid length. [ 436.630481][T12416] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1743'. [ 436.991083][T12431] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 437.288549][T12432] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1746'. [ 437.456277][T12442] netlink: 'syz.0.1749': attribute type 39 has an invalid length. [ 437.502339][T12447] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1751'. [ 437.527137][T12447] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 437.541593][T12447] CPU: 1 PID: 12447 Comm: syz.2.1751 Not tainted syzkaller #0 [ 437.549085][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.559158][T12447] Call Trace: [ 437.562455][T12447] [ 437.565406][T12447] dump_stack_lvl+0x18c/0x250 [ 437.570119][T12447] ? show_regs_print_info+0x20/0x20 [ 437.575352][T12447] ? load_image+0x420/0x420 [ 437.579888][T12447] sysfs_warn_dup+0x8e/0xa0 [ 437.584415][T12447] sysfs_do_create_link_sd+0xc0/0x110 [ 437.589813][T12447] device_add_class_symlinks+0x1cf/0x240 [ 437.595482][T12447] device_add+0x4f9/0xc40 [ 437.599843][T12447] wiphy_register+0x1d99/0x2ac0 [ 437.604784][T12447] ? cfg80211_event_work+0x40/0x40 [ 437.609934][T12447] ? minstrel_ht_alloc+0x88a/0x990 [ 437.615081][T12447] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 437.621179][T12447] ieee80211_register_hw+0x2dd8/0x3b30 [ 437.626676][T12447] ? ieee80211_register_hw+0xf11/0x3b30 [ 437.632251][T12447] ? ieee80211_tasklet_handler+0x20/0x20 [ 437.637889][T12447] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 437.643788][T12447] ? __debug_object_init+0xec/0x450 [ 437.648995][T12447] ? __asan_memset+0x22/0x40 [ 437.653590][T12447] ? __hrtimer_init+0x189/0x270 [ 437.658445][T12447] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 437.664188][T12447] ? mac80211_hwsim_free+0x220/0x220 [ 437.669474][T12447] ? rcu_is_watching+0x15/0xb0 [ 437.674243][T12447] ? kstrndup+0xbd/0x140 [ 437.678585][T12447] hwsim_new_radio_nl+0xdad/0x1a70 [ 437.683701][T12447] ? __nla_validate+0x50/0x50 [ 437.688401][T12447] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 437.694746][T12447] ? __nla_parse+0x40/0x50 [ 437.699173][T12447] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 437.705511][T12447] genl_family_rcv_msg_doit+0x21a/0x310 [ 437.711066][T12447] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 437.716967][T12447] ? bpf_lsm_capable+0x9/0x10 [ 437.721647][T12447] ? security_capable+0x89/0xb0 [ 437.726506][T12447] genl_rcv_msg+0x611/0x7a0 [ 437.731014][T12447] ? genl_bind+0x360/0x360 [ 437.735431][T12447] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 437.741770][T12447] netlink_rcv_skb+0x235/0x4c0 [ 437.746546][T12447] ? genl_bind+0x360/0x360 [ 437.750972][T12447] ? netlink_ack+0x1160/0x1160 [ 437.755753][T12447] ? __lock_acquire+0x7d80/0x7d80 [ 437.760781][T12447] ? net_generic+0x1e/0x240 [ 437.765300][T12447] ? down_read+0x1ac/0x2e0 [ 437.769730][T12447] genl_rcv+0x28/0x40 [ 437.773714][T12447] netlink_unicast+0x7b1/0x930 [ 437.778491][T12447] netlink_sendmsg+0x8d0/0xbf0 [ 437.783262][T12447] ? netlink_getsockopt+0x590/0x590 [ 437.788464][T12447] ? apparmor_socket_sendmsg+0x8e/0x330 [ 437.794013][T12447] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.799303][T12447] ? security_socket_sendmsg+0x80/0xa0 [ 437.804770][T12447] ? netlink_getsockopt+0x590/0x590 [ 437.809970][T12447] ____sys_sendmsg+0x61b/0x980 [ 437.814749][T12447] ? __asan_memset+0x22/0x40 [ 437.819344][T12447] ? __sys_sendmsg_sock+0x30/0x30 [ 437.824368][T12447] ? __import_iovec+0x5f2/0x850 [ 437.829231][T12447] ? import_iovec+0x73/0xa0 [ 437.833743][T12447] ___sys_sendmsg+0x2a6/0x360 [ 437.838454][T12447] ? __sys_sendmsg+0x2b0/0x2b0 [ 437.843268][T12447] __se_sys_sendmsg+0x1d0/0x2c0 [ 437.848128][T12447] ? __x64_sys_sendmsg+0x80/0x80 [ 437.853083][T12447] ? lockdep_hardirqs_on+0x98/0x150 [ 437.858292][T12447] do_syscall_64+0x55/0xb0 [ 437.862718][T12447] ? clear_bhb_loop+0x40/0x90 [ 437.867401][T12447] ? clear_bhb_loop+0x40/0x90 [ 437.872082][T12447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.877977][T12447] RIP: 0033:0x7f808899e159 [ 437.882393][T12447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.902004][T12447] RSP: 002b:00007f80898ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.910420][T12447] RAX: ffffffffffffffda RBX: 00007f8088c25fa0 RCX: 00007f808899e159 [ 437.918390][T12447] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 437.926359][T12447] RBP: 00007f8088a35024 R08: 0000000000000000 R09: 0000000000000000 [ 437.934331][T12447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.942300][T12447] R13: 00007f8088c26038 R14: 00007f8088c25fa0 R15: 00007ffe558b92e8 [ 437.950289][T12447] [ 438.043029][T12454] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 438.143507][T12457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.227896][T12461] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 438.949020][T12491] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 438.964412][T12491] syzkaller1: linktype set to 769 [ 439.002396][T12493] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1763'. [ 439.146185][T11576] wlan1: Trigger new scan to find an IBSS to join [ 439.262976][ T5811] syzkaller1: tun_net_xmit 90 [ 439.303088][T11576] syzkaller1: tun_net_xmit 86 [ 439.804677][T12509] netlink: 'syz.1.1768': attribute type 3 has an invalid length. [ 439.838430][T12509] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1768'. [ 439.875729][T12510] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 439.959346][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 440.266747][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.282900][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.565174][T12523] netlink: 'syz.3.1774': attribute type 21 has an invalid length. [ 440.679200][T12523] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1774'. [ 440.750350][T12525] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1773'. [ 441.351733][T12532] netlink: 'syz.2.1776': attribute type 33 has an invalid length. [ 441.434620][T12533] tap0: tun_chr_ioctl cmd 1074025677 [ 441.440206][T12533] tap0: linktype set to 773 [ 441.480608][T12535] tap0: tun_chr_ioctl cmd 1074025677 [ 441.502382][T12535] tap0: linktype set to 773 [ 441.858332][T12543] netlink: 'syz.0.1778': attribute type 29 has an invalid length. [ 441.867376][T12543] netlink: 'syz.0.1778': attribute type 29 has an invalid length. [ 441.876154][T12543] netlink: 'syz.0.1778': attribute type 29 has an invalid length. [ 441.979717][T12548] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 442.107164][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 442.128018][T12555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1783'. [ 442.566539][T12571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1789'. [ 443.171706][T12590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1793'. [ 444.122807][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 444.130621][T12582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.160254][T12592] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1794'. [ 444.678625][T12593] netlink: 'syz.3.1794': attribute type 3 has an invalid length. [ 444.687477][T12593] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1794'. [ 444.850672][T12608] netlink: 'syz.1.1797': attribute type 2 has an invalid length. [ 444.869244][T12608] netlink: 'syz.1.1797': attribute type 8 has an invalid length. [ 444.878346][T12608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1797'. [ 445.058061][T12612] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1799'. [ 445.219279][ T1080] wlan1: Creating new IBSS network, BSSID de:0e:e3:2c:2e:fc [ 446.103160][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 446.789566][T12649] netlink: 'syz.1.1809': attribute type 29 has an invalid length. [ 446.812887][T12649] netlink: 'syz.1.1809': attribute type 29 has an invalid length. [ 446.831384][T12649] netlink: 'syz.1.1809': attribute type 29 has an invalid length. [ 446.886237][T12652] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 447.295548][T12666] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 447.433310][T12674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1814'. [ 448.531452][T12692] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1818'. [ 449.392848][T12705] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 449.523414][T12708] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1823'. [ 449.995359][T12718] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1825'. [ 450.170359][T12718] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1825'. [ 450.342362][T12723] netlink: 'syz.2.1826': attribute type 2 has an invalid length. [ 450.370695][T12723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1826'. [ 452.114059][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 452.321077][T12759] netlink: 'syz.2.1835': attribute type 10 has an invalid length. [ 453.081890][T12780] syzkaller0: entered promiscuous mode [ 453.088085][T12780] syzkaller0: entered allmulticast mode [ 453.128487][T12780] netlink: 'syz.0.1843': attribute type 12 has an invalid length. [ 453.140758][T12780] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1843'. [ 454.974206][T12795] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 455.143805][ T7081] wlan1: Trigger new scan to find an IBSS to join [ 455.200297][T12805] netlink: 'syz.3.1850': attribute type 21 has an invalid length. [ 455.242119][T12805] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1850'. [ 455.273467][T12805] netlink: zone id is out of range [ 455.286260][T12805] netlink: zone id is out of range [ 455.293921][T12805] netlink: zone id is out of range [ 455.299098][T12805] netlink: zone id is out of range [ 455.304953][T12805] netlink: zone id is out of range [ 455.310582][T12805] netlink: zone id is out of range [ 455.316713][T12805] netlink: zone id is out of range [ 455.337085][T12805] netlink: zone id is out of range [ 455.342845][T12805] netlink: zone id is out of range [ 455.372288][T12805] netlink: zone id is out of range [ 455.882333][T12825] netlink: 'syz.2.1864': attribute type 10 has an invalid length. [ 455.922095][T12825] team0: Device hsr_slave_0 failed to register rx_handler [ 455.974116][T12828] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 456.276671][T12836] netlink: 'syz.0.1859': attribute type 4 has an invalid length. [ 456.294722][T12836] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1859'. [ 456.956224][T12854] netlink: 'syz.0.1863': attribute type 29 has an invalid length. [ 456.969409][T12854] netlink: 'syz.0.1863': attribute type 3 has an invalid length. [ 456.978976][T12854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1863'. [ 457.267387][T12866] netlink: 'syz.2.1868': attribute type 33 has an invalid length. [ 457.346553][T12866] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1868'. [ 457.403247][T12870] netlink: 'syz.0.1867': attribute type 10 has an invalid length. [ 457.635209][T12882] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.644155][T12882] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.653019][T12882] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.661290][T12882] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.682005][T12889] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.682004][T12882] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.698352][T12888] netlink: 'syz.1.1873': attribute type 29 has an invalid length. [ 457.790790][T12897] netlink: 'syz.1.1875': attribute type 29 has an invalid length. [ 457.821865][T12895] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 458.104379][T11576] wlan1: Trigger new scan to find an IBSS to join [ 461.747795][ T7150] wlan1: Creating new IBSS network, BSSID 76:1d:dc:62:e5:f3 [ 461.911608][T12949] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1885'. [ 462.007800][T12957] À: port 1(vlan0) entered blocking state [ 462.015663][T12957] À: port 1(vlan0) entered disabled state [ 462.032178][T12957] vlan0: entered allmulticast mode [ 462.047099][T12957] vlan0: entered promiscuous mode [ 462.077674][T12965] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 462.084139][T12965] syzkaller1: linktype set to 769 [ 462.110216][T12955] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1886'. [ 462.211179][T12971] ƒ: renamed from tunl0 (while UP) [ 462.419682][T12977] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1894'. [ 462.597649][T12978] validate_nla: 6 callbacks suppressed [ 462.597667][T12978] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 462.692204][T12980] netlink: 'syz.2.1895': attribute type 2 has an invalid length. [ 463.036872][T13002] netlink: 'syz.2.1903': attribute type 3 has an invalid length. [ 463.072215][T13002] netlink: 'syz.2.1903': attribute type 6 has an invalid length. [ 463.107594][T13002] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1903'. [ 463.166225][T13001] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.505629][T13014] netlink: 'syz.1.1907': attribute type 21 has an invalid length. [ 463.516660][T13014] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1907'. [ 463.697937][T13017] netlink: 'syz.3.1908': attribute type 10 has an invalid length. [ 463.953310][T13034] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 464.005209][T13041] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1915'. [ 464.719258][T13053] netlink: 'syz.2.1919': attribute type 2 has an invalid length. [ 464.737879][T13053] netlink: 'syz.2.1919': attribute type 4 has an invalid length. [ 464.782644][T13053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1919'. [ 464.809842][T13055] netlink: 'syz.3.1920': attribute type 10 has an invalid length. [ 464.934217][T13057] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1921'. [ 465.507008][T13068] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 465.611342][T13070] netlink: 'syz.2.1925': attribute type 29 has an invalid length. [ 466.013978][T13082] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1929'. [ 466.106803][ T7081] wlan1: Trigger new scan to find an IBSS to join [ 466.551584][T13098] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1935'. [ 466.561695][T13100] veth1_to_bond: entered allmulticast mode [ 466.571885][T13098] net_ratelimit: 216 callbacks suppressed [ 466.571899][T13098] netlink: zone id is out of range [ 466.594013][T13098] netlink: zone id is out of range [ 466.599467][T13098] netlink: zone id is out of range [ 466.605147][T13098] netlink: zone id is out of range [ 466.610368][T13098] netlink: zone id is out of range [ 466.627110][T13098] netlink: zone id is out of range [ 466.639186][T13098] netlink: zone id is out of range [ 466.650652][T13098] netlink: zone id is out of range [ 466.658065][T13098] netlink: zone id is out of range [ 466.663575][T13098] netlink: zone id is out of range [ 466.746010][T13106] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 467.268465][T13124] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1942'. [ 467.287890][T13126] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1942'. [ 467.397314][T13132] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1945'. [ 467.510942][T13136] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1948'. [ 467.526689][T13139] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 467.774754][T13146] validate_nla: 9 callbacks suppressed [ 467.774771][T13146] netlink: 'syz.1.1950': attribute type 10 has an invalid length. [ 468.497053][T13169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1955'. [ 468.520471][T13169] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1955'. [ 468.635464][T13174] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 468.779309][T13174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1955'. [ 469.064011][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 469.459550][T13195] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 469.556703][T13199] netlink: 'syz.1.1962': attribute type 10 has an invalid length. [ 469.997884][T13212] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1964'. [ 470.077712][T13209] netlink: 'syz.1.1967': attribute type 15 has an invalid length. [ 470.111735][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 470.390207][T13231] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 470.563251][T13228] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1971'. [ 470.909349][T13248] netlink: 'syz.2.1976': attribute type 21 has an invalid length. [ 471.687966][T13269] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 471.784861][T13274] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.956914][T13277] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1984'. [ 471.969756][T13277] tipc: Started in network mode [ 471.984940][T13277] tipc: Node identity b, cluster identity 57 [ 472.002931][T13277] tipc: Node number set to 11 [ 472.102680][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 472.131797][T13281] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 472.321273][T13293] net_ratelimit: 333 callbacks suppressed [ 472.321293][T13293] netlink: set zone limit has 8 unknown bytes [ 472.346672][T13297] delete_channel: no stack [ 472.351993][T13297] delete_channel: no stack [ 472.441258][T13303] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 472.466157][T13303] __nla_validate_parse: 2 callbacks suppressed [ 472.466175][T13303] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.1991'. [ 472.706159][T13315] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 472.728727][T13313] netlink: 'syz.1.1993': attribute type 10 has an invalid length. [ 473.263839][T13337] netlink: 'syz.0.1999': attribute type 21 has an invalid length. [ 473.295107][T13332] netlink: 'syz.0.1999': attribute type 21 has an invalid length. [ 473.979511][T13359] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 474.022043][T13359] team0: Device hsr_slave_0 failed to register rx_handler [ 474.105938][ T7653] wlan1: Trigger new scan to find an IBSS to join [ 474.172779][T13363] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 474.486168][T13372] netlink: 'syz.3.2010': attribute type 3 has an invalid length. [ 474.562799][T13379] netlink: 'syz.2.2013': attribute type 7 has an invalid length. [ 475.287550][T13398] netlink: 'syz.2.2018': attribute type 10 has an invalid length. [ 475.307501][T13398] team0: Device hsr_slave_0 failed to register rx_handler [ 475.531347][T13406] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 476.104021][ T7081] wlan1: Trigger new scan to find an IBSS to join [ 476.173506][T13429] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2027'. [ 476.241742][T13431] netlink: 'syz.2.2027': attribute type 4 has an invalid length. [ 476.625218][T13439] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 476.676492][T13442] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 476.691174][T13426] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2025'. [ 476.713088][T13426] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2025'. [ 476.762163][T13422] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2025'. [ 477.178507][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 478.110670][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 478.639963][T13476] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 478.734496][T13476] team0: Device hsr_slave_0 failed to register rx_handler [ 479.499484][T13483] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 479.617244][T13490] netlink: 'syz.3.2043': attribute type 21 has an invalid length. [ 479.628710][T13490] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2043'. [ 479.677469][T13490] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 479.689870][T13490] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.2043'. [ 479.814375][T13494] netlink: 'syz.2.2045': attribute type 2 has an invalid length. [ 479.822198][T13494] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.2045'. [ 480.103830][ T7653] wlan1: Creating new IBSS network, BSSID ee:e7:cb:45:0d:7e [ 480.166513][T13513] netlink: 'syz.0.2049': attribute type 29 has an invalid length. [ 480.175115][T13513] netlink: 'syz.0.2049': attribute type 29 has an invalid length. [ 480.194439][T13513] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 480.226896][T13517] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 480.437753][T13526] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 480.751832][T13540] netlink: 'syz.1.2057': attribute type 10 has an invalid length. [ 480.759938][T13540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2057'. [ 481.031331][T13547] netlink: 'syz.2.2059': attribute type 10 has an invalid length. [ 481.102614][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 481.116481][T13547] team0: Device hsr_slave_0 failed to register rx_handler [ 481.328621][T13556] netlink: 'syz.1.2062': attribute type 21 has an invalid length. [ 481.339995][T13556] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.2062'. [ 481.378059][T13558] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.725747][T13571] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2069'. [ 482.102812][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 482.284908][T13589] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.672893][T13609] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2081'. [ 482.698777][T13607] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2081'. [ 482.828379][T13614] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2081'. [ 482.895041][T13607] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2081'. [ 483.263250][T13637] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 483.660758][T13647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.951299][T13661] validate_nla: 6 callbacks suppressed [ 483.951475][T13661] netlink: 'syz.2.2094': attribute type 21 has an invalid length. [ 483.989418][T13661] netlink: 'syz.2.2094': attribute type 6 has an invalid length. [ 484.112996][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 484.239512][T13672] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 484.498340][T13685] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 484.525055][ T23] syzkaller1: tun_net_xmit 90 [ 484.545486][T13685] syzkaller1: Linktype set failed because interface is up [ 484.573740][ T23] syzkaller1: tun_net_xmit 90 [ 485.129647][T13707] __nla_validate_parse: 3 callbacks suppressed [ 485.129676][T13707] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2109'. [ 487.847034][T13715] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 488.117150][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 488.259578][T13729] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2117'. [ 488.309410][T13729] netlink: 'syz.1.2117': attribute type 10 has an invalid length. [ 488.318090][T13729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2117'. [ 488.335259][T13729] bridge_slave_1: left allmulticast mode [ 488.341016][T13729] bridge_slave_1: left promiscuous mode [ 488.348484][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.376209][T13729] bridge_slave_0: left promiscuous mode [ 488.404630][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.671457][T13749] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2121'. [ 488.692979][T13750] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2121'. [ 488.745043][T13754] netlink: 'syz.2.2122': attribute type 21 has an invalid length. [ 488.947830][T13759] syzkaller0: entered promiscuous mode [ 488.954076][T13759] syzkaller0: entered allmulticast mode [ 490.115397][ T7152] wlan1: Trigger new scan to find an IBSS to join [ 490.121979][ T2970] wlan1: Trigger new scan to find an IBSS to join [ 490.702274][T13765] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 491.085063][T13780] netlink: 'syz.1.2131': attribute type 21 has an invalid length. [ 491.093684][ T7152] wlan1: Creating new IBSS network, BSSID 92:46:ee:e9:7f:75 [ 491.199164][T13785] netlink: 'syz.3.2132': attribute type 10 has an invalid length. [ 491.283584][T13784] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2132'. [ 491.365015][T13802] žÿÿÿ: renamed from team_slave_1 [ 491.656947][T13833] netlink: 'syz.1.2135': attribute type 10 has an invalid length. [ 491.813826][T13838] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 492.925562][T13877] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.2146'. [ 493.093032][T13891] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 493.283871][T13893] netlink: 'syz.3.2150': attribute type 10 has an invalid length. [ 493.457231][T13904] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2153'. [ 493.479204][T13904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.722016][T13916] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2157'. [ 493.752724][T13916] openvswitch: netlink: IP tunnel dst address not specified [ 493.792256][T13916] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2157'. [ 493.952374][T13929] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 494.103161][ T7152] wlan1: Trigger new scan to find an IBSS to join [ 494.220068][T13937] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 494.248231][T13937] team0: Device hsr_slave_0 failed to register rx_handler [ 494.450861][T13944] netlink: 207488 bytes leftover after parsing attributes in process `syz.1.2165'. [ 494.733732][T13956] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 494.752747][T13960] netlink: 'syz.1.2171': attribute type 21 has an invalid length. [ 494.769053][T13960] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2171'. [ 494.843471][T13960] netlink: 'syz.1.2171': attribute type 4 has an invalid length. [ 494.889480][T13960] netlink: 'syz.1.2171': attribute type 5 has an invalid length. [ 494.907811][T13960] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2171'. [ 494.927700][T13962] netlink: 177312 bytes leftover after parsing attributes in process `syz.0.2172'. [ 494.969628][T13962] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 495.286056][T13971] netlink: 'syz.2.2175': attribute type 10 has an invalid length. [ 495.344063][T13971] team0: Device hsr_slave_0 failed to register rx_handler [ 495.407216][T13973] netlink: 'syz.1.2174': attribute type 29 has an invalid length. [ 496.006570][T13996] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2181'. [ 496.441358][T13999] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2182'. [ 496.462678][T13999] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2182'. [ 496.478739][T13999] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2182'. [ 496.544689][T14006] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 496.577031][T14004] validate_nla: 4 callbacks suppressed [ 496.577046][T14004] netlink: 'syz.3.2184': attribute type 10 has an invalid length. [ 496.602651][T14004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2184'. [ 496.692823][T14008] netlink: 'syz.3.2184': attribute type 10 has an invalid length. [ 496.702628][T14008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2184'. [ 496.734165][T14010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2184'. [ 497.143191][ T2970] wlan1: Trigger new scan to find an IBSS to join [ 497.213169][T14024] netlink: 'syz.3.2187': attribute type 10 has an invalid length. [ 497.308007][T14029] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 497.494760][T14029] team0 (unregistering): Port device team_slave_0 removed [ 497.591998][T14029] team0 (unregistering): Port device team_slave_1 removed [ 497.633283][T14030] netlink: 'syz.2.2188': attribute type 7 has an invalid length. [ 497.641146][T14030] netlink: 'syz.2.2188': attribute type 6 has an invalid length. [ 497.660180][T14034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2191'. [ 497.762997][T14034] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 497.771299][T14034] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2191'. [ 498.089509][T14053] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 498.383300][T14055] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2197'. [ 498.627217][T14055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.711459][T14066] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 498.743819][T14055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.808238][T14055] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 498.858560][T14055] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 498.910192][T14071] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 498.912445][T14055] bond0 (unregistering): Released all slaves [ 498.989288][T14066] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 499.024527][T14065] netlink: 'syz.1.2200': attribute type 29 has an invalid length. [ 499.048584][T14070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2201'. [ 499.067337][ T7152] wlan1: Trigger new scan to find an IBSS to join [ 499.365505][T14085] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 500.085205][T14106] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 500.227325][T14120] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 501.710177][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717597][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.940372][T14158] validate_nla: 3 callbacks suppressed [ 501.940435][T14158] netlink: 'syz.3.2228': attribute type 9 has an invalid length. [ 501.957735][T14158] __nla_validate_parse: 3 callbacks suppressed [ 501.957895][T14158] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2228'. [ 502.106854][ T12] wlan1: Trigger new scan to find an IBSS to join [ 502.113646][ T3512] wlan1: Trigger new scan to find an IBSS to join [ 502.120600][ T3512] wlan1: Trigger new scan to find an IBSS to join [ 503.085699][T14150] netlink: 'syz.2.2224': attribute type 10 has an invalid length. [ 503.202728][T14160] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 503.272333][T14168] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2232'. [ 503.289936][T14168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.438221][T14172] netlink: 'syz.2.2234': attribute type 10 has an invalid length. [ 503.540416][T14170] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2233'. [ 503.632440][T14179] netlink: 'syz.2.2237': attribute type 10 has an invalid length. [ 503.791988][T14183] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2238'. [ 504.009742][T14192] netlink: 'syz.0.2240': attribute type 9 has an invalid length. [ 504.025877][T14197] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 504.026834][T14192] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2240'. [ 504.400426][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.432792][T14203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.451145][T14203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.483871][T14203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.064350][ T7152] wlan1: Trigger new scan to find an IBSS to join [ 505.070941][ T7652] wlan1: Trigger new scan to find an IBSS to join [ 505.799598][T14236] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2247'. [ 505.814864][T14236] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2247'. [ 505.836109][T14231] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2247'. [ 505.980499][T14233] netlink: 'syz.2.2248': attribute type 10 has an invalid length. [ 506.043344][T14235] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2249'. [ 506.078350][ T7654] wlan1: Creating new IBSS network, BSSID b6:10:6b:f5:9f:c4 [ 506.104097][ T12] wlan1: Trigger new scan to find an IBSS to join [ 506.449830][T14253] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 506.582268][T14259] netlink: 'syz.1.2255': attribute type 2 has an invalid length. [ 506.599864][T14259] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2255'. [ 506.870444][T14269] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 506.978762][T14278] netlink: 'syz.0.2263': attribute type 2 has an invalid length. [ 506.990806][T14278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2263'. [ 507.149045][T14285] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 507.188810][T14288] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2267'. [ 507.489395][T14295] netlink: 'syz.1.2269': attribute type 3 has an invalid length. [ 507.512855][T14295] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 507.521044][T14295] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2269'. [ 507.699445][T14304] netlink: 'syz.3.2272': attribute type 10 has an invalid length. [ 507.906305][T14315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2275'. [ 508.101940][T14324] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.806116][T14344] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 510.115099][T11578] wlan1: Trigger new scan to find an IBSS to join [ 511.058888][T14371] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.069400][T14373] netlink: 'syz.2.2290': attribute type 10 has an invalid length. [ 511.082621][T14373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'. [ 511.104071][T14373] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 511.152168][T14373] netlink: 'syz.2.2290': attribute type 10 has an invalid length. [ 511.168278][T14373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2290'. [ 511.178184][T14373] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 511.467370][T14394] netlink: 'syz.2.2294': attribute type 10 has an invalid length. [ 511.803443][T14415] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 513.062965][T11578] wlan1: Trigger new scan to find an IBSS to join [ 514.107982][T11572] wlan1: Trigger new scan to find an IBSS to join [ 514.275112][T14440] netlink: 'syz.3.2305': attribute type 10 has an invalid length. [ 514.369819][T14445] tap0: tun_chr_ioctl cmd 1074025677 [ 514.377534][T14445] tap0: linktype set to 806 [ 515.198256][T14449] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 515.208474][T14457] netlink: 'syz.3.2311': attribute type 10 has an invalid length. [ 515.227320][T14457] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2311'. [ 515.297836][T14462] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2312'. [ 515.307386][T14462] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2312'. [ 515.486184][T14473] netlink: 'syz.3.2314': attribute type 10 has an invalid length. [ 515.512274][T14470] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2313'. [ 515.820561][T14483] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 516.103123][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 516.247486][T14492] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2319'. [ 516.268748][T14492] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 516.560163][T14499] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 516.892366][T14510] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2323'. [ 517.002076][T14512] netlink: 'syz.0.2325': attribute type 33 has an invalid length. [ 517.024663][T14512] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2325'. [ 517.050646][T14514] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2325'. [ 517.562642][T14534] netlink: 'syz.2.2328': attribute type 10 has an invalid length. [ 517.572250][T14528] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2327'. [ 517.617329][T14539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2329'. [ 517.627529][T14539] netlink: 'syz.3.2329': attribute type 22 has an invalid length. [ 517.797775][T14543] netlink: 'syz.3.2331': attribute type 3 has an invalid length. [ 517.816739][T14546] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 518.096652][T14551] netlink: 'syz.1.2333': attribute type 39 has an invalid length. [ 518.104799][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 518.365869][T14556] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 518.669659][T14573] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 519.161636][T11572] wlan1: Trigger new scan to find an IBSS to join [ 519.373340][T14598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.664707][T14603] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 519.808935][T14609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 519.821567][T14609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 519.831566][T14609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 519.854991][T14609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 519.883011][T14609] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 519.892745][T14609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 520.613137][T14607] chnl_net:caif_netlink_parms(): no params data found [ 520.821797][ T7654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.042362][T14638] validate_nla: 8 callbacks suppressed [ 521.042382][T14638] netlink: 'syz.1.2359': attribute type 4 has an invalid length. [ 521.062913][T11572] wlan1: Trigger new scan to find an IBSS to join [ 521.063758][ T7150] wlan1: Trigger new scan to find an IBSS to join [ 521.076576][T14638] __nla_validate_parse: 5 callbacks suppressed [ 521.076593][T14638] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2359'. [ 521.186664][ T7654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.232054][T14607] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.248215][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.257060][T14607] bridge_slave_0: entered allmulticast mode [ 521.265024][T14607] bridge_slave_0: entered promiscuous mode [ 521.290098][ T7654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.308959][T14607] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.316815][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.328047][T14607] bridge_slave_1: entered allmulticast mode [ 521.335657][T14607] bridge_slave_1: entered promiscuous mode [ 521.405373][ T7654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.466593][T14607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.491466][T14607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.565481][T14607] team0: Port device team_slave_0 added [ 521.579828][T14607] team0: Port device team_slave_1 added [ 521.651085][T14607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.666537][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.707175][T14607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.753366][T14607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.772116][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.802868][T14607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.942950][ T5087] Bluetooth: hci4: command tx timeout [ 522.023192][ T7654] tipc: Left network mode [ 522.070970][T14607] hsr_slave_0: entered promiscuous mode [ 522.084530][T14607] hsr_slave_1: entered promiscuous mode [ 522.769000][T14716] netlink: 'syz.1.2372': attribute type 27 has an invalid length. [ 522.792032][T14716] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2372'. [ 522.807255][T14716] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.188098][T14732] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2375'. [ 523.622813][T14607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 523.653742][T14607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 523.703319][T14607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 523.772579][T14607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 523.910313][T14757] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 524.022783][ T5087] Bluetooth: hci4: command tx timeout [ 524.104941][T11572] wlan1: Trigger new scan to find an IBSS to join [ 524.111513][T11574] wlan1: Trigger new scan to find an IBSS to join [ 524.296980][T14607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.367466][T14769] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2382'. [ 524.436266][T14768] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 524.464249][T14768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2382'. [ 524.489434][T14607] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.577688][ T7151] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.584908][ T7151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.883655][T11572] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.890890][T11572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.905362][T14794] netlink: 'syz.0.2385': attribute type 12 has an invalid length. [ 524.923702][T14794] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2385'. [ 525.160482][T14802] netlink: 'syz.1.2387': attribute type 4 has an invalid length. [ 525.229570][ T7654] hsr_slave_0: left promiscuous mode [ 525.237215][ T7654] hsr_slave_1: left promiscuous mode [ 525.255028][ T7654] veth1_macvtap: left promiscuous mode [ 525.261098][ T7654] veth0_macvtap: left promiscuous mode [ 525.495568][T14812] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2387'. [ 526.103090][T11572] wlan1: Trigger new scan to find an IBSS to join [ 526.106131][ T5087] Bluetooth: hci4: command tx timeout [ 526.491050][T14818] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 527.016681][T14607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.167657][T14607] veth0_vlan: entered promiscuous mode [ 527.220668][T14607] veth1_vlan: entered promiscuous mode [ 527.375861][T14607] veth0_macvtap: entered promiscuous mode [ 527.416992][T14607] veth1_macvtap: entered promiscuous mode [ 527.493029][T14607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.510408][T14607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.531619][T14607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.562158][T14607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.577446][T14607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.588106][T14607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.604397][T14607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.623454][T14607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.649153][T14607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.672509][T14607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.691548][T14607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.710562][T14607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.192571][ T5087] Bluetooth: hci4: command tx timeout [ 529.065124][T11578] wlan1: Trigger new scan to find an IBSS to join [ 529.927891][ T7151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.953932][ T7151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.997501][T14869] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 530.104169][ T7151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.150262][ T7151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.311047][T14881] netlink: 'syz.3.2349': attribute type 10 has an invalid length. [ 530.408996][T14881] team0: Device hsr_slave_0 failed to register rx_handler [ 531.126376][T14609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.136434][T14609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.146249][T14609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.156257][T14609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 531.164767][T14609] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 531.172781][T14609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 531.769075][ T7150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.871698][T14913] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.914464][ T7150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.930649][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.940172][T14917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.949558][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.972655][T14917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.991670][T14917] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 532.012208][T14917] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 532.088288][ T7150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.106290][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 532.127869][T14923] netlink: 'syz.3.2410': attribute type 21 has an invalid length. [ 532.140807][T14923] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2410'. [ 532.158848][T14923] netlink: 'syz.3.2410': attribute type 4 has an invalid length. [ 532.167492][T14923] netlink: 'syz.3.2410': attribute type 3 has an invalid length. [ 532.176383][T14923] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2410'. [ 532.189301][T14924] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 532.276789][ T7150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.376198][T14899] chnl_net:caif_netlink_parms(): no params data found [ 532.454504][T14933] netlink: 'syz.2.2413': attribute type 17 has an invalid length. [ 532.472553][T14933] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2413'. [ 532.495470][T14933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.599362][T14937] netlink: 'syz.3.2414': attribute type 4 has an invalid length. [ 532.612580][T14937] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2414'. [ 532.778241][T14899] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.785601][T14899] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.804363][T14899] bridge_slave_0: entered allmulticast mode [ 532.824097][T14899] bridge_slave_0: entered promiscuous mode [ 532.832930][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.840083][T14899] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.853007][T14899] bridge_slave_1: entered allmulticast mode [ 532.863799][T14899] bridge_slave_1: entered promiscuous mode [ 533.144000][T14899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.209988][T14899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.435276][T14899] team0: Port device team_slave_0 added [ 533.475220][ T5087] Bluetooth: hci2: command tx timeout [ 533.580785][T14899] team0: Port device team_slave_1 added [ 533.670392][T14974] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.915419][T14978] netlink: 'syz.2.2419': attribute type 10 has an invalid length. [ 533.953616][T14978] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2419'. [ 533.987232][T14978] batadv_slave_1: entered promiscuous mode [ 534.046241][T14899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.069888][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.103322][ T1080] wlan1: Trigger new scan to find an IBSS to join [ 534.133675][T14899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.384725][ T7150] gretap0 (unregistering): left allmulticast mode [ 534.391228][ T7150] gretap0 (unregistering): left promiscuous mode [ 534.429939][ T7150] Ÿë: port 1(gretap0) entered disabled state [ 534.487703][T14899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.522486][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.582471][T14899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.868978][T14899] hsr_slave_0: entered promiscuous mode [ 534.938907][T14899] hsr_slave_1: entered promiscuous mode [ 534.958938][T14899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.977129][T14899] Cannot create hsr debugfs directory [ 535.543264][ T5087] Bluetooth: hci2: command tx timeout [ 536.016351][T15023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2429'. [ 536.100284][T15024] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 536.109944][ T7654] wlan1: Trigger new scan to find an IBSS to join [ 536.221457][T15030] veth1_vlan: entered allmulticast mode [ 536.447649][T15039] delete_channel: no stack [ 536.460534][T15039] delete_channel: no stack [ 537.622585][ T5087] Bluetooth: hci2: command tx timeout [ 538.103027][T11578] wlan1: Trigger new scan to find an IBSS to join [ 538.516288][ T7150] vlan0: left allmulticast mode [ 538.521247][ T7150] vlan0: left promiscuous mode [ 538.563570][ T7150] À: port 1(vlan0) entered disabled state [ 538.602811][ T7150] veth0_to_team: left allmulticast mode [ 538.615750][ T7150] veth0_to_team: left promiscuous mode [ 538.621407][ T7150] Ÿë: port 2(veth0_to_team) entered disabled state [ 538.665581][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.673410][ T7150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.681747][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.689885][T15087] sctp: [Deprecated]: syz.0.2440 (pid 15087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.689885][T15087] Use struct sctp_sack_info instead [ 538.692709][ T7150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.727486][ T7150] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 538.735535][ T7150] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 538.760635][ T7150] veth1_macvtap: left promiscuous mode [ 538.766607][ T7150] veth0_macvtap: left promiscuous mode [ 538.774519][ T7150] veth1_vlan: left promiscuous mode [ 538.783936][ T7150] veth0_vlan: left promiscuous mode [ 539.156424][T11574] wlan1: Trigger new scan to find an IBSS to join [ 539.400330][ T7150] team0 (unregistering): Port device hsr_slave_0 removed [ 539.550908][ T7150] team0 (unregistering): Port device .76žÿ removed [ 539.601384][ T7150] team0 (unregistering): Port device team_slave_0 removed [ 539.712522][ T5087] Bluetooth: hci2: command tx timeout [ 540.074300][T11574] wlan1: Creating new IBSS network, BSSID 26:fd:c1:91:29:3f [ 540.083949][T15079] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.084675][T11577] ------------[ cut here ]------------ [ 540.098780][T11577] WARNING: CPU: 1 PID: 11577 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 540.110003][T11577] Modules linked in: [ 540.115159][T11577] CPU: 1 PID: 11577 Comm: kworker/u4:39 Not tainted syzkaller #0 [ 540.123077][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.133365][T11577] Workqueue: cfg80211 cfg80211_event_work [ 540.139130][T11577] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 540.145471][T11577] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1e a2 97 f7 0f 0b eb bf e8 15 a2 97 f7 <0f> 0b eb b6 e8 0c a2 97 f7 0f 0b e9 e2 fd ff ff e8 00 a2 97 f7 0f [ 540.165424][T11577] RSP: 0018:ffffc90019607a40 EFLAGS: 00010293 [ 540.171534][T11577] RAX: ffffffff89efd05b RBX: dffffc0000000000 RCX: ffff888078503c00 [ 540.179642][T11577] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 540.188036][T11577] RBP: ffffc90019607af8 R08: ffffffff911ef56f R09: 1ffffffff223dead [ 540.196156][T11577] R10: dffffc0000000000 R11: fffffbfff223deae R12: ffff88805dd50d10 [ 540.204249][T11577] R13: ffff88801ab73618 R14: 1ffff920032c0f4c R15: 000000000000001f [ 540.212253][T11577] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 540.221283][T11577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.227981][T11577] CR2: 00007fdc9386cd58 CR3: 000000002c685000 CR4: 00000000003506e0 [ 540.236075][T11577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 540.244199][T11577] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 540.252205][T11577] Call Trace: [ 540.255573][T11577] [ 540.258533][T11577] ? trace_rdev_return_void+0x1c0/0x1c0 [ 540.264231][T11577] cfg80211_process_wdev_events+0x396/0x500 [ 540.270334][T11577] cfg80211_process_rdev_events+0xa1/0x110 [ 540.276268][T11577] cfg80211_event_work+0x2f/0x40 [ 540.281243][T11577] ? process_scheduled_works+0x975/0x1600 [ 540.287099][T11577] process_scheduled_works+0xa60/0x1600 [ 540.292762][T11577] ? worker_attach_to_pool+0x370/0x370 [ 540.298261][T11577] ? assign_work+0x3cc/0x5d0 [ 540.302965][T11577] worker_thread+0xa5e/0xfe0 [ 540.307627][T11577] kthread+0x2fa/0x390 [ 540.311726][T11577] ? pr_cont_work+0x550/0x550 [ 540.316516][T11577] ? kthread_blkcg+0xd0/0xd0 [ 540.321136][T11577] ret_from_fork+0x48/0x80 [ 540.325657][T11577] ? kthread_blkcg+0xd0/0xd0 [ 540.330282][T11577] ret_from_fork_asm+0x11/0x20 [ 540.335175][T11577] [ 540.338232][T11577] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 540.345521][T11577] CPU: 1 PID: 11577 Comm: kworker/u4:39 Not tainted syzkaller #0 [ 540.353234][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.363284][T11577] Workqueue: cfg80211 cfg80211_event_work [ 540.369009][T11577] Call Trace: [ 540.372283][T11577] [ 540.375209][T11577] dump_stack_lvl+0x18c/0x250 [ 540.379885][T11577] ? show_regs_print_info+0x20/0x20 [ 540.385079][T11577] ? load_image+0x420/0x420 [ 540.389611][T11577] panic+0x2ca/0x720 [ 540.393514][T11577] ? bpf_jit_dump+0xd0/0xd0 [ 540.398027][T11577] ? ret_from_fork_asm+0x11/0x20 [ 540.402966][T11577] __warn+0x2e0/0x470 [ 540.406953][T11577] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 540.412505][T11577] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 540.418047][T11577] report_bug+0x2be/0x4f0 [ 540.422374][T11577] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 540.427919][T11577] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 540.433466][T11577] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 540.439008][T11577] handle_bug+0xcf/0x120 [ 540.443248][T11577] exc_invalid_op+0x1a/0x50 [ 540.447750][T11577] asm_exc_invalid_op+0x1a/0x20 [ 540.452598][T11577] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 540.458750][T11577] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1e a2 97 f7 0f 0b eb bf e8 15 a2 97 f7 <0f> 0b eb b6 e8 0c a2 97 f7 0f 0b e9 e2 fd ff ff e8 00 a2 97 f7 0f [ 540.478349][T11577] RSP: 0018:ffffc90019607a40 EFLAGS: 00010293 [ 540.484407][T11577] RAX: ffffffff89efd05b RBX: dffffc0000000000 RCX: ffff888078503c00 [ 540.492389][T11577] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 540.500365][T11577] RBP: ffffc90019607af8 R08: ffffffff911ef56f R09: 1ffffffff223dead [ 540.508332][T11577] R10: dffffc0000000000 R11: fffffbfff223deae R12: ffff88805dd50d10 [ 540.516301][T11577] R13: ffff88801ab73618 R14: 1ffff920032c0f4c R15: 000000000000001f [ 540.524275][T11577] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 540.529833][T11577] ? trace_rdev_return_void+0x1c0/0x1c0 [ 540.535386][T11577] cfg80211_process_wdev_events+0x396/0x500 [ 540.541286][T11577] cfg80211_process_rdev_events+0xa1/0x110 [ 540.547090][T11577] cfg80211_event_work+0x2f/0x40 [ 540.552022][T11577] ? process_scheduled_works+0x975/0x1600 [ 540.557737][T11577] process_scheduled_works+0xa60/0x1600 [ 540.563305][T11577] ? worker_attach_to_pool+0x370/0x370 [ 540.568764][T11577] ? assign_work+0x3cc/0x5d0 [ 540.573355][T11577] worker_thread+0xa5e/0xfe0 [ 540.577967][T11577] kthread+0x2fa/0x390 [ 540.582034][T11577] ? pr_cont_work+0x550/0x550 [ 540.586710][T11577] ? kthread_blkcg+0xd0/0xd0 [ 540.591294][T11577] ret_from_fork+0x48/0x80 [ 540.595708][T11577] ? kthread_blkcg+0xd0/0xd0 [ 540.600292][T11577] ret_from_fork_asm+0x11/0x20 [ 540.605066][T11577] [ 540.608326][T11577] Kernel Offset: disabled [ 540.612695][T11577] Rebooting in 86400 seconds..