last executing test programs: 10.19381686s ago: executing program 3 (id=10044): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x2000200}]}, {0x0, [0x61, 0x5f, 0x2e, 0x0, 0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001280)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000600), 0xc}, 0x18ec2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) r3 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x800, 0x4, 0xfd, 0x7}, {0x806, 0x3}]}) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba616175", 0x9}], 0x2}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.086802945s ago: executing program 1 (id=10049): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r4, 0x6, 0xc, &(0x7f0000000500)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, 0x0, 0x0) 6.90069904s ago: executing program 0 (id=10050): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0xa, 0x2, 0x73) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803c9", 0x2f}], 0x1}, 0x40001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 6.433905703s ago: executing program 3 (id=10052): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2a, 0x2, 0x0) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=0x0], 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r8, 0x0, 0x1c000000007400}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r7}, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = getpid() sendmsg$unix(r11, &(0x7f0000000400)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="2c01b05e06a6691580b7c302bd7627d7b4a347b235fdb182", 0x18}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x4841}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.369296685s ago: executing program 2 (id=10053): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180700000000f600f400000544000000000000000003000000000000000000e91d01000000120e6f2bda15ed8ca733902eac2265e5897cab756cee3c0800880e545307ebb8bf77a24fcdf2d0bb959661be14ea08d82504c858979e6a81337719c03721105bca554e9a328e70c833cf248b"], 0x0, 0x29, 0x0, 0x1}, 0x28) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000040000000002dc4097f1d31500475b19dba65a18f920e0443aa28ef8a142804b352bef809efb5e86cb1f072bf2e0e843f29b9d76575fcf518d9ea37ca399be9357addffc59429", @ANYRESOCT=r4, @ANYBLOB="00000000d3ec66ecc053c543da5f", @ANYRES64=r1], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff5000009000000000000000000ff003b00000011", 0x2d}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119f00000000008510000002000000b7000000080000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) socket$kcm(0x10, 0x2, 0x0) 5.577794097s ago: executing program 1 (id=10054): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, 0x0}, 0x41) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)=ANY=[], 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfdf, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.45801776s ago: executing program 0 (id=10055): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001040)={&(0x7f0000000780)=ANY=[], &(0x7f00000008c0)=""/2, 0x66, 0x2, 0x1, 0x5}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000780)="4a09ecc174cc05e3881fd996f51b21a18e5c08158631efe5957f99be6ed94151ca365afc104b1045c3c5299687dc0d71098fd6912c1ee9c4bf6a504fa22244acc0898f7f033c6af369787b0871e304bd289a472a2f2521cbbab6919ed206a313c5fb14673d29fa3dd5a03e8ab40765b543872919f42fe5e620ad640dfa7d55e6d442c817c7f377aee0170414abeca8496fa60cf58b1b64373497c0e4516fe677136d90d4ccf8709613b25155f7e18b67e9e50b4e2fdf50983ea3bca12bb082758f0e2a2fdceb84089ee15764f55988da9cf8511f2bb2ec3b9e3d7d71ddbd3bb4f1b37d19a3b39567e27f9c9071d700"/254, &(0x7f0000000100)=""/59, 0x4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x2e) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f0000000c40)=r1, 0x4) socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x30, 0x0, 0x20000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000180)) socket$kcm(0xa, 0x3, 0x73) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 5.194779697s ago: executing program 3 (id=10056): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x7, 0xe2898, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0xc8, 0x7fffffe, 0x5, 0xffdffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="5ed0fc370c692126507f36d1a5f9318998", 0x11}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x48ac, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x9, 0xca, &(0x7f0000000840)=""/202, 0x1f00, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0xe, 0x16, 0x3ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[r1, r2], &(0x7f0000000a40)=[{0x5, 0x5, 0x0, 0xc}, {0x7, 0x2, 0x5, 0x9}, {0x1, 0x3, 0x4, 0xb}], 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, 0x0, 0xfdef) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3b, 0x6, 0x8, 0x2, 0x0, 0x0, 0x8002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1240, 0x1b9, 0x8, 0x7, 0x2e31a4e0, 0xf9c8, 0x7, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r7, 0x2) close(r6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x103000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 5.041482611s ago: executing program 2 (id=10057): socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe7d}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.502363406s ago: executing program 0 (id=10058): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb1e"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x29, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) 4.476091826s ago: executing program 1 (id=10059): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3"], 0x8) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 3.705918488s ago: executing program 2 (id=10060): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000280)=@caif=@util={0x25, "c185cb6fffa90fc86a85afe93732c7e9"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)}], 0x1}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000006000000000000000200000604000000030000000000000005000000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000300"], 0x18}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r4}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=r4, 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r2, 0x0, &(0x7f00000001c0)=""/145, 0x4}, 0x20) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r8 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) 2.979484938s ago: executing program 1 (id=10061): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r3, 0x6, 0xc, &(0x7f0000000500)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x23, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, 0x0, 0x0) 2.674229366s ago: executing program 0 (id=10062): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r4, 0x6, 0xc, &(0x7f0000000500)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, 0x0, 0x0) 2.51821066s ago: executing program 3 (id=10063): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0xa, 0x2, 0x73) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803c9", 0x2f}], 0x1}, 0x40001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 2.221193839s ago: executing program 2 (id=10064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, &(0x7f0000000580)="7b8666ec39e7fedd46412a4c802e4807c5a3c5ead09ff29d413e8b0000000000000000000000000000676e88f14c72e9c070997334c2adf29cfe6a0d85677acab81eb6ab25", 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x48) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x20000020) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0x8050) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711142000000000085100000024d0000850000000500000095000005f176d019"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.599610326s ago: executing program 1 (id=10065): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2a, 0x2, 0x0) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=0x0], 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r8, 0x0, 0x1c000000007400}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r7}, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = getpid() sendmsg$unix(r11, &(0x7f0000000400)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="2c01b05e06a6691580b7c302bd7627d7b4a347b235fdb182", 0x18}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x4841}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.239943426s ago: executing program 0 (id=10066): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000003000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x8, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x40}]}, {0x0, [0x5f, 0x0, 0x2e, 0x30, 0x5f, 0x30]}}, &(0x7f0000003080)=""/167, 0x74, 0xa7, 0x1, 0x69}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9bc, '\x00', 0x0, r0, 0x5, 0x4, 0x3}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x26}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x8, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) sendmsg$sock(r2, &(0x7f0000002fc0)={&(0x7f0000002d00)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d80)="5338e1f6f685d0bc650fa58d3452b581166edab4b3f3b517f5b961d5a873161b152b20f43f279f0d11d379d5e90214f1753488f22296c9ab885b8904c0bebfe9b2ad767c5348fc9b8c6647c879135ae5d35f06e0687de840ae59c70131cf8dcd475f21ffd21af534bfb2335f8a94e6004e2b25e90831de657263d7d849b9ea5419289bb10891f4900a37ee703e9b66d0ce476ae27d510c0e4d1bca71edf3e8143e67788dd428b5963268d6253d9f0d5f6c403ca8d9d78fae953c22ec25aa9b", 0xbf}, {&(0x7f0000002e40)="f4f9c1713982cf6ef47fe73b40f1a7d70eb3e7e0d3e7d1b6a8c1378c62bd4c1c38e399b283f475a5a5aae9da8efcbe8bf56cfa5d6cef0b645a63df8e6be53f4ade1dc0cac31da6f6f7af8045", 0x4c}], 0x2, &(0x7f0000002f00)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}, 0x4040004) sendmsg$inet(r8, &(0x7f0000002cc0)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002b00)=[{&(0x7f00000005c0)="ce8813efd0beb3638cb6a064a2affbe33796bc15868177d7fa726933c04648675e2c9fdb016917451d0e87d2d1c58fb7e7c31fb96bc732d0e35d9ee94454a9dd28b105dc57fc5154db6bf85f7b0532b96a12461af8b247ea64ce56b0be6f056ecd478f3e9a494b99d879041bd6465f422d39b7e1d0342857dc472da08005d3c8ed186f1e7e64978f2a242f5cd90507a21b3bf28d525e05f8006a2dc2f0373fab9a1a2db38b4470e886b16b84bffed210bef6efeed45a97a572e052d34cbc770d27c5f5b41cd07bcbb335d0120d1ccf0bb891c245c7ab921fda05790ee5d96c7cdd", 0xe1}, {&(0x7f0000000740)="95023092fe6a91a9214665f47a42c2c93028c4ad18133178c6b71208d22ecd0711dca8f59ac2f1f085bd06196853425288382a830140e56cac17694f79e6b310a7483074dc38fcdc4b587117bd7a8414397d1242afde7b7f97fb17f48cfeaee3d4997748289a7c83f9217bbb2e6bff5736423cb6090fff8a6cc78032c1425652ed2293f9e313a1cbba71555d032d2be6835ee3def0b86950a678325b06e3b2919d5bcea6abb928b558a48b131c8d16b72075545634de1b5657da", 0xba}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="133385e1a41e1d9309c85b247adccd973c33efda9ccc19bdee042d9f0e452a3c81ad32eec677a953ba00f506c30ab30e5dfb7ae2b54b9c8fb096a5f6d5b4bb44e45122f9ffdd8d450062d890a7e5d60dc53890ea32e087ffdcb1c14545769f4fe5fdaefba600dd8ef06782abbc0bba7f109b2d0a408fd5e8e9", 0x79}, {&(0x7f0000001880)="533d8e384d143bdca47ffb9809b47ad2482fc0e6ae7025c1b6fe31ab66e9baad45181a496f7c13b1e0f8414d2f7ac513243c73c7625905235fc1fdac7eac30f2d68811a93a3d1f1a4c8e12168a72f99b4bf8fcfb67b1e0a80581be0911bb53a77f21205ff092e2716030476d235b48da9f6ce1f47d9744565053addbd22cb84a8ad5777c495bc3b7c2207fbec2ea6eb0c86f425bcaeaf65b43e8a43ef34e83dc3835303f8d5233d3a8160c87d463261ceae5348f9e1219231ac6cdd81e60c06605fb89bfe12092a63c4777ac3b19f62aa665c543b8f0a8439e1b398badab1fa4c3849e047eb106dcd4588322ed23251c7d74", 0xf2}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="92d056fcc37603b64d9b8d47b92ce200acd4d821f9fcc2e098a734aab11f679111698f9a4c4ec240ce4e9eebc69fe39e25894a761010839ce2429e8113fd1156cfa81f5cfff9ccdf320e01a5ff6ad8712e9765146a6921a852ea14514ea6388535e8e2e4a2b3b748fdb0738e709726d87c8050d103e75d0210f4b2b42e0896db216b0917dd9ff4f5391f85b5520e253e0d248942a8614c579004270106505db72a4b385574f9772cd485d16a1f5b273d05e98bc0036a14955502fb1439ce20dce24f990db3c6dad9693ba86ea3ed7c1eb048ce2256a0decfc1c81e99e1c6eff1b6192e85478eb7191ef7f557", 0xec}, {&(0x7f0000002a80)="6c8044ff4efcd17b619eff0481860caf8ab45561f2014987d316bb0537088aeb678e7a47832f772eb7b5e81f5fcf9aee4cae0e84fa638fdf203bb9aaf74b0a1f48e8eebf7b4e92d0fe210849814507b4cac04a8175f268c96216fb52acb46c2e28187b9c69f77caa18faba618d9188d109e9c6945c017e6032c980e967fa", 0x7e}], 0x8, &(0x7f0000002b80)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x8e, 0x3, 0x2, [{@rand_addr=0x64010102, 0x6}, {@loopback, 0x45cf}, {@empty, 0x404}, {@multicast1, 0x8}, {@broadcast, 0x1}]}, @timestamp={0x44, 0xc, 0xb0, 0x0, 0x9, [0x40, 0x3]}, @noop]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @cipso={0x86, 0x53, 0x2, [{0x1, 0x11, "52f3289e53b6d2d50e8287192877e5"}, {0x2, 0xe, "a32afdb988d879c03fa7096a"}, {0x6, 0x8, "aad3fd9524c9"}, {0x0, 0x2}, {0x5, 0x12, "e3513995b6fb666a51476661c0d79f56"}, {0x5, 0xd, "5397ad78a78c13bb89ee74"}, {0x6, 0x5, "8ff6d9"}]}, @rr={0x7, 0xb, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x52}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x128}, 0x800) 1.08353831s ago: executing program 3 (id=10067): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, 0x0}, 0x41) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)=ANY=[], 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfdf, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.06599304s ago: executing program 2 (id=10068): socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe7d}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 166.257945ms ago: executing program 2 (id=10069): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000640), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3"], 0x8) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 164.546145ms ago: executing program 1 (id=10077): socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe7d}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 149.672116ms ago: executing program 3 (id=10070): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb1e"}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xa0}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x111a, 0x7fff, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x29, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) 0s ago: executing program 0 (id=10071): socketpair(0x22, 0x2, 0x24, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x98, 0x2}, 0x8000, 0x5, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x22, 0x2, 0x21) r1 = socket$kcm(0x22, 0x2, 0x26) close(r1) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}], 0x30}, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) setsockopt$sock_attach_bpf(r3, 0x0, 0x41, 0x0, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) socket$kcm(0xa, 0x1, 0x106) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ip6gretap0: entered promiscuous mode [ 2006.042776][T31934] ip6gretap0: left allmulticast mode [ 2006.048990][T31934] ip6gretap0: left promiscuous mode [ 2006.055704][T31934] : port 1(ip6gretap0) entered disabled state [ 2006.686602][T31942] validate_nla: 4 callbacks suppressed [ 2006.686776][T31942] netlink: 'syz.2.8897': attribute type 10 has an invalid length. [ 2007.321163][T31952] bridge_slave_0: left promiscuous mode [ 2007.341140][T31952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.905435][T31967] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8903'. [ 2009.355119][T31976] netlink: 'syz.3.8908': attribute type 10 has an invalid length. [ 2010.602989][T31989] netlink: 'syz.1.8911': attribute type 10 has an invalid length. [ 2012.255225][T32008] netlink: 'syz.1.8921': attribute type 10 has an invalid length. [ 2014.626404][T32037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8931'. [ 2014.636711][T32037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8931'. [ 2014.651133][T32037] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8931'. [ 2016.954108][T32060] delete_channel: no stack [ 2017.243069][T32069] netlink: 'syz.2.8941': attribute type 10 has an invalid length. [ 2017.486640][T32076] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8944'. [ 2017.636424][T32076] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 2017.653877][T32078] bridge_slave_0: left allmulticast mode [ 2017.693925][T32076] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 2017.715978][T32079] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 2017.758881][T32080] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 2017.782955][T32076] netlink: 'syz.0.8944': attribute type 29 has an invalid length. [ 2018.246165][T32087] netlink: 'syz.1.8948': attribute type 10 has an invalid length. [ 2019.889316][T32106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8953'. [ 2021.470791][T32125] netlink: 'syz.3.8955': attribute type 10 has an invalid length. [ 2023.017941][T32127] delete_channel: no stack [ 2024.421530][T32155] netlink: 'syz.1.8968': attribute type 10 has an invalid length. [ 2025.621766][T32174] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8973'. [ 2025.854922][T32174] netlink: 'syz.2.8973': attribute type 29 has an invalid length. [ 2025.926944][T32174] netlink: 'syz.2.8973': attribute type 29 has an invalid length. [ 2025.942454][T32175] netlink: 'syz.2.8973': attribute type 29 has an invalid length. [ 2025.978397][T32176] netlink: 'syz.2.8973': attribute type 29 has an invalid length. [ 2026.015595][T32174] netlink: 'syz.2.8973': attribute type 29 has an invalid length. [ 2027.404102][T32187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8976'. [ 2027.857325][T32184] delete_channel: no stack [ 2027.866740][T32196] netlink: 'syz.0.8978': attribute type 29 has an invalid length. [ 2027.961951][T32196] netlink: 'syz.0.8978': attribute type 29 has an invalid length. [ 2028.042592][T32201] netlink: 'syz.0.8978': attribute type 29 has an invalid length. [ 2028.091582][T32197] netlink: 'syz.0.8978': attribute type 29 has an invalid length. [ 2028.590486][T32207] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8980'. [ 2029.300998][T32217] netlink: 196 bytes leftover after parsing attributes in process `syz.1.8986'. [ 2029.550820][T32217] validate_nla: 2 callbacks suppressed [ 2029.551027][T32217] netlink: 'syz.1.8986': attribute type 29 has an invalid length. [ 2029.662404][T32217] netlink: 'syz.1.8986': attribute type 29 has an invalid length. [ 2029.708478][T32223] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8987'. [ 2029.729303][T32219] netlink: 'syz.1.8986': attribute type 29 has an invalid length. [ 2029.831501][T32222] netlink: 'syz.1.8986': attribute type 29 has an invalid length. [ 2029.884730][T32217] netlink: 'syz.1.8986': attribute type 29 has an invalid length. [ 2031.151501][T32247] netlink: 'syz.1.8991': attribute type 29 has an invalid length. [ 2031.161813][T32232] delete_channel: no stack [ 2031.172455][T32247] netlink: 'syz.1.8991': attribute type 29 has an invalid length. [ 2031.253178][T32244] netlink: 'syz.1.8991': attribute type 29 has an invalid length. [ 2031.314368][T32246] netlink: 'syz.3.8992': attribute type 30 has an invalid length. [ 2031.372792][T32244] netlink: 'syz.1.8991': attribute type 29 has an invalid length. [ 2031.721578][T32254] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.8993'. [ 2032.880114][T32257] delete_channel: no stack [ 2033.389360][T32270] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8999'. [ 2034.424121][T32282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9004'. [ 2038.211688][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.219097][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.871661][T32322] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9013'. [ 2039.220948][T32326] validate_nla: 2 callbacks suppressed [ 2039.221488][T32326] netlink: 'syz.0.9016': attribute type 27 has an invalid length. [ 2039.252205][T32326] netlink: 'syz.0.9016': attribute type 4 has an invalid length. [ 2039.272787][T32331] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9017'. [ 2039.287621][T32326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9016'. [ 2040.683514][T32348] netlink: 'syz.1.9022': attribute type 30 has an invalid length. [ 2040.743339][T32347] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9023'. [ 2041.003094][T32351] netlink: 'syz.3.9025': attribute type 8 has an invalid length. [ 2042.154543][T32359] netlink: 'syz.3.9027': attribute type 10 has an invalid length. [ 2042.170336][T32367] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9029'. [ 2042.350261][T32368] netlink: 'syz.1.9029': attribute type 9 has an invalid length. [ 2042.397541][T32368] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.9029'. [ 2042.466084][T32367] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9029'. [ 2042.655331][T32372] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9030'. [ 2042.932101][T32376] ªªªªªª: renamed from vlan0 (while UP) [ 2044.061444][T32392] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9037'. [ 2045.440937][T32401] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 2045.473011][T32401] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 2045.484386][T32406] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 2045.546829][T32401] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 2045.625925][T32401] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 2046.271824][T32401] netlink: 'syz.2.9039': attribute type 29 has an invalid length. [ 2047.128839][T32414] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9042'. [ 2047.369119][T32422] netlink: 'syz.2.9040': attribute type 30 has an invalid length. [ 2047.460762][T32414] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2047.505775][T32414] CPU: 1 PID: 32414 Comm: syz.0.9042 Not tainted syzkaller #0 [ 2047.513419][T32414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2047.523683][T32414] Call Trace: [ 2047.527066][T32414] [ 2047.530090][T32414] dump_stack_lvl+0x18c/0x250 [ 2047.534918][T32414] ? show_regs_print_info+0x20/0x20 [ 2047.540313][T32414] ? load_image+0x420/0x420 [ 2047.545017][T32414] sysfs_warn_dup+0x8e/0xa0 [ 2047.549648][T32414] sysfs_do_create_link_sd+0xc0/0x110 [ 2047.555143][T32414] device_add_class_symlinks+0x1cf/0x240 [ 2047.560955][T32414] device_add+0x507/0xc20 [ 2047.565443][T32414] wiphy_register+0x1dad/0x2ae0 [ 2047.570496][T32414] ? cfg80211_event_work+0x40/0x40 [ 2047.575731][T32414] ? minstrel_ht_alloc+0x88a/0x990 [ 2047.581009][T32414] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2047.587213][T32414] ieee80211_register_hw+0x3464/0x4250 [ 2047.592863][T32414] ? ieee80211_tasklet_handler+0x20/0x20 [ 2047.598599][T32414] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2047.604653][T32414] ? __debug_object_init+0xec/0x450 [ 2047.609999][T32414] ? __asan_memset+0x22/0x40 [ 2047.614715][T32414] ? __hrtimer_init+0x186/0x270 [ 2047.619692][T32414] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2047.625638][T32414] ? mac80211_hwsim_free+0x220/0x220 [ 2047.631215][T32414] ? rcu_is_watching+0x15/0xb0 [ 2047.636099][T32414] ? kstrndup+0xbd/0x140 [ 2047.640481][T32414] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2047.645874][T32414] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2047.651855][T32414] ? mark_lock+0x94/0x320 [ 2047.656345][T32414] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2047.662822][T32414] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2047.669104][T32414] ? lockdep_hardirqs_on+0x98/0x150 [ 2047.674430][T32414] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2047.680868][T32414] genl_family_rcv_msg_doit+0x211/0x310 [ 2047.686557][T32414] ? end_current_label_crit_section+0x170/0x170 [ 2047.692958][T32414] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2047.699044][T32414] ? bpf_lsm_capable+0x9/0x10 [ 2047.703853][T32414] ? security_capable+0x89/0xb0 [ 2047.708864][T32414] genl_rcv_msg+0x619/0x7a0 [ 2047.713527][T32414] ? genl_bind+0x360/0x360 [ 2047.718060][T32414] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2047.724531][T32414] ? perf_trace_lock+0x304/0x3b0 [ 2047.729633][T32414] netlink_rcv_skb+0x241/0x4d0 [ 2047.734539][T32414] ? genl_bind+0x360/0x360 [ 2047.739079][T32414] ? netlink_ack+0x1180/0x1180 [ 2047.744036][T32414] ? __lock_acquire+0x7d40/0x7d40 [ 2047.749208][T32414] ? net_generic+0x1e/0x240 [ 2047.753888][T32414] ? down_read+0x1ac/0x2e0 [ 2047.758573][T32414] genl_rcv+0x28/0x40 [ 2047.762832][T32414] netlink_unicast+0x751/0x8d0 [ 2047.767814][T32414] netlink_sendmsg+0x8d0/0xbf0 [ 2047.772700][T32414] ? perf_trace_lock+0x304/0x3b0 [ 2047.777793][T32414] ? netlink_getsockopt+0x590/0x590 [ 2047.783355][T32414] ? aa_sock_msg_perm+0x94/0x150 [ 2047.788448][T32414] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2047.794047][T32414] ? security_socket_sendmsg+0x80/0xa0 [ 2047.799717][T32414] ? netlink_getsockopt+0x590/0x590 [ 2047.805187][T32414] ____sys_sendmsg+0x5ba/0x960 [ 2047.810211][T32414] ? __asan_memset+0x22/0x40 [ 2047.814927][T32414] ? __sys_sendmsg_sock+0x30/0x30 [ 2047.820076][T32414] ? __import_iovec+0x5f2/0x850 [ 2047.825079][T32414] ? import_iovec+0x73/0xa0 [ 2047.829718][T32414] ___sys_sendmsg+0x2a6/0x360 [ 2047.834567][T32414] ? __sys_sendmsg+0x2a0/0x2a0 [ 2047.839555][T32414] ? trace_call_bpf+0xc3/0x6c0 [ 2047.844441][T32414] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2047.850933][T32414] __se_sys_sendmsg+0x1c2/0x2b0 [ 2047.855914][T32414] ? __x64_sys_sendmsg+0x80/0x80 [ 2047.861042][T32414] ? lockdep_hardirqs_on+0x98/0x150 [ 2047.866385][T32414] do_syscall_64+0x55/0xa0 [ 2047.870901][T32414] ? clear_bhb_loop+0x40/0x90 [ 2047.875700][T32414] ? clear_bhb_loop+0x40/0x90 [ 2047.880635][T32414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2047.886667][T32414] RIP: 0033:0x7f4f45f9cdd9 [ 2047.891204][T32414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2047.910943][T32414] RSP: 002b:00007f4f46f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2047.919579][T32414] RAX: ffffffffffffffda RBX: 00007f4f46215fa0 RCX: 00007f4f45f9cdd9 [ 2047.927753][T32414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2047.935838][T32414] RBP: 00007f4f46032d69 R08: 0000000000000000 R09: 0000000000000000 [ 2047.944006][T32414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2047.952103][T32414] R13: 00007f4f46216038 R14: 00007f4f46215fa0 R15: 00007fff1b584488 [ 2047.960278][T32414] [ 2048.371682][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9044'. [ 2048.957518][T32444] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9049'. [ 2049.720782][T32447] netlink: 'syz.3.9051': attribute type 29 has an invalid length. [ 2049.785850][T32447] netlink: 'syz.3.9051': attribute type 29 has an invalid length. [ 2049.836014][T32450] netlink: 'syz.3.9051': attribute type 29 has an invalid length. [ 2051.564141][T32457] validate_nla: 2 callbacks suppressed [ 2051.564169][T32457] netlink: 'syz.1.9054': attribute type 10 has an invalid length. [ 2051.578339][T32457] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9054'. [ 2051.594867][T32447] netlink: 'syz.3.9051': attribute type 29 has an invalid length. [ 2052.325629][T32470] netlink: 'syz.0.9057': attribute type 30 has an invalid length. [ 2054.661272][T32490] netlink: 'syz.0.9062': attribute type 8 has an invalid length. [ 2054.843110][T32493] netlink: 'syz.2.9063': attribute type 10 has an invalid length. [ 2054.888324][T32493] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9063'. [ 2056.553214][T32509] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9069'. [ 2056.964817][T32509] netlink: 'syz.3.9069': attribute type 9 has an invalid length. [ 2057.012688][T32510] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.9069'. [ 2057.151014][T32509] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.9069'. [ 2059.487814][T32529] netlink: 'syz.3.9074': attribute type 10 has an invalid length. [ 2059.497048][T32529] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9074'. [ 2060.783050][T32539] netlink: 'syz.1.9076': attribute type 8 has an invalid length. [ 2061.852656][T32545] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9080'. [ 2062.095460][T32545] netlink: 'syz.0.9080': attribute type 9 has an invalid length. [ 2062.133034][T32545] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.9080'. [ 2062.342154][T32545] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9080'. [ 2065.672021][T32580] netlink: 'syz.3.9089': attribute type 39 has an invalid length. [ 2067.043241][T32579] netlink: 'syz.2.9087': attribute type 10 has an invalid length. [ 2067.052180][T32579] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9087'. [ 2067.062452][T32572] netlink: 'syz.0.9086': attribute type 15 has an invalid length. [ 2067.073678][T32572] netlink: 'syz.0.9086': attribute type 7 has an invalid length. [ 2067.088041][T32587] netlink: 'syz.0.9086': attribute type 39 has an invalid length. [ 2067.271292][T32591] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9091'. [ 2067.374633][T32592] netlink: 'syz.1.9099': attribute type 10 has an invalid length. [ 2067.393457][T32592] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9099'. [ 2067.446751][T32593] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9091'. [ 2067.503437][T32591] netlink: 'syz.2.9091': attribute type 9 has an invalid length. [ 2067.550500][T32591] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.9091'. [ 2074.110769][T32624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9103'. [ 2078.234200][T32669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9116'. [ 2080.283186][T32695] netlink: 'syz.0.9125': attribute type 39 has an invalid length. [ 2081.322134][T32710] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9131'. [ 2081.716452][T32711] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.9131'. [ 2081.813725][T32710] netlink: 'syz.1.9131': attribute type 9 has an invalid length. [ 2081.856152][T32710] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.9131'. [ 2082.486879][T32705] netlink: 'syz.2.9128': attribute type 15 has an invalid length. [ 2082.571859][T32705] netlink: 'syz.2.9128': attribute type 7 has an invalid length. [ 2083.278724][T32719] netlink: 'syz.2.9128': attribute type 39 has an invalid length. [ 2084.324563][T32728] netlink: 'syz.1.9136': attribute type 39 has an invalid length. [ 2087.597741][T32760] netlink: 'syz.3.9147': attribute type 10 has an invalid length. [ 2087.606943][T32760] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9147'. [ 2088.147311][T32767] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9157'. [ 2088.255195][ T306] netlink: 'syz.2.9149': attribute type 39 has an invalid length. [ 2088.423334][ T309] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9157'. [ 2088.477206][ T305] netlink: 'syz.0.9157': attribute type 9 has an invalid length. [ 2088.486488][ T305] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.9157'. [ 2088.574529][ T310] netlink: 'syz.1.9150': attribute type 15 has an invalid length. [ 2088.602876][ T310] netlink: 'syz.1.9150': attribute type 7 has an invalid length. [ 2089.094887][ T310] netlink: 'syz.1.9150': attribute type 39 has an invalid length. [ 2091.964248][ T334] netlink: 'syz.3.9156': attribute type 10 has an invalid length. [ 2092.167885][ T337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9160'. [ 2093.068626][ T349] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9162'. [ 2093.094738][ T344] netlink: 'syz.1.9161': attribute type 10 has an invalid length. [ 2093.118033][ T344] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9161'. [ 2093.278895][ T350] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9162'. [ 2093.279649][ T349] netlink: 'syz.2.9162': attribute type 9 has an invalid length. [ 2093.376770][ T349] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.9162'. [ 2095.412603][ T369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9171'. [ 2096.333031][ T381] netlink: 'syz.0.9174': attribute type 10 has an invalid length. [ 2096.383977][ T381] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9174'. [ 2096.435114][ T386] netlink: 'syz.3.9176': attribute type 21 has an invalid length. [ 2096.612197][ T386] netlink: 'syz.3.9176': attribute type 1 has an invalid length. [ 2099.564638][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.571442][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.195308][ T429] netlink: 'syz.2.9188': attribute type 10 has an invalid length. [ 2103.204934][ T429] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9188'. [ 2104.303817][ T437] netlink: 'syz.3.9191': attribute type 8 has an invalid length. [ 2104.326368][ T437] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9191'. [ 2105.606814][ T456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9194'. [ 2105.781988][ T454] netlink: 'syz.0.9196': attribute type 10 has an invalid length. [ 2106.589527][ T467] netlink: 'syz.3.9200': attribute type 10 has an invalid length. [ 2106.645040][ T467] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9200'. [ 2107.294464][ T481] netlink: 'syz.0.9207': attribute type 2 has an invalid length. [ 2107.310578][ T481] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9207'. [ 2107.844679][ T487] netlink: 'syz.1.9208': attribute type 21 has an invalid length. [ 2108.073280][ T487] netlink: 'syz.1.9208': attribute type 1 has an invalid length. [ 2109.466366][ T499] netlink: 'syz.1.9211': attribute type 10 has an invalid length. [ 2110.155066][ T518] netlink: 'syz.3.9214': attribute type 10 has an invalid length. [ 2110.173584][ T518] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9214'. [ 2111.914032][ T533] netlink: 'syz.2.9221': attribute type 21 has an invalid length. [ 2112.031386][ T534] netlink: 'syz.2.9221': attribute type 1 has an invalid length. [ 2112.186408][ T537] netlink: 'syz.3.9223': attribute type 21 has an invalid length. [ 2112.419410][ T537] Ÿë: port 1(ip6gretap0) entered blocking state [ 2112.426335][ T537] Ÿë: port 1(ip6gretap0) entered disabled state [ 2112.451992][ T537] ip6gretap0: entered allmulticast mode [ 2112.466538][ T537] ip6gretap0: entered promiscuous mode [ 2113.550638][ T553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9236'. [ 2114.309121][ T562] netlink: 'syz.2.9229': attribute type 10 has an invalid length. [ 2114.394751][ T562] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9229'. [ 2116.455903][ T587] netlink: 'syz.2.9237': attribute type 21 has an invalid length. [ 2116.486256][ T587] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9237'. [ 2116.522021][ T587] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9237'. [ 2117.312371][ T593] netlink: 'syz.0.9239': attribute type 1 has an invalid length. [ 2117.321933][ T593] netlink: 'syz.0.9239': attribute type 2 has an invalid length. [ 2117.333487][ T593] netlink: 'syz.0.9239': attribute type 2 has an invalid length. [ 2117.344270][ T593] netlink: 'syz.0.9239': attribute type 3 has an invalid length. [ 2117.358644][ T593] netlink: 'syz.0.9239': attribute type 4 has an invalid length. [ 2117.378674][ T593] netlink: 'syz.0.9239': attribute type 5 has an invalid length. [ 2117.395439][ T593] netlink: 'syz.0.9239': attribute type 6 has an invalid length. [ 2117.417246][ T593] netlink: 'syz.0.9239': attribute type 7 has an invalid length. [ 2117.436682][ T593] netlink: 'syz.0.9239': attribute type 9 has an invalid length. [ 2117.459956][ T593] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.9239'. [ 2118.386832][ T607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9244'. [ 2118.814791][ T613] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9243'. [ 2122.203956][ T650] validate_nla: 4 callbacks suppressed [ 2122.204132][ T650] netlink: 'syz.1.9257': attribute type 10 has an invalid length. [ 2122.237786][ T650] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9257'. [ 2122.714707][ T655] netlink: 'syz.2.9259': attribute type 10 has an invalid length. [ 2123.555401][ T664] netlink: 'syz.2.9262': attribute type 2 has an invalid length. [ 2123.611870][ T664] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9262'. [ 2124.196831][ T678] netlink: 'syz.2.9266': attribute type 21 has an invalid length. [ 2124.370923][ T677] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.9267'. [ 2124.391499][ T677] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.9267'. [ 2124.462811][ T678] Ÿë: port 2(ip6gretap0) entered blocking state [ 2124.488115][ T678] Ÿë: port 2(ip6gretap0) entered disabled state [ 2124.495631][ T678] ip6gretap0: entered allmulticast mode [ 2124.515057][ T678] ip6gretap0: entered promiscuous mode [ 2125.014198][T15193] tipc: Subscription rejected, illegal request [ 2125.484075][ T688] netlink: 'syz.3.9271': attribute type 15 has an invalid length. [ 2125.531250][ T688] netlink: 'syz.3.9271': attribute type 7 has an invalid length. [ 2127.375120][ T722] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.9281'. [ 2127.420163][ T722] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.9281'. [ 2129.880761][ T758] veth1_vlan: left promiscuous mode [ 2129.897787][ T758] macvlan1: entered promiscuous mode [ 2130.059814][ T758] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.9294'. [ 2130.075217][ T758] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.9294'. [ 2130.844576][ T771] netlink: 'syz.2.9298': attribute type 10 has an invalid length. [ 2130.880406][ T771] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9298'. [ 2133.249556][ T800] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9309'. [ 2133.565039][ T798] netlink: 'syz.2.9307': attribute type 8 has an invalid length. [ 2133.574788][ T798] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9307'. [ 2133.800216][ T809] netlink: 'syz.0.9319': attribute type 21 has an invalid length. [ 2133.826138][ T808] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.9311'. [ 2133.860473][ T808] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.9311'. [ 2134.114536][ T809] Ÿë: port 1(ip6gretap0) entered blocking state [ 2134.139478][ T809] Ÿë: port 1(ip6gretap0) entered disabled state [ 2134.158727][ T809] ip6gretap0: entered allmulticast mode [ 2134.207221][ T809] ip6gretap0: entered promiscuous mode [ 2135.518678][ T830] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.9320'. [ 2136.816060][ T846] netlink: 'syz.0.9323': attribute type 8 has an invalid length. [ 2136.827350][ T846] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9323'. [ 2138.011945][ T861] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.9331'. [ 2140.278806][ T884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9341'. [ 2140.444402][ T884] netlink: 'syz.3.9341': attribute type 1 has an invalid length. [ 2141.000469][ T893] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 2141.028442][ T893] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 2141.064559][ T898] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9344'. [ 2141.091427][ T901] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 2141.099823][ T901] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 2141.117885][ T892] netlink: 'syz.2.9343': attribute type 39 has an invalid length. [ 2141.833590][ T899] netlink: 'syz.0.9342': attribute type 4 has an invalid length. [ 2141.847068][ T899] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9342'. [ 2141.883388][ T895] delete_channel: no stack [ 2142.495832][ T916] netlink: 'syz.3.9346': attribute type 10 has an invalid length. [ 2142.528270][ T916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9346'. [ 2145.558936][ T955] netlink: 'syz.3.9354': attribute type 10 has an invalid length. [ 2145.588160][ T955] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9354'. [ 2146.317362][ T962] netlink: 'syz.2.9357': attribute type 10 has an invalid length. [ 2146.474288][ T966] netlink: 'syz.1.9356': attribute type 4 has an invalid length. [ 2146.484020][ T966] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9356'. [ 2146.820946][ T960] delete_channel: no stack [ 2148.638770][ T988] netlink: 'syz.3.9363': attribute type 10 has an invalid length. [ 2148.651870][ T988] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9363'. [ 2149.562004][ T998] netlink: 'syz.2.9366': attribute type 10 has an invalid length. [ 2149.587356][ T998] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9366'. [ 2150.371325][ T1007] netlink: 'syz.3.9369': attribute type 4 has an invalid length. [ 2150.457990][ T1007] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.9369'. [ 2150.532213][ T1006] delete_channel: no stack [ 2151.218426][ T1021] netlink: 'syz.0.9371': attribute type 39 has an invalid length. [ 2152.107047][ T1025] netlink: 'syz.3.9372': attribute type 9 has an invalid length. [ 2152.121498][ T1025] netlink: 84908 bytes leftover after parsing attributes in process `syz.3.9372'. [ 2153.770704][ T1049] netlink: 'syz.3.9379': attribute type 10 has an invalid length. [ 2153.812643][ T1049] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9379'. [ 2154.346660][ T1060] netlink: 'syz.2.9381': attribute type 4 has an invalid length. [ 2154.374691][ T1060] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9381'. [ 2154.656801][ T1059] delete_channel: no stack [ 2158.118613][ T1101] netlink: 'syz.1.9391': attribute type 10 has an invalid length. [ 2158.190041][ T1101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9391'. [ 2158.392869][ T1100] netlink: 'syz.0.9393': attribute type 10 has an invalid length. [ 2158.417969][ T1100] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9393'. [ 2160.850950][ T1123] netlink: 'syz.1.9400': attribute type 39 has an invalid length. [ 2160.940239][ T1122] netlink: 'syz.2.9401': attribute type 9 has an invalid length. [ 2160.976105][ T1122] netlink: 84908 bytes leftover after parsing attributes in process `syz.2.9401'. [ 2161.210888][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.217751][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.599049][ T1128] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9402'. [ 2161.618884][ T1128] €Â0: entered promiscuous mode [ 2161.942750][ T1136] netlink: 'syz.2.9404': attribute type 10 has an invalid length. [ 2161.951476][ T1136] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9404'. [ 2162.684904][ T1146] netlink: 'syz.2.9407': attribute type 153 has an invalid length. [ 2162.750375][ T1146] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9407'. [ 2163.028358][ T1142] delete_channel: no stack [ 2163.817058][ T1155] netlink: 'syz.0.9410': attribute type 4 has an invalid length. [ 2163.860962][ T1155] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.9410'. [ 2164.065848][ T1154] delete_channel: no stack [ 2164.431638][ T1161] netlink: 'syz.1.9412': attribute type 9 has an invalid length. [ 2164.448234][ T1161] netlink: 84908 bytes leftover after parsing attributes in process `syz.1.9412'. [ 2165.229688][ T1173] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9414'. [ 2165.266897][ T1173] €Â0: entered promiscuous mode [ 2165.588911][ T1178] netlink: 'syz.1.9415': attribute type 10 has an invalid length. [ 2165.618980][ T1178] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9415'. [ 2165.727217][ T1181] netlink: 'syz.0.9416': attribute type 10 has an invalid length. [ 2167.582846][ T1198] netlink: 'syz.3.9423': attribute type 10 has an invalid length. [ 2168.485186][ T1215] netlink: 'syz.3.9426': attribute type 10 has an invalid length. [ 2168.507453][ T1215] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9426'. [ 2168.527883][ T1213] netlink: 'syz.0.9427': attribute type 10 has an invalid length. [ 2169.791928][ T1225] netlink: 'syz.0.9428': attribute type 9 has an invalid length. [ 2169.857764][ T1225] netlink: 84908 bytes leftover after parsing attributes in process `syz.0.9428'. [ 2170.167878][ T1223] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9429'. [ 2170.244464][ T1223] €Â0: entered promiscuous mode [ 2170.830276][ T1234] netlink: 'syz.0.9433': attribute type 10 has an invalid length. [ 2172.102957][ T1251] netlink: 'syz.0.9438': attribute type 10 has an invalid length. [ 2172.131544][ T1251] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9438'. [ 2173.781064][ T1267] netlink: 'syz.3.9442': attribute type 9 has an invalid length. [ 2173.792014][ T1267] netlink: 84908 bytes leftover after parsing attributes in process `syz.3.9442'. [ 2174.526212][ T1272] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9443'. [ 2174.539124][ T1277] netlink: 'syz.0.9445': attribute type 2 has an invalid length. [ 2174.579034][ T1272] €Â0: entered promiscuous mode [ 2174.933641][ T1285] netlink: 'syz.0.9447': attribute type 3 has an invalid length. [ 2174.945963][ T1285] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9447'. [ 2175.629581][ T1293] netlink: 'syz.2.9450': attribute type 10 has an invalid length. [ 2175.716770][ T1293] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9450'. [ 2175.756006][ T1294] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 2179.314563][ T1319] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9456'. [ 2179.582316][ T1319] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 2179.700030][ T1317] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2180.562663][ T1331] netlink: 'syz.1.9459': attribute type 3 has an invalid length. [ 2180.587566][ T1331] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9459'. [ 2180.854546][ T1330] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9458'. [ 2181.635023][ T1336] netlink: 'syz.3.9460': attribute type 10 has an invalid length. [ 2181.647530][ T1336] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9460'. [ 2181.720381][ T1346] netlink: 'syz.2.9461': attribute type 10 has an invalid length. [ 2184.643950][ T1373] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9470'. [ 2184.767867][ T1373] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 2185.155813][ T1372] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2185.713983][ T1378] netlink: 'syz.3.9471': attribute type 3 has an invalid length. [ 2185.737499][ T1378] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9471'. [ 2185.978352][ T1386] netlink: 'syz.1.9473': attribute type 10 has an invalid length. [ 2186.085802][ T1380] netlink: 'syz.0.9472': attribute type 10 has an invalid length. [ 2186.105648][ T1380] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9472'. [ 2187.818620][ T1412] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9480'. [ 2187.862597][ T1415] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9479'. [ 2189.049803][ T1423] netlink: 'syz.1.9483': attribute type 10 has an invalid length. [ 2189.077388][ T1423] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9483'. [ 2189.490143][ T1430] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9484'. [ 2189.649604][ T1430] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 2190.049594][ T1427] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2193.611947][ T1459] netlink: 'syz.1.9494': attribute type 10 has an invalid length. [ 2193.631872][ T1459] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9494'. [ 2194.856378][ T1477] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9498'. [ 2194.907425][ T1477] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 2195.303446][ T1482] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9500'. [ 2196.614469][ T1491] netlink: 'syz.0.9503': attribute type 10 has an invalid length. [ 2196.629332][ T1491] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9503'. [ 2197.167823][ T1497] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 2198.001687][ T1513] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9511'. [ 2198.187958][ T1513] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 2198.207526][ T1509] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2198.764335][ T1523] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9512'. [ 2200.104985][ T1530] netlink: 'syz.3.9515': attribute type 10 has an invalid length. [ 2200.120316][ T1530] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9515'. [ 2200.234525][ T1533] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9517'. [ 2201.000985][ T1539] netlink: 'syz.1.9527': attribute type 10 has an invalid length. [ 2201.027968][ T1539] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9527'. [ 2201.057095][ T1540] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 2203.160363][ T1568] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9528'. [ 2203.894514][ T1574] netlink: 'syz.0.9531': attribute type 10 has an invalid length. [ 2203.903514][ T1574] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9531'. [ 2204.507046][ T1580] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 2205.682390][ T1598] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2205.970143][ T51] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 2206.659040][ T1607] netlink: 'syz.3.9541': attribute type 10 has an invalid length. [ 2206.697487][ T1607] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9541'. [ 2206.822035][ T1611] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9543'. [ 2207.513065][ T1620] netlink: 'syz.3.9545': attribute type 10 has an invalid length. [ 2207.898444][ T1627] C: renamed from team_slave_0 [ 2208.254031][ T1627] netlink: 'syz.1.9547': attribute type 3 has an invalid length. [ 2208.269879][ T1627] netlink: 'syz.1.9547': attribute type 1 has an invalid length. [ 2208.309530][ T1627] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9547'. [ 2208.338893][ T1634] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.9549'. [ 2209.350012][ T1643] netlink: 'syz.1.9553': attribute type 10 has an invalid length. [ 2209.359466][ T1643] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9553'. [ 2212.412408][ T1672] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9560'. [ 2213.145988][ T1675] C: renamed from team_slave_0 [ 2213.181473][ T1675] netlink: 'syz.0.9561': attribute type 3 has an invalid length. [ 2213.197710][ T1675] netlink: 'syz.0.9561': attribute type 1 has an invalid length. [ 2213.220911][ T1675] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9561'. [ 2213.386123][ T1678] netlink: 'syz.3.9562': attribute type 8 has an invalid length. [ 2213.397443][ T1678] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9562'. [ 2217.479200][ T1708] netlink: 'syz.3.9574': attribute type 10 has an invalid length. [ 2217.713477][ T1709] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9572'. [ 2218.077561][ T1714] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2218.330135][ T1717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9577'. [ 2218.523412][ T1715] netlink: 'syz.1.9576': attribute type 21 has an invalid length. [ 2219.597364][ T1734] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9587'. [ 2221.350090][ T1745] syzkaller0: left promiscuous mode [ 2221.356645][ T1745] syzkaller0: left allmulticast mode [ 2221.963571][ T1758] netlink: 'syz.3.9588': attribute type 21 has an invalid length. [ 2222.432707][ T1762] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9589'. [ 2222.607971][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.617696][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.266688][ T1774] C: renamed from team_slave_0 [ 2223.489514][ T1774] netlink: 'syz.3.9592': attribute type 3 has an invalid length. [ 2223.500528][ T1774] netlink: 'syz.3.9592': attribute type 1 has an invalid length. [ 2223.510202][ T1774] netlink: 116 bytes leftover after parsing attributes in process `syz.3.9592'. [ 2223.533698][ T1780] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9601'. [ 2223.575992][ T1780] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 2223.611732][ T1780] CPU: 0 PID: 1780 Comm: syz.1.9601 Not tainted syzkaller #0 [ 2223.619324][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2223.629499][ T1780] Call Trace: [ 2223.632874][ T1780] [ 2223.635918][ T1780] dump_stack_lvl+0x18c/0x250 [ 2223.640759][ T1780] ? show_regs_print_info+0x20/0x20 [ 2223.646096][ T1780] ? load_image+0x420/0x420 [ 2223.650793][ T1780] sysfs_warn_dup+0x8e/0xa0 [ 2223.655412][ T1780] sysfs_do_create_link_sd+0xc0/0x110 [ 2223.660917][ T1780] device_add_class_symlinks+0x1cf/0x240 [ 2223.666714][ T1780] device_add+0x507/0xc20 [ 2223.671205][ T1780] wiphy_register+0x1dad/0x2ae0 [ 2223.676323][ T1780] ? cfg80211_event_work+0x40/0x40 [ 2223.681570][ T1780] ? minstrel_ht_alloc+0x88a/0x990 [ 2223.686911][ T1780] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2223.693136][ T1780] ieee80211_register_hw+0x3464/0x4250 [ 2223.698786][ T1780] ? ieee80211_tasklet_handler+0x20/0x20 [ 2223.704533][ T1780] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2223.710551][ T1780] ? __debug_object_init+0xec/0x450 [ 2223.715852][ T1780] ? __asan_memset+0x22/0x40 [ 2223.720574][ T1780] ? __hrtimer_init+0x186/0x270 [ 2223.725545][ T1780] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2223.731553][ T1780] ? mac80211_hwsim_free+0x220/0x220 [ 2223.736934][ T1780] ? rcu_is_watching+0x15/0xb0 [ 2223.741818][ T1780] ? kstrndup+0xbd/0x140 [ 2223.746222][ T1780] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2223.751483][ T1780] ? __nla_validate+0x50/0x50 [ 2223.756328][ T1780] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2223.762787][ T1780] ? __nla_parse+0x40/0x50 [ 2223.767332][ T1780] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2223.773797][ T1780] genl_family_rcv_msg_doit+0x211/0x310 [ 2223.779458][ T1780] ? end_current_label_crit_section+0x170/0x170 [ 2223.786026][ T1780] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2223.792228][ T1780] ? bpf_lsm_capable+0x9/0x10 [ 2223.797056][ T1780] ? security_capable+0x89/0xb0 [ 2223.802042][ T1780] genl_rcv_msg+0x619/0x7a0 [ 2223.806655][ T1780] ? genl_bind+0x360/0x360 [ 2223.811155][ T1780] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2223.817618][ T1780] ? perf_trace_lock+0x304/0x3b0 [ 2223.822728][ T1780] netlink_rcv_skb+0x241/0x4d0 [ 2223.827693][ T1780] ? genl_bind+0x360/0x360 [ 2223.832243][ T1780] ? netlink_ack+0x1180/0x1180 [ 2223.837175][ T1780] ? __lock_acquire+0x7d40/0x7d40 [ 2223.842307][ T1780] ? net_generic+0x1e/0x240 [ 2223.846931][ T1780] ? down_read+0x1ac/0x2e0 [ 2223.851443][ T1780] genl_rcv+0x28/0x40 [ 2223.855526][ T1780] netlink_unicast+0x751/0x8d0 [ 2223.860462][ T1780] netlink_sendmsg+0x8d0/0xbf0 [ 2223.865335][ T1780] ? perf_trace_lock+0x304/0x3b0 [ 2223.870411][ T1780] ? netlink_getsockopt+0x590/0x590 [ 2223.875811][ T1780] ? aa_sock_msg_perm+0x94/0x150 [ 2223.880870][ T1780] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2223.886275][ T1780] ? security_socket_sendmsg+0x80/0xa0 [ 2223.891853][ T1780] ? netlink_getsockopt+0x590/0x590 [ 2223.897197][ T1780] ____sys_sendmsg+0x5ba/0x960 [ 2223.902172][ T1780] ? __asan_memset+0x22/0x40 [ 2223.906884][ T1780] ? __sys_sendmsg_sock+0x30/0x30 [ 2223.912002][ T1780] ? __import_iovec+0x5f2/0x850 [ 2223.916974][ T1780] ? import_iovec+0x73/0xa0 [ 2223.921587][ T1780] ___sys_sendmsg+0x2a6/0x360 [ 2223.926378][ T1780] ? __sys_sendmsg+0x2a0/0x2a0 [ 2223.931400][ T1780] __se_sys_sendmsg+0x1c2/0x2b0 [ 2223.936363][ T1780] ? __x64_sys_sendmsg+0x80/0x80 [ 2223.941451][ T1780] ? lockdep_hardirqs_on+0x98/0x150 [ 2223.946764][ T1780] do_syscall_64+0x55/0xa0 [ 2223.951267][ T1780] ? clear_bhb_loop+0x40/0x90 [ 2223.956040][ T1780] ? clear_bhb_loop+0x40/0x90 [ 2223.960814][ T1780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2223.966811][ T1780] RIP: 0033:0x7f77d319cdd9 [ 2223.971330][ T1780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2223.991083][ T1780] RSP: 002b:00007f77d402f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2223.999606][ T1780] RAX: ffffffffffffffda RBX: 00007f77d3416360 RCX: 00007f77d319cdd9 [ 2224.007659][ T1780] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2224.015715][ T1780] RBP: 00007f77d3232d69 R08: 0000000000000000 R09: 0000000000000000 [ 2224.023784][ T1780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2224.031937][ T1780] R13: 00007f77d34163f8 R14: 00007f77d3416360 R15: 00007ffed7458048 [ 2224.040080][ T1780] [ 2225.460907][ T1792] pim6reg1: left promiscuous mode [ 2225.474615][ T1792] pim6reg1: left allmulticast mode [ 2227.815172][ T1792] syzkaller0: left promiscuous mode [ 2227.821349][ T1792] syzkaller0: left allmulticast mode [ 2227.951480][ T1799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9600'. [ 2228.407860][ T1806] netlink: 'syz.1.9603': attribute type 10 has an invalid length. [ 2230.634834][ T1824] netlink: 'syz.2.9607': attribute type 3 has an invalid length. [ 2230.657561][ T1824] netlink: 'syz.2.9607': attribute type 1 has an invalid length. [ 2230.665470][ T1824] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9607'. [ 2231.590653][ T1839] netlink: 'syz.0.9612': attribute type 9 has an invalid length. [ 2231.607638][ T1839] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9612'. [ 2232.857328][ T1852] netlink: 'syz.0.9615': attribute type 10 has an invalid length. [ 2236.140794][ T1874] netlink: 'syz.2.9624': attribute type 8 has an invalid length. [ 2236.161407][ T1881] delete_channel: no stack [ 2236.187252][ T1874] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9624'. [ 2237.117909][ T1898] netlink: 'syz.2.9629': attribute type 10 has an invalid length. [ 2237.165235][ T1896] netlink: 'syz.1.9631': attribute type 10 has an invalid length. [ 2237.216028][ T1896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9631'. [ 2238.058195][ T1901] netlink: 'syz.3.9632': attribute type 10 has an invalid length. [ 2238.511793][ T1917] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9636'. [ 2239.728313][ T1928] netlink: 'syz.3.9646': attribute type 10 has an invalid length. [ 2239.815103][ T1923] syzkaller0: entered promiscuous mode [ 2239.827570][ T1923] syzkaller0: entered allmulticast mode [ 2239.932105][ T1923] netlink: 'syz.1.9637': attribute type 8 has an invalid length. [ 2239.957494][ T1923] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9637'. [ 2242.124467][ T1943] netlink: 'syz.3.9642': attribute type 10 has an invalid length. [ 2242.139692][ T1943] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9642'. [ 2243.498100][ T1956] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9647'. [ 2244.159504][ T1962] netlink: 'syz.3.9649': attribute type 10 has an invalid length. [ 2244.226821][ T1962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9649'. [ 2245.279166][ T1973] netlink: 'syz.3.9654': attribute type 10 has an invalid length. [ 2245.317748][ T1973] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9654'. [ 2245.430985][ T1979] netlink: 'syz.1.9652': attribute type 10 has an invalid length. [ 2246.430581][ T1988] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 2246.457888][ T1988] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 2246.672221][ T1990] mac80211_hwsim hwsim4 ªªªªªª: renamed from wlan0 [ 2249.829081][ T2016] netlink: 'syz.2.9665': attribute type 10 has an invalid length. [ 2249.877918][ T2016] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9665'. [ 2250.427750][ T2020] netlink: 'syz.1.9667': attribute type 2 has an invalid length. [ 2252.228013][ T2033] delete_channel: no stack [ 2252.538288][ T2027] netlink: 'syz.2.9669': attribute type 10 has an invalid length. [ 2254.229137][ T2048] netlink: 'syz.3.9677': attribute type 10 has an invalid length. [ 2254.258957][ T2048] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9677'. [ 2255.140664][ T2060] netlink: 'syz.3.9679': attribute type 9 has an invalid length. [ 2255.180745][ T2060] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9679'. [ 2255.398647][ T2063] netlink: 'syz.2.9680': attribute type 2 has an invalid length. [ 2255.409046][ T2063] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.9680'. [ 2258.061114][ T2087] netlink: 'syz.0.9687': attribute type 10 has an invalid length. [ 2258.159970][ T2087] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9687'. [ 2259.218493][ T2084] netlink: 'syz.3.9686': attribute type 39 has an invalid length. [ 2261.529756][ T2073] delete_channel: no stack [ 2261.682184][ T2098] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9691'. [ 2261.719520][ T2098] smc: net device  erased user defined pnetid CONFIG [ 2264.910973][ T2120] netlink: 'syz.1.9698': attribute type 10 has an invalid length. [ 2264.927844][ T2120] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9698'. [ 2266.411182][ T2134] netlink: 'syz.0.9700': attribute type 39 has an invalid length. [ 2267.832425][ T2136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9711'. [ 2269.247019][ T2143] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9705'. [ 2269.267680][ T2141] delete_channel: no stack [ 2273.392152][ T2179] netlink: 'syz.0.9717': attribute type 39 has an invalid length. [ 2274.527227][T30523] wlan1: Trigger new scan to find an IBSS to join [ 2275.011596][ T2190] netlink: 'syz.2.9720': attribute type 10 has an invalid length. [ 2278.119729][ T2178] delete_channel: no stack [ 2278.344334][ T2205] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.9733'. [ 2278.356860][ T2205] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.9733'. [ 2278.527358][ T48] wlan1: Trigger new scan to find an IBSS to join [ 2279.673583][ T2218] netlink: 'syz.2.9729': attribute type 39 has an invalid length. [ 2279.682492][ T2108] wlan1: Creating new IBSS network, BSSID 1e:03:c1:81:61:ab [ 2281.720412][ T2237] netlink: 'syz.2.9743': attribute type 39 has an invalid length. [ 2283.926729][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.933443][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.026490][ T2266] netlink: 'syz.0.9738': attribute type 10 has an invalid length. [ 2284.048946][ T2266] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9738'. [ 2284.890649][ T2277] netlink: 'syz.0.9744': attribute type 2 has an invalid length. [ 2284.904014][ T2277] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.9744'. [ 2285.244825][ T51] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 2287.518411][ T2301] netlink: 'syz.0.9761': attribute type 10 has an invalid length. [ 2287.557582][T30523] wlan1: Trigger new scan to find an IBSS to join [ 2288.197438][ T2309] netlink: 'syz.1.9752': attribute type 15 has an invalid length. [ 2288.486743][ T2309] netlink: 'syz.1.9752': attribute type 7 has an invalid length. [ 2288.929183][ T2312] netlink: 'syz.1.9752': attribute type 39 has an invalid length. [ 2289.242185][ T2318] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2290.035729][ T2323] netlink: 'syz.2.9758': attribute type 1 has an invalid length. [ 2290.335787][ T2322] netlink: 'syz.2.9758': attribute type 4 has an invalid length. [ 2290.373151][ T2322] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9758'. [ 2290.558669][ T2326] netlink: 'syz.3.9759': attribute type 2 has an invalid length. [ 2290.607996][ T2326] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.9759'. [ 2291.861962][ T2338] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.9763'. [ 2291.877397][ T2338] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.9763'. [ 2292.801851][ T2346] netlink: 'syz.1.9766': attribute type 2 has an invalid length. [ 2292.830851][ T2346] netlink: 'syz.1.9766': attribute type 8 has an invalid length. [ 2292.908765][ T2346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9766'. [ 2293.007936][ T2347] netlink: 'syz.1.9766': attribute type 11 has an invalid length. [ 2294.562771][ T2367] netlink: 'syz.1.9773': attribute type 2 has an invalid length. [ 2294.628846][ T2367] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.9773'. [ 2297.421265][ T2400] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.9779'. [ 2299.563746][ T2402] netlink: 'syz.2.9780': attribute type 2 has an invalid length. [ 2299.598904][ T2402] netlink: 'syz.2.9780': attribute type 8 has an invalid length. [ 2299.628925][ T2402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9780'. [ 2299.667174][ T2406] netlink: 'syz.2.9780': attribute type 11 has an invalid length. [ 2300.071863][ T2428] netlink: 'syz.3.9785': attribute type 2 has an invalid length. [ 2300.109255][ T2428] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.9785'. [ 2301.120639][ T2440] netlink: 'syz.0.9794': attribute type 2 has an invalid length. [ 2301.227462][ T2440] netlink: 'syz.0.9794': attribute type 8 has an invalid length. [ 2301.341463][ T2440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9794'. [ 2301.446733][ T2438] netlink: 'syz.0.9794': attribute type 11 has an invalid length. [ 2302.812447][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9791'. [ 2303.662054][ T2475] netlink: 'syz.3.9793': attribute type 1 has an invalid length. [ 2303.703918][ T2472] netlink: 'syz.3.9793': attribute type 4 has an invalid length. [ 2303.742128][ T2472] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9793'. [ 2303.873784][ T2471] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9803'. [ 2307.963219][ T2495] netlink: 'syz.3.9799': attribute type 2 has an invalid length. [ 2307.984379][ T2495] netlink: 'syz.3.9799': attribute type 8 has an invalid length. [ 2307.994717][ T2495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9799'. [ 2308.076422][ T2495] netlink: 'syz.3.9799': attribute type 11 has an invalid length. [ 2308.650244][ T2509] netlink: 'syz.0.9810': attribute type 10 has an invalid length. [ 2309.340534][ T2527] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 2309.361337][ T2527] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 2309.439266][ T2536] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 2309.561424][ T2534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9806'. [ 2312.328165][ T2557] netlink: 'syz.2.9814': attribute type 2 has an invalid length. [ 2312.371082][ T2557] netlink: 'syz.2.9814': attribute type 8 has an invalid length. [ 2312.434375][ T2557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9814'. [ 2312.487504][ T2554] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.9813'. [ 2312.572719][ T2554] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.9813'. [ 2312.591201][ T2554] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9813'. [ 2312.600716][ T2559] netlink: 'syz.2.9814': attribute type 11 has an invalid length. [ 2313.535260][ T2574] netlink: 'syz.1.9816': attribute type 10 has an invalid length. [ 2315.125242][ T2584] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.9818'. [ 2315.919218][ T2589] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 2315.939524][ T2589] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 2316.083959][ T2593] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 2317.265013][ T2604] netlink: 'syz.2.9823': attribute type 10 has an invalid length. [ 2317.290454][ T2604] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9823'. [ 2317.358171][ T2606] netlink: 'syz.3.9828': attribute type 21 has an invalid length. [ 2317.715970][ T2614] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9825'. [ 2317.817304][ T2614] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.9825'. [ 2317.826776][ T2614] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9825'. [ 2318.348988][ T2618] netlink: 'syz.2.9829': attribute type 2 has an invalid length. [ 2318.399529][ T2618] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9829'. [ 2320.256596][ T2634] netlink: 'syz.1.9838': attribute type 2 has an invalid length. [ 2320.369062][ T2634] netlink: 'syz.1.9838': attribute type 8 has an invalid length. [ 2320.554540][ T2634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9838'. [ 2321.062939][ T2652] mac80211_hwsim hwsim30 »»»»»»: renamed from wlan0 (while UP) [ 2321.368303][ T2658] netlink: 'syz.2.9836': attribute type 13 has an invalid length. [ 2321.387367][ T2658] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9836'. [ 2321.499129][ T2658] erspan0: refused to change device tx_queue_len [ 2321.505738][ T2658] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2322.238059][ T2665] tap0: tun_chr_ioctl cmd 1074025680 [ 2322.803837][ T2670] netlink: 'syz.2.9840': attribute type 21 has an invalid length. [ 2324.480786][ T2683] netlink: 'syz.2.9844': attribute type 2 has an invalid length. [ 2324.557358][ T2683] netlink: 'syz.2.9844': attribute type 8 has an invalid length. [ 2324.637335][ T2683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9844'. [ 2324.807618][ T2681] netlink: 'syz.0.9843': attribute type 2 has an invalid length. [ 2324.879211][ T2681] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9843'. [ 2325.031972][ T2667] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.9839'. [ 2325.077696][ T2667] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.9839'. [ 2325.115733][ T2667] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9839'. [ 2326.258674][ T2699] netlink: 'syz.3.9847': attribute type 10 has an invalid length. [ 2326.308364][ T2699] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9847'. [ 2326.699576][ T2700] netlink: 'syz.0.9848': attribute type 15 has an invalid length. [ 2326.788298][ T2700] netlink: 'syz.0.9848': attribute type 7 has an invalid length. [ 2327.341077][ T2704] netlink: 'syz.2.9850': attribute type 2 has an invalid length. [ 2327.369000][ T2704] netlink: 'syz.2.9850': attribute type 8 has an invalid length. [ 2327.390679][ T2704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9850'. [ 2327.449954][ T2704] netlink: 'syz.2.9850': attribute type 11 has an invalid length. [ 2327.747782][ T2713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9851'. [ 2327.987376][ T2716] netlink: 'syz.1.9859': attribute type 21 has an invalid length. [ 2327.995577][ T2716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2328.003046][ T2716] IPv6: NLM_F_CREATE should be set when creating new route [ 2328.010541][ T2716] IPv6: NLM_F_CREATE should be set when creating new route [ 2328.018001][ T2716] IPv6: NLM_F_CREATE should be set when creating new route [ 2328.598001][ T2726] tap0: tun_chr_ioctl cmd 1074025680 [ 2329.267664][ T2730] netlink: 'syz.3.9854': attribute type 2 has an invalid length. [ 2329.275682][ T2730] netlink: 'syz.3.9854': attribute type 8 has an invalid length. [ 2329.367142][ T2730] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9854'. [ 2330.095728][ T2732] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2330.162028][ T2737] netlink: 'syz.1.9855': attribute type 3 has an invalid length. [ 2330.370030][ T2737] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.9855'. [ 2330.502257][ T2744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9855'. [ 2331.270781][ T2738] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.9856'. [ 2331.311947][ T2738] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.9856'. [ 2331.357494][ T2738] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9856'. [ 2331.478122][ T2747] validate_nla: 1 callbacks suppressed [ 2331.478149][ T2747] netlink: 'syz.0.9858': attribute type 10 has an invalid length. [ 2332.596013][ T2755] netlink: 'syz.3.9861': attribute type 2 has an invalid length. [ 2332.634704][ T2755] netlink: 'syz.3.9861': attribute type 8 has an invalid length. [ 2332.665000][ T2755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9861'. [ 2332.727507][ T2756] netlink: 'syz.3.9861': attribute type 11 has an invalid length. [ 2334.053953][ T2766] netlink: 'syz.1.9862': attribute type 2 has an invalid length. [ 2334.082967][ T2766] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9862'. [ 2334.216229][ T2763] netlink: 'syz.2.9863': attribute type 15 has an invalid length. [ 2334.324944][ T2763] netlink: 'syz.2.9863': attribute type 7 has an invalid length. [ 2334.390354][ T2773] netlink: 'syz.3.9864': attribute type 13 has an invalid length. [ 2334.431624][ T2773] netlink: 160 bytes leftover after parsing attributes in process `syz.3.9864'. [ 2334.629451][ T2773] erspan0: refused to change device tx_queue_len [ 2334.636000][ T2773] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2335.097143][ T2778] syz.0.9875: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2335.129866][ T2778] CPU: 1 PID: 2778 Comm: syz.0.9875 Not tainted syzkaller #0 [ 2335.137578][ T2778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2335.147713][ T2778] Call Trace: [ 2335.151063][ T2778] [ 2335.154060][ T2778] dump_stack_lvl+0x18c/0x250 [ 2335.158825][ T2778] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2335.165071][ T2778] ? show_regs_print_info+0x20/0x20 [ 2335.170360][ T2778] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2335.176642][ T2778] warn_alloc+0x246/0x340 [ 2335.181061][ T2778] ? stack_trace_save+0xaa/0x100 [ 2335.186098][ T2778] ? zone_watermark_ok_safe+0x230/0x230 [ 2335.191775][ T2778] ? kasan_set_track+0x5f/0x70 [ 2335.196620][ T2778] ? kasan_set_track+0x4e/0x70 [ 2335.201463][ T2778] ? __kasan_kmalloc+0x8f/0xa0 [ 2335.206315][ T2778] ? xsk_init_queue+0xad/0x100 [ 2335.211180][ T2778] ? xsk_setsockopt+0x4e5/0x760 [ 2335.216119][ T2778] ? do_sock_setsockopt+0x175/0x1a0 [ 2335.221391][ T2778] ? __x64_sys_setsockopt+0x182/0x200 [ 2335.226860][ T2778] __vmalloc_node_range+0x126/0x1330 [ 2335.232326][ T2778] ? free_vm_area+0x50/0x50 [ 2335.236955][ T2778] vmalloc_user+0x74/0x80 [ 2335.241469][ T2778] ? xskq_create+0xbf/0x170 [ 2335.246067][ T2778] xskq_create+0xbf/0x170 [ 2335.250496][ T2778] xsk_init_queue+0xad/0x100 [ 2335.255186][ T2778] xsk_setsockopt+0x4e5/0x760 [ 2335.260001][ T2778] ? xsk_poll+0x680/0x680 [ 2335.264419][ T2778] ? __fget_files+0x28/0x4b0 [ 2335.269094][ T2778] ? __fget_files+0x28/0x4b0 [ 2335.273770][ T2778] ? aa_sock_opt_perm+0x74/0x100 [ 2335.278812][ T2778] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2335.284463][ T2778] ? security_socket_setsockopt+0x7e/0xa0 [ 2335.290289][ T2778] ? xsk_poll+0x680/0x680 [ 2335.294709][ T2778] do_sock_setsockopt+0x175/0x1a0 [ 2335.299813][ T2778] ? __fdget+0x180/0x210 [ 2335.304148][ T2778] __x64_sys_setsockopt+0x182/0x200 [ 2335.309464][ T2778] do_syscall_64+0x55/0xa0 [ 2335.313959][ T2778] ? clear_bhb_loop+0x40/0x90 [ 2335.318718][ T2778] ? clear_bhb_loop+0x40/0x90 [ 2335.323491][ T2778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2335.329484][ T2778] RIP: 0033:0x7f4f45f9cdd9 [ 2335.334150][ T2778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2335.353838][ T2778] RSP: 002b:00007f4f46f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2335.362346][ T2778] RAX: ffffffffffffffda RBX: 00007f4f46215fa0 RCX: 00007f4f45f9cdd9 [ 2335.370398][ T2778] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 2335.378461][ T2778] RBP: 00007f4f46032d69 R08: 0000000000000004 R09: 0000000000000000 [ 2335.386525][ T2778] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2335.394750][ T2778] R13: 00007f4f46216038 R14: 00007f4f46215fa0 R15: 00007fff1b584488 [ 2335.402940][ T2778] [ 2335.520506][ T2778] Mem-Info: [ 2335.526781][ T2778] active_anon:41385 inactive_anon:0 isolated_anon:0 [ 2335.526781][ T2778] active_file:18492 inactive_file:40788 isolated_file:0 [ 2335.526781][ T2778] unevictable:768 dirty:224 writeback:0 [ 2335.526781][ T2778] slab_reclaimable:13495 slab_unreclaimable:126627 [ 2335.526781][ T2778] mapped:36944 shmem:33856 pagetables:797 [ 2335.526781][ T2778] sec_pagetables:0 bounce:0 [ 2335.526781][ T2778] kernel_misc_reclaimable:0 [ 2335.526781][ T2778] free:1275529 free_pcp:3860 free_cma:0 [ 2335.624502][ T2778] Node 0 active_anon:166464kB inactive_anon:0kB active_file:73968kB inactive_file:162948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147824kB dirty:896kB writeback:0kB shmem:134816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10068kB pagetables:3212kB sec_pagetables:0kB all_unreclaimable? no [ 2335.651789][ T2781] tap0: tun_chr_ioctl cmd 1074025680 [ 2335.708154][ T2778] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2335.791734][ T2778] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2335.853550][ T2778] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2335.918832][ T2778] Node 0 DMA32 free:1173856kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:167924kB inactive_anon:0kB active_file:73968kB inactive_file:162124kB unevictable:1536kB writepending:896kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:8128kB local_pcp:4396kB free_cma:0kB [ 2336.195250][ T2778] lowmem_reserve[]: 0 0 0 0 0 [ 2336.204574][ T2778] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2336.258255][ T2778] lowmem_reserve[]: 0 0 0 0 0 [ 2336.283747][ T2778] Node 1 Normal free:3910380kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7200kB local_pcp:5600kB free_cma:0kB [ 2336.348649][ T2778] lowmem_reserve[]: 0 0 0 0 0 [ 2336.367379][ T2778] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2336.487676][ T2778] Node 0 DMA32: 1082*4kB (U) 1653*8kB (UME) 1337*16kB (UM) 392*32kB (UE) 584*64kB (UE) 521*128kB (UE) 246*256kB (UME) 72*512kB (UME) 29*1024kB (UME) 4*2048kB (U) 214*4096kB (M) = 1169824kB [ 2336.555993][ T2778] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2336.612457][ T2778] Node 1 Normal: 249*4kB (UME) 57*8kB (UME) 32*16kB (UME) 214*32kB (UME) 80*64kB (UE) 15*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3910380kB [ 2336.688993][ T2778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2336.714080][ T2778] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2336.737794][ T2793] netlink: 'syz.3.9867': attribute type 2 has an invalid length. [ 2336.745713][ T2793] netlink: 'syz.3.9867': attribute type 8 has an invalid length. [ 2336.777699][ T2778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2336.810041][ T2793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9867'. [ 2336.811443][ T2778] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2336.868984][ T2778] 95781 total pagecache pages [ 2336.888368][ T2778] 0 pages in swap cache [ 2336.907869][ T2778] Free swap = 124996kB [ 2336.912377][ T2778] Total swap = 124996kB [ 2336.940099][ T2778] 2097051 pages RAM [ 2336.945457][ T2778] 0 pages HighMem/MovableOnly [ 2336.968173][ T2778] 416927 pages reserved [ 2336.988236][ T2778] 0 pages cma reserved [ 2337.808614][ T2796] netlink: 'syz.2.9868': attribute type 11 has an invalid length. [ 2337.827123][ T2809] netlink: 'syz.0.9872': attribute type 15 has an invalid length. [ 2337.888676][ T2809] netlink: 'syz.0.9872': attribute type 7 has an invalid length. [ 2340.344953][ T2809] netlink: 'syz.0.9872': attribute type 39 has an invalid length. [ 2340.473995][ T2825] netlink: 'syz.2.9873': attribute type 21 has an invalid length. [ 2340.559146][ T2825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2340.566635][ T2825] IPv6: NLM_F_CREATE should be set when creating new route [ 2340.574254][ T2825] IPv6: NLM_F_CREATE should be set when creating new route [ 2340.581740][ T2825] IPv6: NLM_F_CREATE should be set when creating new route [ 2341.492474][ T2820] netlink: 'syz.3.9874': attribute type 2 has an invalid length. [ 2341.576792][ T2820] netlink: 'syz.3.9874': attribute type 8 has an invalid length. [ 2341.676358][ T2820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9874'. [ 2341.729711][ T2826] netlink: 'syz.3.9874': attribute type 11 has an invalid length. [ 2342.537567][ T2836] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2342.574047][ T2837] netlink: 'syz.0.9877': attribute type 3 has an invalid length. [ 2342.592997][ T2837] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.9877'. [ 2343.024744][ T2837] netlink: 'syz.0.9877': attribute type 12 has an invalid length. [ 2343.067318][ T2837] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9877'. [ 2345.483927][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.496264][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.147565][ T2859] netlink: 'syz.0.9882': attribute type 2 has an invalid length. [ 2347.307848][ T2859] netlink: 'syz.0.9882': attribute type 8 has an invalid length. [ 2347.315767][ T2859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9882'. [ 2347.444746][ T2861] netlink: 'syz.0.9882': attribute type 11 has an invalid length. [ 2348.991068][ T2865] netlink: 'syz.1.9884': attribute type 21 has an invalid length. [ 2349.404802][ T2865] Ÿë: port 1(ip6gretap0) entered blocking state [ 2349.439273][ T2865] Ÿë: port 1(ip6gretap0) entered disabled state [ 2349.446880][ T2865] ip6gretap0: entered allmulticast mode [ 2349.503779][ T2865] ip6gretap0: entered promiscuous mode [ 2349.722155][ T2870] tap0: tun_chr_ioctl cmd 1074025680 [ 2350.491428][ T2872] netlink: 'syz.0.9891': attribute type 2 has an invalid length. [ 2350.606045][ T2872] netlink: 'syz.0.9891': attribute type 8 has an invalid length. [ 2350.742589][ T2872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9891'. [ 2350.768294][ T2864] netlink: 'syz.0.9891': attribute type 11 has an invalid length. [ 2352.040037][ T2875] netlink: 'syz.2.9885': attribute type 15 has an invalid length. [ 2352.196221][ T2875] netlink: 'syz.2.9885': attribute type 7 has an invalid length. [ 2352.589697][ T2881] netlink: 'syz.2.9885': attribute type 39 has an invalid length. [ 2352.844410][ T2878] netlink: 'syz.1.9886': attribute type 2 has an invalid length. [ 2352.923609][ T2878] netlink: 'syz.1.9886': attribute type 8 has an invalid length. [ 2352.988641][ T2878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9886'. [ 2353.067495][ T2879] netlink: 'syz.1.9886': attribute type 11 has an invalid length. [ 2353.333837][ T2888] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2353.488221][ T2888] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.9887'. [ 2353.719284][ T2888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9887'. [ 2354.737505][ T2899] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9888'. [ 2357.205769][ T2916] validate_nla: 2 callbacks suppressed [ 2357.205814][ T2916] netlink: 'syz.0.9895': attribute type 21 has an invalid length. [ 2357.785974][ T2920] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9897'. [ 2359.813974][ T2923] netlink: 'syz.2.9898': attribute type 11 has an invalid length. [ 2360.489644][ T2931] netlink: 'syz.3.9899': attribute type 21 has an invalid length. [ 2360.503247][ T2931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2360.510870][ T2931] IPv6: NLM_F_CREATE should be set when creating new route [ 2360.518475][ T2931] IPv6: NLM_F_CREATE should be set when creating new route [ 2360.525855][ T2931] IPv6: NLM_F_CREATE should be set when creating new route [ 2361.057175][ T2937] netlink: 'syz.2.9902': attribute type 15 has an invalid length. [ 2361.089396][ T2937] netlink: 'syz.2.9902': attribute type 7 has an invalid length. [ 2361.421204][ T2940] warn_alloc: 1 callbacks suppressed [ 2361.421230][ T2940] syz.3.9903: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2361.477521][ T2940] CPU: 1 PID: 2940 Comm: syz.3.9903 Not tainted syzkaller #0 [ 2361.485072][ T2940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2361.495323][ T2940] Call Trace: [ 2361.498714][ T2940] [ 2361.501735][ T2940] dump_stack_lvl+0x18c/0x250 [ 2361.506534][ T2940] ? show_regs_print_info+0x20/0x20 [ 2361.511831][ T2940] ? load_image+0x420/0x420 [ 2361.516464][ T2940] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2361.523065][ T2940] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2361.529670][ T2940] warn_alloc+0x246/0x340 [ 2361.534094][ T2940] ? stack_trace_save+0xaa/0x100 [ 2361.539210][ T2940] ? zone_watermark_ok_safe+0x230/0x230 [ 2361.544881][ T2940] ? kasan_set_track+0x5f/0x70 [ 2361.549719][ T2940] ? kasan_set_track+0x4e/0x70 [ 2361.554642][ T2940] ? __kasan_kmalloc+0x8f/0xa0 [ 2361.559496][ T2940] ? xsk_init_queue+0xad/0x100 [ 2361.564348][ T2940] ? xsk_setsockopt+0x4e5/0x760 [ 2361.569280][ T2940] ? do_sock_setsockopt+0x175/0x1a0 [ 2361.574547][ T2940] ? __x64_sys_setsockopt+0x182/0x200 [ 2361.580110][ T2940] __vmalloc_node_range+0x126/0x1330 [ 2361.585596][ T2940] ? free_vm_area+0x50/0x50 [ 2361.590260][ T2940] vmalloc_user+0x74/0x80 [ 2361.594715][ T2940] ? xskq_create+0xbf/0x170 [ 2361.599401][ T2940] xskq_create+0xbf/0x170 [ 2361.603919][ T2940] xsk_init_queue+0xad/0x100 [ 2361.608602][ T2940] xsk_setsockopt+0x4e5/0x760 [ 2361.613366][ T2940] ? xsk_poll+0x680/0x680 [ 2361.617877][ T2940] ? __fget_files+0x28/0x4b0 [ 2361.622553][ T2940] ? __fget_files+0x28/0x4b0 [ 2361.627246][ T2940] ? aa_sock_opt_perm+0x74/0x100 [ 2361.632371][ T2940] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2361.638009][ T2940] ? security_socket_setsockopt+0x7e/0xa0 [ 2361.643815][ T2940] ? xsk_poll+0x680/0x680 [ 2361.648323][ T2940] do_sock_setsockopt+0x175/0x1a0 [ 2361.653436][ T2940] ? __fdget+0x180/0x210 [ 2361.657775][ T2940] __x64_sys_setsockopt+0x182/0x200 [ 2361.663074][ T2940] do_syscall_64+0x55/0xa0 [ 2361.667565][ T2940] ? clear_bhb_loop+0x40/0x90 [ 2361.672328][ T2940] ? clear_bhb_loop+0x40/0x90 [ 2361.677113][ T2940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2361.683102][ T2940] RIP: 0033:0x7f348819cdd9 [ 2361.687595][ T2940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2361.707400][ T2940] RSP: 002b:00007f34890f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2361.715927][ T2940] RAX: ffffffffffffffda RBX: 00007f3488416090 RCX: 00007f348819cdd9 [ 2361.724038][ T2940] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 2361.732083][ T2940] RBP: 00007f3488232d69 R08: 0000000000000004 R09: 0000000000000000 [ 2361.740212][ T2940] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2361.748255][ T2940] R13: 00007f3488416128 R14: 00007f3488416090 R15: 00007ffedbe09c08 [ 2361.756448][ T2940] [ 2361.986543][ T2940] Mem-Info: [ 2362.102501][ T2940] active_anon:8735 inactive_anon:0 isolated_anon:0 [ 2362.102501][ T2940] active_file:18492 inactive_file:40798 isolated_file:0 [ 2362.102501][ T2940] unevictable:768 dirty:201 writeback:0 [ 2362.102501][ T2940] slab_reclaimable:13445 slab_unreclaimable:127669 [ 2362.102501][ T2940] mapped:24058 shmem:1361 pagetables:671 [ 2362.102501][ T2940] sec_pagetables:0 bounce:0 [ 2362.102501][ T2940] kernel_misc_reclaimable:0 [ 2362.102501][ T2940] free:1303833 free_pcp:7044 free_cma:0 [ 2362.267399][ T2940] Node 0 active_anon:34940kB inactive_anon:0kB active_file:73968kB inactive_file:162988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96232kB dirty:804kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9932kB pagetables:2684kB sec_pagetables:0kB all_unreclaimable? no [ 2362.424732][ T2940] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2362.640059][ T2940] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2362.774233][ T2940] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2362.801226][ T2940] Node 0 DMA32 free:1289144kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35192kB inactive_anon:0kB active_file:73968kB inactive_file:162164kB unevictable:1536kB writepending:804kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:20128kB local_pcp:1824kB free_cma:0kB [ 2362.919616][ T2937] netlink: 'syz.2.9902': attribute type 39 has an invalid length. [ 2362.931853][ T2940] lowmem_reserve[]: 0 0 0 0 0 [ 2362.943693][ T2940] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2363.041523][ T2940] lowmem_reserve[]: 0 0 0 0 0 [ 2363.046618][ T2940] Node 1 Normal free:3910380kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7200kB local_pcp:1600kB free_cma:0kB [ 2363.107338][ T2940] lowmem_reserve[]: 0 0 0 0 0 [ 2363.112614][ T2940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2363.168114][ T2940] Node 0 DMA32: 1885*4kB (UME) 2569*8kB (UME) 2220*16kB (UM) 1034*32kB (UME) 918*64kB (UME) 675*128kB (UME) 326*256kB (UME) 96*512kB (UME) 37*1024kB (UME) 6*2048kB (UM) 211*4096kB (M) = 1288892kB [ 2363.207153][ T2940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2363.227615][ T2940] Node 1 Normal: 249*4kB (UME) 57*8kB (UME) 32*16kB (UME) 214*32kB (UME) 80*64kB (UE) 15*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3910380kB [ 2363.251676][ T2940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.270161][ T2940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2363.293012][ T2940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2363.303567][ T2940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2363.314169][ T2940] 60651 total pagecache pages [ 2363.319808][ T2940] 0 pages in swap cache [ 2363.324422][ T2940] Free swap = 124996kB [ 2363.330042][ T2940] Total swap = 124996kB [ 2363.334316][ T2940] 2097051 pages RAM [ 2363.339359][ T2940] 0 pages HighMem/MovableOnly [ 2363.344206][ T2940] 416927 pages reserved [ 2363.361062][ T2940] 0 pages cma reserved [ 2364.695347][ T2950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9904'. [ 2365.045534][ T2951] netlink: 'syz.1.9905': attribute type 2 has an invalid length. [ 2365.147558][ T2951] netlink: 'syz.1.9905': attribute type 8 has an invalid length. [ 2365.187301][ T2951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9905'. [ 2365.656101][ T2962] sit0: left allmulticast mode [ 2366.710627][ T2967] netlink: 'syz.0.9910': attribute type 2 has an invalid length. [ 2366.789913][ T2967] netlink: 'syz.0.9910': attribute type 8 has an invalid length. [ 2366.880282][ T2967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9910'. [ 2366.953870][ T2969] netlink: 'syz.0.9910': attribute type 11 has an invalid length. [ 2368.148393][ T2981] netlink: 'syz.0.9911': attribute type 21 has an invalid length. [ 2368.179930][ T2981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2368.187489][ T2981] IPv6: NLM_F_CREATE should be set when creating new route [ 2368.195085][ T2981] IPv6: NLM_F_CREATE should be set when creating new route [ 2368.202639][ T2981] IPv6: NLM_F_CREATE should be set when creating new route [ 2368.240916][ T2977] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2368.314945][ T2984] netlink: 'syz.2.9912': attribute type 3 has an invalid length. [ 2368.353691][ T2984] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.9912'. [ 2368.597693][ T2977] netlink: 'syz.2.9912': attribute type 12 has an invalid length. [ 2368.650733][ T2977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9912'. [ 2368.669724][ T2978] netlink: 'syz.3.9919': attribute type 2 has an invalid length. [ 2368.688516][ T2978] netlink: 'syz.3.9919': attribute type 8 has an invalid length. [ 2368.712684][ T2978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9919'. [ 2368.750868][ T2980] netlink: 'syz.3.9919': attribute type 11 has an invalid length. [ 2369.596022][ T2991] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9923'. [ 2370.312381][ T3006] netlink: 'syz.1.9915': attribute type 15 has an invalid length. [ 2370.326794][ T3006] netlink: 'syz.1.9915': attribute type 7 has an invalid length. [ 2370.423834][ T3006] netlink: 'syz.1.9915': attribute type 39 has an invalid length. [ 2370.816581][ T3010] netlink: 'syz.2.9917': attribute type 2 has an invalid length. [ 2370.835861][ T3010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9917'. [ 2371.596413][ T3021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9918'. [ 2371.860388][ T3018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9929'. [ 2372.664701][ T3036] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9924'. [ 2372.932548][ T3039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9926'. [ 2373.416251][ T3038] validate_nla: 6 callbacks suppressed [ 2373.416279][ T3038] netlink: 'syz.2.9925': attribute type 2 has an invalid length. [ 2373.477927][ T3038] netlink: 'syz.2.9925': attribute type 8 has an invalid length. [ 2373.510811][ T3038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9925'. [ 2373.623712][ T3037] netlink: 'syz.2.9925': attribute type 11 has an invalid length. [ 2373.740778][ T3049] warn_alloc: 1 callbacks suppressed [ 2373.740805][ T3049] syz.1.9928: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2373.787232][ T3049] CPU: 0 PID: 3049 Comm: syz.1.9928 Not tainted syzkaller #0 [ 2373.794776][ T3049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2373.805029][ T3049] Call Trace: [ 2373.808415][ T3049] [ 2373.811440][ T3049] dump_stack_lvl+0x18c/0x250 [ 2373.816261][ T3049] ? show_regs_print_info+0x20/0x20 [ 2373.821596][ T3049] ? load_image+0x420/0x420 [ 2373.826330][ T3049] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2373.832890][ T3049] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2373.839532][ T3049] warn_alloc+0x246/0x340 [ 2373.844002][ T3049] ? stack_trace_save+0xaa/0x100 [ 2373.849074][ T3049] ? zone_watermark_ok_safe+0x230/0x230 [ 2373.854838][ T3049] ? kasan_set_track+0x5f/0x70 [ 2373.859716][ T3049] ? kasan_set_track+0x4e/0x70 [ 2373.864594][ T3049] ? __kasan_kmalloc+0x8f/0xa0 [ 2373.869477][ T3049] ? xsk_init_queue+0xad/0x100 [ 2373.874343][ T3049] ? xsk_setsockopt+0x4e5/0x760 [ 2373.879309][ T3049] ? do_sock_setsockopt+0x175/0x1a0 [ 2373.884609][ T3049] ? __x64_sys_setsockopt+0x182/0x200 [ 2373.890116][ T3049] __vmalloc_node_range+0x126/0x1330 [ 2373.895757][ T3049] ? free_vm_area+0x50/0x50 [ 2373.900487][ T3049] vmalloc_user+0x74/0x80 [ 2373.904931][ T3049] ? xskq_create+0xbf/0x170 [ 2373.909546][ T3049] xskq_create+0xbf/0x170 [ 2373.914014][ T3049] xsk_init_queue+0xad/0x100 [ 2373.918758][ T3049] xsk_setsockopt+0x4e5/0x760 [ 2373.923568][ T3049] ? xsk_poll+0x680/0x680 [ 2373.928034][ T3049] ? __fget_files+0x28/0x4b0 [ 2373.932766][ T3049] ? __fget_files+0x28/0x4b0 [ 2373.937570][ T3049] ? aa_sock_opt_perm+0x74/0x100 [ 2373.942661][ T3049] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2373.948330][ T3049] ? security_socket_setsockopt+0x7e/0xa0 [ 2373.954175][ T3049] ? xsk_poll+0x680/0x680 [ 2373.958650][ T3049] do_sock_setsockopt+0x175/0x1a0 [ 2373.963857][ T3049] ? __fdget+0x180/0x210 [ 2373.968249][ T3049] __x64_sys_setsockopt+0x182/0x200 [ 2373.973589][ T3049] do_syscall_64+0x55/0xa0 [ 2373.978113][ T3049] ? clear_bhb_loop+0x40/0x90 [ 2373.982898][ T3049] ? clear_bhb_loop+0x40/0x90 [ 2373.987757][ T3049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.993797][ T3049] RIP: 0033:0x7f77d319cdd9 [ 2373.998355][ T3049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2374.018101][ T3049] RSP: 002b:00007f77d4092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2374.026741][ T3049] RAX: ffffffffffffffda RBX: 00007f77d3416090 RCX: 00007f77d319cdd9 [ 2374.034839][ T3049] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 2374.042921][ T3049] RBP: 00007f77d3232d69 R08: 0000000000000004 R09: 0000000000000000 [ 2374.051026][ T3049] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2374.059206][ T3049] R13: 00007f77d3416128 R14: 00007f77d3416090 R15: 00007ffed7458048 [ 2374.067357][ T3049] [ 2374.076559][ T3049] Mem-Info: [ 2374.080481][ T3049] active_anon:8705 inactive_anon:0 isolated_anon:0 [ 2374.080481][ T3049] active_file:18492 inactive_file:40802 isolated_file:0 [ 2374.080481][ T3049] unevictable:768 dirty:205 writeback:0 [ 2374.080481][ T3049] slab_reclaimable:13487 slab_unreclaimable:127159 [ 2374.080481][ T3049] mapped:24034 shmem:1361 pagetables:623 [ 2374.080481][ T3049] sec_pagetables:0 bounce:0 [ 2374.080481][ T3049] kernel_misc_reclaimable:0 [ 2374.080481][ T3049] free:1302354 free_pcp:8829 free_cma:0 [ 2374.129107][ T3049] Node 0 active_anon:34820kB inactive_anon:0kB active_file:73968kB inactive_file:163004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96136kB dirty:820kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9860kB pagetables:2492kB sec_pagetables:0kB all_unreclaimable? no [ 2374.172568][ T3049] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2374.352558][ T3049] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2374.380939][ T3049] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2374.386932][ T3049] Node 0 DMA32 free:1283876kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34480kB inactive_anon:0kB active_file:73968kB inactive_file:162180kB unevictable:1536kB writepending:820kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:27292kB local_pcp:21288kB free_cma:0kB [ 2374.463073][ T3049] lowmem_reserve[]: 0 0 0 0 0 [ 2374.527549][ T3049] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2374.584724][ T3049] lowmem_reserve[]: 0 0 0 0 0 [ 2374.591657][ T3051] sit0: left allmulticast mode [ 2374.664392][ T3049] Node 1 Normal free:3910380kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7200kB local_pcp:1600kB free_cma:0kB [ 2374.709643][ T3049] lowmem_reserve[]: 0 0 0 0 0 [ 2374.714901][ T3049] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2374.730316][ T3049] Node 0 DMA32: 939*4kB (UME) 2139*8kB (UME) 2012*16kB (UME) 997*32kB (UME) 817*64kB (UME) 664*128kB (UME) 327*256kB (UME) 125*512kB (UME) 51*1024kB (UME) 7*2048kB (UM) 212*4096kB (M) = 1304868kB [ 2374.782074][ T3049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2374.795105][ T3049] Node 1 Normal: 249*4kB (UME) 57*8kB (UME) 32*16kB (UME) 214*32kB (UME) 80*64kB (UE) 15*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3910380kB [ 2374.819780][ T3049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2374.943056][ T3049] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2374.992006][ T3049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2375.045973][ T3049] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2375.056586][ T3049] 60657 total pagecache pages [ 2375.063117][ T3049] 0 pages in swap cache [ 2375.068420][ T3049] Free swap = 124996kB [ 2375.072862][ T3049] Total swap = 124996kB [ 2375.078677][ T3049] 2097051 pages RAM [ 2375.082794][ T3049] 0 pages HighMem/MovableOnly [ 2375.100141][ T3049] 416927 pages reserved [ 2375.109588][ T3049] 0 pages cma reserved [ 2375.780709][ T3063] netlink: 'syz.2.9933': attribute type 2 has an invalid length. [ 2375.793969][ T3063] netlink: 'syz.2.9933': attribute type 8 has an invalid length. [ 2375.804947][ T3063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9933'. [ 2375.877287][ T3063] netlink: 'syz.2.9933': attribute type 11 has an invalid length. [ 2376.658579][ T3078] netlink: 'syz.0.9943': attribute type 2 has an invalid length. [ 2376.698581][ T3078] netlink: 'syz.0.9943': attribute type 8 has an invalid length. [ 2376.708566][ T3078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9943'. [ 2379.039613][ T3091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9935'. [ 2380.288563][ T3103] netlink: 'syz.1.9939': attribute type 2 has an invalid length. [ 2380.296475][ T3103] netlink: 'syz.1.9939': attribute type 8 has an invalid length. [ 2380.363113][ T3103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9939'. [ 2380.574977][ T3102] netlink: 'syz.1.9939': attribute type 11 has an invalid length. [ 2380.815384][ T3110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9942'. [ 2381.358974][ T3114] sit0: left allmulticast mode [ 2382.054790][ T3115] netlink: 'syz.3.9947': attribute type 2 has an invalid length. [ 2382.087464][ T3115] netlink: 'syz.3.9947': attribute type 8 has an invalid length. [ 2382.127203][ T3115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9947'. [ 2382.208788][ T3113] netlink: 'syz.3.9947': attribute type 11 has an invalid length. [ 2383.180344][ T3127] netlink: 'syz.3.9949': attribute type 4 has an invalid length. [ 2383.218034][ T3127] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9949'. [ 2383.262289][ T3127] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2383.348136][ T3130] netlink: 'syz.0.9950': attribute type 17 has an invalid length. [ 2383.361164][ T3130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9950'. [ 2385.142873][ T3124] netlink: 'syz.1.9958': attribute type 11 has an invalid length. [ 2385.214044][ T3146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9953'. [ 2386.398638][ T3147] netlink: 'syz.0.9954': attribute type 2 has an invalid length. [ 2386.443112][ T3147] netlink: 'syz.0.9954': attribute type 8 has an invalid length. [ 2386.547396][ T3147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9954'. [ 2386.561993][ T3155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9955'. [ 2386.654825][ T3145] netlink: 'syz.0.9954': attribute type 11 has an invalid length. [ 2387.374783][ T3166] sit0: left allmulticast mode [ 2387.728139][ T3162] netlink: 'syz.3.9960': attribute type 15 has an invalid length. [ 2387.736682][ T3162] netlink: 'syz.3.9960': attribute type 7 has an invalid length. [ 2387.807994][ T3164] netlink: 'syz.0.9967': attribute type 2 has an invalid length. [ 2387.866073][ T3164] netlink: 'syz.0.9967': attribute type 8 has an invalid length. [ 2387.878287][ T3164] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9967'. [ 2388.027556][ T3167] netlink: 'syz.0.9967': attribute type 11 has an invalid length. [ 2388.049840][ T3170] netlink: 'syz.3.9960': attribute type 39 has an invalid length. [ 2388.270335][ T3178] netlink: 'syz.2.9962': attribute type 4 has an invalid length. [ 2388.307131][ T3178] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9962'. [ 2388.316478][ T3178] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2390.643632][ T3191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9966'. [ 2391.435851][ T3216] validate_nla: 3 callbacks suppressed [ 2391.435879][ T3216] netlink: 'syz.3.9972': attribute type 2 has an invalid length. [ 2391.452642][ T3216] netlink: 'syz.3.9972': attribute type 8 has an invalid length. [ 2391.467519][ T3216] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9972'. [ 2391.653976][ T3219] netlink: 21 bytes leftover after parsing attributes in process `syz.2.9971'. [ 2391.664480][ T3219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2392.952419][ T3226] netlink: 'syz.3.9974': attribute type 15 has an invalid length. [ 2393.011434][ T3226] netlink: 'syz.3.9974': attribute type 7 has an invalid length. [ 2394.180193][ T3226] netlink: 'syz.3.9974': attribute type 39 has an invalid length. [ 2396.045513][ T3250] netlink: 'syz.3.9983': attribute type 1 has an invalid length. [ 2396.109234][ T3250] netlink: 'syz.3.9983': attribute type 3 has an invalid length. [ 2396.209905][ T3250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9983'. [ 2396.434551][ T3243] netlink: 'syz.1.9980': attribute type 2 has an invalid length. [ 2396.456261][ T3243] netlink: 'syz.1.9980': attribute type 8 has an invalid length. [ 2396.491856][ T3243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9980'. [ 2396.514800][ T3248] netlink: 'syz.1.9980': attribute type 11 has an invalid length. [ 2396.568959][ T3247] netlink: 'syz.0.9982': attribute type 2 has an invalid length. [ 2396.587121][ T3247] netlink: 'syz.0.9982': attribute type 8 has an invalid length. [ 2396.612801][ T3247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9982'. [ 2396.638783][ T3251] netlink: 'syz.0.9982': attribute type 11 has an invalid length. [ 2397.265598][ T3264] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2397.339931][ T3269] netlink: 21 bytes leftover after parsing attributes in process `syz.0.9986'. [ 2397.365361][ T3269] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2398.798234][ T3273] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9988'. [ 2398.957355][ T3273] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2399.049972][ T3273] CPU: 0 PID: 3273 Comm: syz.3.9988 Not tainted syzkaller #0 [ 2399.057548][ T3273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2399.067893][ T3273] Call Trace: [ 2399.071270][ T3273] [ 2399.074295][ T3273] dump_stack_lvl+0x18c/0x250 [ 2399.079125][ T3273] ? show_regs_print_info+0x20/0x20 [ 2399.084449][ T3273] ? load_image+0x420/0x420 [ 2399.089134][ T3273] sysfs_warn_dup+0x8e/0xa0 [ 2399.093750][ T3273] sysfs_do_create_link_sd+0xc0/0x110 [ 2399.099237][ T3273] device_add_class_symlinks+0x1cf/0x240 [ 2399.105189][ T3273] device_add+0x507/0xc20 [ 2399.109665][ T3273] wiphy_register+0x1dad/0x2ae0 [ 2399.114701][ T3273] ? cfg80211_event_work+0x40/0x40 [ 2399.119928][ T3273] ? minstrel_ht_alloc+0x88a/0x990 [ 2399.125193][ T3273] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2399.131412][ T3273] ieee80211_register_hw+0x3464/0x4250 [ 2399.137076][ T3273] ? ieee80211_tasklet_handler+0x20/0x20 [ 2399.142820][ T3273] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2399.148895][ T3273] ? __debug_object_init+0xec/0x450 [ 2399.154232][ T3273] ? __asan_memset+0x22/0x40 [ 2399.158936][ T3273] ? __hrtimer_init+0x186/0x270 [ 2399.163920][ T3273] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2399.169858][ T3273] ? mac80211_hwsim_free+0x220/0x220 [ 2399.175270][ T3273] ? rcu_is_watching+0x15/0xb0 [ 2399.180169][ T3273] ? kstrndup+0xbd/0x140 [ 2399.184593][ T3273] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2399.189849][ T3273] ? __nla_validate+0x50/0x50 [ 2399.194720][ T3273] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2399.201304][ T3273] ? __nla_parse+0x40/0x50 [ 2399.205853][ T3273] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2399.212326][ T3273] genl_family_rcv_msg_doit+0x211/0x310 [ 2399.218082][ T3273] ? end_current_label_crit_section+0x170/0x170 [ 2399.224469][ T3273] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2399.230523][ T3273] ? bpf_lsm_capable+0x9/0x10 [ 2399.235325][ T3273] ? security_capable+0x89/0xb0 [ 2399.240336][ T3273] genl_rcv_msg+0x619/0x7a0 [ 2399.245170][ T3273] ? genl_bind+0x360/0x360 [ 2399.249798][ T3273] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2399.256239][ T3273] ? perf_trace_lock+0x304/0x3b0 [ 2399.261344][ T3273] netlink_rcv_skb+0x241/0x4d0 [ 2399.266305][ T3273] ? genl_bind+0x360/0x360 [ 2399.270862][ T3273] ? netlink_ack+0x1180/0x1180 [ 2399.275814][ T3273] ? __lock_acquire+0x7d40/0x7d40 [ 2399.281487][ T3273] ? net_generic+0x1e/0x240 [ 2399.286156][ T3273] ? down_read+0x1ac/0x2e0 [ 2399.290875][ T3273] genl_rcv+0x28/0x40 [ 2399.295145][ T3273] netlink_unicast+0x751/0x8d0 [ 2399.300091][ T3273] netlink_sendmsg+0x8d0/0xbf0 [ 2399.305083][ T3273] ? perf_trace_lock+0x304/0x3b0 [ 2399.310167][ T3273] ? netlink_getsockopt+0x590/0x590 [ 2399.315944][ T3273] ? aa_sock_msg_perm+0x94/0x150 [ 2399.321639][ T3273] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2399.327128][ T3273] ? security_socket_sendmsg+0x80/0xa0 [ 2399.332711][ T3273] ? netlink_getsockopt+0x590/0x590 [ 2399.338143][ T3273] ____sys_sendmsg+0x5ba/0x960 [ 2399.343044][ T3273] ? __asan_memset+0x22/0x40 [ 2399.347743][ T3273] ? __sys_sendmsg_sock+0x30/0x30 [ 2399.352882][ T3273] ? __import_iovec+0x5f2/0x850 [ 2399.357886][ T3273] ? import_iovec+0x73/0xa0 [ 2399.362582][ T3273] ___sys_sendmsg+0x2a6/0x360 [ 2399.367439][ T3273] ? __sys_sendmsg+0x2a0/0x2a0 [ 2399.372424][ T3273] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2399.378906][ T3273] __se_sys_sendmsg+0x1c2/0x2b0 [ 2399.383911][ T3273] ? __x64_sys_sendmsg+0x80/0x80 [ 2399.389044][ T3273] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2399.395177][ T3273] do_syscall_64+0x55/0xa0 [ 2399.399802][ T3273] ? clear_bhb_loop+0x40/0x90 [ 2399.405030][ T3273] ? clear_bhb_loop+0x40/0x90 [ 2399.409855][ T3273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2399.415868][ T3273] RIP: 0033:0x7f348819cdd9 [ 2399.420394][ T3273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2399.440124][ T3273] RSP: 002b:00007f3489115028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2399.448758][ T3273] RAX: ffffffffffffffda RBX: 00007f3488415fa0 RCX: 00007f348819cdd9 [ 2399.456845][ T3273] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2399.464922][ T3273] RBP: 00007f3488232d69 R08: 0000000000000000 R09: 0000000000000000 [ 2399.473017][ T3273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2399.481126][ T3273] R13: 00007f3488416038 R14: 00007f3488415fa0 R15: 00007ffedbe09c08 [ 2399.489384][ T3273] [ 2399.585533][ T3286] netlink: 'syz.2.9991': attribute type 15 has an invalid length. [ 2399.601589][ T3286] netlink: 'syz.2.9991': attribute type 7 has an invalid length. [ 2400.380962][ T3295] netlink: 'syz.1.9993': attribute type 2 has an invalid length. [ 2400.461000][ T3295] netlink: 'syz.1.9993': attribute type 8 has an invalid length. [ 2400.491585][ T3295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9993'. [ 2400.950658][ T3286] netlink: 'syz.2.9991': attribute type 39 has an invalid length. [ 2401.859483][ T3295] netlink: 'syz.1.9993': attribute type 11 has an invalid length. [ 2402.133440][ T3299] netlink: 'syz.3.9994': attribute type 2 has an invalid length. [ 2402.159956][ T3299] netlink: 'syz.3.9994': attribute type 8 has an invalid length. [ 2402.235296][ T3299] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9994'. [ 2402.341519][ T3303] netlink: 'syz.3.9994': attribute type 11 has an invalid length. [ 2403.109496][ T3314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2403.294412][ T3313] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2405.059334][ T3328] netlink: 21 bytes leftover after parsing attributes in process `syz.1.10002'. [ 2405.071290][ T3328] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2405.945003][ T3345] netlink: 'syz.3.10006': attribute type 2 has an invalid length. [ 2406.067507][ T3345] netlink: 'syz.3.10006': attribute type 8 has an invalid length. [ 2406.182749][ T3345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10006'. [ 2406.305416][ T3346] netlink: 'syz.1.10005': attribute type 2 has an invalid length. [ 2406.323556][ T3346] netlink: 'syz.1.10005': attribute type 8 has an invalid length. [ 2406.372377][ T3346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10005'. [ 2406.540006][ T3340] netlink: 'syz.1.10005': attribute type 11 has an invalid length. [ 2406.851577][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.861646][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.526604][ T3345] netlink: 'syz.3.10006': attribute type 11 has an invalid length. [ 2408.148045][ T3353] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2408.544699][ T3371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2409.009872][ T3374] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2409.149109][ T3356] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10011'. [ 2409.322353][ T3356] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2409.338584][ T3356] CPU: 0 PID: 3356 Comm: syz.0.10011 Not tainted syzkaller #0 [ 2409.346203][ T3356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2409.356358][ T3356] Call Trace: [ 2409.359738][ T3356] [ 2409.362801][ T3356] dump_stack_lvl+0x18c/0x250 [ 2409.367619][ T3356] ? show_regs_print_info+0x20/0x20 [ 2409.372975][ T3356] ? load_image+0x420/0x420 [ 2409.377734][ T3356] sysfs_warn_dup+0x8e/0xa0 [ 2409.382344][ T3356] sysfs_do_create_link_sd+0xc0/0x110 [ 2409.387883][ T3356] device_add_class_symlinks+0x1cf/0x240 [ 2409.393649][ T3356] device_add+0x507/0xc20 [ 2409.398083][ T3356] wiphy_register+0x1dad/0x2ae0 [ 2409.403075][ T3356] ? cfg80211_event_work+0x40/0x40 [ 2409.408348][ T3356] ? minstrel_ht_alloc+0x88a/0x990 [ 2409.413580][ T3356] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2409.419750][ T3356] ieee80211_register_hw+0x3464/0x4250 [ 2409.425353][ T3356] ? ieee80211_tasklet_handler+0x20/0x20 [ 2409.431075][ T3356] ? lockdep_hardirqs_on+0x98/0x150 [ 2409.436371][ T3356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2409.442669][ T3356] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2409.448541][ T3356] ? mac80211_hwsim_free+0x220/0x220 [ 2409.453905][ T3356] ? rcu_is_watching+0x15/0xb0 [ 2409.458844][ T3356] ? kstrndup+0xbd/0x140 [ 2409.463195][ T3356] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2409.468471][ T3356] ? mark_lock+0x94/0x320 [ 2409.472910][ T3356] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2409.479341][ T3356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2409.485616][ T3356] ? lockdep_hardirqs_on+0x98/0x150 [ 2409.490902][ T3356] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2409.497164][ T3356] ? genl_family_rcv_msg_doit+0x1e5/0x310 [ 2409.502997][ T3356] genl_family_rcv_msg_doit+0x211/0x310 [ 2409.508668][ T3356] ? end_current_label_crit_section+0x170/0x170 [ 2409.515013][ T3356] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2409.521015][ T3356] ? bpf_lsm_capable+0x9/0x10 [ 2409.525772][ T3356] ? security_capable+0x89/0xb0 [ 2409.530734][ T3356] genl_rcv_msg+0x619/0x7a0 [ 2409.535332][ T3356] ? genl_bind+0x360/0x360 [ 2409.539871][ T3356] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2409.546286][ T3356] ? perf_trace_lock+0x304/0x3b0 [ 2409.551329][ T3356] netlink_rcv_skb+0x241/0x4d0 [ 2409.556289][ T3356] ? genl_bind+0x360/0x360 [ 2409.560788][ T3356] ? netlink_ack+0x1180/0x1180 [ 2409.565680][ T3356] ? __lock_acquire+0x7d40/0x7d40 [ 2409.570791][ T3356] ? net_generic+0x1e/0x240 [ 2409.575445][ T3356] ? down_read+0x1ac/0x2e0 [ 2409.579954][ T3356] genl_rcv+0x28/0x40 [ 2409.584022][ T3356] netlink_unicast+0x751/0x8d0 [ 2409.588917][ T3356] netlink_sendmsg+0x8d0/0xbf0 [ 2409.593783][ T3356] ? perf_trace_lock+0x304/0x3b0 [ 2409.598840][ T3356] ? netlink_getsockopt+0x590/0x590 [ 2409.604150][ T3356] ? aa_sock_msg_perm+0x94/0x150 [ 2409.609185][ T3356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2409.614557][ T3356] ? security_socket_sendmsg+0x80/0xa0 [ 2409.620130][ T3356] ? netlink_getsockopt+0x590/0x590 [ 2409.625448][ T3356] ____sys_sendmsg+0x5ba/0x960 [ 2409.630327][ T3356] ? __asan_memset+0x22/0x40 [ 2409.635003][ T3356] ? __sys_sendmsg_sock+0x30/0x30 [ 2409.640107][ T3356] ? __import_iovec+0x5f2/0x850 [ 2409.645062][ T3356] ? import_iovec+0x73/0xa0 [ 2409.649656][ T3356] ___sys_sendmsg+0x2a6/0x360 [ 2409.654441][ T3356] ? __sys_sendmsg+0x2a0/0x2a0 [ 2409.659438][ T3356] __se_sys_sendmsg+0x1c2/0x2b0 [ 2409.664377][ T3356] ? __x64_sys_sendmsg+0x80/0x80 [ 2409.669455][ T3356] ? lockdep_hardirqs_on+0x98/0x150 [ 2409.674753][ T3356] do_syscall_64+0x55/0xa0 [ 2409.679248][ T3356] ? clear_bhb_loop+0x40/0x90 [ 2409.684015][ T3356] ? clear_bhb_loop+0x40/0x90 [ 2409.688963][ T3356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2409.694971][ T3356] RIP: 0033:0x7f4f45f9cdd9 [ 2409.699474][ T3356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2409.719256][ T3356] RSP: 002b:00007f4f46f41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2409.727748][ T3356] RAX: ffffffffffffffda RBX: 00007f4f46215fa0 RCX: 00007f4f45f9cdd9 [ 2409.735802][ T3356] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2409.743944][ T3356] RBP: 00007f4f46032d69 R08: 0000000000000000 R09: 0000000000000000 [ 2409.751994][ T3356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2409.760034][ T3356] R13: 00007f4f46216038 R14: 00007f4f46215fa0 R15: 00007fff1b584488 [ 2409.768221][ T3356] [ 2410.633177][ T3385] netlink: 21 bytes leftover after parsing attributes in process `syz.3.10014'. [ 2410.664616][ T3385] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2411.642953][ T3397] netlink: 'syz.1.10018': attribute type 2 has an invalid length. [ 2411.682229][ T3397] netlink: 'syz.1.10018': attribute type 8 has an invalid length. [ 2411.713381][ T3397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10018'. [ 2412.390380][ T3406] netlink: 'syz.3.10021': attribute type 10 has an invalid length. [ 2413.695327][ T3410] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2413.833930][ T3411] netlink: 'syz.0.10020': attribute type 2 has an invalid length. [ 2413.843557][ T3411] netlink: 'syz.0.10020': attribute type 8 has an invalid length. [ 2413.897118][ T3411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10020'. [ 2413.943706][ T3404] netlink: 'syz.0.10020': attribute type 11 has an invalid length. [ 2414.091062][ T3415] netlink: 'syz.1.10031': attribute type 10 has an invalid length. [ 2414.507479][ T3419] netlink: 'syz.2.10032': attribute type 2 has an invalid length. [ 2414.540210][ T3419] netlink: 'syz.2.10032': attribute type 8 has an invalid length. [ 2414.588286][ T3419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10032'. [ 2416.376170][ T3430] netlink: 'syz.0.10034': attribute type 2 has an invalid length. [ 2416.389756][ T3430] netlink: 'syz.0.10034': attribute type 8 has an invalid length. [ 2416.515238][ T3430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10034'. [ 2416.663645][ T3432] netlink: 'syz.0.10034': attribute type 11 has an invalid length. [ 2417.168050][ T3437] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10026'. [ 2417.303071][ T3437] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2417.315822][ T3437] CPU: 1 PID: 3437 Comm: syz.1.10026 Not tainted syzkaller #0 [ 2417.323455][ T3437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2417.333679][ T3437] Call Trace: [ 2417.337065][ T3437] [ 2417.340109][ T3437] dump_stack_lvl+0x18c/0x250 [ 2417.344941][ T3437] ? show_regs_print_info+0x20/0x20 [ 2417.350301][ T3437] ? load_image+0x420/0x420 [ 2417.354975][ T3437] sysfs_warn_dup+0x8e/0xa0 [ 2417.359612][ T3437] sysfs_do_create_link_sd+0xc0/0x110 [ 2417.365115][ T3437] device_add_class_symlinks+0x1cf/0x240 [ 2417.370984][ T3437] device_add+0x507/0xc20 [ 2417.375463][ T3437] wiphy_register+0x1dad/0x2ae0 [ 2417.380516][ T3437] ? cfg80211_event_work+0x40/0x40 [ 2417.385764][ T3437] ? minstrel_ht_alloc+0x88a/0x990 [ 2417.391052][ T3437] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2417.397438][ T3437] ieee80211_register_hw+0x3464/0x4250 [ 2417.403171][ T3437] ? ieee80211_tasklet_handler+0x20/0x20 [ 2417.408940][ T3437] ? debug_init+0x40/0x1d0 [ 2417.413510][ T3437] ? __asan_memset+0x22/0x40 [ 2417.418257][ T3437] ? __hrtimer_init+0x186/0x270 [ 2417.423279][ T3437] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2417.429236][ T3437] ? mac80211_hwsim_free+0x220/0x220 [ 2417.434631][ T3437] ? rcu_is_watching+0x15/0xb0 [ 2417.439520][ T3437] ? kstrndup+0xbd/0x140 [ 2417.443928][ T3437] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2417.449202][ T3437] ? __nla_validate+0x50/0x50 [ 2417.454066][ T3437] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2417.460573][ T3437] ? __nla_parse+0x40/0x50 [ 2417.465123][ T3437] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2417.472397][ T3437] genl_family_rcv_msg_doit+0x211/0x310 [ 2417.479315][ T3437] ? end_current_label_crit_section+0x170/0x170 [ 2417.486500][ T3437] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2417.493088][ T3437] ? bpf_lsm_capable+0x9/0x10 [ 2417.498063][ T3437] ? security_capable+0x89/0xb0 [ 2417.503212][ T3437] genl_rcv_msg+0x619/0x7a0 [ 2417.507878][ T3437] ? genl_bind+0x360/0x360 [ 2417.512421][ T3437] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2417.519050][ T3437] ? perf_trace_lock+0x304/0x3b0 [ 2417.524169][ T3437] netlink_rcv_skb+0x241/0x4d0 [ 2417.529089][ T3437] ? genl_bind+0x360/0x360 [ 2417.533634][ T3437] ? netlink_ack+0x1180/0x1180 [ 2417.538568][ T3437] ? __lock_acquire+0x7d40/0x7d40 [ 2417.543787][ T3437] ? net_generic+0x1e/0x240 [ 2417.548451][ T3437] ? down_read+0x1ac/0x2e0 [ 2417.553026][ T3437] genl_rcv+0x28/0x40 [ 2417.557119][ T3437] netlink_unicast+0x751/0x8d0 [ 2417.562073][ T3437] netlink_sendmsg+0x8d0/0xbf0 [ 2417.566969][ T3437] ? perf_trace_lock+0x304/0x3b0 [ 2417.572060][ T3437] ? netlink_getsockopt+0x590/0x590 [ 2417.577413][ T3437] ? aa_sock_msg_perm+0x94/0x150 [ 2417.582506][ T3437] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2417.587926][ T3437] ? security_socket_sendmsg+0x80/0xa0 [ 2417.593523][ T3437] ? netlink_getsockopt+0x590/0x590 [ 2417.598868][ T3437] ____sys_sendmsg+0x5ba/0x960 [ 2417.603783][ T3437] ? __asan_memset+0x22/0x40 [ 2417.608520][ T3437] ? __sys_sendmsg_sock+0x30/0x30 [ 2417.613696][ T3437] ? __import_iovec+0x5f2/0x850 [ 2417.618719][ T3437] ? import_iovec+0x73/0xa0 [ 2417.623348][ T3437] ___sys_sendmsg+0x2a6/0x360 [ 2417.628446][ T3437] ? __sys_sendmsg+0x2a0/0x2a0 [ 2417.633405][ T3437] ? debug_mutex_init+0x38/0x70 [ 2417.638516][ T3437] __se_sys_sendmsg+0x1c2/0x2b0 [ 2417.643599][ T3437] ? __x64_sys_sendmsg+0x80/0x80 [ 2417.648739][ T3437] ? lockdep_hardirqs_on+0x98/0x150 [ 2417.654088][ T3437] do_syscall_64+0x55/0xa0 [ 2417.658670][ T3437] ? clear_bhb_loop+0x40/0x90 [ 2417.663457][ T3437] ? clear_bhb_loop+0x40/0x90 [ 2417.668256][ T3437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2417.674273][ T3437] RIP: 0033:0x7f77d319cdd9 [ 2417.678815][ T3437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2417.698628][ T3437] RSP: 002b:00007f77d40b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2417.707164][ T3437] RAX: ffffffffffffffda RBX: 00007f77d3415fa0 RCX: 00007f77d319cdd9 [ 2417.715225][ T3437] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2417.723301][ T3437] RBP: 00007f77d3232d69 R08: 0000000000000000 R09: 0000000000000000 [ 2417.731360][ T3437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2417.739419][ T3437] R13: 00007f77d3416038 R14: 00007f77d3415fa0 R15: 00007ffed7458048 [ 2417.747600][ T3437] [ 2417.875341][ T3449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2418.436734][ T3460] netlink: 'syz.0.10036': attribute type 10 has an invalid length. [ 2418.729497][ T3462] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10036'. [ 2418.888134][ T3462] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2420.870839][ T3481] delete_channel: no stack [ 2421.137271][ T3481] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.10040'. [ 2421.310260][ T3479] delete_channel: no stack [ 2422.800340][ T3490] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10043'. [ 2422.948419][ T3490] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2422.977668][ T3490] CPU: 0 PID: 3490 Comm: syz.2.10043 Not tainted syzkaller #0 [ 2422.985301][ T3490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2422.995464][ T3490] Call Trace: [ 2422.998862][ T3490] [ 2423.001913][ T3490] dump_stack_lvl+0x18c/0x250 [ 2423.006728][ T3490] ? show_regs_print_info+0x20/0x20 [ 2423.012045][ T3490] ? load_image+0x420/0x420 [ 2423.016726][ T3490] sysfs_warn_dup+0x8e/0xa0 [ 2423.021492][ T3490] sysfs_do_create_link_sd+0xc0/0x110 [ 2423.027001][ T3490] device_add_class_symlinks+0x1cf/0x240 [ 2423.033235][ T3490] device_add+0x507/0xc20 [ 2423.037726][ T3490] wiphy_register+0x1dad/0x2ae0 [ 2423.042751][ T3490] ? cfg80211_event_work+0x40/0x40 [ 2423.047951][ T3490] ? minstrel_ht_alloc+0x88a/0x990 [ 2423.053202][ T3490] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2423.059383][ T3490] ieee80211_register_hw+0x3464/0x4250 [ 2423.065003][ T3490] ? ieee80211_tasklet_handler+0x20/0x20 [ 2423.070746][ T3490] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2423.076807][ T3490] ? __debug_object_init+0xec/0x450 [ 2423.082139][ T3490] ? __asan_memset+0x22/0x40 [ 2423.086822][ T3490] ? __hrtimer_init+0x186/0x270 [ 2423.091783][ T3490] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2423.097743][ T3490] ? mac80211_hwsim_free+0x220/0x220 [ 2423.103198][ T3490] ? rcu_is_watching+0x15/0xb0 [ 2423.108058][ T3490] ? kstrndup+0xbd/0x140 [ 2423.112416][ T3490] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2423.117664][ T3490] ? mark_lock+0x94/0x320 [ 2423.122115][ T3490] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2423.128655][ T3490] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2423.134917][ T3490] ? lockdep_hardirqs_on+0x98/0x150 [ 2423.140249][ T3490] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2423.146549][ T3490] genl_family_rcv_msg_doit+0x211/0x310 [ 2423.152198][ T3490] ? end_current_label_crit_section+0x170/0x170 [ 2423.158552][ T3490] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2423.164564][ T3490] ? bpf_lsm_capable+0x9/0x10 [ 2423.169334][ T3490] ? security_capable+0x89/0xb0 [ 2423.174296][ T3490] genl_rcv_msg+0x619/0x7a0 [ 2423.178909][ T3490] ? genl_bind+0x360/0x360 [ 2423.183405][ T3490] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2423.189851][ T3490] ? perf_trace_lock+0x304/0x3b0 [ 2423.195009][ T3490] netlink_rcv_skb+0x241/0x4d0 [ 2423.199868][ T3490] ? genl_bind+0x360/0x360 [ 2423.204373][ T3490] ? netlink_ack+0x1180/0x1180 [ 2423.209273][ T3490] ? __lock_acquire+0x7d40/0x7d40 [ 2423.214388][ T3490] ? net_generic+0x1e/0x240 [ 2423.219027][ T3490] ? down_read+0x1ac/0x2e0 [ 2423.224101][ T3490] genl_rcv+0x28/0x40 [ 2423.228170][ T3490] netlink_unicast+0x751/0x8d0 [ 2423.233102][ T3490] netlink_sendmsg+0x8d0/0xbf0 [ 2423.237960][ T3490] ? perf_trace_lock+0x304/0x3b0 [ 2423.243006][ T3490] ? netlink_getsockopt+0x590/0x590 [ 2423.248315][ T3490] ? aa_sock_msg_perm+0x94/0x150 [ 2423.253359][ T3490] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2423.258750][ T3490] ? security_socket_sendmsg+0x80/0xa0 [ 2423.264393][ T3490] ? netlink_getsockopt+0x590/0x590 [ 2423.269808][ T3490] ____sys_sendmsg+0x5ba/0x960 [ 2423.274686][ T3490] ? __asan_memset+0x22/0x40 [ 2423.279393][ T3490] ? __sys_sendmsg_sock+0x30/0x30 [ 2423.284517][ T3490] ? __import_iovec+0x5f2/0x850 [ 2423.289543][ T3490] ? import_iovec+0x73/0xa0 [ 2423.294139][ T3490] ___sys_sendmsg+0x2a6/0x360 [ 2423.298932][ T3490] ? __sys_sendmsg+0x2a0/0x2a0 [ 2423.303852][ T3490] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2423.310260][ T3490] __se_sys_sendmsg+0x1c2/0x2b0 [ 2423.315298][ T3490] ? __x64_sys_sendmsg+0x80/0x80 [ 2423.320374][ T3490] ? lockdep_hardirqs_on+0x98/0x150 [ 2423.325672][ T3490] do_syscall_64+0x55/0xa0 [ 2423.330160][ T3490] ? clear_bhb_loop+0x40/0x90 [ 2423.334926][ T3490] ? clear_bhb_loop+0x40/0x90 [ 2423.339696][ T3490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2423.345672][ T3490] RIP: 0033:0x7efda679cdd9 [ 2423.350171][ T3490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2423.369878][ T3490] RSP: 002b:00007efda7594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2423.378374][ T3490] RAX: ffffffffffffffda RBX: 00007efda6a15fa0 RCX: 00007efda679cdd9 [ 2423.386428][ T3490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2423.394486][ T3490] RBP: 00007efda6832d69 R08: 0000000000000000 R09: 0000000000000000 [ 2423.402542][ T3490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2423.410600][ T3490] R13: 00007efda6a16038 R14: 00007efda6a15fa0 R15: 00007fff01e13568 [ 2423.418738][ T3490] [ 2425.602600][ T3521] validate_nla: 2 callbacks suppressed [ 2425.602622][ T3521] netlink: 'syz.0.10050': attribute type 11 has an invalid length. [ 2425.724211][ T3526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2426.522558][T30523] wlan1: Trigger new scan to find an IBSS to join [ 2428.024877][ T3553] netlink: 'syz.0.10058': attribute type 10 has an invalid length. [ 2428.101555][ T3540] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10056'. [ 2428.180995][ T3540] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2428.191011][ T3540] CPU: 1 PID: 3540 Comm: syz.3.10056 Not tainted syzkaller #0 [ 2428.198715][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2428.208978][ T3540] Call Trace: [ 2428.212367][ T3540] [ 2428.215409][ T3540] dump_stack_lvl+0x18c/0x250 [ 2428.220435][ T3540] ? show_regs_print_info+0x20/0x20 [ 2428.225772][ T3540] ? load_image+0x420/0x420 [ 2428.230476][ T3540] sysfs_warn_dup+0x8e/0xa0 [ 2428.235101][ T3540] sysfs_do_create_link_sd+0xc0/0x110 [ 2428.240611][ T3540] device_add_class_symlinks+0x1cf/0x240 [ 2428.246412][ T3540] device_add+0x507/0xc20 [ 2428.250904][ T3540] wiphy_register+0x1dad/0x2ae0 [ 2428.255972][ T3540] ? cfg80211_event_work+0x40/0x40 [ 2428.261212][ T3540] ? minstrel_ht_alloc+0x88a/0x990 [ 2428.266514][ T3540] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2428.272779][ T3540] ieee80211_register_hw+0x3464/0x4250 [ 2428.278484][ T3540] ? ieee80211_tasklet_handler+0x20/0x20 [ 2428.284261][ T3540] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2428.290360][ T3540] ? __debug_object_init+0xec/0x450 [ 2428.295732][ T3540] ? __asan_memset+0x22/0x40 [ 2428.300630][ T3540] ? __hrtimer_init+0x186/0x270 [ 2428.305738][ T3540] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2428.311706][ T3540] ? mac80211_hwsim_free+0x220/0x220 [ 2428.317468][ T3540] ? rcu_is_watching+0x15/0xb0 [ 2428.322369][ T3540] ? kstrndup+0xbd/0x140 [ 2428.326850][ T3540] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2428.332122][ T3540] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2428.339493][ T3540] ? mark_lock+0x94/0x320 [ 2428.344001][ T3540] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2428.350549][ T3540] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2428.356321][ T3540] ? lockdep_hardirqs_on+0x98/0x150 [ 2428.361763][ T3540] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2428.367598][ T3540] genl_family_rcv_msg_doit+0x211/0x310 [ 2428.373294][ T3540] ? end_current_label_crit_section+0x170/0x170 [ 2428.379734][ T3540] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2428.385934][ T3540] ? bpf_lsm_capable+0x9/0x10 [ 2428.390832][ T3540] ? security_capable+0x89/0xb0 [ 2428.395843][ T3540] genl_rcv_msg+0x619/0x7a0 [ 2428.400499][ T3540] ? genl_bind+0x360/0x360 [ 2428.405050][ T3540] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2428.411531][ T3540] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2428.418363][ T3540] netlink_rcv_skb+0x241/0x4d0 [ 2428.423356][ T3540] ? genl_bind+0x360/0x360 [ 2428.427890][ T3540] ? netlink_ack+0x1180/0x1180 [ 2428.432872][ T3540] ? __lock_acquire+0x7d40/0x7d40 [ 2428.438022][ T3540] ? net_generic+0x1e/0x240 [ 2428.442690][ T3540] ? down_read+0x1ac/0x2e0 [ 2428.447243][ T3540] genl_rcv+0x28/0x40 [ 2428.451334][ T3540] netlink_unicast+0x751/0x8d0 [ 2428.456295][ T3540] netlink_sendmsg+0x8d0/0xbf0 [ 2428.461239][ T3540] ? perf_trace_lock+0x304/0x3b0 [ 2428.466327][ T3540] ? netlink_getsockopt+0x590/0x590 [ 2428.471676][ T3540] ? aa_sock_msg_perm+0x94/0x150 [ 2428.476828][ T3540] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2428.482237][ T3540] ? security_socket_sendmsg+0x80/0xa0 [ 2428.488002][ T3540] ? netlink_getsockopt+0x590/0x590 [ 2428.493352][ T3540] ____sys_sendmsg+0x5ba/0x960 [ 2428.498305][ T3540] ? __asan_memset+0x22/0x40 [ 2428.503033][ T3540] ? __sys_sendmsg_sock+0x30/0x30 [ 2428.508175][ T3540] ? __import_iovec+0x5f2/0x850 [ 2428.513346][ T3540] ? import_iovec+0x73/0xa0 [ 2428.517995][ T3540] ___sys_sendmsg+0x2a6/0x360 [ 2428.522913][ T3540] ? __sys_sendmsg+0x2a0/0x2a0 [ 2428.527902][ T3540] ? debug_mutex_init+0x38/0x70 [ 2428.532953][ T3540] __se_sys_sendmsg+0x1c2/0x2b0 [ 2428.537940][ T3540] ? __x64_sys_sendmsg+0x80/0x80 [ 2428.543048][ T3540] ? lockdep_hardirqs_on+0x98/0x150 [ 2428.548376][ T3540] do_syscall_64+0x55/0xa0 [ 2428.552913][ T3540] ? clear_bhb_loop+0x40/0x90 [ 2428.557719][ T3540] ? clear_bhb_loop+0x40/0x90 [ 2428.562524][ T3540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2428.568520][ T3540] RIP: 0033:0x7f348819cdd9 [ 2428.573129][ T3540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2428.592844][ T3540] RSP: 002b:00007f3489115028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2428.601379][ T3540] RAX: ffffffffffffffda RBX: 00007f3488415fa0 RCX: 00007f348819cdd9 [ 2428.609461][ T3540] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2428.617673][ T3540] RBP: 00007f3488232d69 R08: 0000000000000000 R09: 0000000000000000 [ 2428.625741][ T3540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2428.633902][ T3540] R13: 00007f3488416038 R14: 00007f3488415fa0 R15: 00007ffedbe09c08 [ 2428.642021][ T3540] [ 2429.478855][ T2243] wlan1: Trigger new scan to find an IBSS to join [ 2430.348940][ T3573] netlink: 'syz.3.10063': attribute type 11 has an invalid length. [ 2430.405515][ T3574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2431.239294][ T3588] raw_sendmsg: syz.0.10066 forgot to set AF_INET. Fix it! [ 2431.487958][ T9771] wlan1: Creating new IBSS network, BSSID aa:2f:b6:86:5b:62 [ 2431.760005][ T48] wlan1: Created IBSS using preconfigured BSSID ff:ff:ff:ff:00:00 [ 2431.779695][ T48] wlan1: Creating new IBSS network, BSSID ff:ff:ff:ff:00:00 [ 2431.823899][ T48] ------------[ cut here ]------------ [ 2431.830315][ T48] WARNING: CPU: 0 PID: 48 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 2431.840634][ T48] Modules linked in: [ 2431.844708][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2431.852488][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2431.862779][ T48] Workqueue: cfg80211 cfg80211_event_work [ 2431.868800][ T48] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 2431.875613][ T48] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 98 a0 f7 0f 0b eb bb e8 9e 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 98 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 2431.896124][ T48] RSP: 0018:ffffc90000b97a20 EFLAGS: 00010293 [ 2431.902519][ T48] RAX: ffffffff89e68962 RBX: dffffc0000000000 RCX: ffff88801ce4bc00 [ 2431.910783][ T48] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 2431.919206][ T48] RBP: ffffc90000b97af8 R08: ffffffff911c656f R09: 1ffffffff2238cad [ 2431.927601][ T48] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff88805e4ecc90 [ 2431.935825][ T48] R13: 1ffff92000172f4c R14: ffff88807585b5f8 R15: 000000000000001f [ 2431.944445][ T48] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2431.953752][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2431.960628][ T48] CR2: 000000110c33789b CR3: 0000000047c99000 CR4: 00000000003506f0 [ 2431.969033][ T48] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2431.977887][ T48] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2431.985987][ T48] Call Trace: [ 2431.989549][ T48] [ 2431.992581][ T48] ? mutex_lock_nested+0x20/0x20 [ 2431.997821][ T48] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2432.003553][ T48] cfg80211_process_wdev_events+0x3bc/0x550 [ 2432.009866][ T48] cfg80211_process_rdev_events+0xa1/0x110 [ 2432.015818][ T48] cfg80211_event_work+0x2f/0x40 [ 2432.021080][ T48] ? process_scheduled_works+0x96f/0x15d0 [ 2432.026932][ T48] process_scheduled_works+0xa5d/0x15d0 [ 2432.032895][ T48] ? worker_attach_to_pool+0x380/0x380 [ 2432.038925][ T48] ? assign_work+0x3d2/0x5d0 [ 2432.043675][ T48] worker_thread+0xa55/0xfc0 [ 2432.048587][ T48] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2432.054632][ T48] ? _raw_spin_unlock+0x40/0x40 [ 2432.059718][ T48] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2432.065840][ T48] kthread+0x2fa/0x390 [ 2432.070192][ T48] ? pr_cont_work+0x560/0x560 [ 2432.075143][ T48] ? kthread_blkcg+0xd0/0xd0 [ 2432.080448][ T48] ret_from_fork+0x48/0x80 [ 2432.085000][ T48] ? kthread_blkcg+0xd0/0xd0 [ 2432.089933][ T48] ret_from_fork_asm+0x11/0x20 [ 2432.094887][ T48] [ 2432.098123][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2432.105492][ T48] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 2432.113044][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2432.123277][ T48] Workqueue: cfg80211 cfg80211_event_work [ 2432.129293][ T48] Call Trace: [ 2432.132684][ T48] [ 2432.135724][ T48] dump_stack_lvl+0x18c/0x250 [ 2432.140510][ T48] ? show_regs_print_info+0x20/0x20 [ 2432.145834][ T48] ? load_image+0x420/0x420 [ 2432.150505][ T48] panic+0x2dc/0x730 [ 2432.154533][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 2432.159178][ T48] ? ret_from_fork_asm+0x11/0x20 [ 2432.164427][ T48] __warn+0x2e0/0x470 [ 2432.168521][ T48] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2432.174201][ T48] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2432.179957][ T48] report_bug+0x2be/0x4f0 [ 2432.184387][ T48] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2432.190242][ T48] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2432.195909][ T48] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 2432.201752][ T48] handle_bug+0xcf/0x120 [ 2432.206210][ T48] exc_invalid_op+0x1a/0x50 [ 2432.210851][ T48] asm_exc_invalid_op+0x1a/0x20 [ 2432.215798][ T48] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 2432.222279][ T48] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 98 a0 f7 0f 0b eb bb e8 9e 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 98 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 2432.242027][ T48] RSP: 0018:ffffc90000b97a20 EFLAGS: 00010293 [ 2432.248303][ T48] RAX: ffffffff89e68962 RBX: dffffc0000000000 RCX: ffff88801ce4bc00 [ 2432.256382][ T48] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 2432.264455][ T48] RBP: ffffc90000b97af8 R08: ffffffff911c656f R09: 1ffffffff2238cad [ 2432.272529][ T48] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff88805e4ecc90 [ 2432.280704][ T48] R13: 1ffff92000172f4c R14: ffff88807585b5f8 R15: 000000000000001f [ 2432.288808][ T48] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2432.294502][ T48] ? mutex_lock_nested+0x20/0x20 [ 2432.299627][ T48] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2432.305331][ T48] cfg80211_process_wdev_events+0x3bc/0x550 [ 2432.311371][ T48] cfg80211_process_rdev_events+0xa1/0x110 [ 2432.317296][ T48] cfg80211_event_work+0x2f/0x40 [ 2432.322327][ T48] ? process_scheduled_works+0x96f/0x15d0 [ 2432.328150][ T48] process_scheduled_works+0xa5d/0x15d0 [ 2432.333940][ T48] ? worker_attach_to_pool+0x380/0x380 [ 2432.339700][ T48] ? assign_work+0x3d2/0x5d0 [ 2432.344418][ T48] worker_thread+0xa55/0xfc0 [ 2432.349139][ T48] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2432.355145][ T48] ? _raw_spin_unlock+0x40/0x40 [ 2432.360101][ T48] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 2432.366219][ T48] kthread+0x2fa/0x390 [ 2432.370449][ T48] ? pr_cont_work+0x560/0x560 [ 2432.375320][ T48] ? kthread_blkcg+0xd0/0xd0 [ 2432.380095][ T48] ret_from_fork+0x48/0x80 [ 2432.384704][ T48] ? kthread_blkcg+0xd0/0xd0 [ 2432.389390][ T48] ret_from_fork_asm+0x11/0x20 [ 2432.394324][ T48] [ 2432.398031][ T48] Kernel Offset: disabled [ 2432.402563][ T48] Rebooting in 86400 seconds..