last executing test programs: 3.719696266s ago: executing program 1 (id=1419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f00000009c0)="c1188e199f5d02ff428486019900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 3.451453214s ago: executing program 1 (id=1422): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000015c0)={@map, 0xffffffffffffffff, 0x13, 0x20}, 0x20) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x10, 0x9, 0x9, 0x1, 0x0, 0x1, 0x41200, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x1, 0x1}, 0x109934, 0x1, 0x0, 0x5, 0x30a2c000000000, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0x9f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xc8}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 3.274664537s ago: executing program 0 (id=1423): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.23308743s ago: executing program 1 (id=1424): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)=r2}, 0x20) (async) r4 = gettid() r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r5, 0x0, 0x9, &(0x7f00000002c0)='/dev/ppp\x00'}, 0x30) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x0, 0x1e, 0x56, &(0x7f0000000340)="fd305a88298640e633dcb598f184f428fe706df08b2cfcc98f4130ba7d72", &(0x7f0000000380)=""/86, 0x6, 0x0, 0x1000, 0xe3, &(0x7f0000000400)="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", &(0x7f0000001400)="418d2ed6cbc190c87d8f94b5961ae3dcd1af0ef66e15bc81112b5933c2d416d51b0f6a788cd5fcdb221fab1c5dc7f0ef4cfc11e3fe16548b32c61f9df914274e564546fa8108c11f53a9de5e7aca74b70df4f65d68964a08c8a206ef7e82f77f5240d5adc70ec67660ff66123aa320d13e19aa73afea6e2c53fb88c79ef709210a81eeb028d37c3c0b97d340f1ab80f3824277558fd290cfa067c8eab25674be641118febe92416e173c6bc761bfd87bd66f7738f72c37d56335fd29c178918e199e9bd41609484ca4541f25916b2f29f02226be33f306dc8bae8e5731475a71b9cf73", 0x4, 0x0, 0x3}, 0x50) (async) close(r0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000002d80)={&(0x7f00000015c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="e81adfd2147ecbde8c80a59740cbf6bd79bff5ed9b2c2b123c1ee7c3df342d2476599ea04ea0df42", 0x28}, {&(0x7f0000002680)="0bf0328722e446bedc8b3a627b075be7b6c374b2be4bed15ccb11df95872bbb9fe1c1f4f7ee4bf701baa634cd832e042f7a6f9bff4a1ba48ae69c3575bcc7e6873a0ce53e07cd472d9a85a5c0756cbbb1776ec847f77baf4679f69010ae519a08b4b0f5490a5dc53bd59670389dc154ad05306e748bc2d7612ba2e08f2ea7b7ca513d413bdfe7218af0ee7a76b185ef7e82bee8abce044bc4f5baff0b6db402e387fbbe65caf59990a749cc0167903d3680bb4ce4369c1086f12555f917d68130cd5159f", 0xc4}, {&(0x7f0000002780)="290ae67c21b53923bc7082c7f70151f50ec74013ad18c26ff39b847c8ce03a06bc393ef056195207e1473dc841d8fed211cef349ba89019c640064dee6fc1b6bca335a2d9fdb2c12baa9350994fc8d49d2cecba1e42464893cd4f36dfcaf47c2a2e9441fc1d9bc2c237b7c5fd2fe118cf961b36b4a73c2fa88cc6533a01e441fdadd091993975f7502831919bf29cebd8826b3ed0eae9506537287b9764272809406046dc7fa5ae768f4530ba3fcd5f5d3b2b33e0a6cf4521e146503c4ef4733903e715b21865914192f0605e50353700462d00b81c9e12137dcc402e648564e3edc632fed51e40f", 0xe8}, {&(0x7f0000002880)="efecda49b362b11f6a3e51ea5305f8a661d0d7cb8829165e4208d8af964196aa354adc7a41a49e3a623b3f3f7c43", 0x2e}], 0x5, &(0x7f0000002940)=[{0xf8, 0x10d, 0x24, "9feee9e686c8d3396405882d36e6766c5e75aafd8f52c0a91a12a9a90cbd8e98b6069779ef6db92cc12963dfcc81fefe97c4421cf2a1f0a07bd7a39cf9ca625c639f02a596e4ca2694b66810fd4e5a61c36347731d4cbd077a948edf7d8791aabd680193581777e3bf287ee95ceb5a2481f3b6a03ba3708c9a14611569150a7cbc17e63977c12f874d4524fdc63ab514e68414a28a88bc46107d15ff163d4d364ac50e24f865aa8fe1f902c9b7ed05c188bafd59e561d7c549acbc2c12d7959c38adc948815d034ab5de46643ad36b849b87fd828092b69d71bc1822f41a67342359"}, {0x108, 0x1, 0x2d, "542c3b546abef3484e93f0b286e1ce549d36656f0d1acf97e4d1d20a04f0dce4c3851b1eaacf4236216d43d8a14844b0ea4ad56a297940f813c8182c68083b8a26a2a58b1b367cfe55e237a8a6859506a4ba6e198b391e4397fe68bcea51b5bb3a55f8e81c8e86d1ea865fd2a7be2a50563ca8012b884b1b1ecfd66ede48697f23f6ab2147e78f7383411619551ec588fe14cdb6fc4b9dc8ed425b66b6453acd9f4651b084e3e9be84d2719264e5d78266d89062e4e6a09c14b5a8c4e86073d937d503aff8af423c84846deb12956116630745a2d3bc83b31f60ecfc9acbdba8dee80ec0663f8bf3de9751b94b0e5f95bad378"}, {0xa0, 0x10d, 0x1b, "e86c8649885cc37df1c194810c3f66ed8d076d5b41594fc147b952f5c1be07abaf75d4132a71f46326e523ae353af242c0f3ff73490e96aa8cea841e6243e09a2f03f0437cccfa510c803dde776e70e1ea2067394fc16512f73ffa81720ae1c4d583e8dafe2d43da32c6465468e1f2d30b9ed944e2cea3575a0a4e8be800dea5a0bcb4b153ffbbda0cc439e17f17"}, {0x68, 0x0, 0x7f, "49a0456b7af9229fc38795d80fd3eeec8d696919fe02af109c2a03e653561ac7b3e41889d9a2623331e32a3cd7d501325da48f4a36a366e70583f43e044351c7b92044acebd46f80bc3be4fafc430f60f440b9754d"}, {0xd0, 0x10c, 0x40000000, "7a2bdd75b7124815aaa1588c911e283b9d980764241161db1fb74b58ad55292881a28e83d6f654f24f8f28599b3fb1990d02ffb2eed1df404cae82dc73f25266719b01f49a74c5ad448f8770cc8e2960295b40378537fa0264264942097688554f1b2023dea36435165cbca30eb4ae618a30ac0753d935620be857e819fcdabf0499515958bed79791b9f7eeb111da79c74e272d31458e8fea911fdacd3fb3eed4dd664a8752752d9abc6518781734aa2cd8ed11008e29437ef6af"}, {0x60, 0x107, 0x1, "b76b4af223eb03e2dcebb23944eb3097ccb2896e8c2c685f211d512d7afd287f0de50bfc2e1685ebd3c54bfb375d020999f77ed0089bf747e0d84e369b202b934cd1802c764c84d9e39d848debbd415a"}], 0x438}, 0x0) (async) recvmsg(r0, &(0x7f0000002f80)={&(0x7f0000002dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002e40), 0x0, &(0x7f0000002e80)=""/240, 0xf0}, 0x10000) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003000)=@o_path={&(0x7f0000002fc0)='./file0\x00', 0x0, 0x18, r6}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003140)={@fallback=r7, 0x10, 0x1, 0x9, &(0x7f0000003040)=[0x0], 0x1, 0x0, &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000030c0)=[0x0], &(0x7f0000003100)=[0x0]}, 0x40) (async) syz_clone(0xc0000000, 0xfffffffffffffffc, 0x0, &(0x7f0000003180), &(0x7f00000031c0), &(0x7f0000003200)="cf8b4c9a7ecb96040306855b9ec4fde6b16b0dcb74917f2d0debd51e4c342bb355d4bb693d9594d30c267e8b0f74a4ad4af8f3c464ac2c59f5dca72424f9cbe13a07f724c309233705baa73936f601c52cec0f3c6d6f3e1fe02b233a2de18a0ff914138605fde5f971b1bc401c659066b15624a85d7e14a9186ee6346e42b7509a22dba3e9fc8312caa29fa196819d17c460a48ec178d92a12d93ea58f60cc3b7c0055ad9d6e8df026a995ceaab2f259d962") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003400)={r2, 0x0, 0x12, 0x21, &(0x7f00000032c0)="9e5eae9e58295168c71cba605cda380d5f4b", &(0x7f0000003300)=""/33, 0xfffffffa, 0x0, 0x48, 0x17, &(0x7f0000003340)="f1dda54cbcef401ed3055dfa2fafe9eb7854ff56debf80fccbcc3954a46a096ab333e03cee3fd559b9fb86bb2fe2945be4a66a001148c35a1e74d094aebcc7203d1e36a208ced8b8", &(0x7f00000033c0)="625d749b504cd734781f9e54f250771bdb2dec99a551b5", 0x4, 0x0, 0x1}, 0x50) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003640)={&(0x7f0000003480)="6bd72901bff059816788b3a0ba4b12eac9f0eb483e7e78b1e54eecdc74c40e625f19b8fa14dc55eada46eedc206f16ac7e8b53cfc689485c2d56182f05059272fa5bf7bddaca63fb0d3bb8999da475127c5a19a5e94f5be2fc0719c55138edd855e4c54acfaa9bd95f70dedb14a5ae2a4b64a1484c1a1c939cf4fafdef2516bd41f57778c7a5e0a23d3755a16285170d4d8cdd5bd879196e376496ba152ec7e359477564026a4eb1aab5ab6930", &(0x7f0000003540), &(0x7f0000003580)="df56b131aa640b92c981d839851c795ea640a079794ac36f5786676e769fcaa65f6c78ac6100a98b41c690666aebd795a01a97bdc49d5ad55e8fa84c1e8afc42c5da62a8862d43995159c721ab136a46b0e4f6940029a62f4c850f4acfcbb70b", &(0x7f0000003600)="c515eaa41e4774c6729175d86590f688776c764a", 0x3, r3}, 0x38) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003680)={0x1b, 0x0, 0x0, 0xffff, 0x0, r8, 0xb, '\x00', 0x0, r5, 0x1, 0x3, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003940)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000003700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003800)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x18, r8, 0x8, &(0x7f0000003840)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000003880)={0x2, 0xc, 0xa, 0x1}, 0x10, 0x27af8, r8, 0x5, 0x0, &(0x7f00000038c0)=[{0x0, 0x3, 0xb, 0x1}, {0x4, 0x1, 0x6, 0x7}, {0x1, 0x1, 0x0, 0x8}, {0x2, 0x4, 0x8, 0xc}, {0x5, 0x3, 0xb, 0x8}], 0x10, 0x9}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003a00)) (async) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f0000003a40)) openat$cgroup_int(r5, &(0x7f0000003a80)='net_cls.classid\x00', 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003b40)={r5, 0x58, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r10, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003d00)={@fallback=r0, 0x0, 0x1, 0x101, &(0x7f0000003c00)=[0x0], 0x1, 0x0, &(0x7f0000003c40)=[0x0], &(0x7f0000003c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003cc0)=[0x0], 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003d80)={0x70, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003d40)={@map=r9, r5, 0xb, 0xdc66304e825e6223, 0x0, @void, @void, @value=r12, @void, r11}, 0x20) 3.07725835s ago: executing program 0 (id=1427): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2.917880361s ago: executing program 2 (id=1428): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)="5c0000001200e96c52d0e3d86e17aa0a076b876c1d0000007ea60864160af3650400410038001d001931a0e69ee517d3efc532ff000000a705251e618293c600000000005b5289b80da5434b9d00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 5) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r8, 0x0, 0x0) 2.917229241s ago: executing program 3 (id=1429): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000900), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x180000, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffff, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfc, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)="5c0000001200e96c52d0e3d86e17aa0a076b876c1d0000007ea60864160af3650400410038001d001931a0e69ee517d3efc532ff000000a705251e618293c600000000005b5289b80da5434b9d00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5cd00000000000000c56d472be6d9b5e6c1837e0667f81904dbdcc701bf173dd37c706cec66616e42662ab63d07e27300000061229e9d1681480f5905965b3a7a6b98e4b8"], 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 2.916355931s ago: executing program 0 (id=1436): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x5d34, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="24000000240081064e81f782db44b9040a02080006000000e8fe0ba1f1ffffff02001426", 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="62202acc8b45834aecc23a2a20686d00"], 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r4, r4, 0x26}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r9, 0x0, 0x0) 2.832903887s ago: executing program 1 (id=1430): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$cgroup_devices(r0, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 2.329155511s ago: executing program 0 (id=1431): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x0, 0x4, 0x1, 0x30002, 0xffffffffffffffff, 0x555, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @value=r2}, 0x50) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 2.308189043s ago: executing program 3 (id=1432): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xa, 0x2, 0x73) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000100085000000225c1d17b61602b76cb8fe2a4e51149ee0ac47432aa32c686c701711314070873933f6cd35cd28e2623471755b962438543c120bafed5d06e40000ff00"/91], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff8e516a0061ece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a", 0xd8}], 0x1}, 0x24000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000007111a800000000008510000002000000850000000700000095000000000000009500a505000000000c462775db408fd5a788c9c0ccd5d4971f8d4d9301ba004fef8ab1628cd9645020b295980e2f5e1b987ac5ea5054ce7f5ee3b972bf4f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x144, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000b000000000000000000000009020000000000"], 0x0, 0x3e}, 0x20) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={0x0, 0x5b, 0x0, 0x0}}, 0x10) 2.209778619s ago: executing program 1 (id=1433): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0xb5, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x9, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x7f, 0xff, 0xa4, 0x1, 0x0, 0x5, 0x4801, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000000c0), 0xc}, 0x20, 0x40, 0x7, 0x3, 0x134, 0xd, 0xfff9, 0x0, 0x4, 0x0, 0x1}, r6, 0xb, r0, 0xe) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2.19999981s ago: executing program 2 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x9, 0x2, 0x4, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x5}, 0x208, 0x8, 0x4, 0x2, 0xffffffff, 0x1, 0x800, 0x0, 0x2, 0x0, 0x7dc9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x7, 0x10, 0x1, 0xf, 0x0, 0x7, 0x4, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x4000000000, 0x38}, 0x80, 0x101, 0x81, 0x9, 0x6, 0x7, 0x2, 0x0, 0x3ff, 0x0, 0x8}, r1, 0x7, r2, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000007, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.922200629s ago: executing program 3 (id=1435): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.857816503s ago: executing program 2 (id=1437): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x440d0) r2 = socket$kcm(0x2, 0x3, 0x84) write$cgroup_subtree(r2, 0x0, 0x101d0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0xa, 0x1, 0xffff0efa, &(0x7f0000000140)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x8, 0x1012, &(0x7f0000001e40)=""/4114, 0x41100, 0xc}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311420000000000851000000200000085000000af00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 1.743451181s ago: executing program 3 (id=1438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001880)=""/4086, 0x41000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000e40)={&(0x7f00000006c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="b9f8bd4304631b9f51f3da06a7e9aa7be76f6a3f3180d68140281d8bd364fe03a790361efec1b1245c079e0b1f6f733d07a19be0b398a8108421a0849ce3116dcf375f73d2b7339b7cf8638b32a2053a0a218ab6808345cf9565f5b5e3", 0x5d}, {&(0x7f0000000840)="70a2186f173065fe4b1020f9973810116913af84710731d13642db5c9daf416c0a83be107d3777a890f2c69ce22e6afd2ba278272977064c6f95c1d02f1e294c067d431a40f7cfc7c4cec339601c03e20d605910e79f6a89bf03ba19c32f2dabc90f36e1a19ee1916734582a92ad65331a30bf3768b72673d6bdf0980674e0706857", 0x82}, {&(0x7f0000000900)="40976ea398580801153dd52741be1a9bd1c4161976b7329e500c8740a7dde5f083c01f391fdf7153b25f29613f4f609d92658c51", 0x34}], 0x3, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8b5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x97, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @empty]}, @generic={0xd4, 0x11, "372f3af07ec2a51a0f7215a618ae9b"}, @generic={0x83, 0xa, "ac20cbd253174eb9"}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x3d, 0x1, [{0x6, 0xa, "26e47828016ab24f"}, {0x94aae8c9afc899aa, 0x4, "fd95"}, {0x1, 0x12, "0f581c6abeff568c6275003910e94e8f"}, {0x5, 0x5, '=2?'}, {0x5, 0x8, "38e7507f5c7e"}, {0x5, 0x7, "3b425de282"}, {0x7, 0x3, "15"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x83, 0x7, "3bc4b8f182"}]}}}], 0x170}, 0x4018000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x4, 0x5, 0x4, r1, 0x6, '\x00', 0x0, r4, 0x5, 0x0, 0x5, 0x8}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x9, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0x3b, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000240)='syzkaller\x00', 0x81, 0xde, &(0x7f0000000440)=""/222, 0x41100, 0x14, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x218cd, 0xffffffffffffffff, 0x9, &(0x7f00000006c0)=[r4, 0x1, r7], &(0x7f0000000700)=[{0x0, 0x1, 0x4, 0x7}, {0x3, 0x1, 0x5, 0x9}, {0x1, 0x5, 0xb, 0x4}, {0x5, 0x1, 0xa, 0xc}, {0x4, 0x4, 0xf, 0x3}, {0x1, 0x4, 0x0, 0x6}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x4, 0x5, 0x6}, {0x3, 0x1, 0xe, 0xc}], 0x10, 0x5}, 0x94) 1.510480967s ago: executing program 2 (id=1439): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f00000014c0)=""/4086, 0x0, 0x21}, 0x23) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x3}], 0x10, 0x5}, 0x94) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xfd, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xf, &(0x7f0000000280)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x64}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @ldst={0x3, 0x2, 0x3, 0x8, 0x7, 0x18, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x6, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x0) (async) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x1, 0x10}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x1, &(0x7f00000001c0)=@raw=[@func], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xe1, &(0x7f0000000780)=""/225, 0x41100, 0x40, '\x00', r11, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x9, 0xe63, 0xe8}, 0x10, r6, 0x0, 0x5, &(0x7f0000000a80)=[r12, r1, r13], &(0x7f0000000b00)=[{0x1, 0x1, 0x6, 0xc}, {0x1, 0x2, 0x1, 0x5}, {0x2, 0x4, 0xc, 0x6}, {0x2, 0x1, 0x3, 0x2}, {0x1, 0x2, 0x0, 0x5}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x237dc104, 0x4}, 0x50) 1.341762349s ago: executing program 0 (id=1440): socket$kcm(0x2, 0x5, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000bdb9cc8c80000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000200"/28], 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000005c0)="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", 0x5eb}], 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) r2 = socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @private2, 0x7}, 0x6, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) (async) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x0) (async) r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r8, 0x0) (async) close(r8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000ff7f000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32=r6, @ANYBLOB="04000000050000000500000000000000000000000000002000000000"], 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r6, 0x0, 0x40, 0xcb, &(0x7f0000000480)="94ecd04df7c6d39ff736173655cacd96a16e441af53a62a0c8caafbc9a31004cee7be403d5c5eb8d8a13c5b1a136f31a720e6c5d06d0a0b2c6084ea036f7cfc5", &(0x7f0000000bc0)=""/203, 0x0, 0x0, 0xdc, 0x8a, &(0x7f0000000cc0)="f5a3a844fcae897e5f8b3fd91c2611c7fcd93c6512b679c3edcb0c863bed385c340343004c602d63b09837f98716b526d32d4761a311e9e6febb16b1d23c3e444fd0ecd2cf133349ce38ba9b9a51aad25b3b839816d0bb284e3993eb394e37cb8c4fb2c54e4dc6ea578a90dce294ba49ad0f9d6086311b9010bef0b3d365de1094efdf9ec79595b1548fd791eb6e82527df10461987570783423443048b0591b0226025c82b5182e53e5309580857bbac90cf22ae4d066b147e2a11028d9e8a1d3405c4f50c31525b26d3c2c7b95122c83c5413e30e1b6080a7830d0", &(0x7f0000000dc0)="ba7c0b883eb5eb7aa0ea011ecf03028d7179f3b8ee71151b2a9320ba0ecb76c4c7d570aaae6f42298a233c9a8029b6a8f4198450fbc7f41c92b53edf33532a12ea2fd1a1771638842dbc025f7eaa7d70a0e901b752db14f4ea471e3a2986111c17e26a4feeea3a4b59ac7807573b75c1824abc2cbefa92e37ba4329b6a37fa23b076850c2c00d3ab2d61", 0x6}, 0x50) 1.304762041s ago: executing program 2 (id=1441): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r6}, 0xc) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)="5c0000001200e96c52d0e3d86e17aa0a076b876c1d0000007ea60864160af3650400410038001d001931a0e69ee517d3efc532ff000000a705251e618293c600000000005b5289b80da5434b9d00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7e93, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002110000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socket$kcm(0x10, 0x2, 0x0) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r9, 0x0, 0x0) 859.639251ms ago: executing program 2 (id=1442): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x2, &(0x7f0000000900), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x180000, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x800, 0x0, 0xffffffff, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]}) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfc, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)="5c0000001200e96c52d0e3d86e17aa0a076b876c1d0000007ea60864160af3650400410038001d001931a0e69ee517d3efc532ff000000a705251e618293c600000000005b5289b80da5434b9d00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5cd00000000000000c56d472be6d9b5e6c1837e0667f81904dbdcc701bf173dd37c706cec66616e42662ab63d07e27300000061229e9d1681480f5905965b3a7a6b98e4b8"], 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 858.073231ms ago: executing program 0 (id=1450): perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9c50f985ba27fb8a, 0x3, 0x40000000, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007e", 0x19}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x1, r4, 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 741.970069ms ago: executing program 3 (id=1443): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$cgroup_devices(r0, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 660.162195ms ago: executing program 1 (id=1444): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) (async) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xa0110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x594f, 0x3}, 0x1040a1, 0xc, 0x9, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b9", 0xf}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = gettid() sendmsg$unix(r6, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}], 0x58, 0x4000}, 0x40014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe48cc1c63e7d221", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="81a8cfac51869ef5585ae1fc0d00f5bfec409713fb2d380c38f2072c39f1f8fe354cad80662010cc2a20187344fb569bfbba4a1657fc376aa9da6d60d83422ccb5767a529def54bbfbb3d190de4ca1635374b7d6a277ec1241963e51ffbc9775edc195045cc694eae7050b911f2c97cc612b93a60f863ba8e1d637cc145c1c980d4d71af"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94) (async) r10 = syz_clone(0x2016000, &(0x7f0000000340)="9eefcd80d5426655ddc98a8f80020d090a9dcac2e4ec69bc1b73add4834698556391304b4aa5c59f64f11d65d93b3701ea8931c734448c6cf236777a296a5d6d9003549c5b970b4e0cb875bd375edb2757c644fe6d882c27719a4290c04deeda8fd03bf60eec361e0ff595ea7575a8df33081cb8b6ff48e477d9c8563a39fb78825d82524827a7f4120d093f32d6d0948527a40de609dcd72dab248d42898fdcb72d223846950b571927251bdd2032f1a75223a4eb1e769c66b2cb1683a13a147c697c579c6bc85df5a7a694d23077f4b85ab691ed0e", 0xd6, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="f58b99a58cefdc2ebf245fe4704a778871ea6b476fd2d64131d57d82f3fffa11a8328030be528f50fbdaad0593b3de89e959f85fbfc33c") syz_open_procfs$namespace(r10, &(0x7f0000000580)='ns/user\x00') perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xea37d383afb94786, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x8006, 0x98, 0x0, 0x40000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x4840) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 3 (id=1445): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010040) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)="5c0000001200e96c52d0e3d86e17aa0a076b876c1d0000007ea60864160af3650400410038001d001931a0e69ee517d3efc532ff000000a705251e618293c600000000005b5289b80da5434b9d00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)={'b', ' *:* ', 'rm\x00'}, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): ength. [ 111.406234][ T6201] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.103'. [ 112.521015][ T6210] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.106'. [ 114.432394][ T6216] netlink: 'syz.1.107': attribute type 29 has an invalid length. [ 114.560063][ T6212] netlink: 'syz.1.107': attribute type 6 has an invalid length. [ 115.705995][ T6233] netlink: 'syz.1.120': attribute type 29 has an invalid length. [ 116.105182][ T6233] netlink: 'syz.1.120': attribute type 6 has an invalid length. [ 116.377231][ T6237] netlink: 'syz.3.112': attribute type 2 has an invalid length. [ 116.462806][ T6237] netlink: 'syz.3.112': attribute type 8 has an invalid length. [ 116.504431][ T6237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.112'. [ 117.251640][ T6244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.323017][ T6249] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 117.361979][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 117.394581][ T6249] netlink: 'syz.3.115': attribute type 6 has an invalid length. [ 117.430311][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 117.497652][ T6254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 117.602476][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 117.976503][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 118.572309][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 119.211519][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 119.271136][ T6252] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 119.782510][ T6261] netlink: 'syz.3.118': attribute type 2 has an invalid length. [ 119.891299][ T6261] netlink: 'syz.3.118': attribute type 8 has an invalid length. [ 120.002555][ T6261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.118'. [ 120.103237][ T6268] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 120.454193][ T6268] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 120.490341][ T6269] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 121.132102][ T6284] netlink: 'syz.0.125': attribute type 29 has an invalid length. [ 121.152260][ T6284] netlink: 'syz.0.125': attribute type 6 has an invalid length. [ 121.176760][ T6291] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 121.191175][ T6291] dvmrp1: linktype set to 804 [ 121.873038][ T6299] __nla_validate_parse: 1 callbacks suppressed [ 121.873059][ T6299] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.130'. [ 122.039884][ T6303] netlink: 'syz.1.130': attribute type 21 has an invalid length. [ 122.060574][ T6303] netlink: 'syz.1.130': attribute type 20 has an invalid length. [ 122.812114][ T6312] netlink: 'syz.3.132': attribute type 2 has an invalid length. [ 122.852900][ T6312] netlink: 'syz.3.132': attribute type 8 has an invalid length. [ 122.916344][ T6312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.132'. [ 123.253220][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 123.817240][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 124.368380][ T6330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.696392][ T6339] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 124.702614][ T6339] dvmrp1: linktype set to 804 [ 126.868251][ T6365] Zero length message leads to an empty skb [ 127.160648][ T6373] netlink: 'syz.0.149': attribute type 29 has an invalid length. [ 127.217039][ T6373] netlink: 'syz.0.149': attribute type 6 has an invalid length. [ 127.252131][ T214] wlan1: Trigger new scan to find an IBSS to join [ 127.678072][ T6386] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 127.687025][ T6386] dvmrp1: linktype set to 804 [ 127.961780][ T6392] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 127.990639][ T6392] netlink: 'syz.0.155': attribute type 8 has an invalid length. [ 128.001018][ T6392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.155'. [ 128.450139][ T59] wlan1: Creating new IBSS network, BSSID 62:ac:50:8e:93:48 [ 130.319215][ T6410] netlink: 'syz.0.161': attribute type 29 has an invalid length. [ 131.253257][ T6411] netlink: 'syz.0.161': attribute type 6 has an invalid length. [ 131.827596][ T6423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.166'. [ 132.308567][ T6442] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 132.314379][ T6442] dvmrp1: linktype set to 804 [ 132.364323][ T6432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.167'. [ 132.895852][ T6446] netlink: 'syz.2.171': attribute type 6 has an invalid length. [ 134.168323][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.175376][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.771134][ T6461] netlink: 'syz.1.174': attribute type 29 has an invalid length. [ 134.800681][ T6467] netlink: 'syz.1.174': attribute type 6 has an invalid length. [ 135.387428][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.177'. [ 135.578228][ T6483] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 135.589081][ T6483] dvmrp1: linktype set to 804 [ 136.231405][ T6493] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 136.237252][ T6493] dvmrp1: linktype set to 804 [ 136.308994][ T6492] netlink: 'syz.1.185': attribute type 29 has an invalid length. [ 136.385486][ T6492] netlink: 'syz.1.185': attribute type 6 has an invalid length. [ 137.397063][ T6502] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 137.468904][ T6505] netlink: 'syz.0.196': attribute type 6 has an invalid length. [ 137.494014][ T6508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.190'. [ 137.509086][ T6501] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 137.574000][ T6501] netlink: 'syz.3.188': attribute type 6 has an invalid length. [ 137.668299][ T6507] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 137.931817][ T6514] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 137.937488][ T6514] dvmrp1: linktype set to 804 [ 138.080510][ T6528] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 138.086909][ T6528] dvmrp1: linktype set to 804 [ 138.133517][ T6527] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 138.143548][ T6527] dvmrp1: linktype set to 804 [ 138.388686][ T6532] netlink: 'syz.1.199': attribute type 29 has an invalid length. [ 138.413293][ T6532] netlink: 'syz.1.199': attribute type 6 has an invalid length. [ 140.666454][ T59] wlan1: Trigger new scan to find an IBSS to join [ 141.368919][ T6556] netlink: 'syz.3.204': attribute type 29 has an invalid length. [ 141.433824][ T6556] netlink: 'syz.3.204': attribute type 6 has an invalid length. [ 141.668605][ T6564] netlink: 'syz.0.208': attribute type 29 has an invalid length. [ 141.747924][ T6564] netlink: 'syz.0.208': attribute type 6 has an invalid length. [ 144.211029][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 145.484774][ T59] wlan1: Creating new IBSS network, BSSID f2:d2:35:aa:db:85 [ 145.974950][ T6613] netlink: 156 bytes leftover after parsing attributes in process `syz.1.221'. [ 146.071604][ T6615] netlink: 'syz.2.223': attribute type 2 has an invalid length. [ 146.170692][ T6615] netlink: 'syz.2.223': attribute type 8 has an invalid length. [ 146.178611][ T6615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.223'. [ 146.201459][ T6617] netlink: 'syz.3.222': attribute type 29 has an invalid length. [ 146.295332][ T6620] netlink: 'syz.3.222': attribute type 6 has an invalid length. [ 146.603759][ T6626] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 146.630998][ T6626] dvmrp1: linktype set to 804 [ 146.803198][ T6629] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 146.941976][ T6629] bond0: (slave bond_slave_0): Releasing backup interface [ 148.055528][ T6641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.229'. [ 148.645576][ T6643] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.219961][ T6669] netlink: 'syz.2.234': attribute type 2 has an invalid length. [ 149.258321][ T6669] netlink: 'syz.2.234': attribute type 8 has an invalid length. [ 149.341211][ T6669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.234'. [ 149.366882][ T6679] netlink: 'syz.3.235': attribute type 29 has an invalid length. [ 149.736021][ T6674] netlink: 'syz.3.235': attribute type 6 has an invalid length. [ 150.944760][ T6703] netlink: 'syz.2.244': attribute type 21 has an invalid length. [ 151.252492][ T11] wlan1: Trigger new scan to find an IBSS to join [ 151.357535][ T6705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.243'. [ 151.511327][ T6708] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.562302][ T6716] netlink: 'syz.2.248': attribute type 29 has an invalid length. [ 151.597265][ T6716] netlink: 'syz.2.248': attribute type 6 has an invalid length. [ 151.768623][ T6724] netlink: 'syz.1.247': attribute type 2 has an invalid length. [ 151.814333][ T6724] netlink: 'syz.1.247': attribute type 8 has an invalid length. [ 151.883711][ T6724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.247'. [ 152.746410][ T6763] netlink: 'syz.3.260': attribute type 21 has an invalid length. [ 152.765408][ T6763] netlink: 164 bytes leftover after parsing attributes in process `syz.3.260'. [ 152.962957][ T6766] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 152.988082][ T6757] netlink: 44 bytes leftover after parsing attributes in process `syz.1.259'. [ 153.025187][ T6766] netlink: 'syz.0.261': attribute type 6 has an invalid length. [ 153.076861][ T6759] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 154.223648][ T11] wlan1: Trigger new scan to find an IBSS to join [ 154.288688][ T6784] vcan0: entered allmulticast mode [ 154.307908][ T6788] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 154.334943][ T6788] veth0_macvtap: left promiscuous mode [ 154.425842][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.267'. [ 154.452658][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.267'. [ 154.465453][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.267'. [ 154.475443][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.3.267'. [ 154.731684][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 154.839676][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 154.933901][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'. [ 155.296479][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 155.883812][ T6811] netlink: 'syz.1.272': attribute type 29 has an invalid length. [ 155.893762][ T6811] netlink: 'syz.1.272': attribute type 6 has an invalid length. [ 156.211036][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 157.571999][ T1092] wlan1: Creating new IBSS network, BSSID 9e:26:78:17:c4:70 [ 158.042280][ T6825] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.273'. [ 158.067886][ T6825] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 158.075247][ T6820] netlink: 'syz.1.276': attribute type 2 has an invalid length. [ 158.089850][ T6820] netlink: 'syz.1.276': attribute type 8 has an invalid length. [ 158.100339][ T6820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.276'. [ 158.271428][ T6815] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.491531][ T6832] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 158.509606][ T6831] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 158.517768][ T6832] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.279'. [ 158.530396][ T6831] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.279'. [ 159.012788][ T6846] netlink: 668 bytes leftover after parsing attributes in process `syz.3.282'. [ 159.128375][ T6846] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 159.147159][ T6846] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.368981][ T6855] netlink: 'syz.1.284': attribute type 29 has an invalid length. [ 159.385787][ T6855] netlink: 'syz.1.284': attribute type 6 has an invalid length. [ 159.777402][ T6868] veth0_vlan: entered allmulticast mode [ 160.015437][ T6859] netlink: 'syz.3.286': attribute type 2 has an invalid length. [ 160.042576][ T6859] netlink: 'syz.3.286': attribute type 8 has an invalid length. [ 160.093499][ T6859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.286'. [ 160.138764][ T6869] veth0_vlan: left promiscuous mode [ 160.149433][ T6869] veth0_vlan: entered promiscuous mode [ 160.221902][ T59] wlan1: Trigger new scan to find an IBSS to join [ 160.233189][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 161.225235][ T3469] wlan1: Creating new IBSS network, BSSID c2:b0:90:c8:67:f0 [ 161.241382][ T11] wlan1: Creating new IBSS network, BSSID 86:e8:eb:68:aa:61 [ 161.275947][ T6890] netlink: 'syz.0.296': attribute type 29 has an invalid length. [ 161.318195][ T6892] netlink: 'syz.0.296': attribute type 6 has an invalid length. [ 162.240519][ T214] wlan1: Trigger new scan to find an IBSS to join [ 162.859307][ T6911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.301'. [ 163.005832][ T6917] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.303'. [ 163.018132][ T6917] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 163.589365][ T6929] validate_nla: 2 callbacks suppressed [ 163.589458][ T6929] netlink: 'syz.0.305': attribute type 2 has an invalid length. [ 163.611128][ T6929] netlink: 'syz.0.305': attribute type 8 has an invalid length. [ 163.672583][ T6929] netlink: 132 bytes leftover after parsing attributes in process `syz.0.305'. [ 165.340134][ T6955] netlink: 'syz.3.313': attribute type 2 has an invalid length. [ 165.458815][ T6955] netlink: 'syz.3.313': attribute type 8 has an invalid length. [ 165.508598][ T6955] netlink: 132 bytes leftover after parsing attributes in process `syz.3.313'. [ 166.785393][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 167.079727][ T6976] syz.3.319 uses obsolete (PF_INET,SOCK_PACKET) [ 167.780789][ T6978] netlink: 'syz.1.318': attribute type 2 has an invalid length. [ 167.828354][ T6978] netlink: 'syz.1.318': attribute type 8 has an invalid length. [ 167.870411][ T6978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.318'. [ 168.147868][ T6988] netlink: 'syz.2.320': attribute type 2 has an invalid length. [ 168.233404][ T6988] netlink: 'syz.2.320': attribute type 8 has an invalid length. [ 168.309831][ T6988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.320'. [ 170.098822][ T1092] wlan1: Creating new IBSS network, BSSID 1e:9c:da:2e:27:10 [ 170.482317][ T6995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.322'. [ 171.195943][ T7006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'. [ 171.550963][ T6995] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 171.570352][ T7007] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 171.591522][ T7007] netlink: 'syz.0.324': attribute type 8 has an invalid length. [ 171.623752][ T7007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.324'. [ 172.744918][ T7025] netlink: 'syz.1.330': attribute type 2 has an invalid length. [ 172.771895][ T7025] netlink: 'syz.1.330': attribute type 8 has an invalid length. [ 172.779700][ T7025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.330'. [ 172.937707][ T7027] netlink: 'syz.2.331': attribute type 29 has an invalid length. [ 173.017441][ T7027] netlink: 'syz.2.331': attribute type 6 has an invalid length. [ 173.057229][ T7033] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 173.075355][ T7033] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 173.216819][ T7037] netlink: 'syz.0.332': attribute type 29 has an invalid length. [ 173.324365][ T7030] netlink: 'syz.0.332': attribute type 6 has an invalid length. [ 173.352883][ T7039] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.335'. [ 173.374776][ T7039] openvswitch: netlink: Message has 20476 unknown bytes. [ 173.394487][ T7039] netlink: 1 bytes leftover after parsing attributes in process `syz.3.335'. [ 173.758811][ T7045] netlink: 44 bytes leftover after parsing attributes in process `syz.0.337'. [ 173.939206][ T7046] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 174.209772][ T7050] netlink: 'syz.1.346': attribute type 29 has an invalid length. [ 174.221029][ T11] wlan1: Trigger new scan to find an IBSS to join [ 175.296743][ T7069] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.344'. [ 175.355417][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.345'. [ 175.375892][ T7069] netlink: 128 bytes leftover after parsing attributes in process `syz.2.344'. [ 175.753342][ T7080] __nla_validate_parse: 1 callbacks suppressed [ 175.753378][ T7080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.348'. [ 175.802189][ T7085] IPv6: Can't replace route, no match found [ 175.848544][ T7084] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.210969][ T49] wlan1: Trigger new scan to find an IBSS to join [ 176.599320][ T7096] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 176.609755][ T7096] dvmrp1: linktype set to 804 [ 176.844736][ T7101] validate_nla: 9 callbacks suppressed [ 176.844754][ T7101] netlink: 'syz.2.352': attribute type 29 has an invalid length. [ 176.878443][ T7101] netlink: 'syz.2.352': attribute type 6 has an invalid length. [ 177.351125][ T7107] netlink: 'syz.0.355': attribute type 29 has an invalid length. [ 177.416189][ T7107] netlink: 'syz.0.355': attribute type 6 has an invalid length. [ 177.919090][ T7126] netlink: 'syz.0.359': attribute type 2 has an invalid length. [ 177.927451][ T7126] netlink: 'syz.0.359': attribute type 8 has an invalid length. [ 177.935522][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.359'. [ 178.221757][ T59] wlan1: Trigger new scan to find an IBSS to join [ 179.264442][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 180.605985][ T59] wlan1: Creating new IBSS network, BSSID 76:2d:b8:aa:cc:3f [ 180.879774][ T7152] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.364'. [ 180.923679][ T7156] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 180.929422][ T7156] dvmrp1: linktype set to 804 [ 180.950486][ T7156] netlink: 'syz.3.366': attribute type 10 has an invalid length. [ 181.146036][ T7147] netlink: 44 bytes leftover after parsing attributes in process `syz.1.363'. [ 181.182628][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 181.647970][ T7156] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 181.663188][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.672860][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.682101][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.691547][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.700963][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.710117][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.719426][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.728794][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.738017][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.747183][ T7162] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 181.922742][ T7150] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 182.133013][ T7166] netlink: 'syz.2.369': attribute type 3 has an invalid length. [ 182.158831][ T7166] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.369'. [ 182.202062][ T11] wlan1: Creating new IBSS network, BSSID 56:0f:76:bb:18:17 [ 182.737331][ T7183] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.375'. [ 183.198936][ T7187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 183.268830][ T7187] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.599085][ T7199] netlink: 132 bytes leftover after parsing attributes in process `syz.3.379'. [ 183.710108][ T7194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.377'. [ 183.771385][ T7196] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.781305][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 184.212386][ T1076] wlan1: Trigger new scan to find an IBSS to join [ 184.555854][ T7224] FAULT_INJECTION: forcing a failure. [ 184.555854][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.570435][ T7224] CPU: 1 PID: 7224 Comm: syz.0.385 Not tainted syzkaller #0 [ 184.577787][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.587880][ T7224] Call Trace: [ 184.591192][ T7224] [ 184.594148][ T7224] dump_stack_lvl+0x18c/0x250 [ 184.598880][ T7224] ? show_regs_print_info+0x20/0x20 [ 184.604121][ T7224] ? load_image+0x420/0x420 [ 184.608658][ T7224] ? __might_fault+0xaa/0x120 [ 184.613361][ T7224] ? __lock_acquire+0x7d40/0x7d40 [ 184.618514][ T7224] should_fail_ex+0x39d/0x4d0 [ 184.623320][ T7224] _copy_from_user+0x2f/0xe0 [ 184.628161][ T7224] ___sys_sendmsg+0x1c7/0x360 [ 184.632880][ T7224] ? __sys_sendmsg+0x2a0/0x2a0 [ 184.637718][ T7224] ? __lock_acquire+0x7d40/0x7d40 [ 184.642821][ T7224] __se_sys_sendmsg+0x1c2/0x2b0 [ 184.647703][ T7224] ? __x64_sys_sendmsg+0x80/0x80 [ 184.652696][ T7224] ? lockdep_hardirqs_on+0x98/0x150 [ 184.657930][ T7224] do_syscall_64+0x55/0xa0 [ 184.662371][ T7224] ? clear_bhb_loop+0x40/0x90 [ 184.667074][ T7224] ? clear_bhb_loop+0x40/0x90 [ 184.671793][ T7224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.677797][ T7224] RIP: 0033:0x7fdae759c819 [ 184.682346][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.701974][ T7224] RSP: 002b:00007fdae84b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.710427][ T7224] RAX: ffffffffffffffda RBX: 00007fdae7815fa0 RCX: 00007fdae759c819 [ 184.718680][ T7224] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 184.726783][ T7224] RBP: 00007fdae84b8090 R08: 0000000000000000 R09: 0000000000000000 [ 184.735210][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.743224][ T7224] R13: 00007fdae7816038 R14: 00007fdae7815fa0 R15: 00007ffe0f3112b8 [ 184.751251][ T7224] [ 185.112726][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.3.387'. [ 185.698059][ T7243] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 185.718823][ T7243] dvmrp1: linktype set to 804 [ 186.229442][ T49] wlan1: Trigger new scan to find an IBSS to join [ 188.289051][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 188.355761][ T7262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.392'. [ 188.591169][ T7264] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.337131][ T7280] netlink: 'syz.1.398': attribute type 39 has an invalid length. [ 189.368069][ T7280] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.398'. [ 189.384079][ T1076] wlan1: Creating new IBSS network, BSSID 6a:32:a2:6a:6d:ac [ 189.515809][ T7283] netlink: 'syz.3.401': attribute type 3 has an invalid length. [ 189.526838][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 189.536100][ T7283] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.401'. [ 189.896036][ T7288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.399'. [ 189.991076][ T7292] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 190.066720][ T7297] netlink: 'syz.2.403': attribute type 29 has an invalid length. [ 190.088898][ T7297] netlink: 'syz.2.403': attribute type 6 has an invalid length. [ 190.222053][ T1076] wlan1: Trigger new scan to find an IBSS to join [ 190.457488][ T7306] syzkaller0: entered promiscuous mode [ 191.164570][ T49] wlan1: Creating new IBSS network, BSSID ee:dc:b3:9a:95:7a [ 191.262262][ T1076] wlan1: Trigger new scan to find an IBSS to join [ 192.212712][ T59] wlan1: Trigger new scan to find an IBSS to join [ 192.712512][ T7336] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.415'. [ 193.003132][ T7340] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 193.021153][ T7340] dvmrp1: linktype set to 804 [ 193.026483][ T7338] netlink: 'syz.3.417': attribute type 29 has an invalid length. [ 193.096050][ T7345] netlink: 'syz.3.417': attribute type 6 has an invalid length. [ 193.197183][ T7340] netlink: 'syz.1.418': attribute type 3 has an invalid length. [ 193.203261][ T7344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.420'. [ 193.215002][ T7340] netlink: 189132 bytes leftover after parsing attributes in process `syz.1.418'. [ 193.259867][ T7346] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.786334][ T7358] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 193.813867][ T7358] dvmrp1: linktype set to 804 [ 193.828751][ T7353] netlink: 'syz.0.430': attribute type 29 has an invalid length. [ 193.898874][ T7353] netlink: 'syz.0.430': attribute type 6 has an invalid length. [ 193.950108][ T7358] netlink: 'syz.2.423': attribute type 5 has an invalid length. [ 194.512154][ T7377] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 194.531061][ T7377] dvmrp1: linktype set to 804 [ 194.542185][ T7375] netlink: 'syz.0.428': attribute type 29 has an invalid length. [ 194.574176][ T7375] netlink: 'syz.0.428': attribute type 6 has an invalid length. [ 194.646689][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.653218][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665012][ T7379] netlink: 'syz.2.431': attribute type 3 has an invalid length. [ 194.727659][ T7379] netlink: 189132 bytes leftover after parsing attributes in process `syz.2.431'. [ 195.251573][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 195.462793][ T7388] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.434'. [ 195.496475][ T7388] netlink: 3460 bytes leftover after parsing attributes in process `syz.2.434'. [ 195.520895][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 196.274512][ T11] wlan1: Trigger new scan to find an IBSS to join [ 196.288230][ T7403] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 196.342764][ T7403] netlink: 'syz.2.437': attribute type 8 has an invalid length. [ 196.350596][ T7403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.437'. [ 196.624608][ T7417] netlink: 'syz.1.441': attribute type 29 has an invalid length. [ 196.659229][ T7416] netlink: 'syz.1.441': attribute type 6 has an invalid length. [ 196.709881][ T7421] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 196.718764][ T7421] dvmrp1: linktype set to 804 [ 196.893990][ T7421] netlink: 'syz.0.443': attribute type 3 has an invalid length. [ 196.907512][ T7421] netlink: 189132 bytes leftover after parsing attributes in process `syz.0.443'. [ 197.254010][ T49] wlan1: Trigger new scan to find an IBSS to join [ 197.265398][ T1092] wlan1: Creating new IBSS network, BSSID c2:98:34:bf:12:8e [ 197.599643][ T7447] netlink: 'syz.1.452': attribute type 29 has an invalid length. [ 197.653526][ T7447] netlink: 'syz.1.452': attribute type 6 has an invalid length. [ 197.728468][ T7452] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.449'. [ 197.902584][ T7443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.450'. [ 198.105919][ T7450] tap0: tun_chr_ioctl cmd 1074025677 [ 198.112875][ T7450] tap0: linktype set to 6 [ 198.386965][ T7468] macvlan1: entered promiscuous mode [ 199.177204][ T1092] wlan1: Trigger new scan to find an IBSS to join [ 199.313896][ T7490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.462'. [ 200.214387][ T7499] validate_nla: 7 callbacks suppressed [ 200.214423][ T7499] netlink: 'syz.2.464': attribute type 29 has an invalid length. [ 200.332162][ T7499] netlink: 'syz.2.464': attribute type 6 has an invalid length. [ 200.505042][ T3469] wlan1: Creating new IBSS network, BSSID 5e:ed:36:1e:8e:5a [ 200.746107][ T7510] netlink: 'syz.0.467': attribute type 33 has an invalid length. [ 200.762976][ T7510] netlink: 152 bytes leftover after parsing attributes in process `syz.0.467'. [ 200.809211][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.817716][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.265195][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.300951][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.971619][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.978522][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.989824][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.991823][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 202.189152][ T7528] netlink: 44 bytes leftover after parsing attributes in process `syz.1.474'. [ 202.306481][ T7531] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 202.336166][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 203.290375][ T7548] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 203.315497][ T7548] netlink: 'syz.3.479': attribute type 10 has an invalid length. [ 203.346106][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.357238][ T7548] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 203.621620][ T49] wlan1: Creating new IBSS network, BSSID 5a:99:30:fc:37:e9 [ 204.331675][ T7549] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 205.687097][ T7570] netlink: 44 bytes leftover after parsing attributes in process `syz.3.485'. [ 205.941283][ T7575] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 206.628433][ T59] wlan1: Trigger new scan to find an IBSS to join [ 206.970621][ T7573] netlink: 'syz.1.484': attribute type 2 has an invalid length. [ 206.981214][ T7573] netlink: 'syz.1.484': attribute type 8 has an invalid length. [ 207.071450][ T7573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.484'. [ 207.557237][ T7651] netlink: 'syz.1.490': attribute type 29 has an invalid length. [ 207.594782][ T7651] netlink: 'syz.1.490': attribute type 6 has an invalid length. [ 207.645420][ T7650] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 207.673169][ T7652] netlink: 'syz.2.489': attribute type 29 has an invalid length. [ 207.692675][ T7650] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.488'. [ 207.768829][ T7648] netlink: 'syz.2.489': attribute type 6 has an invalid length. [ 208.269845][ T7655] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 208.853809][ T7661] netlink: 'syz.3.492': attribute type 29 has an invalid length. [ 208.864511][ T7670] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.494'. [ 208.878794][ T7664] netlink: 'syz.3.492': attribute type 6 has an invalid length. [ 208.882279][ T7670] netlink: 26 bytes leftover after parsing attributes in process `syz.0.494'. [ 209.178698][ T12] wlan1: Trigger new scan to find an IBSS to join [ 209.277645][ T7677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.497'. [ 209.444254][ T7686] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 209.675560][ T7681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.498'. [ 210.270056][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 210.651416][ T7620] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 210.791198][ T7705] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.879014][ T7705] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.511'. [ 211.372507][ T3469] wlan1: Creating new IBSS network, BSSID 9a:09:78:23:20:f7 [ 212.012028][ T7718] validate_nla: 6 callbacks suppressed [ 212.012045][ T7718] netlink: 'syz.1.506': attribute type 6 has an invalid length. [ 212.212616][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 212.649500][ T7737] netlink: 'syz.0.510': attribute type 2 has an invalid length. [ 212.676196][ T7737] netlink: 'syz.0.510': attribute type 8 has an invalid length. [ 212.697852][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.510'. [ 213.047847][ T7746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.516'. [ 213.096441][ T7748] netlink: 'syz.1.515': attribute type 29 has an invalid length. [ 213.140142][ T7749] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.195174][ T7748] netlink: 'syz.1.515': attribute type 6 has an invalid length. [ 213.259325][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 213.590414][ T7758] netlink: 'syz.2.519': attribute type 29 has an invalid length. [ 213.640285][ T7758] netlink: 'syz.2.519': attribute type 6 has an invalid length. [ 214.146790][ T7770] netlink: 'syz.0.522': attribute type 29 has an invalid length. [ 214.185303][ T7770] netlink: 'syz.0.522': attribute type 29 has an invalid length. [ 214.230152][ T7774] netlink: 'syz.0.522': attribute type 29 has an invalid length. [ 214.453953][ T3469] wlan1: Creating new IBSS network, BSSID be:d0:d7:e7:d1:aa [ 214.699998][ T7779] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 214.706795][ T7779] syzkaller1: Linktype set failed because interface is up [ 214.835403][ T7787] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.525'. [ 214.896586][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.526'. [ 215.018004][ T7795] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.527'. [ 215.173870][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 215.385423][ T7804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.529'. [ 215.395433][ T7797] netlink: 132 bytes leftover after parsing attributes in process `syz.2.536'. [ 215.697217][ T7799] netlink: 44 bytes leftover after parsing attributes in process `syz.3.528'. [ 215.784139][ T7806] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.083514][ T7835] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.538'. [ 217.183918][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 217.648645][ T7843] validate_nla: 11 callbacks suppressed [ 217.648667][ T7843] netlink: 'syz.0.540': attribute type 2 has an invalid length. [ 217.686826][ T7843] netlink: 'syz.0.540': attribute type 8 has an invalid length. [ 217.719686][ T7843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.540'. [ 218.179022][ T7620] wlan1: Creating new IBSS network, BSSID be:7d:1f:17:14:24 [ 218.212251][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 218.212696][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 218.646329][ T7871] netlink: 'syz.3.545': attribute type 29 has an invalid length. [ 218.707866][ T7864] netlink: 'syz.3.545': attribute type 6 has an invalid length. [ 219.235331][ T7878] netlink: 'syz.3.550': attribute type 10 has an invalid length. [ 219.257997][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.549'. [ 219.287711][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.550'. [ 219.311479][ T7878] ipvlan1: entered promiscuous mode [ 219.316833][ T7878] ipvlan1: entered allmulticast mode [ 219.330975][ T7878] veth0_vlan: entered allmulticast mode [ 219.348101][ T7878] bridge0: port 3(ipvlan1) entered blocking state [ 219.367962][ T7878] bridge0: port 3(ipvlan1) entered disabled state [ 219.399990][ T7878] net_ratelimit: 3319 callbacks suppressed [ 219.400009][ T7878] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 219.433924][ T7877] netlink: 60 bytes leftover after parsing attributes in process `syz.1.549'. [ 219.478166][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.549'. [ 219.831579][ T7880] netlink: 'syz.2.551': attribute type 2 has an invalid length. [ 219.839914][ T7880] netlink: 'syz.2.551': attribute type 8 has an invalid length. [ 219.854422][ T7880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.551'. [ 219.875497][ T7886] netlink: 'syz.0.552': attribute type 25 has an invalid length. [ 219.888053][ T7886] netlink: 'syz.0.552': attribute type 28 has an invalid length. [ 220.286941][ T7900] netlink: 'syz.1.556': attribute type 6 has an invalid length. [ 220.327690][ T7900] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.556'. [ 220.692102][ T7897] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 220.760419][ T7902] netlink: 176 bytes leftover after parsing attributes in process `syz.1.556'. [ 223.172810][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 223.306986][ T7938] IPv6: Can't replace route, no match found [ 223.880264][ T7934] validate_nla: 3 callbacks suppressed [ 223.880305][ T7934] netlink: 'syz.2.562': attribute type 2 has an invalid length. [ 223.902572][ T7934] netlink: 'syz.2.562': attribute type 8 has an invalid length. [ 223.928267][ T7934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'. [ 224.289415][ T7620] wlan1: Creating new IBSS network, BSSID 8e:da:f4:f5:8d:85 [ 224.290334][ T7946] netlink: 'syz.1.567': attribute type 29 has an invalid length. [ 224.366273][ T7943] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.565'. [ 224.402712][ T7953] netlink: 'syz.1.567': attribute type 6 has an invalid length. [ 224.732141][ T7955] netlink: 'syz.3.568': attribute type 29 has an invalid length. [ 224.958954][ T7965] netlink: 'syz.3.568': attribute type 6 has an invalid length. [ 225.019119][ T7958] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.079839][ T7958] netlink: 1 bytes leftover after parsing attributes in process `syz.2.569'. [ 228.386961][ T7989] netlink: 'syz.1.577': attribute type 2 has an invalid length. [ 228.478556][ T7989] netlink: 'syz.1.577': attribute type 8 has an invalid length. [ 228.528474][ T7989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.577'. [ 228.581476][ T7994] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 228.628931][ T7994] netlink: 'syz.0.579': attribute type 6 has an invalid length. [ 228.893420][ T7998] validate_nla: 1 callbacks suppressed [ 228.893458][ T7998] netlink: 'syz.2.580': attribute type 6 has an invalid length. [ 229.237513][ T8017] netlink: 'syz.0.591': attribute type 29 has an invalid length. [ 229.278895][ T8014] netlink: 'syz.1.583': attribute type 10 has an invalid length. [ 229.312815][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.583'. [ 229.335444][ T8014] ipvlan1: entered promiscuous mode [ 229.344212][ T8014] ipvlan1: entered allmulticast mode [ 229.350043][ T8014] veth0_vlan: entered allmulticast mode [ 229.394526][ T8014] bridge0: port 3(ipvlan1) entered blocking state [ 229.404180][ T8014] bridge0: port 3(ipvlan1) entered disabled state [ 229.463132][ T8014] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 229.508348][ T8009] netlink: 'syz.0.591': attribute type 6 has an invalid length. [ 230.425006][ T8039] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.590'. [ 230.450316][ T8041] netlink: 'syz.1.592': attribute type 33 has an invalid length. [ 230.465833][ T8041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'. [ 230.669466][ T8037] netlink: 'syz.3.589': attribute type 2 has an invalid length. [ 230.731236][ T8037] netlink: 'syz.3.589': attribute type 8 has an invalid length. [ 230.798090][ T8037] netlink: 132 bytes leftover after parsing attributes in process `syz.3.589'. [ 230.969343][ T8056] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 231.055887][ T8058] netlink: 'syz.2.596': attribute type 29 has an invalid length. [ 231.106901][ T8049] netlink: 'syz.0.594': attribute type 6 has an invalid length. [ 231.415260][ T8060] netlink: 164 bytes leftover after parsing attributes in process `syz.3.597'. [ 232.498164][ T8077] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.602'. [ 233.181371][ T8085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.604'. [ 233.553749][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.1.605'. [ 234.497467][ T8099] validate_nla: 4 callbacks suppressed [ 234.497522][ T8099] netlink: 'syz.1.608': attribute type 29 has an invalid length. [ 234.578504][ T8099] netlink: 'syz.1.608': attribute type 6 has an invalid length. [ 234.721840][ T8110] netlink: 'syz.3.609': attribute type 29 has an invalid length. [ 234.752854][ T8110] netlink: 'syz.3.609': attribute type 6 has an invalid length. [ 235.161830][ T8122] netlink: 137972 bytes leftover after parsing attributes in process `syz.1.613'. [ 235.216504][ T8125] netlink: 'syz.0.614': attribute type 3 has an invalid length. [ 235.224915][ T8125] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.614'. [ 235.699083][ T8130] netlink: 'syz.1.616': attribute type 2 has an invalid length. [ 235.709676][ T8130] netlink: 'syz.1.616': attribute type 8 has an invalid length. [ 235.721594][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.1.616'. [ 236.171838][ T8147] netlink: 'syz.0.619': attribute type 29 has an invalid length. [ 236.233606][ T8147] netlink: 'syz.0.619': attribute type 6 has an invalid length. [ 236.270197][ T8149] netlink: 'syz.1.620': attribute type 29 has an invalid length. [ 237.502776][ T8163] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.625'. [ 238.022680][ T7606] tipc: Subscription rejected, illegal request [ 242.270840][ T8189] validate_nla: 1 callbacks suppressed [ 242.270861][ T8189] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 242.429025][ T8192] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 242.441748][ T8192] netlink: 'syz.2.631': attribute type 8 has an invalid length. [ 242.457806][ T8192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.631'. [ 242.472793][ T8193] netlink: 'syz.1.634': attribute type 29 has an invalid length. [ 242.518603][ T8191] netlink: 'syz.1.634': attribute type 6 has an invalid length. [ 242.692212][ T8201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.636'. [ 243.194399][ T8211] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.638'. [ 243.254407][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.495661][ T8206] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 244.138622][ T8227] netlink: 'syz.3.643': attribute type 21 has an invalid length. [ 244.164749][ T8227] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.211122][ T8227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.218534][ T8227] IPv6: NLM_F_CREATE should be set when creating new route [ 244.226000][ T8227] IPv6: NLM_F_CREATE should be set when creating new route [ 244.233318][ T8227] IPv6: NLM_F_CREATE should be set when creating new route [ 244.423601][ T8227] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.643'. [ 244.735859][ T8236] netlink: 'syz.1.645': attribute type 29 has an invalid length. [ 244.788037][ T8238] netlink: 'syz.1.645': attribute type 6 has an invalid length. [ 244.890977][ T8242] netlink: 'syz.3.646': attribute type 29 has an invalid length. [ 244.933230][ T8242] netlink: 'syz.3.646': attribute type 6 has an invalid length. [ 245.110175][ T8249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.648'. [ 245.229297][ T8253] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 245.476303][ T8259] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.650'. [ 245.555327][ T8258] IPv6: Can't replace route, no match found [ 246.060086][ T8273] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.165576][ T8273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.172991][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 246.180331][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 246.187663][ T8273] IPv6: NLM_F_CREATE should be set when creating new route [ 246.617471][ T8273] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.655'. [ 246.833903][ T8287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.660'. [ 246.903162][ T8289] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.347307][ T8307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.665'. [ 248.503830][ T8308] validate_nla: 7 callbacks suppressed [ 248.503868][ T8308] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 248.571004][ T8308] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.666'. [ 248.646279][ T8311] netlink: 'syz.0.668': attribute type 29 has an invalid length. [ 248.721211][ T8311] netlink: 'syz.0.668': attribute type 6 has an invalid length. [ 248.757237][ T8315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.665'. [ 249.261035][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 249.541980][ T8323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.670'. [ 250.040111][ T8327] netlink: 44 bytes leftover after parsing attributes in process `syz.3.671'. [ 251.575688][ T8328] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.185264][ T8335] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 252.359034][ T8331] netlink: 'syz.0.672': attribute type 6 has an invalid length. [ 252.743602][ T8344] netlink: 'syz.3.677': attribute type 29 has an invalid length. [ 252.800801][ T8349] netlink: 'syz.3.677': attribute type 6 has an invalid length. [ 252.946739][ T8352] netlink: 'syz.2.678': attribute type 21 has an invalid length. [ 252.977278][ T8352] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.006892][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.014371][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 253.021830][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 253.029403][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 253.295974][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 253.329421][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 253.345049][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 253.357436][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.681'. [ 253.368563][ T8352] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.678'. [ 254.226757][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 254.233617][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 254.357639][ T8365] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 254.379626][ T8365] netlink: 'syz.1.680': attribute type 8 has an invalid length. [ 254.388116][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 254.734674][ T8369] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 254.847768][ T8369] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 255.317165][ T8376] netlink: 'syz.0.686': attribute type 2 has an invalid length. [ 255.352876][ T8376] netlink: 'syz.0.686': attribute type 8 has an invalid length. [ 255.374140][ T8376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.686'. [ 255.478273][ T7630] wlan1: Creating new IBSS network, BSSID 5e:cf:82:87:0b:36 [ 255.702431][ T8382] netlink: 'syz.1.687': attribute type 29 has an invalid length. [ 255.753286][ T8382] netlink: 'syz.1.687': attribute type 6 has an invalid length. [ 256.056940][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.074452][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.121321][ T8390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'. [ 256.191187][ T8390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'. [ 256.251135][ T8392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'. [ 256.296386][ T8390] netlink: 60 bytes leftover after parsing attributes in process `syz.1.690'. [ 256.685105][ T8401] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 257.172258][ T8399] netlink: 'syz.2.693': attribute type 2 has an invalid length. [ 257.180350][ T8399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.693'. [ 258.283671][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 258.738720][ T8420] netlink: 132 bytes leftover after parsing attributes in process `syz.3.697'. [ 258.752129][ T8423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.696'. [ 258.998378][ T8414] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 259.744133][ T1123] wlan1: Creating new IBSS network, BSSID b6:04:c9:3c:fd:7e [ 261.554520][ T8456] validate_nla: 5 callbacks suppressed [ 261.554537][ T8456] netlink: 'syz.2.707': attribute type 6 has an invalid length. [ 263.189828][ T8474] netlink: 'syz.3.711': attribute type 29 has an invalid length. [ 263.200487][ T8474] netlink: 'syz.3.711': attribute type 6 has an invalid length. [ 263.753797][ T8478] netlink: 172 bytes leftover after parsing attributes in process `syz.2.713'. [ 264.209515][ T8494] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 264.265903][ T8494] netlink: 'syz.0.718': attribute type 6 has an invalid length. [ 264.286187][ T8488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.715'. [ 264.454615][ T8491] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.025751][ T8507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.721'. [ 265.725227][ T8511] netlink: 'syz.0.723': attribute type 2 has an invalid length. [ 265.818278][ T8511] netlink: 'syz.0.723': attribute type 8 has an invalid length. [ 265.841185][ T8511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.723'. [ 266.794067][ T8515] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.716'. [ 267.046521][ T8518] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 267.080312][ T8515] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 267.170851][ T8515] CPU: 0 PID: 8515 Comm: syz.1.716 Not tainted syzkaller #0 [ 267.178226][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.188501][ T8515] Call Trace: [ 267.191809][ T8515] [ 267.194754][ T8515] dump_stack_lvl+0x18c/0x250 [ 267.199463][ T8515] ? show_regs_print_info+0x20/0x20 [ 267.204689][ T8515] ? load_image+0x420/0x420 [ 267.209326][ T8515] sysfs_warn_dup+0x8e/0xa0 [ 267.213852][ T8515] sysfs_do_create_link_sd+0xc0/0x110 [ 267.219246][ T8515] device_add_class_symlinks+0x1cf/0x240 [ 267.224997][ T8515] device_add+0x507/0xc20 [ 267.229490][ T8515] wiphy_register+0x1dad/0x2ae0 [ 267.234425][ T8515] ? cfg80211_event_work+0x40/0x40 [ 267.239596][ T8515] ? minstrel_ht_alloc+0x88a/0x990 [ 267.244855][ T8515] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 267.251153][ T8515] ieee80211_register_hw+0x3464/0x4250 [ 267.256791][ T8515] ? ieee80211_tasklet_handler+0x20/0x20 [ 267.262551][ T8515] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 267.268478][ T8515] ? __debug_object_init+0xec/0x450 [ 267.273772][ T8515] ? __asan_memset+0x22/0x40 [ 267.278514][ T8515] ? __hrtimer_init+0x186/0x270 [ 267.283411][ T8515] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 267.289311][ T8515] ? mac80211_hwsim_free+0x220/0x220 [ 267.294732][ T8515] ? rcu_is_watching+0x15/0xb0 [ 267.299658][ T8515] ? kstrndup+0xbd/0x140 [ 267.304064][ T8515] hwsim_new_radio_nl+0xdc9/0x1a90 [ 267.309223][ T8515] ? __nla_validate+0x50/0x50 [ 267.313936][ T8515] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 267.320391][ T8515] ? __nla_parse+0x40/0x50 [ 267.325030][ T8515] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 267.331407][ T8515] genl_family_rcv_msg_doit+0x211/0x310 [ 267.337002][ T8515] ? end_current_label_crit_section+0x170/0x170 [ 267.343414][ T8515] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 267.349424][ T8515] ? bpf_lsm_capable+0x9/0x10 [ 267.354146][ T8515] ? security_capable+0x89/0xb0 [ 267.359121][ T8515] genl_rcv_msg+0x619/0x7a0 [ 267.363740][ T8515] ? genl_bind+0x360/0x360 [ 267.368195][ T8515] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 267.374570][ T8515] ? perf_trace_lock+0xfc/0x3b0 [ 267.379461][ T8515] netlink_rcv_skb+0x241/0x4d0 [ 267.384343][ T8515] ? genl_bind+0x360/0x360 [ 267.388782][ T8515] ? netlink_ack+0x1180/0x1180 [ 267.393581][ T8515] ? __lock_acquire+0x7d40/0x7d40 [ 267.398642][ T8515] ? down_read+0x1ac/0x2e0 [ 267.403083][ T8515] genl_rcv+0x28/0x40 [ 267.407092][ T8515] netlink_unicast+0x751/0x8d0 [ 267.411895][ T8515] netlink_sendmsg+0x8d0/0xbf0 [ 267.416868][ T8515] ? netlink_getsockopt+0x590/0x590 [ 267.422188][ T8515] ? aa_sock_msg_perm+0x94/0x150 [ 267.427235][ T8515] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 267.432563][ T8515] ? security_socket_sendmsg+0x80/0xa0 [ 267.438046][ T8515] ? netlink_getsockopt+0x590/0x590 [ 267.443284][ T8515] ____sys_sendmsg+0x5ba/0x960 [ 267.448073][ T8515] ? __asan_memset+0x22/0x40 [ 267.452694][ T8515] ? __sys_sendmsg_sock+0x30/0x30 [ 267.457819][ T8515] ? __import_iovec+0x5f2/0x850 [ 267.462695][ T8515] ? import_iovec+0x73/0xa0 [ 267.467217][ T8515] ___sys_sendmsg+0x2a6/0x360 [ 267.472007][ T8515] ? __sys_sendmsg+0x2a0/0x2a0 [ 267.477014][ T8515] __se_sys_sendmsg+0x1c2/0x2b0 [ 267.481884][ T8515] ? __x64_sys_sendmsg+0x80/0x80 [ 267.486944][ T8515] ? lockdep_hardirqs_on+0x98/0x150 [ 267.492334][ T8515] do_syscall_64+0x55/0xa0 [ 267.496777][ T8515] ? clear_bhb_loop+0x40/0x90 [ 267.501517][ T8515] ? clear_bhb_loop+0x40/0x90 [ 267.506214][ T8515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.512169][ T8515] RIP: 0033:0x7f6a7a19c819 [ 267.516607][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.536415][ T8515] RSP: 002b:00007f6a7b0b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.545032][ T8515] RAX: ffffffffffffffda RBX: 00007f6a7a416180 RCX: 00007f6a7a19c819 [ 267.553197][ T8515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 267.561268][ T8515] RBP: 00007f6a7a232c91 R08: 0000000000000000 R09: 0000000000000000 [ 267.569251][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.577325][ T8515] R13: 00007f6a7a416218 R14: 00007f6a7a416180 R15: 00007ffe7fd62e58 [ 267.585333][ T8515] [ 267.720743][ T8520] netlink: 'syz.0.724': attribute type 29 has an invalid length. [ 267.758827][ T8527] netlink: 'syz.0.724': attribute type 6 has an invalid length. [ 268.147054][ T8537] netlink: 'syz.0.728': attribute type 29 has an invalid length. [ 268.214696][ T8537] netlink: 'syz.0.728': attribute type 6 has an invalid length. [ 268.593157][ T8546] netlink: 'syz.1.730': attribute type 29 has an invalid length. [ 268.646164][ T8546] netlink: 'syz.1.730': attribute type 29 has an invalid length. [ 268.724013][ T8546] netlink: 172 bytes leftover after parsing attributes in process `syz.1.730'. [ 269.128999][ T8555] netlink: 68 bytes leftover after parsing attributes in process `syz.0.733'. [ 269.350041][ T8552] netlink: 'syz.2.732': attribute type 2 has an invalid length. [ 269.364368][ T8552] netlink: 'syz.2.732': attribute type 8 has an invalid length. [ 269.376096][ T8552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.732'. [ 270.182902][ T8569] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 270.222033][ T8569] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 271.193228][ T8575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.739'. [ 271.255590][ T8576] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.511282][ T8572] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 271.519713][ T8572] netlink: 2 bytes leftover after parsing attributes in process `syz.1.738'. [ 271.537789][ T8572] hsr0: entered promiscuous mode [ 271.543206][ T8572] bridge0: port 3(hsr0) entered blocking state [ 271.550039][ T8572] bridge0: port 3(hsr0) entered disabled state [ 271.557211][ T8572] hsr0: entered allmulticast mode [ 271.566803][ T8572] hsr_slave_0: entered allmulticast mode [ 271.573485][ T8572] hsr_slave_1: entered allmulticast mode [ 271.584060][ T8572] bridge0: port 3(hsr0) entered blocking state [ 271.590473][ T8572] bridge0: port 3(hsr0) entered forwarding state [ 271.930226][ T8594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.744'. [ 272.688701][ T8613] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.749'. [ 273.573932][ T8616] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.752'. [ 274.000887][ T8623] validate_nla: 4 callbacks suppressed [ 274.000934][ T8623] netlink: 'syz.0.754': attribute type 29 has an invalid length. [ 274.075223][ T8626] netlink: 'syz.0.754': attribute type 6 has an invalid length. [ 274.234795][ T8629] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 274.487373][ T8634] netlink: 'syz.2.757': attribute type 2 has an invalid length. [ 274.511606][ T8634] netlink: 'syz.2.757': attribute type 8 has an invalid length. [ 274.526357][ T8634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.757'. [ 274.611447][ T7606] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 275.267992][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 276.256026][ T8662] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 276.323505][ T8662] netlink: 'syz.1.764': attribute type 6 has an invalid length. [ 277.419641][ T8675] netlink: 'syz.3.768': attribute type 2 has an invalid length. [ 277.438078][ T8675] netlink: 'syz.3.768': attribute type 8 has an invalid length. [ 277.470935][ T8675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.768'. [ 277.654495][ T8688] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 279.038259][ T8718] validate_nla: 3 callbacks suppressed [ 279.038298][ T8718] netlink: 'syz.2.781': attribute type 2 has an invalid length. [ 279.067286][ T8718] netlink: 'syz.2.781': attribute type 8 has an invalid length. [ 279.143270][ T8718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.781'. [ 279.253895][ T12] wlan1: Trigger new scan to find an IBSS to join [ 279.929312][ T8724] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.782'. [ 280.392598][ T3469] wlan1: Creating new IBSS network, BSSID ca:ae:70:9e:77:f2 [ 280.511921][ T8735] netlink: 'syz.2.786': attribute type 29 has an invalid length. [ 280.541523][ T8735] netlink: 'syz.2.786': attribute type 6 has an invalid length. [ 280.547693][ T8736] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.784'. [ 280.560361][ T8736] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 280.893751][ T8739] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.787'. [ 280.973455][ T8740] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.787'. [ 281.422035][ T8748] netlink: 'syz.3.790': attribute type 2 has an invalid length. [ 281.435757][ T8748] netlink: 'syz.3.790': attribute type 8 has an invalid length. [ 281.447052][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.3.790'. [ 282.870930][ T8774] netlink: 'syz.2.797': attribute type 29 has an invalid length. [ 282.926651][ T8774] netlink: 'syz.2.797': attribute type 6 has an invalid length. [ 283.517463][ T8783] netlink: 'syz.0.799': attribute type 2 has an invalid length. [ 283.546680][ T8783] netlink: 'syz.0.799': attribute type 8 has an invalid length. [ 283.576914][ T8783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.799'. [ 286.803449][ T8804] netlink: 'syz.0.805': attribute type 39 has an invalid length. [ 286.812667][ T8804] veth0_macvtap: left promiscuous mode [ 286.829696][ T8807] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 286.840705][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.805'. [ 286.850448][ T8807] ipvlan1: entered promiscuous mode [ 286.856879][ T8807] ipvlan1: entered allmulticast mode [ 286.866900][ T8807] bridge0: port 3(ipvlan1) entered blocking state [ 286.874888][ T8807] bridge0: port 3(ipvlan1) entered disabled state [ 286.884307][ T8807] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 286.903378][ T8812] netlink: 'syz.1.808': attribute type 29 has an invalid length. [ 286.922698][ T8814] netlink: 'syz.3.809': attribute type 2 has an invalid length. [ 286.941205][ T8814] netlink: 'syz.3.809': attribute type 8 has an invalid length. [ 286.948918][ T8814] netlink: 132 bytes leftover after parsing attributes in process `syz.3.809'. [ 286.961849][ T8817] netlink: 'syz.1.808': attribute type 6 has an invalid length. [ 287.559522][ T8826] netlink: 44 bytes leftover after parsing attributes in process `syz.1.813'. [ 287.631443][ T8829] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 288.676362][ T8848] netlink: 140 bytes leftover after parsing attributes in process `syz.1.818'. [ 288.701113][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.987802][ T8853] netlink: 'syz.1.820': attribute type 2 has an invalid length. [ 289.003803][ T8853] netlink: 'syz.1.820': attribute type 8 has an invalid length. [ 289.023104][ T8853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.820'. [ 290.154034][ T8867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.823'. [ 290.214358][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 292.421064][ T8869] tap1: tun_chr_ioctl cmd 1074025677 [ 292.426922][ T8869] tap1: linktype set to 778 [ 292.438179][ T8870] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 293.251751][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 293.869639][ T8896] netlink: 'syz.3.831': attribute type 2 has an invalid length. [ 293.880041][ T8896] netlink: 'syz.3.831': attribute type 8 has an invalid length. [ 293.917790][ T8896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.831'. [ 295.206174][ T8915] netlink: 44 bytes leftover after parsing attributes in process `syz.3.834'. [ 295.424984][ T8912] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.930364][ T8938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.841'. [ 296.227705][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 297.440372][ T12] wlan1: Creating new IBSS network, BSSID e6:18:8d:1f:bd:73 [ 297.562383][ T8953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.846'. [ 298.216066][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 299.578993][ T8955] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.631887][ T8970] tap1: tun_chr_ioctl cmd 1074025677 [ 299.637424][ T8970] tap1: linktype set to 778 [ 299.923934][ T8976] netlink: 'syz.1.851': attribute type 5 has an invalid length. [ 300.034868][ T8979] netlink: 'syz.0.853': attribute type 21 has an invalid length. [ 300.046287][ T8979] netlink: 168 bytes leftover after parsing attributes in process `syz.0.853'. [ 300.314208][ T8986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.856'. [ 300.457555][ T8986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.856'. [ 300.481345][ T8989] netlink: 60 bytes leftover after parsing attributes in process `syz.0.856'. [ 300.566702][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.856'. [ 300.784607][ T8995] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 300.804798][ T8995] netlink: 'syz.1.858': attribute type 6 has an invalid length. [ 301.093269][ T9000] netlink: 'syz.3.860': attribute type 29 has an invalid length. [ 301.185874][ T8999] netlink: 'syz.2.859': attribute type 2 has an invalid length. [ 301.204572][ T8999] netlink: 'syz.2.859': attribute type 8 has an invalid length. [ 301.222242][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.859'. [ 301.246941][ T8998] netlink: 'syz.3.860': attribute type 6 has an invalid length. [ 301.276704][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 301.924940][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 301.934805][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 301.947261][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 301.961203][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'. [ 302.088557][ T9027] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 302.158588][ T9027] netlink: 'syz.3.867': attribute type 3 has an invalid length. [ 302.455889][ T9033] netlink: 'syz.0.869': attribute type 29 has an invalid length. [ 303.002621][ T9044] lo: entered allmulticast mode [ 303.101220][ T9044] lo: entered promiscuous mode [ 303.117356][ T9044] lo: left allmulticast mode [ 305.146651][ T9075] validate_nla: 5 callbacks suppressed [ 305.146696][ T9075] netlink: 'syz.2.883': attribute type 2 has an invalid length. [ 305.458777][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 305.573572][ T9075] netlink: 'syz.2.883': attribute type 8 has an invalid length. [ 305.581371][ T9075] __nla_validate_parse: 3 callbacks suppressed [ 305.581389][ T9075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.883'. [ 305.756101][ T9087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.066791][ T9093] netlink: 'syz.1.887': attribute type 29 has an invalid length. [ 306.087096][ T9089] netlink: 'syz.1.887': attribute type 6 has an invalid length. [ 306.289698][ T9099] netlink: 'syz.1.890': attribute type 29 has an invalid length. [ 306.313701][ T9099] netlink: 'syz.1.890': attribute type 6 has an invalid length. [ 306.429464][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.891'. [ 306.438734][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.891'. [ 306.449694][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.891'. [ 307.163075][ T9110] netlink: 'syz.3.894': attribute type 2 has an invalid length. [ 307.221395][ T9110] netlink: 'syz.3.894': attribute type 8 has an invalid length. [ 307.316391][ T9110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.894'. [ 308.345334][ T9131] netlink: 'syz.1.900': attribute type 29 has an invalid length. [ 308.383914][ T9135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.901'. [ 308.400163][ T9131] netlink: 'syz.1.900': attribute type 6 has an invalid length. [ 308.456445][ T9135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.901'. [ 308.491746][ T9136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.901'. [ 309.736667][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.905'. [ 309.866922][ T9157] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 309.891636][ T9157] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 309.931894][ T9163] netlink: 180 bytes leftover after parsing attributes in process `syz.2.907'. [ 310.017376][ T9157] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 310.027268][ T9157] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 310.213825][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 310.324185][ T9170] validate_nla: 2 callbacks suppressed [ 310.324225][ T9170] netlink: 'syz.3.910': attribute type 29 has an invalid length. [ 310.396453][ T9170] netlink: 'syz.3.910': attribute type 6 has an invalid length. [ 311.178884][ T7630] wlan1: Creating new IBSS network, BSSID 46:6b:18:df:0d:4b [ 311.281910][ T9188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.915'. [ 312.041206][ T9189] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.068499][ T9196] netlink: 'syz.1.918': attribute type 2 has an invalid length. [ 312.116608][ T9196] netlink: 'syz.1.918': attribute type 8 has an invalid length. [ 312.140320][ T9196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.918'. [ 313.722840][ T9217] netlink: 'syz.3.923': attribute type 29 has an invalid length. [ 313.818050][ T9217] netlink: 'syz.3.923': attribute type 6 has an invalid length. [ 314.211001][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 314.445825][ T9234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.928'. [ 314.974621][ T9253] netlink: 'syz.0.932': attribute type 2 has an invalid length. [ 314.986782][ T9253] netlink: 'syz.0.932': attribute type 8 has an invalid length. [ 315.000945][ T9253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.932'. [ 315.169764][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'. [ 315.210387][ T9256] netlink: 'syz.2.935': attribute type 29 has an invalid length. [ 315.236004][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'. [ 315.286386][ T9256] netlink: 'syz.2.935': attribute type 6 has an invalid length. [ 315.306475][ T9261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'. [ 315.334234][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.1.934'. [ 315.365741][ T9260] FAULT_INJECTION: forcing a failure. [ 315.365741][ T9260] name failslab, interval 1, probability 0, space 0, times 1 [ 315.410438][ T9260] CPU: 1 PID: 9260 Comm: syz.1.934 Not tainted syzkaller #0 [ 315.417911][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 315.428096][ T9260] Call Trace: [ 315.431406][ T9260] [ 315.434369][ T9260] dump_stack_lvl+0x18c/0x250 [ 315.439364][ T9260] ? show_regs_print_info+0x20/0x20 [ 315.444793][ T9260] ? load_image+0x420/0x420 [ 315.449441][ T9260] should_fail_ex+0x39d/0x4d0 [ 315.454224][ T9260] should_failslab+0x9/0x20 [ 315.458946][ T9260] slab_pre_alloc_hook+0x59/0x310 [ 315.464260][ T9260] kmem_cache_alloc+0x5a/0x2d0 [ 315.469114][ T9260] ? skb_clone+0x1eb/0x370 [ 315.473580][ T9260] skb_clone+0x1eb/0x370 [ 315.477875][ T9260] __netlink_deliver_tap+0x41c/0x830 [ 315.483222][ T9260] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.488545][ T9260] netlink_deliver_tap+0x19c/0x1b0 [ 315.493718][ T9260] netlink_dump+0x94b/0xe50 [ 315.498373][ T9260] ? netlink_lookup+0x200/0x200 [ 315.503386][ T9260] ? slab_free_freelist_hook+0x130/0x1a0 [ 315.509081][ T9260] ? netlink_recvmsg+0x5e7/0xe60 [ 315.514186][ T9260] ? kmem_cache_free+0xf8/0x270 [ 315.519120][ T9260] netlink_recvmsg+0x693/0xe60 [ 315.523950][ T9260] ? netlink_sendmsg+0xbf0/0xbf0 [ 315.529121][ T9260] ? aa_af_perm+0x330/0x330 [ 315.533761][ T9260] ? __lock_acquire+0x1273/0x7d40 [ 315.538829][ T9260] ? verify_lock_unused+0x140/0x140 [ 315.544089][ T9260] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 315.549431][ T9260] ? security_socket_recvmsg+0x89/0xb0 [ 315.555043][ T9260] ? netlink_sendmsg+0xbf0/0xbf0 [ 315.560315][ T9260] ____sys_recvmsg+0x2ce/0x5e0 [ 315.565141][ T9260] ? __sys_recvmsg_sock+0x50/0x50 [ 315.570232][ T9260] ? import_iovec+0x73/0xa0 [ 315.574781][ T9260] ___sys_recvmsg+0x216/0x590 [ 315.579503][ T9260] ? __sys_recvmsg+0x2a0/0x2a0 [ 315.584397][ T9260] ? ksys_write+0x1c4/0x260 [ 315.588969][ T9260] ? __fget_files+0x43d/0x4b0 [ 315.593716][ T9260] __x64_sys_recvmsg+0x20c/0x2e0 [ 315.598787][ T9260] ? ___sys_recvmsg+0x590/0x590 [ 315.603702][ T9260] ? lockdep_hardirqs_on+0x98/0x150 [ 315.609575][ T9260] do_syscall_64+0x55/0xa0 [ 315.614043][ T9260] ? clear_bhb_loop+0x40/0x90 [ 315.618853][ T9260] ? clear_bhb_loop+0x40/0x90 [ 315.623731][ T9260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.629689][ T9260] RIP: 0033:0x7f6a7a19c819 [ 315.634155][ T9260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.654155][ T9260] RSP: 002b:00007f6a7b0f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 315.662772][ T9260] RAX: ffffffffffffffda RBX: 00007f6a7a415fa0 RCX: 00007f6a7a19c819 [ 315.670938][ T9260] RDX: 0000000040000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 315.678924][ T9260] RBP: 00007f6a7b0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 315.686996][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.694982][ T9260] R13: 00007f6a7a416038 R14: 00007f6a7a415fa0 R15: 00007ffe7fd62e58 [ 315.703108][ T9260] [ 316.715690][ T9293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 317.150892][ T9285] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 317.254244][ T12] wlan1: Trigger new scan to find an IBSS to join [ 317.397776][ T9307] delete_channel: no stack [ 317.431750][ T9307] delete_channel: no stack [ 317.442875][ T9304] validate_nla: 1 callbacks suppressed [ 317.442911][ T9304] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 317.497322][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.504067][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.520370][ T9304] netlink: 'syz.1.945': attribute type 8 has an invalid length. [ 317.536226][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.945'. [ 317.882172][ T9318] netlink: 'syz.2.949': attribute type 29 has an invalid length. [ 317.937387][ T9318] netlink: 'syz.2.949': attribute type 6 has an invalid length. [ 319.251895][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 320.216203][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 320.343723][ T9349] pim6reg1: entered promiscuous mode [ 320.349100][ T9349] pim6reg1: entered allmulticast mode [ 320.462295][ T9353] netlink: 'syz.1.959': attribute type 2 has an invalid length. [ 320.484989][ T9353] netlink: 'syz.1.959': attribute type 8 has an invalid length. [ 320.499424][ T9353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.959'. [ 320.877843][ T9359] netlink: 'syz.0.962': attribute type 29 has an invalid length. [ 320.959564][ T9359] netlink: 'syz.0.962': attribute type 6 has an invalid length. [ 321.035127][ T9361] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 321.045697][ T9361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 321.058275][ T9361] team0: entered promiscuous mode [ 321.075074][ T9361] team_slave_0: entered promiscuous mode [ 321.094571][ T9361] team_slave_1: entered promiscuous mode [ 321.116903][ T9361] team0: entered allmulticast mode [ 321.149210][ T9361] team_slave_0: entered allmulticast mode [ 321.204405][ T9361] team_slave_1: entered allmulticast mode [ 321.218583][ T3469] wlan1: Creating new IBSS network, BSSID c6:e8:f3:63:2c:55 [ 321.225677][ T9361] bridge0: port 4(team0) entered blocking state [ 321.236406][ T9361] bridge0: port 4(team0) entered disabled state [ 321.405343][ T9361] bridge0: port 4(team0) entered blocking state [ 321.415324][ T9361] bridge0: port 4(team0) entered forwarding state [ 322.414783][ T9389] netlink: 'syz.2.972': attribute type 2 has an invalid length. [ 322.443180][ T9389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.972'. [ 322.967146][ T9400] validate_nla: 1 callbacks suppressed [ 322.967217][ T9400] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 323.013394][ T9400] netlink: 'syz.0.975': attribute type 6 has an invalid length. [ 324.234350][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 324.636084][ T9427] netlink: 'syz.2.982': attribute type 2 has an invalid length. [ 324.688303][ T9427] netlink: 'syz.2.982': attribute type 8 has an invalid length. [ 324.727135][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.982'. [ 324.984717][ T9433] pim6reg1: entered promiscuous mode [ 324.990105][ T9433] pim6reg1: entered allmulticast mode [ 325.270261][ T7606] wlan1: Creating new IBSS network, BSSID 12:a7:d4:47:a6:f2 [ 325.312739][ T9438] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 325.357857][ T9438] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.985'. [ 325.622550][ T9443] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.987'. [ 325.652362][ T9441] netlink: 'syz.2.986': attribute type 29 has an invalid length. [ 325.788245][ T9448] netlink: 'syz.2.986': attribute type 6 has an invalid length. [ 327.134606][ T9469] bridge0: port 4(team0) entered disabled state [ 327.151827][ T9469] bridge0: port 3(hsr0) entered disabled state [ 327.161785][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.174332][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.261724][ T9469] bridge0: entered allmulticast mode [ 327.392666][ T9477] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 327.416353][ T9478] netlink: 'syz.3.997': attribute type 6 has an invalid length. [ 327.712183][ T9484] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.999'. [ 328.032012][ T9500] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1003'. [ 328.342552][ T9507] netlink: 'syz.1.1007': attribute type 2 has an invalid length. [ 328.366445][ T9507] netlink: 'syz.1.1007': attribute type 8 has an invalid length. [ 328.387128][ T9507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1007'. [ 328.441988][ T9511] netlink: 'syz.3.1008': attribute type 27 has an invalid length. [ 328.971929][ T9521] netlink: 'syz.0.1010': attribute type 29 has an invalid length. [ 329.027898][ T9515] netlink: 'syz.0.1010': attribute type 6 has an invalid length. [ 329.065343][ T9522] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1014'. [ 329.768755][ T9542] netlink: 'syz.1.1020': attribute type 2 has an invalid length. [ 329.785364][ T9542] netlink: 'syz.1.1020': attribute type 8 has an invalid length. [ 329.810220][ T9542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'. [ 330.285843][ T9557] netlink: 'syz.0.1023': attribute type 29 has an invalid length. [ 330.295868][ T3469] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 330.341778][ T9562] netlink: 'syz.0.1023': attribute type 6 has an invalid length. [ 330.499800][ T9565] netlink: 'syz.1.1026': attribute type 29 has an invalid length. [ 331.208809][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1031'. [ 331.229633][ T9580] batadv0: entered promiscuous mode [ 331.239892][ T9580] batadv0: entered allmulticast mode [ 331.406729][ T9580] bond0: (slave batadv0): Releasing backup interface [ 331.442083][ T9580] bridge0: port 3(batadv0) entered blocking state [ 331.460325][ T9580] bridge0: port 3(batadv0) entered disabled state [ 331.668590][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 331.671261][ T9583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1032'. [ 331.678596][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 332.178237][ T9602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1038'. [ 332.283338][ T9600] veth0_vlan: left promiscuous mode [ 332.292999][ T9600] veth0_vlan: entered promiscuous mode [ 332.311125][ T9600] team0: Device veth0_vlan failed to register rx_handler [ 332.387150][ T9602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1038'. [ 332.421251][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1038'. [ 333.176029][ T9624] __nla_validate_parse: 1 callbacks suppressed [ 333.176064][ T9624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1044'. [ 333.208032][ T9627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1045'. [ 333.496694][ T9635] validate_nla: 14 callbacks suppressed [ 333.496713][ T9635] netlink: 'syz.1.1048': attribute type 10 has an invalid length. [ 333.519163][ T9639] syz.2.1046[9639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.519325][ T9639] syz.2.1046[9639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.538356][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1048'. [ 333.569094][ T9635] batman_adv: batadv0: Adding interface: veth0_vlan [ 333.576548][ T9635] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.581857][ T9634] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 333.611626][ T9635] batman_adv: batadv0: Interface activated: veth0_vlan [ 333.613223][ T9636] netlink: 'syz.1.1048': attribute type 10 has an invalid length. [ 333.613248][ T9636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1048'. [ 333.688692][ T9634] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 333.906383][ T9638] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 333.907163][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1050'. [ 333.915875][ T9642] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 333.933927][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1050'. [ 333.949381][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1050'. [ 333.959022][ T9648] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 333.968064][ T9647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1050'. [ 334.700074][ T9663] netlink: 'syz.1.1055': attribute type 2 has an invalid length. [ 334.738952][ T9663] netlink: 'syz.1.1055': attribute type 8 has an invalid length. [ 334.797272][ T9663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1055'. [ 335.497992][ T9667] netlink: 'syz.2.1057': attribute type 2 has an invalid length. [ 335.521835][ T9667] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1057'. [ 338.571597][ T9720] __nla_validate_parse: 5 callbacks suppressed [ 338.571613][ T9720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1073'. [ 338.829168][ T9720] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1073'. [ 338.851848][ T9723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1073'. [ 338.863631][ T9729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1073'. [ 340.692796][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1084'. [ 340.702097][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1084'. [ 340.733069][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1084'. [ 340.758790][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1084'. [ 341.336496][ T9780] validate_nla: 4 callbacks suppressed [ 341.336515][ T9780] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 341.657547][ T9790] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.1091'. [ 341.749708][ T9797] sock: sock_timestamping_bind_phc: sock not bind to device [ 341.820415][ T9785] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1091'. [ 341.853127][ T9785] openvswitch: netlink: Key type 29 is not supported [ 344.673749][ T9829] syzkaller0: entered promiscuous mode [ 344.679318][ T9829] syzkaller0: entered allmulticast mode [ 345.266343][ T9808] __nla_validate_parse: 2 callbacks suppressed [ 345.266362][ T9808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'. [ 345.456944][ T9846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1107'. [ 345.492618][ T9846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1107'. [ 345.738486][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'. [ 345.806301][ T9848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1107'. [ 345.830017][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1107'. [ 346.429020][ T9856] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 346.458344][ T9856] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 346.910966][ T9860] netlink: 'syz.2.1111': attribute type 6 has an invalid length. [ 347.595681][ T9871] netlink: 'syz.3.1115': attribute type 4 has an invalid length. [ 347.641752][ T9871] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1115'. [ 349.637225][ T9888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1120'. [ 351.238797][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 351.338799][ T9890] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.541592][ T9901] netlink: 'syz.2.1122': attribute type 6 has an invalid length. [ 352.719747][ T9916] netlink: zone id is out of range [ 352.731946][ T9916] netlink: set zone limit has 8 unknown bytes [ 352.828595][ T9918] hsr0: entered promiscuous mode [ 352.838246][ T9918] hsr0: entered allmulticast mode [ 352.844815][ T9918] hsr_slave_0: entered allmulticast mode [ 352.851243][ T9918] hsr_slave_1: entered allmulticast mode [ 353.905726][ T9936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1132'. [ 354.001407][ T9937] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.151129][ T9942] netlink: 'syz.2.1134': attribute type 6 has an invalid length. [ 354.173550][ T9945] netlink: 'syz.0.1136': attribute type 21 has an invalid length. [ 354.321996][ T9948] sctp: [Deprecated]: syz.1.1135 (pid 9948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.321996][ T9948] Use struct sctp_sack_info instead [ 354.486647][ T9948] bridge0: port 4(team0) entered disabled state [ 354.660502][ T9948] hsr0: left allmulticast mode [ 354.678405][ T9948] hsr_slave_0: left allmulticast mode [ 354.689041][ T9948] hsr_slave_1: left allmulticast mode [ 354.690878][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1139'. [ 354.736616][ T9948] bridge0: port 3(hsr0) entered disabled state [ 354.802747][ T9948] bridge_slave_1: left allmulticast mode [ 354.810626][ T9948] bridge_slave_1: left promiscuous mode [ 354.819110][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.837073][ T9971] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 354.845252][ T9971] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1139'. [ 354.856220][ T9971] openvswitch: netlink: Flow key attr not present in new flow. [ 354.892255][ T9948] bridge_slave_0: left allmulticast mode [ 354.900297][ T9948] bridge_slave_0: left promiscuous mode [ 354.915309][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.118543][ T9948] bond0: (slave bridge0): Releasing backup interface [ 355.152414][ T9948] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 355.237080][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1139'. [ 355.289217][ T9971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1139'. [ 355.306648][ T9974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1139'. [ 355.684888][ T9978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1143'. [ 355.731439][ T9982] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 355.826600][ T9989] netlink: 'syz.0.1146': attribute type 6 has an invalid length. [ 356.006830][ T9995] syzkaller0: entered promiscuous mode [ 356.022435][ T9995] syzkaller0: entered allmulticast mode [ 356.213530][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 357.826895][ T3469] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.097702][T10011] syzkaller0: entered promiscuous mode [ 358.124483][T10011] syzkaller0: entered allmulticast mode [ 358.223294][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 358.277773][T10014] macvlan1: entered promiscuous mode [ 358.302405][T10018] netlink: 'syz.1.1155': attribute type 2 has an invalid length. [ 358.315480][T10018] netlink: 'syz.1.1155': attribute type 8 has an invalid length. [ 358.351542][T10018] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1155'. [ 358.387378][T10014] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1154'. [ 358.497787][T10019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1154'. [ 359.251930][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 361.372956][T10014] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1154'. [ 361.402725][T10014] tipc: Started in network mode [ 361.407656][T10014] tipc: Node identity d, cluster identity 56 [ 361.440897][T10014] tipc: Node number set to 13 [ 361.474502][T10019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1154'. [ 363.261150][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 363.267794][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 363.940590][T10034] netlink: 'syz.2.1158': attribute type 29 has an invalid length. [ 363.954471][T10035] netlink: 'syz.2.1158': attribute type 6 has an invalid length. [ 364.368193][ T7606] wlan1: Creating new IBSS network, BSSID 36:1b:aa:3e:ad:a4 [ 364.385947][ T1123] wlan1: Creating new IBSS network, BSSID ee:09:6d:06:3e:e4 [ 364.419125][T10053] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 364.428056][T10053] netlink: 'syz.2.1164': attribute type 8 has an invalid length. [ 364.436821][T10053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1164'. [ 364.568111][T10056] netlink: 'syz.1.1165': attribute type 27 has an invalid length. [ 364.576685][T10056] netlink: 'syz.1.1165': attribute type 4 has an invalid length. [ 364.591250][T10056] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1165'. [ 364.996622][T10061] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1167'. [ 365.136040][T10060] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.160925][T10064] netlink: 'syz.3.1168': attribute type 29 has an invalid length. [ 365.209477][T10064] netlink: 'syz.3.1168': attribute type 6 has an invalid length. [ 365.481981][T10076] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 365.492646][T10076] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 365.621876][T10079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 365.650026][T10079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1172'. [ 366.607808][T10103] netlink: 'syz.2.1180': attribute type 29 has an invalid length. [ 366.640478][T10103] netlink: 'syz.2.1180': attribute type 6 has an invalid length. [ 366.658846][T10106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 366.687980][T10106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 366.764996][T10106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 366.791539][T10106] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 367.255604][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 367.378973][T10119] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.1186'. [ 367.819458][T10131] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1192'. [ 368.238419][T10134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1193'. [ 370.806942][T10136] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 371.729167][T10166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1200'. [ 372.232639][T10176] validate_nla: 3 callbacks suppressed [ 372.232687][T10176] netlink: 'syz.1.1203': attribute type 29 has an invalid length. [ 372.266206][T10176] netlink: 'syz.1.1203': attribute type 6 has an invalid length. [ 372.434356][T10187] delete_channel: no stack [ 372.441271][T10187] delete_channel: no stack [ 372.799549][T10194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1208'. [ 373.032124][T10197] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.173883][ T12] wlan1: Trigger new scan to find an IBSS to join [ 373.347707][T10201] Dead loop on virtual device ip6_vti0, fix it urgently! [ 374.155804][T10218] netlink: 'syz.0.1215': attribute type 29 has an invalid length. [ 374.185892][T10218] netlink: 'syz.0.1215': attribute type 6 has an invalid length. [ 374.610949][T10235] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 374.623340][T10235] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1221'. [ 374.849596][T10233] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1220'. [ 374.910981][T10236] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 375.262511][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 375.608912][T10251] netlink: 'syz.2.1226': attribute type 29 has an invalid length. [ 375.667729][T10251] netlink: 'syz.2.1226': attribute type 6 has an invalid length. [ 377.170907][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 377.575712][T10274] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 377.607652][T10274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1230'. [ 377.682219][T10274] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 377.725788][T10274] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.940968][T10274] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 378.938264][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.945249][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.974927][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 378.991215][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 379.114232][T10297] netlink: 'syz.3.1236': attribute type 29 has an invalid length. [ 379.117480][T10288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1234'. [ 379.202763][T10288] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 379.243922][T10301] netlink: 'syz.2.1238': attribute type 21 has an invalid length. [ 379.260048][T10301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1238'. [ 379.300876][T10297] netlink: 'syz.3.1236': attribute type 6 has an invalid length. [ 379.440245][T10301] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1238'. [ 379.537596][T10309] netlink: 160200 bytes leftover after parsing attributes in process `syz.1.1239'. [ 379.568615][T10309] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 379.576931][T10299] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1237'. [ 379.720376][T10304] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 380.012200][T10331] bridge0: port 4(veth0_to_bridge) entered blocking state [ 380.053177][T10328] netlink: 'syz.1.1245': attribute type 29 has an invalid length. [ 380.111346][T10331] bridge0: port 4(veth0_to_bridge) entered disabled state [ 380.139965][T10331] veth0_to_bridge: entered allmulticast mode [ 380.178490][T10331] veth0_to_bridge: entered promiscuous mode [ 380.185505][T10331] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.199957][T10331] bridge0: port 4(veth0_to_bridge) entered blocking state [ 380.207592][T10331] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 380.229903][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 380.230909][T10328] netlink: 'syz.1.1245': attribute type 29 has an invalid length. [ 380.246162][T10330] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1252'. [ 380.490971][T10334] netlink: 'syz.1.1245': attribute type 29 has an invalid length. [ 381.059105][T10328] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 381.140848][T10328] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1245'. [ 381.225243][T10334] netlink: 'syz.1.1245': attribute type 4 has an invalid length. [ 381.275523][ T1123] wlan1: Creating new IBSS network, BSSID 1e:2c:10:eb:43:40 [ 381.459046][T10334] .`: renamed from bond0 (while UP) [ 381.894576][T10351] netlink: 'syz.0.1248': attribute type 29 has an invalid length. [ 382.212362][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 382.914012][T10375] __nla_validate_parse: 3 callbacks suppressed [ 382.914033][T10375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1256'. [ 383.048869][T10375] team0: entered promiscuous mode [ 383.054128][T10375] team_slave_0: entered promiscuous mode [ 383.060051][T10375] team_slave_1: entered promiscuous mode [ 383.070203][T10382] C: renamed from team_slave_0 [ 383.105772][T10382] validate_nla: 2 callbacks suppressed [ 383.105788][T10382] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 383.150919][T10382] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1258'. [ 383.180571][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 383.252425][T10369] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1254'. [ 383.314484][T10378] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 383.494131][T10389] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1267'. [ 383.956186][T10397] netlink: 'syz.1.1261': attribute type 29 has an invalid length. [ 384.098331][T10397] netlink: 'syz.1.1261': attribute type 6 has an invalid length. [ 384.504352][T10400] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1262'. [ 384.730037][T10409] netlink: 'syz.1.1264': attribute type 3 has an invalid length. [ 384.761453][T10409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1264'. [ 385.459446][T10400] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.473247][T10414] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 385.493198][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1263'. [ 385.546741][T10414] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 385.641620][T10417] netlink: 'syz.2.1263': attribute type 21 has an invalid length. [ 385.658419][T10417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1263'. [ 385.766095][T10426] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1268'. [ 385.779560][T10426] bridge_slave_1: left allmulticast mode [ 385.786483][T10426] bridge_slave_1: left promiscuous mode [ 385.792751][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.803850][T10426] bridge_slave_0: left allmulticast mode [ 385.810822][T10426] bridge_slave_0: left promiscuous mode [ 385.826929][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.907145][T10426] bond0: (slave bridge0): Releasing backup interface [ 385.961146][T10428] netlink: 'syz.1.1269': attribute type 2 has an invalid length. [ 385.968995][T10428] netlink: 'syz.1.1269': attribute type 8 has an invalid length. [ 385.980598][T10428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1269'. [ 386.179095][T10438] netlink: 'syz.0.1273': attribute type 29 has an invalid length. [ 386.204941][T10438] netlink: 'syz.0.1273': attribute type 6 has an invalid length. [ 386.606097][T10452] C: renamed from team_slave_0 (while UP) [ 386.805581][T10450] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.371866][T10463] delete_channel: no stack [ 388.219923][ T7606] wlan1: Trigger new scan to find an IBSS to join [ 389.163738][T10457] delete_channel: no stack [ 389.170920][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 389.243870][T10462] validate_nla: 1 callbacks suppressed [ 389.243890][T10462] netlink: 'syz.0.1287': attribute type 13 has an invalid length. [ 389.314397][T10462] __nla_validate_parse: 3 callbacks suppressed [ 389.314414][T10462] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1287'. [ 389.342349][T10462] syz_tun: refused to change device tx_queue_len [ 389.370835][T10470] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 389.386454][T10470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1279'. [ 389.425492][T10470] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 389.447568][T10470] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.548777][T10470] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 389.600056][T10473] netlink: 'syz.1.1279': attribute type 21 has an invalid length. [ 389.673668][T10473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1279'. [ 390.532257][T10485] netlink: 'syz.0.1284': attribute type 29 has an invalid length. [ 390.562539][T10488] netlink: 'syz.0.1284': attribute type 6 has an invalid length. [ 390.963576][T10495] netlink: 'syz.0.1286': attribute type 29 has an invalid length. [ 391.818626][T10504] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1289'. [ 391.887167][T10504] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 392.580577][T10521] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1293'. [ 392.923673][T10521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1293'. [ 392.970726][T10521] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 393.410171][T10532] netlink: 'syz.1.1295': attribute type 29 has an invalid length. [ 393.467513][T10532] netlink: 'syz.1.1295': attribute type 6 has an invalid length. [ 394.212015][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 394.218663][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 394.306500][T10537] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 394.318925][T10537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1296'. [ 394.329837][T10537] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 394.341846][T10537] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.376967][T10537] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 394.545485][T10539] netlink: 'syz.3.1296': attribute type 21 has an invalid length. [ 394.558484][T10539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1296'. [ 394.979293][T10545] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 395.202705][ T7620] wlan1: Creating new IBSS network, BSSID b2:89:f2:d7:f8:24 [ 396.533220][T10559] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1301'. [ 396.683684][T10559] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 396.972046][T10567] netlink: 'syz.0.1311': attribute type 2 has an invalid length. [ 396.988529][T10567] netlink: 'syz.0.1311': attribute type 8 has an invalid length. [ 397.016385][T10567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1311'. [ 399.147657][T10584] netlink: 'syz.1.1308': attribute type 29 has an invalid length. [ 399.158301][T10588] netlink: 'syz.1.1308': attribute type 6 has an invalid length. [ 399.255803][ T36] wlan1: Trigger new scan to find an IBSS to join [ 399.255854][ T3469] wlan1: Trigger new scan to find an IBSS to join [ 399.446934][T10601] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1312'. [ 399.467283][T10601] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 399.612684][T10605] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 399.620546][T10605] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1314'. [ 400.176293][ T3469] wlan1: Creating new IBSS network, BSSID 92:b5:5b:f3:54:a1 [ 400.198817][T10622] netlink: 'syz.1.1319': attribute type 2 has an invalid length. [ 400.236136][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1319'. [ 400.352145][T10624] netlink: 'syz.2.1320': attribute type 29 has an invalid length. [ 400.810964][T10624] netlink: 'syz.2.1320': attribute type 6 has an invalid length. [ 400.833000][T10631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.843579][T10631] IPv6: NLM_F_CREATE should be set when creating new route [ 400.854814][T10631] IPv6: NLM_F_CREATE should be set when creating new route [ 400.869417][T10631] IPv6: NLM_F_CREATE should be set when creating new route [ 401.117066][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1322'. [ 401.155898][T10640] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 401.177262][T10640] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1323'. [ 401.205583][T10629] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 401.240219][T10640] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1323'. [ 401.330823][T10643] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 401.639343][T10661] netlink: 'syz.3.1330': attribute type 2 has an invalid length. [ 401.648754][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1330'. [ 401.891633][T10667] netlink: 'syz.0.1332': attribute type 29 has an invalid length. [ 401.984090][T10666] netlink: 'syz.0.1332': attribute type 6 has an invalid length. [ 402.212989][ T36] wlan1: Trigger new scan to find an IBSS to join [ 402.547540][T10672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1334'. [ 403.204564][T10659] syzkaller0: entered promiscuous mode [ 403.211437][T10659] syzkaller0: entered allmulticast mode [ 403.251350][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 403.297208][T10672] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 405.857868][T10702] netlink: 'syz.0.1342': attribute type 29 has an invalid length. [ 405.929145][T10702] netlink: 'syz.0.1342': attribute type 6 has an invalid length. [ 406.074328][T10715] netlink: 'syz.0.1343': attribute type 2 has an invalid length. [ 406.082928][T10715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1343'. [ 406.226793][ T36] wlan1: Trigger new scan to find an IBSS to join [ 407.029593][T10719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1346'. [ 407.177743][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 407.179234][ T36] wlan1: Trigger new scan to find an IBSS to join [ 408.035812][T10735] netlink: 'syz.3.1352': attribute type 29 has an invalid length. [ 408.056780][T10735] netlink: 'syz.3.1352': attribute type 6 has an invalid length. [ 408.145302][ T7620] wlan1: Creating new IBSS network, BSSID 72:78:9b:08:ca:11 [ 408.335439][T10746] netlink: 'syz.3.1354': attribute type 21 has an invalid length. [ 409.252431][ T36] wlan1: Creating new IBSS network, BSSID 2a:df:89:54:53:bb [ 409.433714][T10755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 409.766481][T10767] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 409.832079][T10767] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1362'. [ 409.887472][T10766] netlink: 'syz.3.1363': attribute type 29 has an invalid length. [ 409.960471][T10766] netlink: 'syz.3.1363': attribute type 6 has an invalid length. [ 410.595477][T10784] netlink: 'syz.1.1375': attribute type 29 has an invalid length. [ 410.722604][T10785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 411.015063][T10792] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1370'. [ 411.155867][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1378'. [ 411.199207][T10796] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 411.455113][T10810] netlink: 'syz.1.1374': attribute type 21 has an invalid length. [ 411.467130][T10810] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1374'. [ 412.381132][T10827] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1380'. [ 412.405914][T10827] netlink: zone id is out of range [ 412.425872][T10827] netlink: zone id is out of range [ 412.439957][T10827] netlink: zone id is out of range [ 412.460292][T10827] netlink: zone id is out of range [ 412.478827][T10827] netlink: zone id is out of range [ 412.524096][T10827] netlink: zone id is out of range [ 412.538606][T10827] netlink: zone id is out of range [ 412.555157][T10827] netlink: zone id is out of range [ 412.571055][T10827] netlink: zone id is out of range [ 412.572514][T10829] netlink: 'syz.3.1381': attribute type 29 has an invalid length. [ 412.596364][T10827] netlink: zone id is out of range [ 413.020125][T10837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1383'. [ 413.255374][T10837] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.701172][T10854] netlink: 'syz.3.1389': attribute type 29 has an invalid length. [ 413.782206][T10852] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 413.791599][T10852] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1387'. [ 413.892436][T10852] netlink: 'syz.2.1387': attribute type 4 has an invalid length. [ 413.921339][T10852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1387'. [ 414.068303][T10852] .`: renamed from bond0 (while UP) [ 414.284204][T10852] syz.2.1387 (10852) used greatest stack depth: 19304 bytes left [ 415.430257][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1396'. [ 415.474191][T10883] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 415.634399][T10889] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1397'. [ 416.064432][T10902] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 416.080216][T10901] netlink: 'syz.1.1400': attribute type 10 has an invalid length. [ 416.089633][T10902] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.1400'. [ 416.105745][T10901] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.1400'. [ 416.185711][T10873] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1393'. [ 416.205839][T10873] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 416.214022][T10873] CPU: 1 PID: 10873 Comm: syz.2.1393 Not tainted syzkaller #0 [ 416.221541][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.231642][T10873] Call Trace: [ 416.234945][T10873] [ 416.237890][T10873] dump_stack_lvl+0x18c/0x250 [ 416.242603][T10873] ? show_regs_print_info+0x20/0x20 [ 416.247823][T10873] ? load_image+0x420/0x420 [ 416.252362][T10873] sysfs_warn_dup+0x8e/0xa0 [ 416.256880][T10873] sysfs_do_create_link_sd+0xc0/0x110 [ 416.262284][T10873] device_add_class_symlinks+0x1cf/0x240 [ 416.267972][T10873] device_add+0x507/0xc20 [ 416.272331][T10873] wiphy_register+0x1dad/0x2ae0 [ 416.277222][T10873] ? cfg80211_event_work+0x40/0x40 [ 416.282347][T10873] ? minstrel_ht_alloc+0x88a/0x990 [ 416.287490][T10873] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 416.293583][T10873] ieee80211_register_hw+0x3464/0x4250 [ 416.299078][T10873] ? ieee80211_tasklet_handler+0x20/0x20 [ 416.304722][T10873] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 416.310635][T10873] ? __debug_object_init+0xec/0x450 [ 416.315860][T10873] ? __asan_memset+0x22/0x40 [ 416.320468][T10873] ? __hrtimer_init+0x186/0x270 [ 416.325605][T10873] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 416.331363][T10873] ? mac80211_hwsim_free+0x220/0x220 [ 416.336660][T10873] ? rcu_is_watching+0x15/0xb0 [ 416.341447][T10873] ? kstrndup+0xbd/0x140 [ 416.345723][T10873] hwsim_new_radio_nl+0xdc9/0x1a90 [ 416.350859][T10873] ? __nla_validate+0x50/0x50 [ 416.355563][T10873] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 416.362008][T10873] ? __nla_parse+0x40/0x50 [ 416.366442][T10873] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 416.372886][T10873] genl_family_rcv_msg_doit+0x211/0x310 [ 416.378450][T10873] ? end_current_label_crit_section+0x170/0x170 [ 416.384720][T10873] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 416.390723][T10873] ? bpf_lsm_capable+0x9/0x10 [ 416.395420][T10873] ? security_capable+0x89/0xb0 [ 416.400298][T10873] genl_rcv_msg+0x619/0x7a0 [ 416.404821][T10873] ? genl_bind+0x360/0x360 [ 416.409259][T10873] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 416.415794][T10873] netlink_rcv_skb+0x241/0x4d0 [ 416.420599][T10873] ? genl_bind+0x360/0x360 [ 416.425064][T10873] ? netlink_ack+0x1180/0x1180 [ 416.429863][T10873] ? __lock_acquire+0x7d40/0x7d40 [ 416.434916][T10873] ? down_read+0x1ac/0x2e0 [ 416.439354][T10873] genl_rcv+0x28/0x40 [ 416.443448][T10873] netlink_unicast+0x751/0x8d0 [ 416.448264][T10873] netlink_sendmsg+0x8d0/0xbf0 [ 416.453049][T10873] ? lockdep_hardirqs_on+0x98/0x150 [ 416.458277][T10873] ? netlink_getsockopt+0x590/0x590 [ 416.463498][T10873] ? security_socket_sendmsg+0x45/0xa0 [ 416.468974][T10873] ? security_socket_sendmsg+0x80/0xa0 [ 416.474449][T10873] ? netlink_getsockopt+0x590/0x590 [ 416.479673][T10873] ____sys_sendmsg+0x5ba/0x960 [ 416.484460][T10873] ? lockdep_hardirqs_on+0x98/0x150 [ 416.489760][T10873] ? __sys_sendmsg_sock+0x30/0x30 [ 416.494820][T10873] ? ___sys_sendmsg+0x28b/0x360 [ 416.499692][T10873] ___sys_sendmsg+0x2a6/0x360 [ 416.504392][T10873] ? __sys_sendmsg+0x2a0/0x2a0 [ 416.509191][T10873] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 416.515567][T10873] __se_sys_sendmsg+0x1c2/0x2b0 [ 416.520435][T10873] ? __x64_sys_sendmsg+0x80/0x80 [ 416.525402][T10873] ? lockdep_hardirqs_on+0x98/0x150 [ 416.530636][T10873] do_syscall_64+0x55/0xa0 [ 416.535156][T10873] ? clear_bhb_loop+0x40/0x90 [ 416.539856][T10873] ? clear_bhb_loop+0x40/0x90 [ 416.544555][T10873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.550461][T10873] RIP: 0033:0x7faccc19c819 [ 416.554978][T10873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.574691][T10873] RSP: 002b:00007facca3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.583136][T10873] RAX: ffffffffffffffda RBX: 00007faccc415fa0 RCX: 00007faccc19c819 [ 416.591123][T10873] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 416.599112][T10873] RBP: 00007faccc232c91 R08: 0000000000000000 R09: 0000000000000000 [ 416.607095][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.615081][T10873] R13: 00007faccc416038 R14: 00007faccc415fa0 R15: 00007fff2bb65708 [ 416.623086][T10873] [ 417.251121][ T36] wlan1: Trigger new scan to find an IBSS to join [ 417.299155][T10918] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 417.568511][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1406'. [ 418.214437][ T1123] wlan1: Trigger new scan to find an IBSS to join [ 418.608509][T10945] netlink: 'syz.2.1411': attribute type 29 has an invalid length. [ 419.197102][T10957] FAULT_INJECTION: forcing a failure. [ 419.197102][T10957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.278249][T10957] CPU: 0 PID: 10957 Comm: syz.1.1415 Not tainted syzkaller #0 [ 419.285927][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 419.296027][T10957] Call Trace: [ 419.299329][T10957] [ 419.302283][T10957] dump_stack_lvl+0x18c/0x250 [ 419.307021][T10957] ? show_regs_print_info+0x20/0x20 [ 419.312258][T10957] ? load_image+0x420/0x420 [ 419.316966][T10957] ? __might_fault+0xaa/0x120 [ 419.321751][T10957] ? __lock_acquire+0x7d40/0x7d40 [ 419.326829][T10957] should_fail_ex+0x39d/0x4d0 [ 419.331632][T10957] _copy_from_iter+0x1d9/0x12e0 [ 419.336505][T10957] ? __virt_addr_valid+0x18c/0x540 [ 419.341846][T10957] ? __lock_acquire+0x7d40/0x7d40 [ 419.346887][T10957] ? __build_skb_around+0x235/0x3d0 [ 419.352103][T10957] ? copyout_mc+0x70/0x70 [ 419.356457][T10957] ? __virt_addr_valid+0x18c/0x540 [ 419.361603][T10957] ? __virt_addr_valid+0x18c/0x540 [ 419.366817][T10957] ? __virt_addr_valid+0x469/0x540 [ 419.371950][T10957] ? __check_object_size+0x506/0xa20 [ 419.377686][T10957] netlink_sendmsg+0x76b/0xbf0 [ 419.382482][T10957] ? netlink_getsockopt+0x590/0x590 [ 419.387705][T10957] ? aa_sock_msg_perm+0x94/0x150 [ 419.392746][T10957] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 419.398133][T10957] ? security_socket_sendmsg+0x80/0xa0 [ 419.403870][T10957] ? netlink_getsockopt+0x590/0x590 [ 419.409122][T10957] ____sys_sendmsg+0x5ba/0x960 [ 419.413996][T10957] ? __asan_memset+0x22/0x40 [ 419.418602][T10957] ? __sys_sendmsg_sock+0x30/0x30 [ 419.423744][T10957] ? __import_iovec+0x5f2/0x850 [ 419.428619][T10957] ? import_iovec+0x73/0xa0 [ 419.433150][T10957] ___sys_sendmsg+0x2a6/0x360 [ 419.437940][T10957] ? __sys_sendmsg+0x2a0/0x2a0 [ 419.442846][T10957] __se_sys_sendmsg+0x1c2/0x2b0 [ 419.447717][T10957] ? __x64_sys_sendmsg+0x80/0x80 [ 419.452689][T10957] do_syscall_64+0x55/0xa0 [ 419.457127][T10957] ? clear_bhb_loop+0x40/0x90 [ 419.461826][T10957] ? clear_bhb_loop+0x40/0x90 [ 419.466518][T10957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.472424][T10957] RIP: 0033:0x7f6a7a19c819 [ 419.476939][T10957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.497167][T10957] RSP: 002b:00007f6a7b0f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.505623][T10957] RAX: ffffffffffffffda RBX: 00007f6a7a415fa0 RCX: 00007f6a7a19c819 [ 419.513618][T10957] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 419.521605][T10957] RBP: 00007f6a7b0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 419.529674][T10957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.537831][T10957] R13: 00007f6a7a416038 R14: 00007f6a7a415fa0 R15: 00007ffe7fd62e58 [ 419.545912][T10957] [ 419.583695][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1416'. [ 419.613623][T10961] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.892969][T10966] netlink: 'syz.0.1418': attribute type 2 has an invalid length. [ 419.932112][T10966] netlink: 'syz.0.1418': attribute type 8 has an invalid length. [ 419.939924][T10966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1418'. [ 419.980954][T10974] netlink: 'syz.3.1420': attribute type 10 has an invalid length. [ 419.988848][T10974] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1420'. [ 420.013688][T10974] hsr0: entered promiscuous mode [ 420.038689][T10974] bridge0: port 5(hsr0) entered blocking state [ 420.075966][T10974] bridge0: port 5(hsr0) entered disabled state [ 420.100445][T10974] hsr0: entered allmulticast mode [ 420.119031][T10974] hsr_slave_0: entered allmulticast mode [ 420.127798][T10974] hsr_slave_1: entered allmulticast mode [ 420.154546][T10974] bridge0: port 5(hsr0) entered blocking state [ 420.161036][T10974] bridge0: port 5(hsr0) entered forwarding state [ 420.573820][T11000] FAULT_INJECTION: forcing a failure. [ 420.573820][T11000] name failslab, interval 1, probability 0, space 0, times 0 [ 420.611922][T11000] CPU: 1 PID: 11000 Comm: syz.2.1428 Not tainted syzkaller #0 [ 420.619470][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.629817][T11000] Call Trace: [ 420.633124][T11000] [ 420.636105][T11000] dump_stack_lvl+0x18c/0x250 [ 420.640894][T11000] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 420.646764][T11000] ? show_regs_print_info+0x20/0x20 [ 420.652026][T11000] ? load_image+0x420/0x420 [ 420.656593][T11000] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 420.662640][T11000] should_fail_ex+0x39d/0x4d0 [ 420.667435][T11000] should_failslab+0x9/0x20 [ 420.672171][T11000] slab_pre_alloc_hook+0x59/0x310 [ 420.677336][T11000] ? lockdep_hardirqs_on+0x98/0x150 [ 420.682762][T11000] kmem_cache_alloc+0x5a/0x2d0 [ 420.687580][T11000] ? skb_clone+0x1eb/0x370 [ 420.692050][T11000] skb_clone+0x1eb/0x370 [ 420.696379][T11000] __netlink_deliver_tap+0x41c/0x830 [ 420.701814][T11000] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.707072][T11000] netlink_deliver_tap+0x19c/0x1b0 [ 420.712251][T11000] netlink_unicast+0x72c/0x8d0 [ 420.717083][T11000] netlink_sendmsg+0x8d0/0xbf0 [ 420.721917][T11000] ? lockdep_hardirqs_on+0x98/0x150 [ 420.727183][T11000] ? netlink_getsockopt+0x590/0x590 [ 420.732525][T11000] ? bpf_lsm_socket_sendmsg+0x4/0x10 [ 420.737862][T11000] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 420.743278][T11000] ? security_socket_sendmsg+0x80/0xa0 [ 420.748775][T11000] ? netlink_getsockopt+0x590/0x590 [ 420.754024][T11000] ____sys_sendmsg+0x5ba/0x960 [ 420.758834][T11000] ? __asan_memset+0x22/0x40 [ 420.763556][T11000] ? __sys_sendmsg_sock+0x30/0x30 [ 420.768627][T11000] ? __import_iovec+0x5f2/0x850 [ 420.773532][T11000] ? import_iovec+0x73/0xa0 [ 420.778078][T11000] ___sys_sendmsg+0x2a6/0x360 [ 420.782811][T11000] ? __sys_sendmsg+0x2a0/0x2a0 [ 420.787662][T11000] __se_sys_sendmsg+0x1c2/0x2b0 [ 420.792563][T11000] ? __x64_sys_sendmsg+0x80/0x80 [ 420.797570][T11000] ? syscall_enter_from_user_mode+0x2e/0x80 [ 420.803531][T11000] do_syscall_64+0x55/0xa0 [ 420.807992][T11000] ? clear_bhb_loop+0x40/0x90 [ 420.812718][T11000] ? clear_bhb_loop+0x40/0x90 [ 420.817445][T11000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.823565][T11000] RIP: 0033:0x7faccc19c819 [ 420.828016][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.847667][T11000] RSP: 002b:00007facca3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.856219][T11000] RAX: ffffffffffffffda RBX: 00007faccc415fa0 RCX: 00007faccc19c819 [ 420.864250][T11000] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 420.872300][T11000] RBP: 00007facca3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.880346][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.888546][T11000] R13: 00007faccc416038 R14: 00007faccc415fa0 R15: 00007fff2bb65708 [ 420.896931][T11000] [ 420.974301][T11000] netlink: 'syz.2.1428': attribute type 29 has an invalid length. [ 421.172530][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 421.175099][T11015] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1431'. [ 421.277351][T11017] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 421.287173][T11017] netlink: 'syz.3.1432': attribute type 8 has an invalid length. [ 421.301036][T11017] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1432'. [ 422.212071][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 422.218728][ T7630] wlan1: Trigger new scan to find an IBSS to join [ 422.298132][T11048] netlink: 'syz.2.1441': attribute type 29 has an invalid length. [ 422.381433][T11048] netlink: 'syz.2.1441': attribute type 3 has an invalid length. [ 422.402350][T11048] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1441'. [ 422.848059][T11053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1450'. [ 423.358166][ T7630] wlan1: Creating new IBSS network, BSSID 12:bc:d9:82:23:52 [ 423.380571][T11053] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 423.421604][ T36] ------------[ cut here ]------------ [ 423.427392][ T36] WARNING: CPU: 1 PID: 36 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 423.437419][ T36] Modules linked in: [ 423.441408][ T36] CPU: 1 PID: 36 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 423.449101][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.459396][ T36] Workqueue: cfg80211 cfg80211_event_work [ 423.465231][ T36] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 423.471502][ T36] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d5 a0 f7 0f 0b eb bb e8 0e d5 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d5 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 423.492240][ T36] RSP: 0018:ffffc90000acfa20 EFLAGS: 00010293 [ 423.498426][ T36] RAX: ffffffff89e64cc2 RBX: dffffc0000000000 RCX: ffff8880186d5a00 [ 423.506972][ T36] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 423.515300][ T36] RBP: ffffc90000acfaf8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 423.523538][ T36] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff88805d238c90 [ 423.531638][ T36] R13: 1ffff92000159f4c R14: ffff88807cbe35b8 R15: 000000000000001f [ 423.539930][ T36] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 423.548962][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.555618][ T36] CR2: 000055555d531a28 CR3: 000000007709b000 CR4: 00000000003506e0 [ 423.563790][ T36] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 423.571877][ T36] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 423.579913][ T36] Call Trace: [ 423.583375][ T36] [ 423.586388][ T36] ? mutex_lock_nested+0x20/0x20 [ 423.591520][ T36] ? trace_rdev_return_void+0x1c0/0x1c0 [ 423.597136][ T36] cfg80211_process_wdev_events+0x3bc/0x550 [ 423.603161][ T36] cfg80211_process_rdev_events+0xa1/0x110 [ 423.609027][ T36] cfg80211_event_work+0x2f/0x40 [ 423.614183][ T36] ? process_scheduled_works+0x96f/0x15d0 [ 423.619953][ T36] process_scheduled_works+0xa5d/0x15d0 [ 423.625857][ T36] ? worker_attach_to_pool+0x380/0x380 [ 423.631430][ T36] ? assign_work+0x3d2/0x5d0 [ 423.636262][ T36] worker_thread+0xa55/0xfc0 [ 423.641006][ T36] kthread+0x2fa/0x390 [ 423.645130][ T36] ? pr_cont_work+0x560/0x560 [ 423.649950][ T36] ? kthread_blkcg+0xd0/0xd0 [ 423.654803][ T36] ret_from_fork+0x48/0x80 [ 423.659269][ T36] ? kthread_blkcg+0xd0/0xd0 [ 423.663978][ T36] ret_from_fork_asm+0x11/0x20 [ 423.668816][ T36] [ 423.671997][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 423.679331][ T36] CPU: 1 PID: 36 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 423.686753][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 423.696853][ T36] Workqueue: cfg80211 cfg80211_event_work [ 423.702647][ T36] Call Trace: [ 423.706071][ T36] [ 423.709056][ T36] dump_stack_lvl+0x18c/0x250 [ 423.713790][ T36] ? show_regs_print_info+0x20/0x20 [ 423.719032][ T36] ? load_image+0x420/0x420 [ 423.723606][ T36] panic+0x2dc/0x730 [ 423.727550][ T36] ? bpf_jit_dump+0xd0/0xd0 [ 423.732181][ T36] ? ret_from_fork_asm+0x11/0x20 [ 423.737148][ T36] __warn+0x2e0/0x470 [ 423.741147][ T36] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 423.746738][ T36] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 423.752323][ T36] report_bug+0x2be/0x4f0 [ 423.756694][ T36] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 423.762271][ T36] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 423.767843][ T36] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 423.773404][ T36] handle_bug+0xcf/0x120 [ 423.778303][ T36] exc_invalid_op+0x1a/0x50 [ 423.782818][ T36] asm_exc_invalid_op+0x1a/0x20 [ 423.787679][ T36] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 423.793854][ T36] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 d5 a0 f7 0f 0b eb bb e8 0e d5 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 00 d5 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 423.813491][ T36] RSP: 0018:ffffc90000acfa20 EFLAGS: 00010293 [ 423.819570][ T36] RAX: ffffffff89e64cc2 RBX: dffffc0000000000 RCX: ffff8880186d5a00 [ 423.827551][ T36] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8de0 [ 423.835537][ T36] RBP: ffffc90000acfaf8 R08: ffffffff911c456f R09: 1ffffffff22388ad [ 423.843513][ T36] R10: dffffc0000000000 R11: fffffbfff22388ae R12: ffff88805d238c90 [ 423.851492][ T36] R13: 1ffff92000159f4c R14: ffff88807cbe35b8 R15: 000000000000001f [ 423.859499][ T36] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 423.865091][ T36] ? mutex_lock_nested+0x20/0x20 [ 423.870039][ T36] ? trace_rdev_return_void+0x1c0/0x1c0 [ 423.875693][ T36] cfg80211_process_wdev_events+0x3bc/0x550 [ 423.881634][ T36] cfg80211_process_rdev_events+0xa1/0x110 [ 423.887556][ T36] cfg80211_event_work+0x2f/0x40 [ 423.892518][ T36] ? process_scheduled_works+0x96f/0x15d0 [ 423.898255][ T36] process_scheduled_works+0xa5d/0x15d0 [ 423.903843][ T36] ? worker_attach_to_pool+0x380/0x380 [ 423.909317][ T36] ? assign_work+0x3d2/0x5d0 [ 423.913934][ T36] worker_thread+0xa55/0xfc0 [ 423.918562][ T36] kthread+0x2fa/0x390 [ 423.922649][ T36] ? pr_cont_work+0x560/0x560 [ 423.927340][ T36] ? kthread_blkcg+0xd0/0xd0 [ 423.931974][ T36] ret_from_fork+0x48/0x80 [ 423.936497][ T36] ? kthread_blkcg+0xd0/0xd0 [ 423.941106][ T36] ret_from_fork_asm+0x11/0x20 [ 423.945932][ T36] [ 423.949469][ T36] Kernel Offset: disabled [ 423.953862][ T36] Rebooting in 86400 seconds..