last executing test programs: 6.269059178s ago: executing program 3 (id=16412): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.382169256s ago: executing program 3 (id=16418): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x1, 0x6, 0x0, 0x0, 0x80848, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x4, 0x2, 0x1, 0x103, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0xd, &(0x7f00000000c0), 0x10) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x25, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0x0, r0, 0xb) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) 4.576138433s ago: executing program 0 (id=16420): close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000140009000000000008000000844978e60100000601000000044000000b00000000455f5f613e5f0000"], 0x0, 0x34, 0x0, 0x1, 0xb93}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001800000000000000020000dd16"], 0x0, 0x32, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0xe}, 0x2, 0x1, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 4.521200844s ago: executing program 3 (id=16422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) sendmsg$inet(r6, 0x0, 0x4000) 4.284756122s ago: executing program 0 (id=16423): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0x1000000}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x9, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1a, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xa, 0x5, 0x0, &(0x7f0000003740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003700)={&(0x7f00000036c0)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, 0x0) 3.397221991s ago: executing program 0 (id=16429): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x20}, 0x20002800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r2}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329", 0x3ca}, {&(0x7f0000000540)="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", 0x1dc}], 0x2}, 0x8400) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1}, 0x10002) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r7, r0, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 3.311568213s ago: executing program 2 (id=16430): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, 0x0, 0x2020) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r2, 0xb, 0x1, 0x200, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x24008020) sendmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000240)="44ee5ed78fe1ef6cb49c583a76a154cf", 0x10}], 0x2}, 0x40000) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x63, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x100202, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x23, 0x0, 0x0, 0x0, 0x637b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 2.991574284s ago: executing program 0 (id=16431): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.534374438s ago: executing program 2 (id=16432): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x1, 0x6, 0x0, 0x0, 0x80848, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x4, 0x2, 0x1, 0x103, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0xd, &(0x7f00000000c0), 0x10) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x25, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0x0, r0, 0xb) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) 2.530700278s ago: executing program 1 (id=16440): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x96}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f00000002c0)="fce7a6f8730a6fea43b0c8e202e4ee88b67c21c7eb5121750c42cba0e0d0b391aa3b1e6c844e8f8c23cb4aa0d4459255545e94046877759868045010ddf0a67045ae211f9b16e506ab968088a886e5e51c14998ffd6b46b7115c06f4eb1d4fb49c0c23449196d7bd8a7da81bdcb3b10d605cae11c9dc5d6f99c8165bbb9640b57735fab6be1d8ccda0627d2a70ae02b0e7512f44753aceec", &(0x7f0000000380)=""/216, &(0x7f0000000480), &(0x7f0000000500)="c2e84b731dfb51cf7871a78b31f6d0162e12ffd3145d12f24e0c2a5977ed21c9c32d", 0x0, r0, 0x4}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x200088c0) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x300) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f000000f005479ccb"], 0x20) 2.529049668s ago: executing program 3 (id=16441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, 0x0, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) sendmsg$inet(r6, 0x0, 0x4000) 2.291745266s ago: executing program 1 (id=16433): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x20000844) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc00) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg$kcm(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x1b, &(0x7f00000001c0)=r8, 0xa1) close(r9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.408210624s ago: executing program 2 (id=16434): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x886f5cad098fbc1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'pim6reg\x00', @broadcast}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8901, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5f, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 1.337534037s ago: executing program 1 (id=16435): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r0, 0x33, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x7}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}], 0x2}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8", 0x2e}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c309", 0x46}, {&(0x7f0000000280)="1006000000000000ee8de7932b326f8a310f65ae439862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c95dbb54b10e45adfc5c5d775", 0x5b}, {&(0x7f0000000480)="df3b46a133000000000000000000000000f1c81c6c11d7481a7db10c98c13aab46d748ad9220643b21529b7794db2bada57127cc43f578a88146a322ddbf202e806e3021395404b70768e90e1431acb438e35f73a89ad465b85f7668696ff41596c91b7b400ef7f0796a401696db", 0x6e}, {&(0x7f00000005c0)="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", 0xe11}], 0x5}, 0x40000) sendmsg$inet(r1, 0x0, 0x4050) r5 = socket$kcm(0xa, 0x2, 0x3a) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, 0x0) 1.289998298s ago: executing program 0 (id=16436): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x805, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18bec893d100000000000000000000000000000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x401}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000001a40)={&(0x7f0000000240)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, 0x0}, 0x40880) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000380)=@tipc=@name, 0x80, &(0x7f0000000940)=[{&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000780)=""/47, 0x2f}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f00000008c0)=""/107, 0x6b}], 0x6, &(0x7f00000009c0)=""/115, 0x73}, 0x120) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) 894.687441ms ago: executing program 1 (id=16437): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x4e1, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a806cb0a07eeb0d8f6a8a", 0x14}], 0x1}, 0x10) socket$kcm(0x10, 0x5, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f00000005c0), &(0x7f00000004c0)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000002c0)="c7e456bd82776d66e993a5ffd6ed79e9bed12d78a2b277926e594c70edd5e06fa6a24dda4f7712471cb1bc965ade954effd16da2bd502db1bce4fc047188075540e4b0d46e291bf30c9a646d6267a6fd8546c30efe103cab9b7bb612406f1d7804452c43dfda7e41970691d3a168057c5d5f0dad020dbf445b7b8ff0ffcf91f4a7fa396656636da0909cc5ca8d0532745f6375cbcdebdc33d50b041b21ea06353434b0df952beb63a71f1013c2d8"}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000003d000b08d25a80648c7494f90224fc6058000240", 0x18}], 0x1}, 0x0) 858.995972ms ago: executing program 2 (id=16438): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x4e1, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a806cb0a07eeb0d8f6a8a", 0x14}], 0x1}, 0x10) socket$kcm(0x10, 0x5, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f00000004"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000005c0), &(0x7f00000004c0)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000002c0)="c7e456bd82776d66e993a5ffd6ed79e9bed12d78a2b277926e594c70edd5e06fa6a24dda4f7712471cb1bc965ade954effd16da2bd502db1bce4fc047188075540e4b0d46e291bf30c9a646d6267a6fd8546c30efe103cab9b7bb612406f1d7804452c43dfda7e41970691d3a168057c5d5f0dad020dbf445b7b8ff0ffcf91f4a7fa396656636da0909cc5ca8d0532745f6375cbcdebdc33d50b041b21ea06353434b0df952beb63a71f1013c2d8"}, 0x20) 559.379471ms ago: executing program 3 (id=16439): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5100, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e, 0x1000000}}, @ip_tos_u8={{0x14, 0x29, 0x8}}, @ip_pktinfo={{0x9, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1a, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xa, 0x5, 0x0, &(0x7f0000003740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003700)={&(0x7f00000036c0)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, 0x0) 557.748121ms ago: executing program 2 (id=16449): socket$kcm(0x10, 0x2, 0x10) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x4e1, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a806cb0a07eeb0d8f6a8a", 0x14}], 0x1}, 0x10) socket$kcm(0x10, 0x5, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f00000004"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000005c0), &(0x7f00000004c0)='%-010d \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000002c0)="c7e456bd82776d66e993a5ffd6ed79e9bed12d78a2b277926e594c70edd5e06fa6a24dda4f7712471cb1bc965ade954effd16da2bd502db1bce4fc047188075540e4b0d46e291bf30c9a646d6267a6fd8546c30efe103cab9b7bb612406f1d7804452c43dfda7e41970691d3a168057c5d5f0dad020dbf445b7b8ff0ffcf91f4a7fa396656636da0909cc5ca8d0532745f6375cbcdebdc33d50b041b21ea06353434b0df952beb63a71f1013c2d8"}, 0x20) 389.057537ms ago: executing program 1 (id=16442): mkdir(&(0x7f0000000000)='./file\x00', 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000180), 0x0, 0x20020090}, 0x10044001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x39, 0x9, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) r9 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000240)={0x3, 0x80, 0x81, 0x3, 0x3, 0x0, 0x0, 0x6, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x6}, 0x80, 0x7, 0x10, 0x2, 0x1c, 0xa, 0x6, 0x0, 0x9, 0x0, 0x1000}) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x5450, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) 43.853918ms ago: executing program 0 (id=16443): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, 0x0, 0x2020) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r2, 0xb, 0x1, 0x200, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x24008020) sendmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000240)="44ee5ed78fe1ef6cb49c583a76a154cf", 0x10}], 0x2}, 0x40000) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x63, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x100202, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x23, 0x0, 0x0, 0x0, 0x637b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 42.943328ms ago: executing program 1 (id=16444): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r4) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717", @ANYRES64=r1], 0x48}, 0x20028814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f00000006c0), 0x4) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=ANY=[], 0x1160}, 0x24000001) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, r7}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 42.629339ms ago: executing program 2 (id=16445): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000240)}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x1, 0x6, 0x0, 0x0, 0x80848, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x4, @perf_config_ext={0x0, 0x5}, 0x0, 0x4, 0x2, 0x1, 0x103, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006fe00000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0xd, &(0x7f00000000c0), 0x10) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x6, 0x25, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0x0, r0, 0xb) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 3 (id=16446): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 12681': attribute type 10 has an invalid length. [ 2301.969420][ T6760] netlink: 'syz.3.12688': attribute type 17 has an invalid length. [ 2301.977520][ T6760] netlink: 'syz.3.12688': attribute type 16 has an invalid length. [ 2301.985464][ T6760] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12688'. [ 2301.994949][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12686'. [ 2302.005365][ T6762] netlink: 'syz.3.12688': attribute type 46 has an invalid length. [ 2302.195243][ T6775] sctp: [Deprecated]: syz.0.12690 (pid 6775) Use of int in maxseg socket option. [ 2302.195243][ T6775] Use struct sctp_assoc_value instead [ 2306.032395][ T6790] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 2306.461275][ T6802] netlink: 'syz.2.12699': attribute type 10 has an invalid length. [ 2306.674368][ T6804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2306.771211][ T6808] netlink: 'syz.1.12700': attribute type 17 has an invalid length. [ 2306.779782][ T6808] netlink: 'syz.1.12700': attribute type 16 has an invalid length. [ 2306.788734][ T6808] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12700'. [ 2306.853745][ T6811] netlink: 'syz.1.12700': attribute type 46 has an invalid length. [ 2306.952493][ T6813] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12703'. [ 2306.978429][ T6813] netlink: 'syz.0.12703': attribute type 28 has an invalid length. [ 2306.988495][ T6813] netlink: 'syz.0.12703': attribute type 29 has an invalid length. [ 2306.996966][ T6813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12703'. [ 2307.099501][ T6815] netlink: 'syz.3.12704': attribute type 10 has an invalid length. [ 2307.273566][ T6823] netlink: 'syz.3.12708': attribute type 21 has an invalid length. [ 2307.281838][ T6823] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.12708'. [ 2307.533362][ T6832] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 2308.152881][ T6834] netlink: 'syz.2.12714': attribute type 17 has an invalid length. [ 2308.166325][ T6834] netlink: 'syz.2.12714': attribute type 16 has an invalid length. [ 2308.174722][ T6834] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12714'. [ 2308.198121][ T6834] netlink: 'syz.2.12714': attribute type 46 has an invalid length. [ 2308.253086][ T6838] netlink: 'syz.1.12713': attribute type 10 has an invalid length. [ 2308.548635][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2309.009995][ T6842] syzkaller0: entered promiscuous mode [ 2309.016101][ T6842] syzkaller0: entered allmulticast mode [ 2311.715095][ T6861] netlink: 'syz.2.12723': attribute type 21 has an invalid length. [ 2311.724099][ T6861] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.12723'. [ 2311.734139][ T6865] netlink: 'syz.0.12724': attribute type 17 has an invalid length. [ 2311.742479][ T6865] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12724'. [ 2312.021067][ T6884] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.12731'. [ 2312.522746][ T6895] validate_nla: 2 callbacks suppressed [ 2312.522829][ T6895] netlink: 'syz.2.12736': attribute type 10 has an invalid length. [ 2312.744994][ T6899] netlink: 'syz.3.12738': attribute type 17 has an invalid length. [ 2312.760670][ T6899] netlink: 'syz.3.12738': attribute type 16 has an invalid length. [ 2312.781370][ T6899] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12738'. [ 2312.831393][ T6899] netlink: 'syz.3.12738': attribute type 46 has an invalid length. [ 2313.491158][ T6910] syzkaller0: entered promiscuous mode [ 2313.507164][ T6910] syzkaller0: entered allmulticast mode [ 2313.931771][ T6924] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.12745'. [ 2313.958864][T15768] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 2317.592885][ T6969] netlink: 'syz.2.12761': attribute type 4 has an invalid length. [ 2317.608085][ T6969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12761'. [ 2318.503321][ T6959] netlink: 'syz.1.12760': attribute type 10 has an invalid length. [ 2319.988931][ T7011] syzkaller0: entered promiscuous mode [ 2319.994692][ T7011] syzkaller0: entered allmulticast mode [ 2320.761630][ T7032] netlink: 'syz.3.12778': attribute type 4 has an invalid length. [ 2320.770898][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12778'. [ 2320.952675][ T7034] netlink: 'syz.2.12779': attribute type 28 has an invalid length. [ 2320.968976][ T7034] netlink: 'syz.2.12779': attribute type 29 has an invalid length. [ 2320.985806][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12779'. [ 2322.223180][ T7033] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12779'. [ 2323.511630][ T7062] netlink: 'syz.0.12790': attribute type 17 has an invalid length. [ 2323.521131][ T7062] netlink: 'syz.0.12790': attribute type 16 has an invalid length. [ 2323.529349][ T7062] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12790'. [ 2323.544603][ T7062] netlink: 'syz.0.12790': attribute type 46 has an invalid length. [ 2324.066472][ T7066] syzkaller0: entered promiscuous mode [ 2324.072995][ T7066] syzkaller0: entered allmulticast mode [ 2324.719576][ T7087] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.12796'. [ 2326.887601][ T7087] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.12796'. [ 2326.898769][ T7089] netlink: 'syz.1.12796': attribute type 10 has an invalid length. [ 2326.906859][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12796'. [ 2326.917079][ T7091] netlink: 'syz.3.12801': attribute type 17 has an invalid length. [ 2326.925098][ T7091] netlink: 'syz.3.12801': attribute type 16 has an invalid length. [ 2326.967055][ T7091] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12801'. [ 2326.976370][ T7094] netlink: 'syz.3.12801': attribute type 46 has an invalid length. [ 2327.607578][ T7127] netlink: 'syz.0.12809': attribute type 4 has an invalid length. [ 2327.615497][ T7127] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12809'. [ 2328.895196][ T7164] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12826'. [ 2328.972427][ T7164] netlink: 'syz.3.12826': attribute type 28 has an invalid length. [ 2329.037413][ T7164] netlink: 'syz.3.12826': attribute type 29 has an invalid length. [ 2329.090509][ T7164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12826'. [ 2333.059434][ T7254] netlink: 188 bytes leftover after parsing attributes in process `syz.1.12861'. [ 2333.381707][ T7266] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12865'. [ 2333.410997][ T7266] netlink: 'syz.1.12865': attribute type 28 has an invalid length. [ 2333.424683][ T7266] netlink: 'syz.1.12865': attribute type 29 has an invalid length. [ 2333.434200][ T7266] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12865'. [ 2337.244449][T15768] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 2337.433816][ T7350] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12897'. [ 2337.475881][ T7345] netlink: 'syz.0.12897': attribute type 28 has an invalid length. [ 2337.536974][ T7345] netlink: 'syz.0.12897': attribute type 29 has an invalid length. [ 2337.581288][ T7347] netlink: 'syz.3.12898': attribute type 10 has an invalid length. [ 2337.590816][ T7345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12897'. [ 2337.599767][ T7347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12898'. [ 2339.954750][ T7401] syzkaller0: entered promiscuous mode [ 2339.975531][ T7401] syzkaller0: entered allmulticast mode [ 2342.634146][ T7414] netlink: 'syz.0.12920': attribute type 10 has an invalid length. [ 2342.645120][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12920'. [ 2342.955637][ T7435] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12928'. [ 2344.057513][ T7459] netlink: 'syz.1.12936': attribute type 10 has an invalid length. [ 2344.078925][ T7459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12936'. [ 2344.714834][ T7468] syzkaller0: entered promiscuous mode [ 2344.721909][ T7468] syzkaller0: entered allmulticast mode [ 2344.742996][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12941'. [ 2344.754829][ T7475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12941'. [ 2344.858689][ T7474] delete_channel: no stack [ 2344.905194][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.911605][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.976739][ T7512] netlink: 'syz.2.12949': attribute type 10 has an invalid length. [ 2347.985693][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12949'. [ 2348.594642][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12954'. [ 2348.619947][ T7523] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12954'. [ 2348.907563][ T7536] netlink: 'syz.1.12960': attribute type 29 has an invalid length. [ 2348.930912][ T7536] netlink: 'syz.1.12960': attribute type 29 has an invalid length. [ 2349.018465][ T7522] delete_channel: no stack [ 2349.706306][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12971'. [ 2349.716285][ T7558] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12971'. [ 2349.943978][ T7565] netlink: 'syz.2.12973': attribute type 29 has an invalid length. [ 2349.956139][ T7565] netlink: 'syz.2.12973': attribute type 29 has an invalid length. [ 2350.235152][ T7555] delete_channel: no stack [ 2351.571332][ T7601] netlink: 'syz.3.12986': attribute type 29 has an invalid length. [ 2351.593846][ T7601] netlink: 'syz.3.12986': attribute type 29 has an invalid length. [ 2352.140704][ T7605] syzkaller0: entered promiscuous mode [ 2352.146507][ T7605] syzkaller0: entered allmulticast mode [ 2352.192581][ T7618] netlink: 'syz.2.12993': attribute type 4 has an invalid length. [ 2352.202214][ T7618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12993'. [ 2352.380826][ T7626] netlink: 'syz.3.12997': attribute type 9 has an invalid length. [ 2352.388931][ T7626] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12997'. [ 2355.117434][ T7627] netlink: 'syz.3.12997': attribute type 9 has an invalid length. [ 2355.126599][ T7627] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12997'. [ 2355.855021][ T7684] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.13021'. [ 2355.882939][ T7684] netlink: 'syz.1.13021': attribute type 4 has an invalid length. [ 2355.938180][ T7686] netlink: 'syz.3.13022': attribute type 17 has an invalid length. [ 2355.946310][ T7686] netlink: 'syz.3.13022': attribute type 16 has an invalid length. [ 2355.976741][ T7686] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13022'. [ 2356.012511][ T7686] netlink: 'syz.3.13022': attribute type 46 has an invalid length. [ 2357.345323][ T7723] netlink: 'syz.3.13036': attribute type 17 has an invalid length. [ 2357.377858][ T7723] netlink: 'syz.3.13036': attribute type 16 has an invalid length. [ 2357.397746][ T7723] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13036'. [ 2357.427032][ T7727] netlink: 'syz.3.13036': attribute type 46 has an invalid length. [ 2359.154933][ T7765] netlink: 'syz.0.13052': attribute type 9 has an invalid length. [ 2359.187012][ T7765] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.13052'. [ 2359.706858][ T7772] netlink: 'syz.2.13054': attribute type 4 has an invalid length. [ 2359.732828][ T7765] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.13052'. [ 2359.755667][ T7772] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13054'. [ 2360.324303][ T7786] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2361.046147][ T7807] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.13065'. [ 2361.072089][ T7807] validate_nla: 1 callbacks suppressed [ 2361.072131][ T7807] netlink: 'syz.3.13065': attribute type 4 has an invalid length. [ 2361.096182][ T7811] netlink: 'syz.2.13066': attribute type 9 has an invalid length. [ 2361.104457][ T7811] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.13066'. [ 2361.377710][ T7811] netlink: 'syz.2.13066': attribute type 9 has an invalid length. [ 2361.392202][ T7811] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.13066'. [ 2362.155084][ T7839] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.13078'. [ 2362.182243][ T7839] netlink: 'syz.2.13078': attribute type 4 has an invalid length. [ 2362.496459][ T7847] netlink: 'syz.1.13082': attribute type 9 has an invalid length. [ 2362.517456][ T7847] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13082'. [ 2362.721063][ T7851] netlink: 'syz.1.13082': attribute type 9 has an invalid length. [ 2362.757517][ T7851] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13082'. [ 2363.507041][ T7873] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.13090'. [ 2363.542156][ T7873] netlink: 'syz.0.13090': attribute type 4 has an invalid length. [ 2363.929462][ T7887] netlink: 'syz.1.13098': attribute type 9 has an invalid length. [ 2363.948089][ T7887] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13098'. [ 2364.211893][ T7889] netlink: 'syz.1.13098': attribute type 9 has an invalid length. [ 2364.227190][ T7889] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13098'. [ 2366.195839][ T7930] netlink: 'syz.3.13110': attribute type 4 has an invalid length. [ 2366.210964][ T7930] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13110'. [ 2366.222921][ T7930] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2371.524113][ T8023] netlink: 'syz.1.13143': attribute type 9 has an invalid length. [ 2371.537117][ T8023] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13143'. [ 2371.815632][ T8029] netlink: 'syz.1.13143': attribute type 9 has an invalid length. [ 2371.888787][ T8029] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13143'. [ 2378.091026][ T8129] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.13179'. [ 2378.143188][ T8129] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.13179'. [ 2386.408728][ T8310] netlink: 'syz.2.13250': attribute type 4 has an invalid length. [ 2386.447069][ T8310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13250'. [ 2387.276790][ T8335] netlink: 'syz.0.13260': attribute type 4 has an invalid length. [ 2387.306990][ T8335] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13260'. [ 2387.337012][ T8335] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2390.149902][ T8404] netlink: 'syz.2.13285': attribute type 10 has an invalid length. [ 2390.517952][ T8404] netlink: 'syz.2.13285': attribute type 21 has an invalid length. [ 2392.620085][ T8463] netlink: 'syz.3.13308': attribute type 10 has an invalid length. [ 2392.659899][ T8463] netlink: 'syz.3.13308': attribute type 21 has an invalid length. [ 2393.408353][ T8484] netlink: 'syz.0.13313': attribute type 28 has an invalid length. [ 2393.436595][ T8484] netlink: 'syz.0.13313': attribute type 4 has an invalid length. [ 2393.459007][ T8484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13313'. [ 2395.088967][ T8500] delete_channel: no stack [ 2397.799753][ T8555] delete_channel: no stack [ 2398.821626][ T8585] netlink: 'syz.1.13349': attribute type 10 has an invalid length. [ 2398.889215][ T8585] netlink: 'syz.1.13349': attribute type 21 has an invalid length. [ 2401.873070][ T8647] netlink: 'syz.0.13371': attribute type 10 has an invalid length. [ 2402.017581][ T8647] netlink: 'syz.0.13371': attribute type 21 has an invalid length. [ 2406.333366][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.342024][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.723321][ T8794] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 2410.883419][ T8872] netlink: 'syz.1.13466': attribute type 29 has an invalid length. [ 2410.902889][ T8872] netlink: 'syz.1.13466': attribute type 29 has an invalid length. [ 2410.920273][ T8872] netlink: 'syz.1.13466': attribute type 29 has an invalid length. [ 2430.572885][ T9307] netlink: 'syz.0.13641': attribute type 10 has an invalid length. [ 2431.446092][ T9342] netlink: 'syz.3.13653': attribute type 3 has an invalid length. [ 2431.467626][ T9342] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.13653'. [ 2431.483141][ T9345] netlink: 'syz.3.13653': attribute type 33 has an invalid length. [ 2431.491443][ T9345] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13653'. [ 2432.471923][ T9370] netlink: 'syz.2.13663': attribute type 3 has an invalid length. [ 2432.485216][ T9370] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.13663'. [ 2432.628603][ T9370] netlink: 'syz.2.13663': attribute type 33 has an invalid length. [ 2432.637810][ T9370] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13663'. [ 2434.260177][ T9419] netlink: 'syz.0.13680': attribute type 3 has an invalid length. [ 2434.298339][ T9419] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.13680'. [ 2434.489092][ T9419] netlink: 'syz.0.13680': attribute type 33 has an invalid length. [ 2434.508316][ T9419] netlink: 164 bytes leftover after parsing attributes in process `syz.0.13680'. [ 2438.748861][ T9536] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 [ 2439.411689][ T9556] netlink: 'syz.1.13735': attribute type 29 has an invalid length. [ 2439.425440][ T9556] netlink: 'syz.1.13735': attribute type 29 has an invalid length. [ 2442.674795][ T9661] netlink: 'syz.3.13782': attribute type 29 has an invalid length. [ 2442.701173][ T9661] netlink: 'syz.3.13782': attribute type 29 has an invalid length. [ 2444.328307][ T9715] netlink: 'syz.3.13805': attribute type 6 has an invalid length. [ 2444.336582][ T9715] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13805'. [ 2445.170787][ T9738] netlink: 140 bytes leftover after parsing attributes in process `syz.0.13815'. [ 2446.397571][ T9777] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13830'. [ 2447.490997][ T9803] netlink: 'syz.1.13842': attribute type 6 has an invalid length. [ 2447.507436][ T9803] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13842'. [ 2450.746374][ T9903] netlink: 'syz.0.13884': attribute type 12 has an invalid length. [ 2450.764701][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13884'. [ 2452.357306][ T9953] netlink: 'syz.1.13904': attribute type 12 has an invalid length. [ 2452.381342][ T9953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13904'. [ 2454.278368][T10009] netlink: 'syz.3.13925': attribute type 12 has an invalid length. [ 2454.326081][T10009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13925'. [ 2454.358337][T10006] netlink: 'syz.0.13926': attribute type 1 has an invalid length. [ 2454.404751][T10006] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.13926'. [ 2456.045567][T10055] netlink: 'syz.2.13944': attribute type 12 has an invalid length. [ 2456.064217][T10055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13944'. [ 2457.945106][T10095] netlink: 'syz.2.13963': attribute type 1 has an invalid length. [ 2457.957301][T10095] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.13963'. [ 2458.103503][T10106] netlink: 'syz.1.13964': attribute type 12 has an invalid length. [ 2458.118261][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13964'. [ 2458.902271][T10125] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13973'. [ 2458.927038][T10125] smc: net device  erased user defined pnetid CONFIG [ 2460.062652][T10149] netlink: 'syz.3.13980': attribute type 12 has an invalid length. [ 2460.081528][T10149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13980'. [ 2460.190913][T10151] netlink: 'syz.2.13983': attribute type 21 has an invalid length. [ 2460.199928][T10151] IPv6: NLM_F_CREATE should be specified when creating new route [ 2460.209783][T10151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2460.217299][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 2460.225098][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 2460.232877][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 2460.899324][T10166] netlink: 'syz.1.13986': attribute type 33 has an invalid length. [ 2460.917002][T10166] netlink: 160 bytes leftover after parsing attributes in process `syz.1.13986'. [ 2461.288592][T10178] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13993'. [ 2461.579317][T10185] netlink: 'syz.1.13994': attribute type 21 has an invalid length. [ 2461.602801][T10185] IPv6: NLM_F_CREATE should be specified when creating new route [ 2461.621199][T10185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2461.628597][T10185] IPv6: NLM_F_CREATE should be set when creating new route [ 2461.636018][T10185] IPv6: NLM_F_CREATE should be set when creating new route [ 2461.643376][T10185] IPv6: NLM_F_CREATE should be set when creating new route [ 2462.630275][T10210] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14005'. [ 2462.639981][T10210] smc: net device  erased user defined pnetid CONFIG [ 2463.465200][T10227] netlink: 'syz.0.14010': attribute type 33 has an invalid length. [ 2463.476203][T10227] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14010'. [ 2464.144179][T10244] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14017'. [ 2464.976340][T10257] netlink: 'syz.0.14023': attribute type 21 has an invalid length. [ 2464.997192][T10257] IPv6: NLM_F_CREATE should be specified when creating new route [ 2465.017337][T10257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2465.025216][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 2465.033877][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 2465.041911][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 2466.104828][T10277] netlink: 'syz.3.14028': attribute type 33 has an invalid length. [ 2466.129399][T10277] netlink: 160 bytes leftover after parsing attributes in process `syz.3.14028'. [ 2467.916959][T10319] netlink: 'syz.3.14044': attribute type 21 has an invalid length. [ 2467.926054][T10319] IPv6: NLM_F_CREATE should be specified when creating new route [ 2467.960975][T10319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2467.968388][T10319] IPv6: NLM_F_CREATE should be set when creating new route [ 2467.969638][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.975993][T10319] IPv6: NLM_F_CREATE should be set when creating new route [ 2467.982361][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.989307][T10319] IPv6: NLM_F_CREATE should be set when creating new route [ 2468.990905][T10339] netlink: 'syz.1.14049': attribute type 2 has an invalid length. [ 2469.055397][T10339] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14049'. [ 2470.300694][T10379] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.14071'. [ 2470.900922][T10399] netlink: 'syz.2.14079': attribute type 29 has an invalid length. [ 2470.913876][T10399] netlink: 'syz.2.14079': attribute type 29 has an invalid length. [ 2471.010035][T10403] netlink: 'syz.2.14079': attribute type 29 has an invalid length. [ 2472.961483][T10451] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.14097'. [ 2474.824398][T10485] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.14112'. [ 2477.481095][T10533] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.14125'. [ 2480.074377][T10574] netlink: 'syz.1.14147': attribute type 29 has an invalid length. [ 2480.112906][T10574] netlink: 'syz.1.14147': attribute type 29 has an invalid length. [ 2480.163902][T10576] netlink: 'syz.1.14147': attribute type 29 has an invalid length. [ 2484.456759][T10648] netlink: 'syz.2.14178': attribute type 29 has an invalid length. [ 2484.470548][T10648] netlink: 'syz.2.14178': attribute type 29 has an invalid length. [ 2484.536303][T10653] netlink: 'syz.2.14178': attribute type 29 has an invalid length. [ 2486.108953][T10686] netlink: 'syz.3.14191': attribute type 29 has an invalid length. [ 2486.121379][T10686] netlink: 'syz.3.14191': attribute type 29 has an invalid length. [ 2486.156460][T10686] netlink: 'syz.3.14191': attribute type 29 has an invalid length. [ 2488.434567][T10739] netlink: 'syz.0.14213': attribute type 29 has an invalid length. [ 2488.469062][T10739] netlink: 'syz.0.14213': attribute type 29 has an invalid length. [ 2488.479708][T10742] netlink: 'syz.0.14213': attribute type 29 has an invalid length. [ 2488.924046][T10754] netlink: 'syz.2.14220': attribute type 3 has an invalid length. [ 2488.937475][T10754] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.14220'. [ 2489.019378][T10757] netlink: 'syz.2.14220': attribute type 10 has an invalid length. [ 2489.030799][T10757] vxcan1: entered promiscuous mode [ 2489.036120][T10757] vxcan1: entered allmulticast mode [ 2489.044879][T10757] team0: Device vxcan1 is of different type [ 2489.894854][T10769] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.14225'. [ 2489.923648][T10769] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.14225'. [ 2489.949792][T10769] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.14225'. [ 2490.230720][T10787] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14233'. [ 2490.290922][T10787] syz.3.14233[10787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2490.294782][T10787] syz.3.14233[10787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2490.590195][T10799] netlink: 'syz.1.14237': attribute type 3 has an invalid length. [ 2490.613641][T10799] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.14237'. [ 2490.700220][T10799] netlink: 'syz.1.14237': attribute type 10 has an invalid length. [ 2490.730202][T10799] team0: Device vxcan1 is of different type [ 2491.430670][T10808] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.14242'. [ 2491.446196][T10808] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.14242'. [ 2491.459590][T10808] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.14242'. [ 2491.561684][T10822] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14247'. [ 2491.616364][T10822] syz.1.14247[10822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2491.625601][T10822] syz.1.14247[10822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2492.416779][T10845] netlink: 'syz.0.14256': attribute type 3 has an invalid length. [ 2492.545882][T10845] netlink: 'syz.0.14256': attribute type 10 has an invalid length. [ 2493.694845][T10869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2494.172659][T10886] netlink: 'syz.3.14273': attribute type 3 has an invalid length. [ 2494.182510][T10886] __nla_validate_parse: 5 callbacks suppressed [ 2494.182530][T10886] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.14273'. [ 2494.321598][T10892] netlink: 'syz.3.14273': attribute type 10 has an invalid length. [ 2494.365976][T10892] team0: Device vxcan1 is of different type [ 2494.480538][T10887] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.14272'. [ 2494.493552][T10887] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.14272'. [ 2494.509245][T10887] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.14272'. [ 2495.729190][T10933] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14297'. [ 2495.758152][T10933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2495.812941][T10926] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14293'. [ 2495.837391][T10926] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14293'. [ 2495.861065][T10935] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.14293'. [ 2496.891412][T10966] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14310'. [ 2496.967541][T10966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2497.530380][T10977] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.14314'. [ 2497.934050][T10991] Ÿë: port 1(gretap0) entered blocking state [ 2497.953877][T10991] Ÿë: port 1(gretap0) entered disabled state [ 2497.985056][T10991] gretap0: entered allmulticast mode [ 2497.998448][T10991] gretap0: entered promiscuous mode [ 2498.022658][T10998] Ÿë: port 2(veth0_to_team) entered blocking state [ 2498.030679][T10998] Ÿë: port 2(veth0_to_team) entered disabled state [ 2498.037962][T10998] veth0_to_team: entered allmulticast mode [ 2498.045406][T10998] veth0_to_team: entered promiscuous mode [ 2498.052842][T10997] netlink: 'syz.3.14322': attribute type 3 has an invalid length. [ 2498.093543][T10997] netlink: 'syz.3.14322': attribute type 10 has an invalid length. [ 2498.127524][T10997] team0: Device vxcan1 is of different type [ 2498.979832][T11016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2499.245081][T11025] Ÿë: port 1(gretap0) entered blocking state [ 2499.255360][T11025] Ÿë: port 1(gretap0) entered disabled state [ 2499.265855][T11025] gretap0: entered allmulticast mode [ 2499.283598][T11025] gretap0: entered promiscuous mode [ 2499.702177][T15768] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 2499.860285][T11045] __nla_validate_parse: 4 callbacks suppressed [ 2499.860331][T11045] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14345'. [ 2499.892535][T11045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2501.614947][T11095] netlink: 'syz.3.14367': attribute type 3 has an invalid length. [ 2501.625251][T11095] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.14367'. [ 2501.707528][T11100] netlink: 'syz.3.14367': attribute type 10 has an invalid length. [ 2501.732366][T11100] team0: Device vxcan1 is of different type [ 2501.856274][T11102] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14370'. [ 2503.530278][T11136] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.14384'. [ 2504.663352][T11176] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.14398'. [ 2506.089470][T11200] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14407'. [ 2506.185378][T11204] netlink: 'syz.2.14408': attribute type 2 has an invalid length. [ 2506.205694][T11204] netlink: 'syz.2.14408': attribute type 8 has an invalid length. [ 2506.216143][T11204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14408'. [ 2506.486326][T11211] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.14410'. [ 2507.381785][T11229] netlink: 'syz.3.14421': attribute type 2 has an invalid length. [ 2507.392938][T11229] netlink: 'syz.3.14421': attribute type 8 has an invalid length. [ 2507.402588][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14421'. [ 2507.630497][T11232] netlink: 72 bytes leftover after parsing attributes in process `syz.2.14420'. [ 2507.912058][T11239] netlink: 'syz.2.14423': attribute type 3 has an invalid length. [ 2507.952173][T11239] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14423'. [ 2507.955400][T11243] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.14423'. [ 2508.410684][T11250] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14428'. [ 2509.442908][T11269] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14433'. [ 2509.750462][T11283] netlink: 'syz.1.14439': attribute type 2 has an invalid length. [ 2509.761719][T11283] netlink: 'syz.1.14439': attribute type 8 has an invalid length. [ 2509.818710][T11283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14439'. [ 2510.075767][T11291] netlink: 'syz.3.14442': attribute type 3 has an invalid length. [ 2511.341168][T11308] __nla_validate_parse: 3 callbacks suppressed [ 2511.341225][T11308] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14448'. [ 2511.666147][T11317] netlink: 'syz.1.14454': attribute type 10 has an invalid length. [ 2511.802217][T11319] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14451'. [ 2512.380648][T11333] netlink: 'syz.1.14460': attribute type 3 has an invalid length. [ 2512.405116][T11333] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14460'. [ 2512.429978][T11336] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.14460'. [ 2512.917194][T11343] delete_channel: no stack [ 2513.095415][T11349] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.14467'. [ 2513.488012][T11362] netlink: 'syz.3.14473': attribute type 10 has an invalid length. [ 2513.562637][T11363] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14474'. [ 2513.790513][T11371] netlink: 'syz.0.14484': attribute type 10 has an invalid length. [ 2515.434144][T11402] netlink: 'syz.2.14489': attribute type 10 has an invalid length. [ 2515.971208][T11414] netlink: 'syz.3.14504': attribute type 10 has an invalid length. [ 2516.658759][T11421] delete_channel: no stack [ 2516.737282][T11423] syzkaller0: entered promiscuous mode [ 2516.743460][T11423] syzkaller0: entered allmulticast mode [ 2529.239887][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.246336][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2532.385671][T11785] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.14655'. [ 2532.609496][T11785] netlink: 'syz.1.14655': attribute type 10 has an invalid length. [ 2537.708788][T11924] netlink: 'syz.3.14715': attribute type 9 has an invalid length. [ 2539.048244][T11934] netlink: 'syz.2.14722': attribute type 10 has an invalid length. [ 2541.557865][T11990] netlink: 'syz.1.14742': attribute type 10 has an invalid length. [ 2541.998796][T12002] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.14747'. [ 2543.503315][T12043] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.14766'. [ 2544.416376][T12061] netlink: 'syz.2.14771': attribute type 9 has an invalid length. [ 2546.462863][T12079] netlink: 'syz.3.14780': attribute type 10 has an invalid length. [ 2547.347374][T15768] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 2547.734220][T12133] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.14798'. [ 2550.200414][T12178] netlink: 'syz.0.14819': attribute type 29 has an invalid length. [ 2550.253770][T12178] netlink: 'syz.0.14819': attribute type 29 has an invalid length. [ 2550.312403][T12183] netlink: 'syz.0.14819': attribute type 29 has an invalid length. [ 2550.327853][T12184] netlink: 'syz.0.14819': attribute type 29 has an invalid length. [ 2550.340917][T12178] netlink: 'syz.0.14819': attribute type 29 has an invalid length. [ 2550.638538][T12178] netlink: 'syz.0.14819': attribute type 29 has an invalid length. [ 2551.891262][T12214] netlink: 'syz.0.14831': attribute type 10 has an invalid length. [ 2553.454735][T12258] netlink: 'syz.0.14851': attribute type 29 has an invalid length. [ 2553.520641][T12258] netlink: 'syz.0.14851': attribute type 29 has an invalid length. [ 2553.532589][T12259] netlink: 'syz.0.14851': attribute type 29 has an invalid length. [ 2556.022991][T12321] validate_nla: 7 callbacks suppressed [ 2556.023010][T12321] netlink: 'syz.3.14876': attribute type 29 has an invalid length. [ 2556.050315][T12321] netlink: 'syz.3.14876': attribute type 29 has an invalid length. [ 2556.219617][T12318] netlink: 'syz.3.14876': attribute type 29 has an invalid length. [ 2556.268846][T12318] netlink: 'syz.3.14876': attribute type 29 has an invalid length. [ 2556.289789][T12318] netlink: 'syz.3.14876': attribute type 29 has an invalid length. [ 2556.533040][T12321] netlink: 'syz.3.14876': attribute type 29 has an invalid length. [ 2557.024785][T12345] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14887'. [ 2558.742924][T12381] netlink: 'syz.3.14903': attribute type 29 has an invalid length. [ 2558.770113][T12381] netlink: 'syz.3.14903': attribute type 29 has an invalid length. [ 2558.828734][T12381] netlink: 'syz.3.14903': attribute type 29 has an invalid length. [ 2558.858858][T12381] netlink: 'syz.3.14903': attribute type 29 has an invalid length. [ 2560.176615][T12401] IPv6: NLM_F_CREATE should be specified when creating new route [ 2560.187683][T12401] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14910'. [ 2561.834920][T12436] validate_nla: 1 callbacks suppressed [ 2561.834976][T12436] netlink: 'syz.1.14922': attribute type 29 has an invalid length. [ 2561.866276][T12436] netlink: 'syz.1.14922': attribute type 29 has an invalid length. [ 2561.886076][T12436] netlink: 'syz.1.14922': attribute type 29 has an invalid length. [ 2561.928175][T12436] netlink: 'syz.1.14922': attribute type 29 has an invalid length. [ 2561.983108][T12436] netlink: 'syz.1.14922': attribute type 29 has an invalid length. [ 2562.339488][T12445] netlink: 'syz.1.14922': attribute type 29 has an invalid length. [ 2562.610563][T12450] netlink: 'syz.2.14929': attribute type 17 has an invalid length. [ 2562.631434][T12450] netlink: 152 bytes leftover after parsing attributes in process `syz.2.14929'. [ 2562.718580][T12450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2563.622845][T12478] netlink: 'syz.2.14941': attribute type 29 has an invalid length. [ 2563.659459][T12479] sit0: left promiscuous mode [ 2563.920454][T12478] netlink: 'syz.2.14941': attribute type 29 has an invalid length. [ 2563.973642][T12482] sit0: entered promiscuous mode [ 2564.083147][T12480] netlink: 'syz.2.14941': attribute type 29 has an invalid length. [ 2564.100728][T12498] IPv6: NLM_F_CREATE should be specified when creating new route [ 2564.113872][T12498] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14946'. [ 2565.136285][T12530] sit0: left promiscuous mode [ 2565.235485][T12525] sit0: entered promiscuous mode [ 2566.928319][T12578] validate_nla: 3 callbacks suppressed [ 2566.928362][T12578] netlink: 'syz.1.14982': attribute type 17 has an invalid length. [ 2566.945226][T12578] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14982'. [ 2566.961892][T12578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2568.577762][T12615] netlink: 'syz.3.15000': attribute type 17 has an invalid length. [ 2568.617045][T12615] netlink: 152 bytes leftover after parsing attributes in process `syz.3.15000'. [ 2568.643734][T12615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2570.648012][T12681] sit0: left promiscuous mode [ 2570.772499][T12682] sit0: entered promiscuous mode [ 2571.213115][T12691] netlink: 'syz.1.15032': attribute type 29 has an invalid length. [ 2571.239336][T12691] netlink: 'syz.1.15032': attribute type 29 has an invalid length. [ 2571.265034][T12694] netlink: 'syz.1.15032': attribute type 29 has an invalid length. [ 2571.342803][T12693] netlink: 'syz.0.15033': attribute type 17 has an invalid length. [ 2571.367065][T12693] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15033'. [ 2571.393249][T12693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2571.423063][T12691] netlink: 'syz.1.15032': attribute type 29 has an invalid length. [ 2571.445843][T12696] sit0: left promiscuous mode [ 2571.701995][T12694] netlink: 'syz.1.15032': attribute type 29 has an invalid length. [ 2571.715898][T12706] netlink: 'syz.1.15032': attribute type 29 has an invalid length. [ 2571.736287][T12698] sit0: entered promiscuous mode [ 2573.183922][T12735] sit0: left promiscuous mode [ 2573.372826][T12737] netlink: 'syz.0.15049': attribute type 29 has an invalid length. [ 2573.580686][T12739] sit0: entered promiscuous mode [ 2573.815267][T12737] netlink: 'syz.0.15049': attribute type 29 has an invalid length. [ 2573.891921][T12740] netlink: 'syz.0.15049': attribute type 29 has an invalid length. [ 2574.008549][T12742] netlink: 'syz.0.15049': attribute type 29 has an invalid length. [ 2574.027848][T12743] netlink: 'syz.0.15049': attribute type 29 has an invalid length. [ 2574.051142][T12737] netlink: 'syz.0.15049': attribute type 29 has an invalid length. [ 2575.753083][T12783] netlink: 'syz.3.15066': attribute type 29 has an invalid length. [ 2575.825149][T12783] netlink: 'syz.3.15066': attribute type 29 has an invalid length. [ 2576.001556][T12786] netlink: 'syz.3.15066': attribute type 29 has an invalid length. [ 2576.048464][T12787] netlink: 'syz.3.15066': attribute type 29 has an invalid length. [ 2576.084583][T12788] sit0: left promiscuous mode [ 2576.150318][T12790] sit0: entered promiscuous mode [ 2577.974087][T12838] sit0: left promiscuous mode [ 2578.202885][T12842] sit0: entered promiscuous mode [ 2580.580489][T12878] sit0: left promiscuous mode [ 2580.781535][T12883] sit0: entered promiscuous mode [ 2581.059398][T12887] validate_nla: 2 callbacks suppressed [ 2581.059467][T12887] netlink: 'syz.0.15096': attribute type 1 has an invalid length. [ 2581.095535][T12887] netlink: 'syz.0.15096': attribute type 2 has an invalid length. [ 2581.166983][T12887] netlink: 'syz.0.15096': attribute type 2 has an invalid length. [ 2581.206368][T12887] netlink: 'syz.0.15096': attribute type 3 has an invalid length. [ 2581.289019][T12887] netlink: 'syz.0.15096': attribute type 4 has an invalid length. [ 2581.300631][T12887] netlink: 'syz.0.15096': attribute type 5 has an invalid length. [ 2581.311507][T12887] netlink: 'syz.0.15096': attribute type 6 has an invalid length. [ 2581.373424][T12887] netlink: 'syz.0.15096': attribute type 7 has an invalid length. [ 2581.392840][T12887] netlink: 'syz.0.15096': attribute type 9 has an invalid length. [ 2581.405211][T12887] netlink: 'syz.0.15096': attribute type 10 has an invalid length. [ 2581.416556][T12887] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.15096'. [ 2584.332904][T12937] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.15112'. [ 2586.156321][T12962] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2586.187169][T12962] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2586.196093][T12962] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2587.910675][T12997] validate_nla: 15 callbacks suppressed [ 2587.910718][T12997] netlink: 'syz.1.15132': attribute type 1 has an invalid length. [ 2587.966063][T12997] netlink: 'syz.1.15132': attribute type 2 has an invalid length. [ 2587.983758][T12997] netlink: 'syz.1.15132': attribute type 2 has an invalid length. [ 2588.033115][T12997] netlink: 'syz.1.15132': attribute type 3 has an invalid length. [ 2588.080861][T12997] netlink: 'syz.1.15132': attribute type 4 has an invalid length. [ 2588.116946][T12997] netlink: 'syz.1.15132': attribute type 5 has an invalid length. [ 2588.156913][T12997] netlink: 'syz.1.15132': attribute type 6 has an invalid length. [ 2588.196508][T12997] netlink: 'syz.1.15132': attribute type 7 has an invalid length. [ 2588.207116][T12997] netlink: 'syz.1.15132': attribute type 9 has an invalid length. [ 2588.225786][T12997] netlink: 'syz.1.15132': attribute type 10 has an invalid length. [ 2588.246039][T12997] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.15132'. [ 2588.498985][T13002] sit0: left promiscuous mode [ 2589.092613][T13009] sit0: entered promiscuous mode [ 2589.401570][T13017] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.15138'. [ 2590.107715][T13030] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.15146'. [ 2590.668574][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.674998][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.862028][T13052] sit0: left promiscuous mode [ 2592.232233][T13055] sit0: entered promiscuous mode [ 2592.294993][T13062] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.15155'. [ 2592.605642][T13066] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15156'. [ 2592.636893][T15768] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 2592.724110][T13066] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2592.745833][T13066] CPU: 0 PID: 13066 Comm: syz.1.15156 Not tainted syzkaller #0 [ 2592.753474][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2592.763598][T13066] Call Trace: [ 2592.766936][T13066] [ 2592.769978][T13066] dump_stack_lvl+0x18c/0x250 [ 2592.774745][T13066] ? show_regs_print_info+0x20/0x20 [ 2592.780020][T13066] ? load_image+0x420/0x420 [ 2592.784610][T13066] sysfs_warn_dup+0x8e/0xa0 [ 2592.789187][T13066] sysfs_do_create_link_sd+0xc0/0x110 [ 2592.794627][T13066] device_add_class_symlinks+0x1cf/0x240 [ 2592.800334][T13066] device_add+0x507/0xc50 [ 2592.804750][T13066] wiphy_register+0x1dad/0x2ae0 [ 2592.809677][T13066] ? lock_chain_count+0x20/0x20 [ 2592.814628][T13066] ? cfg80211_event_work+0x40/0x40 [ 2592.819825][T13066] ? ieee80211_register_hw+0x3361/0x4250 [ 2592.825533][T13066] ? ieee80211_register_hw+0x3197/0x4250 [ 2592.831251][T13066] ? kasan_check_range+0x59/0x290 [ 2592.836460][T13066] ieee80211_register_hw+0x3464/0x4250 [ 2592.842019][T13066] ? ieee80211_tasklet_handler+0x20/0x20 [ 2592.847808][T13066] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2592.853778][T13066] ? __debug_object_init+0xec/0x450 [ 2592.859055][T13066] ? __asan_memset+0x22/0x40 [ 2592.863735][T13066] ? __hrtimer_init+0x186/0x270 [ 2592.868653][T13066] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2592.874643][T13066] ? mac80211_hwsim_free+0x220/0x220 [ 2592.879998][T13066] ? rcu_is_watching+0x15/0xb0 [ 2592.884846][T13066] ? kstrndup+0xbd/0x140 [ 2592.889179][T13066] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2592.894443][T13066] ? __nla_validate+0x50/0x50 [ 2592.899790][T13066] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2592.906178][T13066] ? memset_orig+0x82/0xac [ 2592.910658][T13066] ? __nla_parse+0x40/0x50 [ 2592.915147][T13066] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2592.921537][T13066] genl_family_rcv_msg_doit+0x211/0x310 [ 2592.927140][T13066] ? end_current_label_crit_section+0x170/0x170 [ 2592.933444][T13066] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2592.939409][T13066] ? bpf_lsm_capable+0x9/0x10 [ 2592.944141][T13066] ? security_capable+0x89/0xb0 [ 2592.949063][T13066] genl_rcv_msg+0x619/0x7a0 [ 2592.953640][T13066] ? genl_bind+0x360/0x360 [ 2592.958108][T13066] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2592.964506][T13066] netlink_rcv_skb+0x241/0x4d0 [ 2592.969319][T13066] ? genl_bind+0x360/0x360 [ 2592.973787][T13066] ? netlink_ack+0x1180/0x1180 [ 2592.978612][T13066] ? __lock_acquire+0x7d40/0x7d40 [ 2592.983714][T13066] ? down_read+0x1ac/0x2e0 [ 2592.988190][T13066] genl_rcv+0x28/0x40 [ 2592.992228][T13066] netlink_unicast+0x751/0x8d0 [ 2592.997062][T13066] netlink_sendmsg+0x8d0/0xbf0 [ 2593.001882][T13066] ? lockdep_hardirqs_on+0x98/0x150 [ 2593.007148][T13066] ? netlink_getsockopt+0x590/0x590 [ 2593.012395][T13066] ? aa_sock_msg_perm+0x94/0x150 [ 2593.017477][T13066] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2593.022799][T13066] ? security_socket_sendmsg+0x80/0xa0 [ 2593.028309][T13066] ? netlink_getsockopt+0x590/0x590 [ 2593.033555][T13066] ____sys_sendmsg+0x5ba/0x960 [ 2593.038379][T13066] ? __asan_memset+0x22/0x40 [ 2593.043038][T13066] ? __sys_sendmsg_sock+0x30/0x30 [ 2593.048301][T13066] ? __import_iovec+0x5f2/0x850 [ 2593.053231][T13066] ? import_iovec+0x73/0xa0 [ 2593.057808][T13066] ___sys_sendmsg+0x2a6/0x360 [ 2593.062580][T13066] ? __sys_sendmsg+0x2a0/0x2a0 [ 2593.067431][T13066] ? lockdep_hardirqs_on+0x98/0x150 [ 2593.072726][T13066] __se_sys_sendmsg+0x1c2/0x2b0 [ 2593.077716][T13066] ? __x64_sys_sendmsg+0x80/0x80 [ 2593.082733][T13066] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2593.088788][T13066] do_syscall_64+0x55/0xb0 [ 2593.093283][T13066] ? clear_bhb_loop+0x40/0x90 [ 2593.098012][T13066] ? clear_bhb_loop+0x40/0x90 [ 2593.102761][T13066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2593.108718][T13066] RIP: 0033:0x7fe2c6b9ce59 [ 2593.113263][T13066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2593.132937][T13066] RSP: 002b:00007fe2c79c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2593.141424][T13066] RAX: ffffffffffffffda RBX: 00007fe2c6e15fa0 RCX: 00007fe2c6b9ce59 [ 2593.149475][T13066] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2593.157597][T13066] RBP: 00007fe2c6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2593.165623][T13066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.173644][T13066] R13: 00007fe2c6e16038 R14: 00007fe2c6e15fa0 R15: 00007ffdac4d3988 [ 2593.181687][T13066] [ 2593.438691][T13072] validate_nla: 28 callbacks suppressed [ 2593.438731][T13072] netlink: 'syz.2.15158': attribute type 1 has an invalid length. [ 2593.513583][T13072] netlink: 'syz.2.15158': attribute type 2 has an invalid length. [ 2593.545561][T13072] netlink: 'syz.2.15158': attribute type 2 has an invalid length. [ 2593.575592][T13072] netlink: 'syz.2.15158': attribute type 3 has an invalid length. [ 2593.619524][T13072] netlink: 'syz.2.15158': attribute type 4 has an invalid length. [ 2593.707213][T13072] netlink: 'syz.2.15158': attribute type 5 has an invalid length. [ 2593.715658][T13072] netlink: 'syz.2.15158': attribute type 6 has an invalid length. [ 2593.769577][T13072] netlink: 'syz.2.15158': attribute type 7 has an invalid length. [ 2593.797762][T13072] netlink: 'syz.2.15158': attribute type 9 has an invalid length. [ 2593.805842][T13072] netlink: 'syz.2.15158': attribute type 10 has an invalid length. [ 2593.918670][T13072] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.15158'. [ 2594.648066][T15768] Bluetooth: hci1: command 0x0406 tx timeout [ 2594.851374][T13094] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.15164'. [ 2594.952633][T13098] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.15166'. [ 2595.723071][T13117] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.15172'. [ 2596.800613][T13128] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.15175'. [ 2597.162829][T13143] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15180'. [ 2597.194138][T13142] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.15178'. [ 2597.604093][T13150] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.15184'. [ 2599.315122][T13171] validate_nla: 55 callbacks suppressed [ 2599.315195][T13171] netlink: 'syz.3.15192': attribute type 10 has an invalid length. [ 2599.712425][T13171] team0 (unregistering): Port device team_slave_1 removed [ 2599.755152][T13171] team0 (unregistering): Port device geneve1 removed [ 2599.856731][T13171] team0 (unregistering): Port device hsr_slave_0 removed [ 2599.942047][T13171] team0 (unregistering): Port device wlan1 removed [ 2600.137300][T13179] sit0: left promiscuous mode [ 2600.493400][T13184] sit0: entered promiscuous mode [ 2600.514471][T13196] netlink: 'syz.1.15197': attribute type 1 has an invalid length. [ 2600.537538][T13196] netlink: 'syz.1.15197': attribute type 2 has an invalid length. [ 2600.547675][T13196] netlink: 'syz.1.15197': attribute type 2 has an invalid length. [ 2600.555737][T13196] netlink: 'syz.1.15197': attribute type 3 has an invalid length. [ 2600.585127][T13196] netlink: 'syz.1.15197': attribute type 4 has an invalid length. [ 2600.612838][T15768] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 2600.627959][T13196] netlink: 'syz.1.15197': attribute type 5 has an invalid length. [ 2600.676973][T13196] netlink: 'syz.1.15197': attribute type 6 has an invalid length. [ 2600.705658][T13196] netlink: 'syz.1.15197': attribute type 7 has an invalid length. [ 2600.729483][T13196] netlink: 'syz.1.15197': attribute type 9 has an invalid length. [ 2600.752533][T13196] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.15197'. [ 2600.784053][T13195] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15199'. [ 2600.902305][T13195] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2600.913660][T13195] CPU: 1 PID: 13195 Comm: syz.2.15199 Not tainted syzkaller #0 [ 2600.921311][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2600.932097][T13195] Call Trace: [ 2600.935642][T13195] [ 2600.938631][T13195] dump_stack_lvl+0x18c/0x250 [ 2600.943380][T13195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2600.949617][T13195] ? show_regs_print_info+0x20/0x20 [ 2600.954903][T13195] ? load_image+0x420/0x420 [ 2600.959619][T13195] ? sysfs_warn_dup+0x65/0xa0 [ 2600.964381][T13195] sysfs_warn_dup+0x8e/0xa0 [ 2600.968966][T13195] sysfs_do_create_link_sd+0xc0/0x110 [ 2600.974414][T13195] device_add_class_symlinks+0x1cf/0x240 [ 2600.980137][T13195] device_add+0x507/0xc50 [ 2600.984561][T13195] wiphy_register+0x1dad/0x2ae0 [ 2600.989512][T13195] ? cfg80211_event_work+0x40/0x40 [ 2600.994701][T13195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2601.000946][T13195] ieee80211_register_hw+0x3464/0x4250 [ 2601.006507][T13195] ? ieee80211_tasklet_handler+0x20/0x20 [ 2601.012213][T13195] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2601.018240][T13195] ? __debug_object_init+0xec/0x450 [ 2601.023503][T13195] ? __asan_memset+0x22/0x40 [ 2601.028164][T13195] ? __hrtimer_init+0x186/0x270 [ 2601.033096][T13195] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2601.038910][T13195] ? mac80211_hwsim_free+0x220/0x220 [ 2601.044269][T13195] ? rcu_is_watching+0x15/0xb0 [ 2601.049724][T13195] ? kstrndup+0xbd/0x140 [ 2601.054909][T13195] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2601.060109][T13195] ? mark_lock+0x94/0x320 [ 2601.064503][T13195] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2601.070930][T13195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2601.077141][T13195] ? lockdep_hardirqs_on+0x98/0x150 [ 2601.082488][T13195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2601.088708][T13195] genl_family_rcv_msg_doit+0x211/0x310 [ 2601.094983][T13195] ? end_current_label_crit_section+0x170/0x170 [ 2601.101590][T13195] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2601.107556][T13195] ? bpf_lsm_capable+0x9/0x10 [ 2601.112278][T13195] ? security_capable+0x89/0xb0 [ 2601.117271][T13195] genl_rcv_msg+0x619/0x7a0 [ 2601.121825][T13195] ? genl_bind+0x360/0x360 [ 2601.126289][T13195] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2601.132660][T13195] ? lockdep_hardirqs_on+0x98/0x150 [ 2601.137920][T13195] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2601.144128][T13195] netlink_rcv_skb+0x241/0x4d0 [ 2601.148932][T13195] ? genl_bind+0x360/0x360 [ 2601.153390][T13195] ? netlink_ack+0x1180/0x1180 [ 2601.158306][T13195] ? __lock_acquire+0x7d40/0x7d40 [ 2601.163411][T13195] ? net_generic+0x1e/0x240 [ 2601.167972][T13195] ? down_read+0x1ac/0x2e0 [ 2601.172441][T13195] genl_rcv+0x28/0x40 [ 2601.176479][T13195] netlink_unicast+0x751/0x8d0 [ 2601.181307][T13195] netlink_sendmsg+0x8d0/0xbf0 [ 2601.186152][T13195] ? netlink_getsockopt+0x590/0x590 [ 2601.191413][T13195] ? aa_sock_msg_perm+0x94/0x150 [ 2601.196430][T13195] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2601.201802][T13195] ? security_socket_sendmsg+0x80/0xa0 [ 2601.207325][T13195] ? netlink_getsockopt+0x590/0x590 [ 2601.212598][T13195] ____sys_sendmsg+0x5ba/0x960 [ 2601.217764][T13195] ? lockdep_hardirqs_on+0x98/0x150 [ 2601.223025][T13195] ? __sys_sendmsg_sock+0x30/0x30 [ 2601.228100][T13195] ? ___sys_sendmsg+0x28b/0x360 [ 2601.233003][T13195] ___sys_sendmsg+0x2a6/0x360 [ 2601.237735][T13195] ? __sys_sendmsg+0x2a0/0x2a0 [ 2601.242603][T13195] __se_sys_sendmsg+0x1c2/0x2b0 [ 2601.247528][T13195] ? __x64_sys_sendmsg+0x80/0x80 [ 2601.252550][T13195] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2601.258513][T13195] do_syscall_64+0x55/0xb0 [ 2601.262983][T13195] ? clear_bhb_loop+0x40/0x90 [ 2601.267697][T13195] ? clear_bhb_loop+0x40/0x90 [ 2601.272505][T13195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2601.278457][T13195] RIP: 0033:0x7f98b839ce59 [ 2601.283006][T13195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2601.303543][T13195] RSP: 002b:00007f98b9193028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2601.312403][T13195] RAX: ffffffffffffffda RBX: 00007f98b8615fa0 RCX: 00007f98b839ce59 [ 2601.320716][T13195] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2601.328918][T13195] RBP: 00007f98b8432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2601.336934][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2601.345035][T13195] R13: 00007f98b8616038 R14: 00007f98b8615fa0 R15: 00007ffd16aca508 [ 2601.353171][T13195] [ 2601.612129][T13209] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15203'. [ 2602.649147][T15768] Bluetooth: hci3: command 0x206a tx timeout [ 2604.148569][T13245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15216'. [ 2605.368610][T13267] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15223'. [ 2605.422508][T15768] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 2605.463002][T13267] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2605.474236][T13267] CPU: 0 PID: 13267 Comm: syz.0.15223 Not tainted syzkaller #0 [ 2605.482136][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2605.492250][T13267] Call Trace: [ 2605.495583][T13267] [ 2605.498577][T13267] dump_stack_lvl+0x18c/0x250 [ 2605.503330][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2605.509577][T13267] ? show_regs_print_info+0x20/0x20 [ 2605.515385][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2605.521622][T13267] ? dump_stack+0x9/0x20 [ 2605.525937][T13267] sysfs_warn_dup+0x8e/0xa0 [ 2605.530522][T13267] sysfs_do_create_link_sd+0xc0/0x110 [ 2605.536072][T13267] device_add_class_symlinks+0x1cf/0x240 [ 2605.541796][T13267] device_add+0x507/0xc50 [ 2605.546211][T13267] wiphy_register+0x1dad/0x2ae0 [ 2605.551160][T13267] ? cfg80211_event_work+0x40/0x40 [ 2605.556348][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2605.562665][T13267] ieee80211_register_hw+0x3464/0x4250 [ 2605.568242][T13267] ? ieee80211_tasklet_handler+0x20/0x20 [ 2605.573949][T13267] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2605.580729][T13267] ? __debug_object_init+0xec/0x450 [ 2605.586470][T13267] ? __asan_memset+0x22/0x40 [ 2605.591158][T13267] ? __hrtimer_init+0x186/0x270 [ 2605.596607][T13267] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2605.602449][T13267] ? mac80211_hwsim_free+0x220/0x220 [ 2605.607809][T13267] ? rcu_is_watching+0x15/0xb0 [ 2605.612649][T13267] ? kstrndup+0xbd/0x140 [ 2605.616997][T13267] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2605.622200][T13267] ? mark_lock+0x94/0x320 [ 2605.626615][T13267] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2605.633019][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2605.639256][T13267] ? lockdep_hardirqs_on+0x98/0x150 [ 2605.644614][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2605.650892][T13267] genl_family_rcv_msg_doit+0x211/0x310 [ 2605.656519][T13267] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2605.662774][T13267] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2605.669752][T13267] ? bpf_lsm_capable+0x9/0x10 [ 2605.674980][T13267] ? security_capable+0x89/0xb0 [ 2605.680119][T13267] genl_rcv_msg+0x619/0x7a0 [ 2605.685266][T13267] ? genl_bind+0x360/0x360 [ 2605.689931][T13267] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2605.696345][T13267] ? mark_lock+0x94/0x320 [ 2605.700769][T13267] netlink_rcv_skb+0x241/0x4d0 [ 2605.705607][T13267] ? genl_bind+0x360/0x360 [ 2605.710630][T13267] ? netlink_ack+0x1180/0x1180 [ 2605.715476][T13267] ? down_read+0x190/0x2e0 [ 2605.719973][T13267] ? down_read+0x19f/0x2e0 [ 2605.724467][T13267] ? down_read+0x1ac/0x2e0 [ 2605.728976][T13267] genl_rcv+0x28/0x40 [ 2605.733105][T13267] netlink_unicast+0x751/0x8d0 [ 2605.737946][T13267] netlink_sendmsg+0x8d0/0xbf0 [ 2605.742813][T13267] ? netlink_getsockopt+0x590/0x590 [ 2605.748077][T13267] ? aa_sock_msg_perm+0x94/0x150 [ 2605.753096][T13267] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2605.758441][T13267] ? security_socket_sendmsg+0x80/0xa0 [ 2605.763963][T13267] ? netlink_getsockopt+0x590/0x590 [ 2605.769235][T13267] ____sys_sendmsg+0x5ba/0x960 [ 2605.774069][T13267] ? __asan_memset+0x22/0x40 [ 2605.778722][T13267] ? __sys_sendmsg_sock+0x30/0x30 [ 2605.783800][T13267] ? __import_iovec+0x5f2/0x850 [ 2605.788962][T13267] ? import_iovec+0x73/0xa0 [ 2605.793555][T13267] ___sys_sendmsg+0x2a6/0x360 [ 2605.798313][T13267] ? __sys_sendmsg+0x2a0/0x2a0 [ 2605.803199][T13267] __se_sys_sendmsg+0x1c2/0x2b0 [ 2605.808118][T13267] ? __x64_sys_sendmsg+0x80/0x80 [ 2605.813113][T13267] ? lockdep_hardirqs_on+0x98/0x150 [ 2605.818392][T13267] ? __x64_sys_sendmsg+0x1d/0x80 [ 2605.823411][T13267] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 2605.829032][T13267] do_syscall_64+0x55/0xb0 [ 2605.833603][T13267] ? clear_bhb_loop+0x40/0x90 [ 2605.838341][T13267] ? clear_bhb_loop+0x40/0x90 [ 2605.843094][T13267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2605.849149][T13267] RIP: 0033:0x7fea42f9ce59 [ 2605.853616][T13267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2605.873287][T13267] RSP: 002b:00007fea43e0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2605.881777][T13267] RAX: ffffffffffffffda RBX: 00007fea43215fa0 RCX: 00007fea42f9ce59 [ 2605.889831][T13267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2605.897866][T13267] RBP: 00007fea43032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2605.905890][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2605.913914][T13267] R13: 00007fea43216038 R14: 00007fea43215fa0 R15: 00007fffd6959ab8 [ 2605.921992][T13267] [ 2606.566507][T13288] validate_nla: 5 callbacks suppressed [ 2606.566526][T13288] netlink: 'syz.3.15229': attribute type 1 has an invalid length. [ 2606.688507][T13288] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.15229'. [ 2606.748911][T13288] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.15229'. [ 2606.899230][T13285] netlink: 'syz.2.15228': attribute type 3 has an invalid length. [ 2606.997279][T13285] netlink: 'syz.2.15228': attribute type 1 has an invalid length. [ 2607.045332][T13285] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.15228'. [ 2607.446868][T15768] Bluetooth: hci2: command 0x0406 tx timeout [ 2607.789150][T13297] netlink: 'syz.0.15233': attribute type 10 has an invalid length. [ 2609.032034][T13317] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15239'. [ 2609.132239][T13317] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2609.141188][T13317] CPU: 1 PID: 13317 Comm: syz.3.15239 Not tainted syzkaller #0 [ 2609.148799][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2609.158924][T13317] Call Trace: [ 2609.162349][T13317] [ 2609.165329][T13317] dump_stack_lvl+0x18c/0x250 [ 2609.170122][T13317] ? show_regs_print_info+0x20/0x20 [ 2609.175404][T13317] ? load_image+0x420/0x420 [ 2609.179992][T13317] sysfs_warn_dup+0x8e/0xa0 [ 2609.184565][T13317] sysfs_do_create_link_sd+0xc0/0x110 [ 2609.190003][T13317] device_add_class_symlinks+0x1cf/0x240 [ 2609.195718][T13317] device_add+0x507/0xc50 [ 2609.200132][T13317] wiphy_register+0x1dad/0x2ae0 [ 2609.205077][T13317] ? cfg80211_event_work+0x40/0x40 [ 2609.210244][T13317] ? minstrel_ht_alloc+0x88a/0x990 [ 2609.215427][T13317] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2609.221575][T13317] ieee80211_register_hw+0x3464/0x4250 [ 2609.227131][T13317] ? ieee80211_tasklet_handler+0x20/0x20 [ 2609.232835][T13317] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2609.238809][T13317] ? __debug_object_init+0xec/0x450 [ 2609.244078][T13317] ? __asan_memset+0x22/0x40 [ 2609.248742][T13317] ? __hrtimer_init+0x186/0x270 [ 2609.253656][T13317] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2609.259466][T13317] ? mac80211_hwsim_free+0x220/0x220 [ 2609.264812][T13317] ? rcu_is_watching+0x15/0xb0 [ 2609.269639][T13317] ? kstrndup+0xbd/0x140 [ 2609.273962][T13317] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2609.279159][T13317] ? __nla_validate+0x50/0x50 [ 2609.283914][T13317] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2609.290316][T13317] ? __nla_parse+0x24/0x50 [ 2609.294799][T13317] ? __nla_parse+0x40/0x50 [ 2609.299274][T13317] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2609.305674][T13317] genl_family_rcv_msg_doit+0x211/0x310 [ 2609.311299][T13317] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2609.317259][T13317] ? lockdep_hardirqs_on+0x98/0x150 [ 2609.322537][T13317] ? genl_rcv_msg+0x5f6/0x7a0 [ 2609.327376][T13317] genl_rcv_msg+0x619/0x7a0 [ 2609.331955][T13317] ? genl_bind+0x360/0x360 [ 2609.336517][T13317] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2609.342929][T13317] ? mark_lock+0x94/0x320 [ 2609.347424][T13317] netlink_rcv_skb+0x241/0x4d0 [ 2609.352353][T13317] ? genl_bind+0x360/0x360 [ 2609.356870][T13317] ? netlink_ack+0x1180/0x1180 [ 2609.361788][T13317] ? down_read+0x61/0x2e0 [ 2609.366169][T13317] ? down_read+0x1ac/0x2e0 [ 2609.370652][T13317] genl_rcv+0x28/0x40 [ 2609.374836][T13317] netlink_unicast+0x751/0x8d0 [ 2609.379793][T13317] netlink_sendmsg+0x8d0/0xbf0 [ 2609.384621][T13317] ? lockdep_hardirqs_on+0x98/0x150 [ 2609.389906][T13317] ? netlink_getsockopt+0x590/0x590 [ 2609.395178][T13317] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2609.400541][T13317] ? security_socket_sendmsg+0x80/0xa0 [ 2609.406057][T13317] ? netlink_getsockopt+0x590/0x590 [ 2609.411327][T13317] ____sys_sendmsg+0x5ba/0x960 [ 2609.416366][T13317] ? __asan_memset+0x22/0x40 [ 2609.421035][T13317] ? __sys_sendmsg_sock+0x30/0x30 [ 2609.426148][T13317] ? __import_iovec+0x5f2/0x850 [ 2609.431068][T13317] ? import_iovec+0x73/0xa0 [ 2609.435637][T13317] ___sys_sendmsg+0x2a6/0x360 [ 2609.440517][T13317] ? __sys_sendmsg+0x2a0/0x2a0 [ 2609.445404][T13317] __se_sys_sendmsg+0x1c2/0x2b0 [ 2609.450407][T13317] ? __x64_sys_sendmsg+0x80/0x80 [ 2609.455450][T13317] do_syscall_64+0x55/0xb0 [ 2609.459932][T13317] ? clear_bhb_loop+0x40/0x90 [ 2609.464662][T13317] ? clear_bhb_loop+0x40/0x90 [ 2609.469486][T13317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2609.475443][T13317] RIP: 0033:0x7f3c12b9ce59 [ 2609.480004][T13317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2609.499938][T13317] RSP: 002b:00007f3c13a94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2609.509090][T13317] RAX: ffffffffffffffda RBX: 00007f3c12e15fa0 RCX: 00007f3c12b9ce59 [ 2609.517217][T13317] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2609.525255][T13317] RBP: 00007f3c12c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2609.533287][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2609.541322][T13317] R13: 00007f3c12e16038 R14: 00007f3c12e15fa0 R15: 00007ffe9ee6e518 [ 2609.549455][T13317] [ 2610.070078][T13342] netlink: 'syz.0.15248': attribute type 1 has an invalid length. [ 2610.102977][T13336] netlink: 'syz.1.15246': attribute type 10 has an invalid length. [ 2610.266392][T13345] netlink: 'syz.3.15247': attribute type 3 has an invalid length. [ 2610.286269][T13345] netlink: 'syz.3.15247': attribute type 1 has an invalid length. [ 2610.365237][T13345] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.15247'. [ 2610.660493][T13336] team0 (unregistering): Port device team_slave_1 removed [ 2610.744781][T13336] team0 (unregistering): Port device wlan1 removed [ 2610.780225][T13336] team0 (unregistering): Port device geneve1 removed [ 2610.835081][T13336] team0 (unregistering): Port device hsr_slave_0 removed [ 2610.897057][T13342] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.15248'. [ 2610.927230][T13342] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.15248'. [ 2611.150103][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15252'. [ 2612.648618][T13382] netlink: 'syz.1.15260': attribute type 3 has an invalid length. [ 2612.657595][T13382] netlink: 'syz.1.15260': attribute type 1 has an invalid length. [ 2612.665499][T13382] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.15260'. [ 2613.026541][T13385] netlink: 'syz.2.15262': attribute type 10 has an invalid length. [ 2613.268250][T13385] team_slave_1: left promiscuous mode [ 2613.295988][T13385] team_slave_1: left allmulticast mode [ 2614.090966][T13385] team0 (unregistering): Port device team_slave_1 removed [ 2614.108612][T13385] mac80211_hwsim hwsim8 ..ãc¤±: left promiscuous mode [ 2614.115576][T13385] mac80211_hwsim hwsim8 ..ãc¤±: left allmulticast mode [ 2614.126538][T13385] team0 (unregistering): Port device ..ãc¤± removed [ 2614.136336][T13385] geneve1: left promiscuous mode [ 2614.147818][T13385] geneve1: left allmulticast mode [ 2614.156033][T13385] team0 (unregistering): Port device geneve1 removed [ 2614.163744][T13385] hsr_slave_0: left promiscuous mode [ 2614.171326][T13385] hsr_slave_0: left allmulticast mode [ 2614.182683][T13385] team0 (unregistering): Port device hsr_slave_0 removed [ 2614.221951][T13393] netlink: 188 bytes leftover after parsing attributes in process `syz.0.15264'. [ 2614.551936][T13407] netlink: 'syz.3.15272': attribute type 39 has an invalid length. [ 2615.074982][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15275'. [ 2616.386091][T13452] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.15285'. [ 2616.412542][T13448] netlink: 'syz.1.15285': attribute type 1 has an invalid length. [ 2616.485719][T13452] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.15285'. [ 2617.039543][T13462] netlink: 'syz.0.15289': attribute type 39 has an invalid length. [ 2617.923537][T13460] netlink: 188 bytes leftover after parsing attributes in process `syz.3.15288'. [ 2618.824287][T13470] netlink: 'syz.0.15292': attribute type 3 has an invalid length. [ 2618.834012][T13470] netlink: 137972 bytes leftover after parsing attributes in process `syz.0.15292'. [ 2619.194713][T13488] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15306'. [ 2619.345467][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15299'. [ 2619.475845][T13496] netlink: 'syz.0.15301': attribute type 29 has an invalid length. [ 2619.521716][T13496] netlink: 'syz.0.15301': attribute type 29 has an invalid length. [ 2619.889418][T13512] netlink: 'syz.2.15304': attribute type 1 has an invalid length. [ 2619.962524][T13512] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.15304'. [ 2619.978004][T13512] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.15304'. [ 2620.431223][T13521] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15310'. [ 2620.860411][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15313'. [ 2621.116446][T13531] netlink: 'syz.1.15316': attribute type 29 has an invalid length. [ 2621.151899][T13531] netlink: 'syz.1.15316': attribute type 29 has an invalid length. [ 2622.330632][T13557] netlink: 'syz.2.15322': attribute type 39 has an invalid length. [ 2623.026595][T13573] netlink: 'syz.3.15329': attribute type 29 has an invalid length. [ 2623.214743][T13573] netlink: 'syz.3.15329': attribute type 29 has an invalid length. [ 2623.879278][T13593] netlink: 'syz.1.15337': attribute type 39 has an invalid length. [ 2624.744590][T13610] netlink: 'syz.2.15344': attribute type 29 has an invalid length. [ 2624.808827][T13610] netlink: 'syz.2.15344': attribute type 29 has an invalid length. [ 2625.027943][T13619] vcan0: entered allmulticast mode [ 2625.059161][T13619] netlink: 'syz.3.15348': attribute type 10 has an invalid length. [ 2625.705480][T13634] netlink: 'syz.2.15355': attribute type 39 has an invalid length. [ 2626.172289][T13641] netlink: 'syz.2.15357': attribute type 29 has an invalid length. [ 2626.219100][T13641] netlink: 'syz.2.15357': attribute type 29 has an invalid length. [ 2626.805622][T13654] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15361'. [ 2626.870401][T13654] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2626.906876][T13654] CPU: 1 PID: 13654 Comm: syz.1.15361 Not tainted syzkaller #0 [ 2626.914614][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2626.924739][T13654] Call Trace: [ 2626.928078][T13654] [ 2626.931066][T13654] dump_stack_lvl+0x18c/0x250 [ 2626.935835][T13654] ? show_regs_print_info+0x20/0x20 [ 2626.941109][T13654] ? load_image+0x420/0x420 [ 2626.945717][T13654] sysfs_warn_dup+0x8e/0xa0 [ 2626.950305][T13654] sysfs_do_create_link_sd+0xc0/0x110 [ 2626.955755][T13654] device_add_class_symlinks+0x1cf/0x240 [ 2626.961487][T13654] device_add+0x507/0xc50 [ 2626.965914][T13654] wiphy_register+0x1dad/0x2ae0 [ 2626.970901][T13654] ? cfg80211_event_work+0x40/0x40 [ 2626.976124][T13654] ? minstrel_ht_alloc+0x88a/0x990 [ 2626.981717][T13654] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2626.987891][T13654] ieee80211_register_hw+0x3464/0x4250 [ 2626.993750][T13654] ? ieee80211_tasklet_handler+0x20/0x20 [ 2626.999593][T13654] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2627.005594][T13654] ? __debug_object_init+0xec/0x450 [ 2627.010996][T13654] ? __asan_memset+0x22/0x40 [ 2627.016144][T13654] ? __hrtimer_init+0x186/0x270 [ 2627.021467][T13654] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2627.027810][T13654] ? mac80211_hwsim_free+0x220/0x220 [ 2627.033191][T13654] ? rcu_is_watching+0x15/0xb0 [ 2627.038050][T13654] ? kstrndup+0xbd/0x140 [ 2627.042412][T13654] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2627.047791][T13654] ? __nla_validate+0x50/0x50 [ 2627.052593][T13654] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2627.059080][T13654] ? __nla_parse+0x40/0x50 [ 2627.063680][T13654] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2627.070138][T13654] genl_family_rcv_msg_doit+0x211/0x310 [ 2627.075776][T13654] ? end_current_label_crit_section+0x170/0x170 [ 2627.082135][T13654] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2627.088140][T13654] ? bpf_lsm_capable+0x9/0x10 [ 2627.092994][T13654] ? security_capable+0x89/0xb0 [ 2627.097952][T13654] genl_rcv_msg+0x619/0x7a0 [ 2627.102557][T13654] ? genl_bind+0x360/0x360 [ 2627.107053][T13654] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2627.113463][T13654] ? perf_trace_lock+0x304/0x3b0 [ 2627.118512][T13654] netlink_rcv_skb+0x241/0x4d0 [ 2627.123357][T13654] ? genl_bind+0x360/0x360 [ 2627.127865][T13654] ? netlink_ack+0x1180/0x1180 [ 2627.132737][T13654] ? __lock_acquire+0x7d40/0x7d40 [ 2627.137866][T13654] ? net_generic+0x1e/0x240 [ 2627.142555][T13654] ? down_read+0x1ac/0x2e0 [ 2627.147056][T13654] genl_rcv+0x28/0x40 [ 2627.151092][T13654] netlink_unicast+0x751/0x8d0 [ 2627.155936][T13654] netlink_sendmsg+0x8d0/0xbf0 [ 2627.160771][T13654] ? perf_trace_lock+0x304/0x3b0 [ 2627.165815][T13654] ? netlink_getsockopt+0x590/0x590 [ 2627.171089][T13654] ? aa_sock_msg_perm+0x94/0x150 [ 2627.176117][T13654] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2627.181466][T13654] ? security_socket_sendmsg+0x80/0xa0 [ 2627.187015][T13654] ? netlink_getsockopt+0x590/0x590 [ 2627.192287][T13654] ____sys_sendmsg+0x5ba/0x960 [ 2627.197150][T13654] ? __asan_memset+0x22/0x40 [ 2627.202363][T13654] ? __sys_sendmsg_sock+0x30/0x30 [ 2627.207553][T13654] ? __import_iovec+0x5f2/0x850 [ 2627.212504][T13654] ? import_iovec+0x73/0xa0 [ 2627.217086][T13654] ___sys_sendmsg+0x2a6/0x360 [ 2627.221902][T13654] ? __sys_sendmsg+0x2a0/0x2a0 [ 2627.226851][T13654] __se_sys_sendmsg+0x1c2/0x2b0 [ 2627.231880][T13654] ? __x64_sys_sendmsg+0x80/0x80 [ 2627.236940][T13654] ? lockdep_hardirqs_on+0x98/0x150 [ 2627.242229][T13654] do_syscall_64+0x55/0xb0 [ 2627.246722][T13654] ? clear_bhb_loop+0x40/0x90 [ 2627.252067][T13654] ? clear_bhb_loop+0x40/0x90 [ 2627.256823][T13654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2627.262807][T13654] RIP: 0033:0x7fe2c6b9ce59 [ 2627.267279][T13654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2627.286977][T13654] RSP: 002b:00007fe2c79a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2627.295541][T13654] RAX: ffffffffffffffda RBX: 00007fe2c6e16090 RCX: 00007fe2c6b9ce59 [ 2627.303595][T13654] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2627.311644][T13654] RBP: 00007fe2c6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2627.319683][T13654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2627.327720][T13654] R13: 00007fe2c6e16128 R14: 00007fe2c6e16090 R15: 00007ffdac4d3988 [ 2627.335803][T13654] [ 2628.284828][T13676] netlink: 'syz.3.15368': attribute type 29 has an invalid length. [ 2628.338471][T13676] netlink: 'syz.3.15368': attribute type 29 has an invalid length. [ 2628.514091][T13682] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2628.547427][T13682] netlink: 'syz.2.15371': attribute type 39 has an invalid length. [ 2628.647157][T13687] vcan0: entered allmulticast mode [ 2629.138817][T13693] validate_nla: 1 callbacks suppressed [ 2629.138838][T13693] netlink: 'syz.3.15376': attribute type 21 has an invalid length. [ 2629.265763][T13693] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15376'. [ 2629.293725][T13693] netlink: 'syz.3.15376': attribute type 5 has an invalid length. [ 2629.316949][T13693] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15376'. [ 2629.802297][T13708] netlink: 'syz.0.15379': attribute type 1 has an invalid length. [ 2629.874995][T13708] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.15379'. [ 2629.914802][T13708] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.15379'. [ 2631.513204][T13722] netlink: 'syz.2.15385': attribute type 3 has an invalid length. [ 2631.532500][T13722] netlink: 16062 bytes leftover after parsing attributes in process `syz.2.15385'. [ 2631.898571][T13734] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2631.934631][T13734] netlink: 'syz.3.15389': attribute type 39 has an invalid length. [ 2632.261937][T13730] aaaaaaaaaaaaaaa: entered promiscuous mode [ 2632.894766][T13756] netlink: 'syz.1.15397': attribute type 1 has an invalid length. [ 2633.219211][T13756] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.15397'. [ 2633.265080][T13756] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.15397'. [ 2633.976665][T13770] vcan0: entered allmulticast mode [ 2634.085198][T13770] netlink: 'syz.2.15401': attribute type 10 has an invalid length. [ 2636.484907][T13800] aaaaaaaaaaaaaaa: entered promiscuous mode [ 2638.986675][T13852] aaaaaaaaaaaaaaa: entered promiscuous mode [ 2641.295645][T13909] netlink: 'syz.0.15450': attribute type 1 has an invalid length. [ 2641.423860][T13909] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.15450'. [ 2641.453750][T13909] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.15450'. [ 2642.557090][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15464'. [ 2643.234494][T13944] netlink: 'syz.3.15466': attribute type 29 has an invalid length. [ 2643.265676][T13944] netlink: 'syz.3.15466': attribute type 29 has an invalid length. [ 2643.301839][T13949] netlink: 'syz.3.15466': attribute type 29 has an invalid length. [ 2643.352867][T13944] netlink: 'syz.3.15466': attribute type 29 has an invalid length. [ 2643.424040][T13949] netlink: 'syz.3.15466': attribute type 29 has an invalid length. [ 2645.839885][T13977] netlink: 'syz.2.15477': attribute type 6 has an invalid length. [ 2645.865930][T13977] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15477'. [ 2645.920794][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15475'. [ 2646.903643][T14010] netlink: 'syz.0.15490': attribute type 6 has an invalid length. [ 2646.941483][T14010] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15490'. [ 2646.986145][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15491'. [ 2647.433600][T14023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15497'. [ 2647.469942][T14029] netlink: 'syz.0.15498': attribute type 21 has an invalid length. [ 2647.495526][T14029] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15498'. [ 2647.517630][T14029] netlink: 'syz.0.15498': attribute type 5 has an invalid length. [ 2647.525530][T14029] netlink: 3 bytes leftover after parsing attributes in process `syz.0.15498'. [ 2648.227685][T14049] netlink: 'syz.1.15503': attribute type 6 has an invalid length. [ 2648.257836][T14049] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15503'. [ 2648.524550][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15504'. [ 2649.335459][T14076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15515'. [ 2649.569706][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15519'. [ 2650.852415][T14117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15531'. [ 2652.151179][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.157741][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.336576][T14166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15548'. [ 2652.569991][T14173] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15552'. [ 2652.620344][T14173] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2652.638204][T14177] netlink: 'syz.1.15552': attribute type 10 has an invalid length. [ 2653.440162][T14187] netlink: 'syz.2.15559': attribute type 29 has an invalid length. [ 2653.459419][T14187] netlink: 'syz.2.15559': attribute type 29 has an invalid length. [ 2653.469431][T14189] netlink: 'syz.2.15559': attribute type 29 has an invalid length. [ 2653.485802][T14187] netlink: 'syz.2.15559': attribute type 29 has an invalid length. [ 2653.505501][T14187] netlink: 'syz.2.15559': attribute type 29 has an invalid length. [ 2653.586122][T14188] netlink: 'syz.3.15560': attribute type 9 has an invalid length. [ 2653.595465][T14188] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.15560'. [ 2653.641853][T14194] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.15562'. [ 2654.819822][T14224] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15571'. [ 2654.855122][T14224] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2654.905018][T14224] netlink: 'syz.3.15571': attribute type 10 has an invalid length. [ 2655.519476][T14229] netlink: 'syz.0.15573': attribute type 29 has an invalid length. [ 2655.598101][T14229] netlink: 'syz.0.15573': attribute type 29 has an invalid length. [ 2657.214795][T14272] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15586'. [ 2657.263370][T14271] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.15588'. [ 2657.283541][T14272] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2658.163220][T14289] validate_nla: 10 callbacks suppressed [ 2658.163257][T14289] netlink: 'syz.3.15596': attribute type 2 has an invalid length. [ 2658.197090][T14289] netlink: 'syz.3.15596': attribute type 8 has an invalid length. [ 2658.223210][T14289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15596'. [ 2658.291108][T14287] netlink: 'syz.2.15595': attribute type 9 has an invalid length. [ 2658.306991][T14287] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.15595'. [ 2658.821071][T14296] netlink: 'syz.0.15606': attribute type 29 has an invalid length. [ 2659.083728][T14296] netlink: 'syz.0.15606': attribute type 29 has an invalid length. [ 2659.113392][T14300] netlink: 'syz.0.15606': attribute type 29 has an invalid length. [ 2659.155230][T14302] netlink: 'syz.0.15606': attribute type 29 has an invalid length. [ 2659.336490][T14303] netlink: 'syz.0.15606': attribute type 29 has an invalid length. [ 2660.101980][T14323] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.15603'. [ 2660.647693][T14330] netlink: 'syz.3.15607': attribute type 2 has an invalid length. [ 2660.679040][T14328] delete_channel: no stack [ 2661.001392][T14339] netlink: 'syz.2.15611': attribute type 10 has an invalid length. [ 2661.562305][T14355] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.15615'. [ 2661.725915][T14361] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15617'. [ 2661.770244][T14361] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15617'. [ 2662.219006][T14370] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.15621'. [ 2662.232710][T14367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15620'. [ 2662.786355][T14377] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.15622'. [ 2663.588099][T14389] validate_nla: 5 callbacks suppressed [ 2663.588159][T14389] netlink: 'syz.1.15626': attribute type 9 has an invalid length. [ 2663.630342][T14389] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.15626'. [ 2664.693089][T14407] netlink: 'syz.1.15632': attribute type 46 has an invalid length. [ 2664.786266][T14408] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.15633'. [ 2664.878048][T14411] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15632'. [ 2664.898372][T14408] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.15633'. [ 2666.697821][T14434] netlink: 'syz.1.15639': attribute type 3 has an invalid length. [ 2666.705897][T14434] netlink: 'syz.1.15639': attribute type 4 has an invalid length. [ 2666.746820][T14434] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.15639'. [ 2667.980851][T14458] netlink: 'syz.0.15642': attribute type 9 has an invalid length. [ 2668.047033][T14458] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.15642'. [ 2668.639503][T14465] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15647'. [ 2668.704250][T14465] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15647'. [ 2670.018513][T14479] netlink: 'syz.2.15651': attribute type 3 has an invalid length. [ 2670.026502][T14479] netlink: 'syz.2.15651': attribute type 4 has an invalid length. [ 2670.083068][T14479] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.15651'. [ 2672.329448][T14526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15672'. [ 2673.049025][T14541] netlink: 'syz.0.15667': attribute type 3 has an invalid length. [ 2673.073049][T14541] netlink: 'syz.0.15667': attribute type 4 has an invalid length. [ 2673.159423][T14541] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.15667'. [ 2673.189577][T14546] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 2673.226945][ T11] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2673.269803][ T11] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2674.247169][T14566] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 2674.267155][T14566] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 2674.283614][T14566] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 2674.425875][T14569] mac80211_hwsim hwsim161 wlan1: entered allmulticast mode [ 2675.195936][T14589] netlink: 'syz.2.15685': attribute type 46 has an invalid length. [ 2675.364425][T14591] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15685'. [ 2681.289130][T14650] netlink: 'syz.3.15700': attribute type 9 has an invalid length. [ 2681.328044][T14650] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.15700'. [ 2682.238201][T14658] syzkaller0: entered promiscuous mode [ 2682.267363][T14658] syzkaller0: entered allmulticast mode [ 2688.377858][T14736] syzkaller0: entered promiscuous mode [ 2688.391980][T14736] syzkaller0: entered allmulticast mode [ 2691.416548][T14773] netlink: 'syz.2.15738': attribute type 4 has an invalid length. [ 2691.427279][T14773] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15738'. [ 2692.463038][T14795] netlink: 'syz.2.15744': attribute type 9 has an invalid length. [ 2692.493294][T14795] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.15744'. [ 2692.903965][T14794] syzkaller0: entered promiscuous mode [ 2692.928220][T14794] syzkaller0: entered allmulticast mode [ 2693.018926][T14802] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15749'. [ 2693.038030][T14802] netlink: 'syz.0.15749': attribute type 28 has an invalid length. [ 2693.046424][T14802] netlink: 'syz.0.15749': attribute type 29 has an invalid length. [ 2693.085082][T14802] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15749'. [ 2696.323613][T14832] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15761'. [ 2696.343215][T14832] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2697.725980][T14853] syzkaller0: entered promiscuous mode [ 2697.733083][T14853] syzkaller0: entered allmulticast mode [ 2700.449373][T14865] netlink: 76 bytes leftover after parsing attributes in process `syz.3.15769'. [ 2700.459003][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15769'. [ 2701.613662][T14915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15785'. [ 2701.634265][T14915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15785'. [ 2701.658558][T14916] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15785'. [ 2701.709259][T14915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.15785'. [ 2702.561129][T14920] syzkaller0: entered promiscuous mode [ 2702.575579][T14929] netlink: 'syz.1.15791': attribute type 10 has an invalid length. [ 2702.584347][T14920] syzkaller0: entered allmulticast mode [ 2702.593768][T14929] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15791'. [ 2702.705052][T14929] lo: left promiscuous mode [ 2702.717325][T14929] lo: entered allmulticast mode [ 2702.780024][T14929] lo: entered promiscuous mode [ 2702.784885][T14929] lo: left allmulticast mode [ 2706.648220][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15806'. [ 2709.800299][T15022] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15821'. [ 2709.865068][T15022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2710.815759][T15047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15827'. [ 2711.373439][T15060] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15842'. [ 2711.401358][T15060] netlink: 'syz.2.15842': attribute type 28 has an invalid length. [ 2711.413021][T15060] netlink: 'syz.2.15842': attribute type 29 has an invalid length. [ 2711.422280][T15060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15842'. [ 2711.545249][T15067] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15835'. [ 2711.570492][T15067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2713.299828][T15091] netlink: 'syz.3.15844': attribute type 2 has an invalid length. [ 2713.314645][T15091] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15844'. [ 2713.406956][T15088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15844'. [ 2713.431662][T15095] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15845'. [ 2713.441822][T15095] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15845'. [ 2713.454074][T15095] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15845'. [ 2713.464869][T15095] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15845'. [ 2713.541918][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.548333][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.886142][T15107] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15849'. [ 2713.895695][T15107] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15849'. [ 2713.907379][T15107] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.15849'. [ 2714.773768][T15119] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15855'. [ 2714.808318][T15119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2715.340412][T15123] netlink: 'syz.2.15857': attribute type 6 has an invalid length. [ 2716.300201][T15140] netlink: 'syz.3.15861': attribute type 28 has an invalid length. [ 2716.329809][T15140] netlink: 'syz.3.15861': attribute type 29 has an invalid length. [ 2717.453605][T15148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2718.319107][T15158] __nla_validate_parse: 9 callbacks suppressed [ 2718.319126][T15158] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15875'. [ 2718.342832][T15158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2718.760643][T15169] netlink: 'syz.1.15871': attribute type 2 has an invalid length. [ 2718.787300][T15169] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15871'. [ 2718.833313][T15166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15871'. [ 2718.932086][T15172] netlink: 'syz.1.15873': attribute type 6 has an invalid length. [ 2718.942537][T15172] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15873'. [ 2719.797962][T15187] netlink: 'syz.3.15879': attribute type 10 has an invalid length. [ 2720.072659][T15193] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15881'. [ 2720.083666][T15193] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15881'. [ 2720.110611][T15193] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.15881'. [ 2720.171822][T15195] netlink: 'syz.1.15882': attribute type 21 has an invalid length. [ 2720.212856][T15195] netlink: 'syz.1.15882': attribute type 1 has an invalid length. [ 2720.426343][T15197] netlink: 'syz.3.15883': attribute type 2 has an invalid length. [ 2720.436519][T15197] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15883'. [ 2720.461871][T15197] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15883'. [ 2720.628049][T15203] netlink: 'syz.3.15884': attribute type 6 has an invalid length. [ 2720.639332][T15203] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15884'. [ 2720.763241][T15206] netlink: 'syz.1.15893': attribute type 2 has an invalid length. [ 2721.439435][T15216] netlink: 'syz.3.15897': attribute type 3 has an invalid length. [ 2721.719443][T15227] netlink: 'syz.2.15890': attribute type 10 has an invalid length. [ 2723.431485][T15253] __nla_validate_parse: 5 callbacks suppressed [ 2723.431524][T15253] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15901'. [ 2723.975696][T15267] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15907'. [ 2726.068271][T15289] validate_nla: 2 callbacks suppressed [ 2726.068290][T15289] netlink: 'syz.0.15914': attribute type 10 has an invalid length. [ 2726.109001][T15287] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15915'. [ 2726.846086][T15305] netlink: 'syz.0.15920': attribute type 6 has an invalid length. [ 2726.854651][T15305] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15920'. [ 2726.909269][T15301] netlink: 'syz.3.15919': attribute type 21 has an invalid length. [ 2726.919726][T15301] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15919'. [ 2726.931483][T15301] netlink: 'syz.3.15919': attribute type 5 has an invalid length. [ 2726.941088][T15301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15919'. [ 2727.094013][T15308] netlink: 'syz.0.15932': attribute type 6 has an invalid length. [ 2727.105754][T15308] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15932'. [ 2727.465990][T15316] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.15927'. [ 2727.593864][T15323] netlink: 'syz.2.15929': attribute type 1 has an invalid length. [ 2727.602278][T15323] netlink: 'syz.2.15929': attribute type 4 has an invalid length. [ 2727.611467][T15323] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.15929'. [ 2730.963045][T15334] netlink: 'syz.1.15935': attribute type 6 has an invalid length. [ 2731.153287][T15334] netlink: 164 bytes leftover after parsing attributes in process `syz.1.15935'. [ 2731.173383][T15335] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15934'. [ 2731.463587][T15346] netlink: 'syz.0.15939': attribute type 10 has an invalid length. [ 2732.035159][T15355] netlink: 'syz.1.15942': attribute type 19 has an invalid length. [ 2732.057393][T15355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15942'. [ 2732.526468][T15366] netlink: 'syz.2.15946': attribute type 6 has an invalid length. [ 2732.535826][T15366] netlink: 164 bytes leftover after parsing attributes in process `syz.2.15946'. [ 2734.724602][T15413] netlink: 'syz.3.15957': attribute type 19 has an invalid length. [ 2734.763149][T15413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15957'. [ 2735.312553][T15416] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.15960'. [ 2738.166071][T15457] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.15982'. [ 2738.186227][T15462] netlink: 'syz.3.15974': attribute type 1 has an invalid length. [ 2738.213598][T15462] netlink: 'syz.3.15974': attribute type 3 has an invalid length. [ 2738.230798][T15462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15974'. [ 2738.393757][T15468] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.15975'. [ 2738.485816][T15470] netlink: 'syz.3.15976': attribute type 10 has an invalid length. [ 2738.787627][T15476] netlink: 'syz.0.15988': attribute type 1 has an invalid length. [ 2738.796589][T15476] netlink: 'syz.0.15988': attribute type 3 has an invalid length. [ 2738.806130][T15476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15988'. [ 2741.301827][T15508] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.15989'. [ 2741.525548][T15516] netlink: 'syz.2.15990': attribute type 10 has an invalid length. [ 2743.831668][T15540] netlink: 'syz.1.15993': attribute type 1 has an invalid length. [ 2743.856880][T15540] netlink: 'syz.1.15993': attribute type 3 has an invalid length. [ 2743.866998][T15540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15993'. [ 2744.008053][T15539] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.15992'. [ 2744.632948][T15553] netlink: 'syz.3.16003': attribute type 10 has an invalid length. [ 2744.660343][T15553] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16003'. [ 2745.151105][T15565] netlink: 'syz.0.16006': attribute type 2 has an invalid length. [ 2745.228084][T15565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16006'. [ 2746.816316][T15597] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.16016'. [ 2747.498641][T15612] netlink: 'syz.0.16021': attribute type 10 has an invalid length. [ 2747.507005][T15612] netlink: 2 bytes leftover after parsing attributes in process `syz.0.16021'. [ 2747.845767][T15617] netlink: 'syz.0.16023': attribute type 9 has an invalid length. [ 2747.859345][T15617] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.16023'. [ 2748.589825][T15633] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16026'. [ 2748.855368][T15637] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.16028'. [ 2751.180734][T15674] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.16036'. [ 2751.540299][T15678] netlink: 'syz.2.16037': attribute type 9 has an invalid length. [ 2751.556942][T15678] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.16037'. [ 2752.108303][T15690] netlink: 'syz.1.16042': attribute type 5 has an invalid length. [ 2752.303629][T15692] netlink: 'syz.0.16043': attribute type 16 has an invalid length. [ 2752.317395][T15692] netlink: 'syz.0.16043': attribute type 3 has an invalid length. [ 2752.325438][T15692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16043'. [ 2753.472677][T15707] netlink: 'syz.1.16046': attribute type 10 has an invalid length. [ 2753.501041][T15707] netlink: 2 bytes leftover after parsing attributes in process `syz.1.16046'. [ 2753.697375][T15714] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.16048'. [ 2754.704336][T15728] netlink: 'syz.2.16053': attribute type 5 has an invalid length. [ 2754.889091][T15732] netlink: 'syz.1.16055': attribute type 2 has an invalid length. [ 2754.975882][T15732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16055'. [ 2756.170915][T15750] netlink: 'syz.1.16059': attribute type 16 has an invalid length. [ 2756.200796][T15750] netlink: 'syz.1.16059': attribute type 3 has an invalid length. [ 2756.232180][T15750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16059'. [ 2758.374421][T15787] netlink: 'syz.2.16069': attribute type 2 has an invalid length. [ 2758.387566][T15799] netlink: 'syz.3.16072': attribute type 16 has an invalid length. [ 2758.399281][T15799] netlink: 'syz.3.16072': attribute type 3 has an invalid length. [ 2758.407593][T15787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16069'. [ 2758.426987][T15799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16072'. [ 2759.574222][T15825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16081'. [ 2762.407658][T15889] netlink: 'syz.1.16102': attribute type 10 has an invalid length. [ 2762.428233][T15889] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16102'. [ 2764.669737][T15926] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.16112'. [ 2764.696943][T15926] openvswitch: netlink: Key type 16383 is out of range max 32 [ 2765.559517][T15942] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 2765.579885][T15942] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 2765.589628][T15942] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 2765.656641][T15944] netlink: 'syz.0.16119': attribute type 10 has an invalid length. [ 2765.665154][T15944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16119'. [ 2766.228748][T15952] syzkaller0: entered promiscuous mode [ 2766.234884][T15952] syzkaller0: entered allmulticast mode [ 2767.289271][T15981] netlink: 'syz.3.16131': attribute type 10 has an invalid length. [ 2767.315257][T15981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16131'. [ 2767.627050][T15987] sit0: left promiscuous mode [ 2767.779505][T15989] netlink: 118300 bytes leftover after parsing attributes in process `syz.3.16132'. [ 2768.109382][T15989] sit0: entered promiscuous mode [ 2768.134674][T15995] netlink: 'syz.1.16133': attribute type 4 has an invalid length. [ 2768.142901][T15995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16133'. [ 2768.313907][T15995] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2768.487913][T16008] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16139'. [ 2768.503373][T16008] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2768.574893][T16005] sit0: left allmulticast mode [ 2769.772921][T16028] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.16145'. [ 2770.760830][T16044] netlink: 'syz.3.16149': attribute type 4 has an invalid length. [ 2770.787622][T16044] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16149'. [ 2772.325268][T16057] netlink: 'syz.1.16155': attribute type 21 has an invalid length. [ 2772.364448][T16057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16155'. [ 2772.685940][T16071] sit0: left promiscuous mode [ 2773.339628][T16090] netlink: 'syz.1.16169': attribute type 10 has an invalid length. [ 2773.476452][T16086] netlink: 'syz.2.16161': attribute type 4 has an invalid length. [ 2773.496520][T16092] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.16163'. [ 2773.507021][T16086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16161'. [ 2774.093841][T16097] sit0: left promiscuous mode [ 2774.497691][T16100] netlink: 'syz.0.16164': attribute type 10 has an invalid length. [ 2774.547016][T16103] sit0: entered promiscuous mode [ 2774.674029][T16101] netlink: 118300 bytes leftover after parsing attributes in process `syz.1.16165'. [ 2775.009632][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.016406][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.087994][T16116] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16170'. [ 2776.370279][T16146] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16181'. [ 2776.437712][T16148] sit0: left promiscuous mode [ 2776.532357][T16150] netlink: 118300 bytes leftover after parsing attributes in process `syz.0.16178'. [ 2776.659399][T16155] netlink: 'syz.1.16183': attribute type 10 has an invalid length. [ 2776.678647][T16150] sit0: entered promiscuous mode [ 2776.774332][T16152] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.16182'. [ 2778.945421][T16190] netlink: 'syz.3.16192': attribute type 9 has an invalid length. [ 2778.956980][T16190] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.16192'. [ 2778.968654][T16194] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.16194'. [ 2780.086608][T16202] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.16197'. [ 2780.729303][T16213] sit0: entered promiscuous mode [ 2780.739255][T16213] sit0: left allmulticast mode [ 2781.757999][T16230] C: renamed from team_slave_0 [ 2781.770189][T16230] netlink: 'syz.2.16204': attribute type 3 has an invalid length. [ 2781.781493][T16230] netlink: 'syz.2.16204': attribute type 1 has an invalid length. [ 2781.798445][T16230] netlink: 116 bytes leftover after parsing attributes in process `syz.2.16204'. [ 2782.764129][T16245] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16205'. [ 2782.837215][T16245] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16205'. [ 2782.977657][T16234] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16205'. [ 2783.093630][T16254] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16205'. [ 2783.375673][T16234] netlink: 'syz.1.16205': attribute type 10 has an invalid length. [ 2783.420110][T16234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16205'. [ 2783.465802][T16245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16205'. [ 2785.246442][T16293] netlink: 144 bytes leftover after parsing attributes in process `syz.2.16222'. [ 2788.558981][T16327] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.16228'. [ 2789.978358][T16347] netlink: 'syz.0.16239': attribute type 9 has an invalid length. [ 2790.017528][T16347] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.16239'. [ 2791.164525][T16359] netlink: 'syz.1.16241': attribute type 27 has an invalid length. [ 2791.191199][T16359] netlink: 'syz.1.16241': attribute type 4 has an invalid length. [ 2791.236846][T16359] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16241'. [ 2791.827620][T16369] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.16243'. [ 2791.840296][T16369] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.16243'. [ 2791.907120][T16364] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.16243'. [ 2791.998114][T16369] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.16243'. [ 2792.220922][T16381] netlink: 'syz.3.16243': attribute type 10 has an invalid length. [ 2792.278368][T16381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16243'. [ 2792.341511][T16381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16243'. [ 2792.721991][T16391] netlink: 'syz.1.16249': attribute type 3 has an invalid length. [ 2792.757538][T16391] netlink: 'syz.1.16249': attribute type 1 has an invalid length. [ 2792.769875][T16391] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.16249'. [ 2793.494273][T16402] netlink: 144 bytes leftover after parsing attributes in process `syz.1.16251'. [ 2793.775403][T16410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2793.827777][T16408] netlink: 'syz.3.16254': attribute type 1 has an invalid length. [ 2793.835834][T16408] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.16254'. [ 2794.950967][T16429] netlink: 'syz.2.16256': attribute type 10 has an invalid length. [ 2795.590820][T16436] netlink: 'syz.1.16270': attribute type 9 has an invalid length. [ 2796.670152][T16457] __nla_validate_parse: 7 callbacks suppressed [ 2796.670192][T16457] netlink: 144 bytes leftover after parsing attributes in process `syz.0.16266'. [ 2798.447745][T16480] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2798.465207][T16480] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2798.483692][T16475] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2798.557814][T16480] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2798.937556][T16480] netlink: 'syz.0.16271': attribute type 10 has an invalid length. [ 2799.024322][T16480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2799.049137][T16487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16271'. [ 2799.366577][T16497] netlink: 'syz.0.16280': attribute type 3 has an invalid length. [ 2799.387468][T16497] netlink: 'syz.0.16280': attribute type 1 has an invalid length. [ 2799.424847][T16497] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.16280'. [ 2799.449265][T16499] netlink: 'syz.2.16279': attribute type 27 has an invalid length. [ 2799.458291][T16499] netlink: 'syz.2.16279': attribute type 4 has an invalid length. [ 2799.466497][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16279'. [ 2799.848860][T16509] netlink: 'syz.3.16283': attribute type 16 has an invalid length. [ 2799.876851][T16509] netlink: 'syz.3.16283': attribute type 3 has an invalid length. [ 2799.895359][T16509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16283'. [ 2801.458402][T16543] netlink: 'syz.3.16291': attribute type 3 has an invalid length. [ 2801.486157][T16543] netlink: 'syz.3.16291': attribute type 1 has an invalid length. [ 2801.528191][T16546] netlink: 'syz.1.16289': attribute type 10 has an invalid length. [ 2801.653037][T16549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2803.699540][T16582] __nla_validate_parse: 7 callbacks suppressed [ 2803.699559][T16582] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16303'. [ 2803.715252][T16582] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16303'. [ 2803.739894][T16580] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16303'. [ 2803.754532][T16582] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.16303'. [ 2803.960942][T16587] netlink: 'syz.1.16303': attribute type 10 has an invalid length. [ 2803.972999][T16587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16303'. [ 2803.985679][T16587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16303'. [ 2804.519957][T16594] netlink: 'syz.3.16305': attribute type 27 has an invalid length. [ 2804.576091][T16594] netlink: 'syz.3.16305': attribute type 4 has an invalid length. [ 2804.621068][T16594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16305'. [ 2805.464208][T16617] netlink: 'syz.3.16311': attribute type 10 has an invalid length. [ 2808.665029][T16664] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.16325'. [ 2809.529912][T16677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2812.298501][T16718] netlink: 'syz.0.16336': attribute type 27 has an invalid length. [ 2812.310178][T16718] netlink: 'syz.0.16336': attribute type 4 has an invalid length. [ 2812.319711][T16718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16336'. [ 2813.302640][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2813.472425][T16733] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16353'. [ 2813.508385][T16733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2814.110798][T16742] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.16347'. [ 2814.155154][T16742] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2814.184890][T16742] CPU: 0 PID: 16742 Comm: syz.1.16347 Not tainted syzkaller #0 [ 2814.192610][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2814.202727][T16742] Call Trace: [ 2814.206051][T16742] [ 2814.209033][T16742] dump_stack_lvl+0x18c/0x250 [ 2814.213769][T16742] ? show_regs_print_info+0x20/0x20 [ 2814.219025][T16742] ? load_image+0x420/0x420 [ 2814.223604][T16742] sysfs_warn_dup+0x8e/0xa0 [ 2814.228174][T16742] sysfs_do_create_link_sd+0xc0/0x110 [ 2814.233598][T16742] device_add_class_symlinks+0x1cf/0x240 [ 2814.239299][T16742] device_add+0x507/0xc50 [ 2814.243708][T16742] wiphy_register+0x1dad/0x2ae0 [ 2814.248651][T16742] ? cfg80211_event_work+0x40/0x40 [ 2814.253867][T16742] ? minstrel_ht_alloc+0x88a/0x990 [ 2814.259038][T16742] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2814.265173][T16742] ieee80211_register_hw+0x3464/0x4250 [ 2814.270723][T16742] ? ieee80211_tasklet_handler+0x20/0x20 [ 2814.276419][T16742] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2814.282382][T16742] ? __debug_object_init+0xec/0x450 [ 2814.287644][T16742] ? __asan_memset+0x22/0x40 [ 2814.292302][T16742] ? __hrtimer_init+0x186/0x270 [ 2814.297210][T16742] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2814.303013][T16742] ? mac80211_hwsim_free+0x220/0x220 [ 2814.308359][T16742] ? rcu_is_watching+0x15/0xb0 [ 2814.313185][T16742] ? kstrndup+0xbd/0x140 [ 2814.317504][T16742] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2814.322692][T16742] ? __nla_validate+0x50/0x50 [ 2814.327445][T16742] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2814.333844][T16742] ? __nla_parse+0x40/0x50 [ 2814.338314][T16742] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2814.344714][T16742] genl_family_rcv_msg_doit+0x211/0x310 [ 2814.350324][T16742] ? end_current_label_crit_section+0x170/0x170 [ 2814.356639][T16742] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2814.362606][T16742] ? bpf_lsm_capable+0x9/0x10 [ 2814.367357][T16742] ? security_capable+0x89/0xb0 [ 2814.372277][T16742] genl_rcv_msg+0x619/0x7a0 [ 2814.376853][T16742] ? genl_bind+0x360/0x360 [ 2814.381322][T16742] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2814.387720][T16742] netlink_rcv_skb+0x241/0x4d0 [ 2814.392539][T16742] ? genl_bind+0x360/0x360 [ 2814.397014][T16742] ? netlink_ack+0x1180/0x1180 [ 2814.401860][T16742] ? genl_bind+0x360/0x360 [ 2814.406344][T16742] genl_rcv+0x28/0x40 [ 2814.410384][T16742] netlink_unicast+0x751/0x8d0 [ 2814.415214][T16742] netlink_sendmsg+0x8d0/0xbf0 [ 2814.420042][T16742] ? netlink_getsockopt+0x590/0x590 [ 2814.425297][T16742] ? aa_sock_msg_perm+0x94/0x150 [ 2814.430306][T16742] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2814.435658][T16742] ? security_socket_sendmsg+0x80/0xa0 [ 2814.441177][T16742] ? netlink_getsockopt+0x590/0x590 [ 2814.446429][T16742] ____sys_sendmsg+0x5ba/0x960 [ 2814.451253][T16742] ? __asan_memset+0x22/0x40 [ 2814.455898][T16742] ? __sys_sendmsg_sock+0x30/0x30 [ 2814.460968][T16742] ? __import_iovec+0x5f2/0x850 [ 2814.465877][T16742] ? import_iovec+0x73/0xa0 [ 2814.470439][T16742] ___sys_sendmsg+0x2a6/0x360 [ 2814.475167][T16742] ? __sys_sendmsg+0x2a0/0x2a0 [ 2814.480029][T16742] __se_sys_sendmsg+0x1c2/0x2b0 [ 2814.484924][T16742] ? __x64_sys_sendmsg+0x80/0x80 [ 2814.489924][T16742] ? __se_sys_sendmsg+0xa/0x2b0 [ 2814.494825][T16742] do_syscall_64+0x55/0xb0 [ 2814.499292][T16742] ? clear_bhb_loop+0x40/0x90 [ 2814.504006][T16742] ? clear_bhb_loop+0x40/0x90 [ 2814.508724][T16742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2814.514673][T16742] RIP: 0033:0x7fe2c6b9ce59 [ 2814.519132][T16742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2814.538782][T16742] RSP: 002b:00007fe2c79c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2814.547258][T16742] RAX: ffffffffffffffda RBX: 00007fe2c6e15fa0 RCX: 00007fe2c6b9ce59 [ 2814.555272][T16742] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2814.563285][T16742] RBP: 00007fe2c6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2814.571294][T16742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2814.579296][T16742] R13: 00007fe2c6e16038 R14: 00007fe2c6e15fa0 R15: 00007ffdac4d3988 [ 2814.587352][T16742] [ 2814.861326][T16749] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.16349'. [ 2816.670149][T16770] netlink: 'syz.3.16356': attribute type 22 has an invalid length. [ 2816.687605][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16356'. [ 2817.567127][T16789] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.16363'. [ 2817.733164][T16789] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2817.771333][T16789] CPU: 1 PID: 16789 Comm: syz.3.16363 Not tainted syzkaller #0 [ 2817.779046][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2817.789151][T16789] Call Trace: [ 2817.792473][T16789] [ 2817.795451][T16789] dump_stack_lvl+0x18c/0x250 [ 2817.800199][T16789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2817.806428][T16789] ? show_regs_print_info+0x20/0x20 [ 2817.811685][T16789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2817.817924][T16789] sysfs_warn_dup+0x8e/0xa0 [ 2817.822485][T16789] sysfs_do_create_link_sd+0xc0/0x110 [ 2817.827905][T16789] device_add_class_symlinks+0x1cf/0x240 [ 2817.833615][T16789] device_add+0x507/0xc50 [ 2817.838022][T16789] wiphy_register+0x1dad/0x2ae0 [ 2817.842963][T16789] ? cfg80211_event_work+0x40/0x40 [ 2817.848135][T16789] ? minstrel_ht_alloc+0x88a/0x990 [ 2817.853316][T16789] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2817.859462][T16789] ieee80211_register_hw+0x3464/0x4250 [ 2817.865006][T16789] ? ieee80211_tasklet_handler+0x20/0x20 [ 2817.870693][T16789] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2817.876655][T16789] ? __debug_object_init+0xec/0x450 [ 2817.881920][T16789] ? __asan_memset+0x22/0x40 [ 2817.886564][T16789] ? __hrtimer_init+0x186/0x270 [ 2817.891476][T16789] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2817.897279][T16789] ? mac80211_hwsim_free+0x220/0x220 [ 2817.902626][T16789] ? rcu_is_watching+0x15/0xb0 [ 2817.907442][T16789] ? kstrndup+0xbd/0x140 [ 2817.911772][T16789] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2817.916948][T16789] ? __nla_validate+0x50/0x50 [ 2817.921696][T16789] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2817.928100][T16789] ? __nla_parse+0x40/0x50 [ 2817.932569][T16789] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2817.938960][T16789] genl_family_rcv_msg_doit+0x211/0x310 [ 2817.944590][T16789] ? end_current_label_crit_section+0x170/0x170 [ 2817.950897][T16789] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2817.956859][T16789] ? bpf_lsm_capable+0x9/0x10 [ 2817.961613][T16789] ? security_capable+0x89/0xb0 [ 2817.966563][T16789] genl_rcv_msg+0x619/0x7a0 [ 2817.971132][T16789] ? genl_bind+0x360/0x360 [ 2817.975626][T16789] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2817.982018][T16789] ? lockdep_hardirqs_on+0x98/0x150 [ 2817.987282][T16789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2817.993539][T16789] netlink_rcv_skb+0x241/0x4d0 [ 2817.998401][T16789] ? genl_bind+0x360/0x360 [ 2818.002878][T16789] ? netlink_ack+0x1180/0x1180 [ 2818.007721][T16789] ? __lock_acquire+0x7d40/0x7d40 [ 2818.012884][T16789] ? net_generic+0x1e/0x240 [ 2818.017441][T16789] ? down_read+0x1ac/0x2e0 [ 2818.021937][T16789] genl_rcv+0x28/0x40 [ 2818.025973][T16789] netlink_unicast+0x751/0x8d0 [ 2818.030832][T16789] netlink_sendmsg+0x8d0/0xbf0 [ 2818.035676][T16789] ? netlink_getsockopt+0x590/0x590 [ 2818.040962][T16789] ? aa_sock_msg_perm+0x94/0x150 [ 2818.045975][T16789] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2818.051328][T16789] ? security_socket_sendmsg+0x80/0xa0 [ 2818.056855][T16789] ? netlink_getsockopt+0x590/0x590 [ 2818.062113][T16789] ____sys_sendmsg+0x5ba/0x960 [ 2818.066945][T16789] ? __asan_memset+0x22/0x40 [ 2818.071591][T16789] ? __sys_sendmsg_sock+0x30/0x30 [ 2818.076661][T16789] ? __import_iovec+0x5f2/0x850 [ 2818.081574][T16789] ? import_iovec+0x73/0xa0 [ 2818.086143][T16789] ___sys_sendmsg+0x2a6/0x360 [ 2818.090873][T16789] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2818.096749][T16789] ? __sys_sendmsg+0x2a0/0x2a0 [ 2818.101600][T16789] ? lockdep_hardirqs_on+0x98/0x150 [ 2818.106891][T16789] __se_sys_sendmsg+0x1c2/0x2b0 [ 2818.111806][T16789] ? __x64_sys_sendmsg+0x80/0x80 [ 2818.116817][T16789] ? lockdep_hardirqs_on+0x98/0x150 [ 2818.122094][T16789] do_syscall_64+0x55/0xb0 [ 2818.126566][T16789] ? clear_bhb_loop+0x40/0x90 [ 2818.131294][T16789] ? clear_bhb_loop+0x40/0x90 [ 2818.136026][T16789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2818.141982][T16789] RIP: 0033:0x7f3c12b9ce59 [ 2818.146439][T16789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2818.166107][T16789] RSP: 002b:00007f3c13a94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2818.174583][T16789] RAX: ffffffffffffffda RBX: 00007f3c12e15fa0 RCX: 00007f3c12b9ce59 [ 2818.182603][T16789] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2818.190629][T16789] RBP: 00007f3c12c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2818.198646][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2818.206661][T16789] R13: 00007f3c12e16038 R14: 00007f3c12e15fa0 R15: 00007ffe9ee6e518 [ 2818.214700][T16789] [ 2818.599309][T16803] netlink: 'syz.2.16368': attribute type 27 has an invalid length. [ 2818.608221][T16803] netlink: 'syz.2.16368': attribute type 4 has an invalid length. [ 2818.616407][T16803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16368'. [ 2821.358098][T16845] netlink: 'syz.3.16380': attribute type 11 has an invalid length. [ 2821.808151][T16858] netlink: 'syz.0.16384': attribute type 3 has an invalid length. [ 2821.848212][T16858] netlink: 'syz.0.16384': attribute type 1 has an invalid length. [ 2821.891205][T16858] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.16384'. [ 2822.453953][T16870] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16388'. [ 2822.465299][T16870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2823.791728][T16889] netlink: 'syz.3.16393': attribute type 9 has an invalid length. [ 2823.804672][T16889] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.16393'. [ 2827.127275][ T1126] wlan1: Trigger new scan to find an IBSS to join [ 2828.298213][T16977] netlink: 'syz.2.16419': attribute type 11 has an invalid length. [ 2829.807329][T17001] sit0: left promiscuous mode [ 2830.107407][T17009] sit0: entered promiscuous mode [ 2830.901445][T17028] netlink: 'syz.1.16433': attribute type 11 has an invalid length. [ 2831.832784][T17034] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2832.097193][ T1126] wlan1: Trigger new scan to find an IBSS to join [ 2833.035152][ T1126] wlan1: Creating new IBSS network, BSSID ff:ff:ff:ff:00:00 [ 2833.090349][ T1126] ------------[ cut here ]------------ [ 2833.096276][ T1126] WARNING: CPU: 0 PID: 1126 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 2833.106444][ T1126] Modules linked in: [ 2833.110458][ T1126] CPU: 0 PID: 1126 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 2833.118118][ T1126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2833.128328][ T1126] Workqueue: cfg80211 cfg80211_event_work [ 2833.134126][ T1126] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 2833.140471][ T1126] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 c1 9e f7 0f 0b eb bb e8 9e c1 9e f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 c1 9e f7 0f 0b e9 e0 fd ff ff e8 [ 2833.160467][ T1126] RSP: 0018:ffffc900047cfa20 EFLAGS: 00010293 [ 2833.166852][ T1126] RAX: ffffffff89e869f2 RBX: dffffc0000000000 RCX: ffff8880240eda00 [ 2833.174893][ T1126] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 2833.183033][ T1126] RBP: ffffc900047cfaf8 R08: ffffffff911cd56f R09: 1ffffffff2239aad [ 2833.191113][ T1126] R10: dffffc0000000000 R11: fffffbfff2239aae R12: ffff88805daa0d10 [ 2833.199192][ T1126] R13: 1ffff920008f9f4c R14: ffff88805dadb658 R15: 000000000000001f [ 2833.207251][ T1126] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2833.216234][ T1126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2833.222916][ T1126] CR2: 0000000000000000 CR3: 0000000083e3e000 CR4: 00000000003506f0 [ 2833.230967][ T1126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2833.239026][ T1126] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2833.247107][ T1126] Call Trace: [ 2833.250436][ T1126] [ 2833.253417][ T1126] ? mutex_lock_nested+0x20/0x20 [ 2833.258475][ T1126] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2833.264111][ T1126] cfg80211_process_wdev_events+0x3bc/0x550 [ 2833.270330][ T1126] cfg80211_process_rdev_events+0xa1/0x110 [ 2833.276205][ T1126] cfg80211_event_work+0x2f/0x40 [ 2833.281240][ T1126] ? process_scheduled_works+0x96f/0x15d0 [ 2833.287069][ T1126] process_scheduled_works+0xa5d/0x15d0 [ 2833.292709][ T1126] ? worker_attach_to_pool+0x380/0x380 [ 2833.298275][ T1126] ? assign_work+0x3d2/0x5d0 [ 2833.302968][ T1126] worker_thread+0xa55/0xfc0 [ 2833.307734][ T1126] kthread+0x2fa/0x390 [ 2833.311864][ T1126] ? pr_cont_work+0x560/0x560 [ 2833.316602][ T1126] ? kthread_blkcg+0xd0/0xd0 [ 2833.321279][ T1126] ret_from_fork+0x48/0x80 [ 2833.325788][ T1126] ? kthread_blkcg+0xd0/0xd0 [ 2833.330465][ T1126] ret_from_fork_asm+0x11/0x20 [ 2833.335305][ T1126] [ 2833.338421][ T1126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2833.345756][ T1126] CPU: 0 PID: 1126 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 2833.353345][ T1126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2833.363457][ T1126] Workqueue: cfg80211 cfg80211_event_work [ 2833.369244][ T1126] Call Trace: [ 2833.372575][ T1126] [ 2833.375545][ T1126] dump_stack_lvl+0x18c/0x250 [ 2833.380276][ T1126] ? show_regs_print_info+0x20/0x20 [ 2833.385529][ T1126] ? load_image+0x420/0x420 [ 2833.390110][ T1126] panic+0x2dc/0x730 [ 2833.394105][ T1126] ? bpf_jit_dump+0xd0/0xd0 [ 2833.398681][ T1126] ? ret_from_fork_asm+0x11/0x20 [ 2833.403677][ T1126] __warn+0x2e0/0x470 [ 2833.407712][ T1126] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2833.413346][ T1126] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2833.418950][ T1126] report_bug+0x2be/0x4f0 [ 2833.423327][ T1126] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2833.428923][ T1126] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2833.434519][ T1126] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 2833.440123][ T1126] handle_bug+0xcf/0x120 [ 2833.444430][ T1126] exc_invalid_op+0x1a/0x50 [ 2833.448985][ T1126] asm_exc_invalid_op+0x1a/0x20 [ 2833.453886][ T1126] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 2833.460098][ T1126] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 c1 9e f7 0f 0b eb bb e8 9e c1 9e f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 90 c1 9e f7 0f 0b e9 e0 fd ff ff e8 [ 2833.479751][ T1126] RSP: 0018:ffffc900047cfa20 EFLAGS: 00010293 [ 2833.485877][ T1126] RAX: ffffffff89e869f2 RBX: dffffc0000000000 RCX: ffff8880240eda00 [ 2833.493901][ T1126] RDX: 0000000000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 2833.501915][ T1126] RBP: ffffc900047cfaf8 R08: ffffffff911cd56f R09: 1ffffffff2239aad [ 2833.509928][ T1126] R10: dffffc0000000000 R11: fffffbfff2239aae R12: ffff88805daa0d10 [ 2833.517968][ T1126] R13: 1ffff920008f9f4c R14: ffff88805dadb658 R15: 000000000000001f [ 2833.525989][ T1126] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 2833.531605][ T1126] ? mutex_lock_nested+0x20/0x20 [ 2833.536604][ T1126] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2833.542224][ T1126] cfg80211_process_wdev_events+0x3bc/0x550 [ 2833.548191][ T1126] cfg80211_process_rdev_events+0xa1/0x110 [ 2833.554055][ T1126] cfg80211_event_work+0x2f/0x40 [ 2833.559066][ T1126] ? process_scheduled_works+0x96f/0x15d0 [ 2833.564845][ T1126] process_scheduled_works+0xa5d/0x15d0 [ 2833.570475][ T1126] ? worker_attach_to_pool+0x380/0x380 [ 2833.575991][ T1126] ? assign_work+0x3d2/0x5d0 [ 2833.580638][ T1126] worker_thread+0xa55/0xfc0 [ 2833.585316][ T1126] kthread+0x2fa/0x390 [ 2833.589431][ T1126] ? pr_cont_work+0x560/0x560 [ 2833.594155][ T1126] ? kthread_blkcg+0xd0/0xd0 [ 2833.598815][ T1126] ret_from_fork+0x48/0x80 [ 2833.603295][ T1126] ? kthread_blkcg+0xd0/0xd0 [ 2833.607929][ T1126] ret_from_fork_asm+0x11/0x20 [ 2833.612761][ T1126] [ 2833.616422][ T1126] Kernel Offset: disabled [ 2833.620853][ T1126] Rebooting in 86400 seconds..