last executing test programs: 7.614628221s ago: executing program 2 (id=13854): perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d8", 0xa}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000900), 0x0, 0x10, &(0x7f0000000940), 0x0, 0x0, 0x76, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0x1, 0x58, &(0x7f0000000b40)}, 0x10) sendmsg$inet(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3aa90365, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0x0, 0xe, 0x3, 0x3}, @call={0x85, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0xd3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xe28, 0x84, &(0x7f00000003c0)=""/132, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x81, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000540), 0x10, 0x3b03}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 7.371996467s ago: executing program 2 (id=13856): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000200)=r0, 0x21) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000500)=0xae) syz_clone(0x108300000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xf6, 0x4, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc20, 0xc8, 0x947, 0x6, 0x400000000d2f, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023fff500000000000000000000ac"], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x13bb711e) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad44778", 0xf}], 0x1}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) 6.030044151s ago: executing program 2 (id=13861): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000640)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc, 0x0}, 0x4000000) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848", 0x14}, {&(0x7f0000000900)="63f48eeb93bf", 0x6}], 0x2}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb1e"}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_clone(0xc0000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40000000000040063114b000000000095000000000000003c911a2fec637a4d8d9ac14f3eaf26a2ada4c9efc78fc697f91d3b87a951a0735658cb24b8e84516be670cb978aeb381c3351c4dec9cfe09b26e2586a9580e9566f2ef37427aafa208864e1da260419fe76474132ce5feec05c676acc32fd69a532595fb086daa90b91d2020203ace4eb04fd08de0b109174b68c5a2d8204adf1f2c1c7f62f1f866f1495750d71ebc4f7b93c7294ea4186c2523bd65569b594a34ea8ef1ef4348d9867093a9b3e8"], 0x0, 0x4}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0xfffffffffffffc20, 0x0, 0x0, 0xfffffffffffffffc) 3.902582923s ago: executing program 2 (id=13867): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) write$cgroup_int(r2, &(0x7f0000000040), 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe000000008500000089000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1}, 0x4) 3.901026804s ago: executing program 0 (id=13874): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.293064598s ago: executing program 0 (id=13868): r0 = perf_event_open$cgroup(&(0x7f0000000f00)={0x5, 0x80, 0x1, 0x3, 0xf3, 0x6, 0x0, 0x9f, 0x24485, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000fc0)}, 0x820, 0x9, 0x7ff, 0x2, 0x3, 0x2, 0xfde, 0x0, 0x5e6, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000040)) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000f80)='+,\x00') r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$sock(r3, &(0x7f00000013c0)={&(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x1, 0x1, 0x3}}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)="e61b94a7765aaaae7812e4", 0xb}, {&(0x7f0000001100)}, {&(0x7f0000001140)="512c283568d67a471471c94e76d4dc823361c063d3a1e070dc01caf16e20253c8674d92e8985a244efdfd08b9be08aa9748b870b072e03f6f2d6131461e78ba8508d27cabb", 0x45}, {&(0x7f0000001200)="8cafb91d5bcd8287b51e9baaa1370754104602ad16533c59244522a2cf04a4c2d56e7c5f25662cd79ba80678c2e6f7abdfa5be8fa9a3a662804955d9ec4a3cf0e852c4ba5fc8ee0ce30ff80f6f34a7d2d167f9ab5ae69738d6daa1b37b215b81c786ab73b77836f6a49d2db8a8635b6b5902eaa4aedd45f23bb05f95747d", 0x7e}], 0x4, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xc66}}], 0x60}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="173de022ffffff19000000000000e28893c700"/28], 0x48) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000001900)={&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.23243274s ago: executing program 1 (id=13869): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.038898545s ago: executing program 2 (id=13870): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff000000000083"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.994169436s ago: executing program 1 (id=13871): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000200)=r0, 0x21) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000500)=0xae) syz_clone(0x108300000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xf6, 0x4, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc20, 0xc8, 0x947, 0x6, 0x400000000d2f, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023fff500000000000000000000ac"], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x13bb711e) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad44778", 0xf}], 0x1}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) 2.745064822s ago: executing program 2 (id=13872): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 2.274649104s ago: executing program 0 (id=13875): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000380)='\xb0\xe0p\xfc\xc5\fPd\xe2\xc6n\xe9\v(\xdd\xe1]\x10\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xb, 0x4c, 0x0, 0x1, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100, 0x0, 0xa482, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x1000, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffdfffffff, r0, 0x31916bf23db9dba9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 2.241312474s ago: executing program 3 (id=13876): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000440), 0x8}, 0x0, 0x35, 0x0, 0x7, 0x3, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x102, 0x0, &(0x7f0000000280)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r4 = socket$kcm(0xa, 0x3, 0x3a) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xed}, 0x10}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000700000000000000000200000604000000000000000000000000000000000000000000000000000009000000000000000000"], 0x0, 0x5a}, 0x28) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x9c) recvmsg(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40) 2.086886049s ago: executing program 0 (id=13877): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.863349734s ago: executing program 3 (id=13878): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0f", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913400b51bcb3cc5a05f0a"], 0xfe33) close(0x3) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x4000}) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {0x0}], 0x2}, 0x40050) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 1.401896845s ago: executing program 3 (id=13879): perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d8", 0xa}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000900), 0x0, 0x10, &(0x7f0000000940), 0x0, 0x0, 0x76, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0x1, 0x58, &(0x7f0000000b40)}, 0x10) sendmsg$inet(r5, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3aa90365, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0x0, 0xe, 0x3, 0x3}, @call={0x85, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0xd3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xe28, 0x84, &(0x7f00000003c0)=""/132, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x81, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000540), 0x10, 0x3b03}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 1.396567015s ago: executing program 0 (id=13887): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.395682966s ago: executing program 1 (id=13880): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.197600251s ago: executing program 1 (id=13881): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff00000000008300000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x4, 0x5, 0x2, 0xa}], 0x10, 0xfffffbff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r5, r6, 0x24, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x60}, 0x28) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d08020a000000040000a1180002000000000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.111497072s ago: executing program 0 (id=13882): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000003600)='./file0\x00', 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x9, 0x84, 0x154}, 0x50) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 1.074914964s ago: executing program 3 (id=13883): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000005000000000000000000000000000000000000000670d49d497ff2768b79902f546ca50a7350d2cc36edb210a52c919d5d05fec0dfe5b4b4c922b0d82f4cccf0a83b81e51db65729c9eb17a6de91281dfdeae217d76ba5342aa8e00c4c3cc93d0128cd25b7403ad0e03d004555b795aa9e1fdbb9535706d86325242fccf954c3f44bcec26e359b6aa319cfeca019998d6cdf9680b4f28b79f7893089d1564e172f67fd6a4baa4cd0d9b7443edf685b93ad323b88d51b391d639f680d6b3709a9d90a6800e9a8ca55552cb0d4f584272d2840d32fca1c9c26"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x40000, @mcast1, 0xa}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="9d15", 0x2}], 0x1}, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x52000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x8000, 0xfffffffffffffffd, 0x80000001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.009728505s ago: executing program 1 (id=13884): close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0xb, 0xfffffffefff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 247.747124ms ago: executing program 1 (id=13885): r0 = perf_event_open$cgroup(&(0x7f0000000f00)={0x5, 0x80, 0x1, 0x3, 0xf3, 0x6, 0x0, 0x9f, 0x24485, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000fc0)}, 0x820, 0x9, 0x7ff, 0x2, 0x3, 0x2, 0xfde, 0x0, 0x5e6, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8902, &(0x7f0000000040)) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000f80)='+,\x00') r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$sock(r3, &(0x7f00000013c0)={&(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x1, 0x1, 0x3}}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000010c0)="e61b94a7765aaaae7812e4", 0xb}, {&(0x7f0000001100)}, {&(0x7f0000001140)="512c283568d67a471471c94e76d4dc823361c063d3a1e070dc01caf16e20253c8674d92e8985a244efdfd08b9be08aa9748b870b072e03f6f2d6131461e78ba8508d27cabb", 0x45}, {&(0x7f0000001200)="8cafb91d5bcd8287b51e9baaa1370754104602ad16533c59244522a2cf04a4c2d56e7c5f25662cd79ba80678c2e6f7abdfa5be8fa9a3a662804955d9ec4a3cf0e852c4ba5fc8ee0ce30ff80f6f34a7d2d167f9ab5ae69738d6daa1b37b215b81c786ab73b77836f6a49d2db8a8635b6b5902eaa4aedd45f23bb05f95747d", 0x7e}], 0x4, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xc66}}], 0x60}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="173de022ffffff19000000000000e28893c700"/28], 0x48) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000001900)={&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 238.109044ms ago: executing program 3 (id=13886): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000700600000000000009000000731117000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80001, 0x1ff}, 0x0, 0x9, 0x0, 0xc, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'batadv_slave_1', 0x32, 0x36}, 0xfdef) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x6, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x20, 0x20, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x7}, 0x0, 0xc8, 0x1000, 0x3, 0x0, 0x101, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 3 (id=13888): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000200)=r0, 0x21) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000500)=0xae) syz_clone(0x108300000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0xf6, 0x4, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xc20, 0xc8, 0x947, 0x6, 0x400000000d2f, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060300000023fff500000000000000000000ac"], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x13bb711e) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad44778", 0xf}], 0x1}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) kernel console output (not intermixed with test programs): attribute type 1 has an invalid length. [ 2554.551021][ T8293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12317'. [ 2555.401323][ T8308] netlink: 'syz.2.12316': attribute type 10 has an invalid length. [ 2555.409345][ T8308] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12316'. [ 2555.719377][ T8314] netlink: 'syz.3.12319': attribute type 21 has an invalid length. [ 2555.766252][ T8314] netlink: 'syz.3.12319': attribute type 1 has an invalid length. [ 2555.821657][ T8314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12319'. [ 2556.912571][ T8328] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12324'. [ 2557.204604][ T8334] netlink: 'syz.3.12327': attribute type 29 has an invalid length. [ 2557.273932][ T8334] netlink: 'syz.3.12327': attribute type 29 has an invalid length. [ 2557.346857][ T8335] netlink: 'syz.3.12327': attribute type 29 has an invalid length. [ 2557.531197][ T8336] netlink: 'syz.3.12327': attribute type 29 has an invalid length. [ 2557.716420][ T8340] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 2557.956564][ T8344] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12329'. [ 2558.217368][ T8348] netlink: 'syz.0.12331': attribute type 21 has an invalid length. [ 2558.231606][ T8348] netlink: 'syz.0.12331': attribute type 1 has an invalid length. [ 2558.260475][ T8348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12331'. [ 2558.877431][ T8355] netlink: 'syz.0.12333': attribute type 21 has an invalid length. [ 2558.901800][ T8355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12333'. [ 2559.236689][ T8353] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12332'. [ 2560.072478][ T11] wlan1: Trigger new scan to find an IBSS to join [ 2560.604008][ T8371] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12338'. [ 2561.120475][ T8380] validate_nla: 2 callbacks suppressed [ 2561.120514][ T8380] netlink: 'syz.1.12340': attribute type 29 has an invalid length. [ 2561.166325][ T8380] netlink: 'syz.1.12340': attribute type 29 has an invalid length. [ 2561.197191][ T8383] netlink: 'syz.1.12340': attribute type 29 has an invalid length. [ 2561.331236][ T8384] netlink: 'syz.1.12340': attribute type 29 has an invalid length. [ 2562.413822][ T8388] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12341'. [ 2563.027458][T12400] wlan1: Trigger new scan to find an IBSS to join [ 2563.137748][ T8399] netlink: 'syz.3.12344': attribute type 21 has an invalid length. [ 2563.175020][ T8399] netlink: 'syz.3.12344': attribute type 1 has an invalid length. [ 2563.223565][ T8399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12344'. [ 2565.099735][T12400] wlan1: Creating new IBSS network, BSSID 7a:06:00:c4:7b:c6 [ 2565.139538][ T8416] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12350'. [ 2565.297668][ T8419] netlink: 'syz.1.12352': attribute type 29 has an invalid length. [ 2565.323790][ T8419] netlink: 'syz.1.12352': attribute type 29 has an invalid length. [ 2565.352905][ T8421] netlink: 'syz.1.12352': attribute type 29 has an invalid length. [ 2565.406258][ T8419] netlink: 'syz.1.12352': attribute type 29 has an invalid length. [ 2566.042615][ T8429] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12355'. [ 2566.365325][ T8434] netlink: 'syz.1.12356': attribute type 21 has an invalid length. [ 2566.374606][ T8434] netlink: 'syz.1.12356': attribute type 1 has an invalid length. [ 2566.396593][ T8434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12356'. [ 2568.205822][ T8452] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.12360'. [ 2570.601836][ T8467] netlink: 'syz.1.12364': attribute type 29 has an invalid length. [ 2570.613385][ T8468] netlink: 'syz.3.12363': attribute type 10 has an invalid length. [ 2570.642619][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12363'. [ 2571.190153][ T8463] netlink: 'syz.3.12363': attribute type 22 has an invalid length. [ 2571.208882][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12363'. [ 2571.252963][ T8467] netlink: 'syz.1.12364': attribute type 29 has an invalid length. [ 2571.272397][ T8468] netlink: 'syz.3.12363': attribute type 10 has an invalid length. [ 2571.300819][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12363'. [ 2571.372825][ T8469] netlink: 'syz.1.12364': attribute type 29 has an invalid length. [ 2571.565516][ T8476] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12365'. [ 2571.581938][ T8471] netlink: 'syz.1.12364': attribute type 29 has an invalid length. [ 2571.788193][ T8479] netlink: 'syz.3.12366': attribute type 21 has an invalid length. [ 2571.814959][ T8479] netlink: 'syz.3.12366': attribute type 1 has an invalid length. [ 2571.839633][ T8479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12366'. [ 2573.015386][ T8498] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12370'. [ 2573.122258][ T8500] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.12371'. [ 2576.261417][ T8513] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12376'. [ 2576.431375][ T8518] netlink: 'syz.3.12377': attribute type 21 has an invalid length. [ 2576.439991][ T8518] netlink: 'syz.3.12377': attribute type 1 has an invalid length. [ 2576.491540][ T8518] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12377'. [ 2577.897661][ T8546] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12382'. [ 2578.654978][ T8553] netlink: 'syz.2.12386': attribute type 22 has an invalid length. [ 2578.664201][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12386'. [ 2578.703302][ T8553] netlink: 'syz.2.12386': attribute type 10 has an invalid length. [ 2578.732029][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12386'. [ 2578.766891][ T8557] netlink: 159492 bytes leftover after parsing attributes in process `syz.3.12387'. [ 2578.786787][ T8557] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 2579.184642][ T8553] netlink: 'syz.2.12386': attribute type 10 has an invalid length. [ 2579.193060][ T8553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12386'. [ 2579.883372][ T8564] netlink: 'syz.1.12390': attribute type 21 has an invalid length. [ 2579.910537][ T8564] netlink: 'syz.1.12390': attribute type 1 has an invalid length. [ 2579.921557][ T8564] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12390'. [ 2583.284581][ T8581] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12394'. [ 2583.396517][ T8584] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.12392'. [ 2583.612346][ T8591] netlink: 'syz.0.12397': attribute type 22 has an invalid length. [ 2583.620421][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12397'. [ 2583.635479][ T8591] netlink: 'syz.0.12397': attribute type 10 has an invalid length. [ 2583.651477][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12397'. [ 2583.660693][ T8591] netlink: 'syz.0.12397': attribute type 10 has an invalid length. [ 2583.742244][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12397'. [ 2583.786277][ T8596] netlink: 'syz.3.12400': attribute type 21 has an invalid length. [ 2583.798167][ T8596] netlink: 'syz.3.12400': attribute type 1 has an invalid length. [ 2583.813625][ T8596] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12400'. [ 2585.382402][ T8623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12405'. [ 2585.687420][ T8633] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.12408'. [ 2586.021038][ T8638] delete_channel: no stack [ 2587.062148][ T8660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12418'. [ 2587.753523][ T8668] netlink: 'syz.3.12422': attribute type 1 has an invalid length. [ 2587.781494][ T8668] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.12422'. [ 2590.771766][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.778167][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2594.779205][ T8748] netlink: 'syz.1.12448': attribute type 21 has an invalid length. [ 2594.803430][ T8748] netlink: 'syz.1.12448': attribute type 1 has an invalid length. [ 2594.812060][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12448'. [ 2595.604761][ T8767] netlink: 'syz.0.12454': attribute type 1 has an invalid length. [ 2595.614689][ T8767] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.12454'. [ 2595.631951][ T8766] delete_channel: no stack [ 2597.843749][ T8790] netlink: 'syz.2.12460': attribute type 21 has an invalid length. [ 2597.861890][ T8790] netlink: 'syz.2.12460': attribute type 1 has an invalid length. [ 2597.900763][ T8790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12460'. [ 2598.822524][ T8804] netlink: 'syz.2.12464': attribute type 1 has an invalid length. [ 2598.851518][ T8804] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.12464'. [ 2599.231911][ T8810] delete_channel: no stack [ 2599.692747][ T8824] netlink: 'syz.3.12470': attribute type 21 has an invalid length. [ 2599.701349][ T8824] netlink: 'syz.3.12470': attribute type 1 has an invalid length. [ 2599.710645][ T8824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12470'. [ 2600.647646][ T8837] netlink: 'syz.1.12474': attribute type 1 has an invalid length. [ 2600.656918][ T8837] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.12474'. [ 2602.409747][ T8856] netlink: 'syz.2.12481': attribute type 21 has an invalid length. [ 2602.429044][ T8852] delete_channel: no stack [ 2602.451876][ T8856] netlink: 'syz.2.12481': attribute type 1 has an invalid length. [ 2602.463892][ T8856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12481'. [ 2602.496521][ T8855] can: request_module (can-proto-0) failed. [ 2603.483229][ T8874] netlink: 'syz.3.12485': attribute type 1 has an invalid length. [ 2603.527152][ T8874] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.12485'. [ 2604.879977][ T8898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2605.736443][ T8907] netlink: 'syz.3.12496': attribute type 21 has an invalid length. [ 2605.798209][ T8907] netlink: 'syz.3.12496': attribute type 1 has an invalid length. [ 2605.861366][ T8907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12496'. [ 2606.102133][ T8911] delete_channel: no stack [ 2610.315496][ T8955] netlink: 'syz.1.12508': attribute type 21 has an invalid length. [ 2610.333830][ T8955] netlink: 'syz.1.12508': attribute type 1 has an invalid length. [ 2610.371268][ T8955] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12508'. [ 2613.185946][ T8993] netlink: 'syz.2.12520': attribute type 21 has an invalid length. [ 2613.201603][ T8993] netlink: 'syz.2.12520': attribute type 1 has an invalid length. [ 2613.220100][ T8993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12520'. [ 2615.653858][ T9033] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12528'. [ 2616.456561][ T9042] netlink: 'syz.1.12531': attribute type 21 has an invalid length. [ 2616.511999][ T9042] netlink: 'syz.1.12531': attribute type 1 has an invalid length. [ 2616.520112][ T9042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12531'. [ 2620.216793][ T9091] netlink: 'syz.3.12542': attribute type 21 has an invalid length. [ 2620.239217][ T9091] netlink: 'syz.3.12542': attribute type 1 has an invalid length. [ 2620.247334][ T9091] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12542'. [ 2620.282135][ T9093] netlink: 'syz.2.12543': attribute type 21 has an invalid length. [ 2620.290875][ T9093] netlink: 'syz.2.12543': attribute type 1 has an invalid length. [ 2620.299614][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12543'. [ 2620.926702][ T9105] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2622.826915][ T9129] netlink: 'syz.1.12553': attribute type 21 has an invalid length. [ 2622.856110][ T9129] netlink: 'syz.1.12553': attribute type 1 has an invalid length. [ 2622.881333][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12553'. [ 2623.742451][ T9146] netlink: 'syz.1.12557': attribute type 13 has an invalid length. [ 2623.750437][ T9146] netlink: 'syz.1.12557': attribute type 58 has an invalid length. [ 2623.831111][ T9146] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12557'. [ 2627.138599][ T9176] netlink: 'syz.0.12565': attribute type 21 has an invalid length. [ 2627.183408][ T9176] netlink: 'syz.0.12565': attribute type 1 has an invalid length. [ 2627.193317][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12565'. [ 2627.540560][ T9181] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12567'. [ 2629.164318][ T9212] netlink: 'syz.1.12578': attribute type 21 has an invalid length. [ 2629.173496][ T9212] netlink: 'syz.1.12578': attribute type 1 has an invalid length. [ 2629.182299][ T9212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12578'. [ 2629.576931][ T9222] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12580'. [ 2629.648949][ T9224] netlink: 'syz.0.12588': attribute type 21 has an invalid length. [ 2629.676506][ T9224] netlink: 'syz.0.12588': attribute type 1 has an invalid length. [ 2629.686610][ T9224] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12588'. [ 2630.784989][ T9243] netlink: 'syz.2.12589': attribute type 21 has an invalid length. [ 2630.807392][ T9243] netlink: 'syz.2.12589': attribute type 1 has an invalid length. [ 2630.827810][ T9243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12589'. [ 2631.063559][ T9246] netlink: 'syz.1.12590': attribute type 29 has an invalid length. [ 2631.108452][ T9246] netlink: 'syz.1.12590': attribute type 29 has an invalid length. [ 2631.136518][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12591'. [ 2631.632870][ T9260] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12593'. [ 2631.698008][ T9257] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12592'. [ 2633.277457][ T9279] validate_nla: 7 callbacks suppressed [ 2633.277504][ T9279] netlink: 'syz.1.12600': attribute type 21 has an invalid length. [ 2633.347293][ T9279] netlink: 'syz.1.12600': attribute type 1 has an invalid length. [ 2633.429162][ T9279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12600'. [ 2634.327297][ T9294] netlink: 'syz.2.12603': attribute type 21 has an invalid length. [ 2634.361601][ T9294] netlink: 'syz.2.12603': attribute type 1 has an invalid length. [ 2634.411259][ T9294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12603'. [ 2634.508431][ T9296] netlink: 'syz.3.12604': attribute type 13 has an invalid length. [ 2634.534404][ T9296] netlink: 'syz.3.12604': attribute type 58 has an invalid length. [ 2634.571100][ T9296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12604'. [ 2634.882273][ T9303] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12605'. [ 2635.163654][ T9305] netlink: 'syz.3.12606': attribute type 21 has an invalid length. [ 2635.181601][ T9305] netlink: 'syz.3.12606': attribute type 1 has an invalid length. [ 2635.189784][ T9305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12606'. [ 2636.723563][ T9318] netlink: 'syz.0.12609': attribute type 21 has an invalid length. [ 2636.771715][ T9318] netlink: 'syz.0.12609': attribute type 1 has an invalid length. [ 2636.779902][ T9318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12609'. [ 2637.949706][ T9336] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12614'. [ 2638.146878][ T9340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12615'. [ 2639.463762][ T9352] validate_nla: 4 callbacks suppressed [ 2639.463802][ T9352] netlink: 'syz.1.12618': attribute type 21 has an invalid length. [ 2639.511688][ T9352] netlink: 'syz.1.12618': attribute type 1 has an invalid length. [ 2639.550716][ T9352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12618'. [ 2645.999562][ T9377] netlink: 'syz.2.12626': attribute type 21 has an invalid length. [ 2646.013334][ T9377] netlink: 'syz.2.12626': attribute type 1 has an invalid length. [ 2646.027652][ T9377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12626'. [ 2646.040181][ T9378] netlink: 'syz.1.12625': attribute type 21 has an invalid length. [ 2646.055468][ T9378] netlink: 'syz.1.12625': attribute type 1 has an invalid length. [ 2646.081997][ T9378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12625'. [ 2646.115305][ T9380] netlink: 'syz.0.12624': attribute type 13 has an invalid length. [ 2646.131465][ T9380] netlink: 'syz.0.12624': attribute type 58 has an invalid length. [ 2646.160393][ T9380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12624'. [ 2646.259292][ T9386] netlink: 'syz.3.12628': attribute type 21 has an invalid length. [ 2646.293331][ T9386] netlink: 'syz.3.12628': attribute type 1 has an invalid length. [ 2646.313224][ T9386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12628'. [ 2650.016355][ T9418] netlink: 'syz.0.12636': attribute type 29 has an invalid length. [ 2650.040587][ T9418] netlink: 'syz.0.12636': attribute type 29 has an invalid length. [ 2650.641883][ T9425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12639'. [ 2650.823843][ T9435] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12640'. [ 2650.861533][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12641'. [ 2651.130025][ T9439] validate_nla: 9 callbacks suppressed [ 2651.130078][ T9439] netlink: 'syz.0.12642': attribute type 21 has an invalid length. [ 2651.183729][ T9439] netlink: 'syz.0.12642': attribute type 1 has an invalid length. [ 2651.211443][ T9439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12642'. [ 2652.093734][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.100240][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.853211][ T9483] netlink: 'syz.0.12651': attribute type 21 has an invalid length. [ 2653.878534][ T9483] netlink: 'syz.0.12651': attribute type 1 has an invalid length. [ 2653.905024][ T9483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12651'. [ 2654.059202][ T9485] netlink: 'syz.1.12652': attribute type 21 has an invalid length. [ 2654.074759][ T9485] netlink: 'syz.1.12652': attribute type 1 has an invalid length. [ 2654.111623][ T9485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12652'. [ 2654.629235][ T9498] netlink: 'syz.0.12654': attribute type 21 has an invalid length. [ 2654.721630][ T9498] netlink: 'syz.0.12654': attribute type 1 has an invalid length. [ 2654.812761][ T9498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12654'. [ 2655.549243][ T9505] netlink: 'syz.2.12656': attribute type 13 has an invalid length. [ 2655.593498][ T9505] netlink: 'syz.2.12656': attribute type 58 has an invalid length. [ 2655.631230][ T9505] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12656'. [ 2656.970051][ T9527] netlink: 'syz.1.12662': attribute type 21 has an invalid length. [ 2657.004611][ T9527] netlink: 'syz.1.12662': attribute type 1 has an invalid length. [ 2657.064598][ T9527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12662'. [ 2657.301259][ T9534] netlink: 'syz.2.12663': attribute type 21 has an invalid length. [ 2657.351608][ T9534] netlink: 'syz.2.12663': attribute type 1 has an invalid length. [ 2657.390468][ T9534] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12663'. [ 2659.571459][ T9552] netlink: 'syz.1.12667': attribute type 21 has an invalid length. [ 2659.611577][ T9552] netlink: 'syz.1.12667': attribute type 1 has an invalid length. [ 2659.619826][ T9552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12667'. [ 2662.105136][ T9574] netlink: 'syz.2.12672': attribute type 21 has an invalid length. [ 2662.131926][ T9574] netlink: 'syz.2.12672': attribute type 1 has an invalid length. [ 2662.140113][ T9574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12672'. [ 2662.168267][ T9577] netlink: 'syz.3.12673': attribute type 21 has an invalid length. [ 2662.188093][ T9577] netlink: 'syz.3.12673': attribute type 1 has an invalid length. [ 2662.221295][ T9577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12673'. [ 2662.873455][ T9590] netlink: 'syz.3.12677': attribute type 21 has an invalid length. [ 2662.902670][ T9590] netlink: 'syz.3.12677': attribute type 1 has an invalid length. [ 2662.947120][ T9590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12677'. [ 2663.521422][ T9599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12679'. [ 2663.612807][ T9599] netlink: 'syz.0.12679': attribute type 10 has an invalid length. [ 2663.620877][ T9599] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12679'. [ 2665.430565][ T9610] netlink: 'syz.3.12682': attribute type 29 has an invalid length. [ 2665.675171][ T9610] netlink: 'syz.3.12682': attribute type 29 has an invalid length. [ 2665.790337][ T9612] netlink: 'syz.3.12682': attribute type 29 has an invalid length. [ 2666.777968][ T9619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12686'. [ 2667.586155][ T9634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12689'. [ 2667.666045][ T9634] validate_nla: 4 callbacks suppressed [ 2667.666069][ T9634] netlink: 'syz.2.12689': attribute type 10 has an invalid length. [ 2667.741190][ T9634] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12689'. [ 2668.873202][ T9656] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.12697'. [ 2669.483907][ T9660] netlink: 'syz.0.12699': attribute type 21 has an invalid length. [ 2669.513013][ T9660] netlink: 'syz.0.12699': attribute type 1 has an invalid length. [ 2669.541324][ T9660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12699'. [ 2671.642253][ T9686] netlink: 'syz.0.12706': attribute type 21 has an invalid length. [ 2671.650964][ T9686] netlink: 'syz.0.12706': attribute type 1 has an invalid length. [ 2671.731307][ T9686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12706'. [ 2672.224006][ T9693] netlink: 'syz.3.12710': attribute type 21 has an invalid length. [ 2672.241839][ T9693] netlink: 'syz.3.12710': attribute type 1 has an invalid length. [ 2672.260968][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12710'. [ 2672.518073][ T9698] netlink: 'syz.2.12711': attribute type 13 has an invalid length. [ 2672.561135][ T9698] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12711'. [ 2673.044037][ T9698] erspan0: refused to change device tx_queue_len [ 2673.750274][ T9717] netlink: 'syz.3.12716': attribute type 1 has an invalid length. [ 2673.773370][ T9717] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.12716'. [ 2674.010997][ T9719] netlink: 'syz.0.12717': attribute type 21 has an invalid length. [ 2674.079081][ T9719] netlink: 'syz.0.12717': attribute type 1 has an invalid length. [ 2674.126993][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12717'. [ 2674.473219][ T9721] netlink: 'syz.3.12718': attribute type 21 has an invalid length. [ 2674.517792][ T9721] netlink: 'syz.3.12718': attribute type 1 has an invalid length. [ 2674.547803][ T9721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12718'. [ 2675.898584][ T9741] netlink: 'syz.2.12724': attribute type 21 has an invalid length. [ 2675.909651][ T9741] netlink: 'syz.2.12724': attribute type 1 has an invalid length. [ 2675.928936][ T9741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12724'. [ 2676.331824][ T9739] syzkaller0: entered promiscuous mode [ 2676.403441][ T9739] syzkaller0: entered allmulticast mode [ 2676.587955][ T9742] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 2677.306817][ T9760] netlink: 'syz.1.12728': attribute type 21 has an invalid length. [ 2677.315740][ T9760] netlink: 'syz.1.12728': attribute type 1 has an invalid length. [ 2677.324230][ T9760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12728'. [ 2677.754797][ T9766] netlink: 'syz.0.12729': attribute type 21 has an invalid length. [ 2677.841595][ T9766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12729'. [ 2679.229162][ T9782] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.12732'. [ 2679.625117][ T9785] validate_nla: 1 callbacks suppressed [ 2679.625157][ T9785] netlink: 'syz.3.12734': attribute type 21 has an invalid length. [ 2679.671179][ T9785] netlink: 'syz.3.12734': attribute type 1 has an invalid length. [ 2679.761207][ T9785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12734'. [ 2682.142696][ T9810] netlink: 'syz.3.12738': attribute type 2 has an invalid length. [ 2682.182288][ T9810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12738'. [ 2683.071412][ T9817] netlink: 'syz.3.12740': attribute type 21 has an invalid length. [ 2683.080158][ T9817] netlink: 'syz.3.12740': attribute type 1 has an invalid length. [ 2683.141323][ T9817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12740'. [ 2683.253438][ T9821] netlink: 'syz.2.12741': attribute type 21 has an invalid length. [ 2683.308143][ T9821] netlink: 'syz.2.12741': attribute type 1 has an invalid length. [ 2683.332551][ T9821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12741'. [ 2685.841945][ T9841] netlink: 'syz.0.12744': attribute type 1 has an invalid length. [ 2685.870276][ T9841] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.12744'. [ 2687.049734][ T9844] netlink: 'syz.2.12745': attribute type 21 has an invalid length. [ 2687.071668][ T9844] netlink: 'syz.2.12745': attribute type 1 has an invalid length. [ 2687.079569][ T9844] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12745'. [ 2688.235200][ T9858] netlink: 'syz.1.12749': attribute type 13 has an invalid length. [ 2688.281946][ T9858] netlink: 172 bytes leftover after parsing attributes in process `syz.1.12749'. [ 2688.405542][ T9858] erspan0: refused to change device tx_queue_len [ 2688.718839][ T9868] netlink: 'syz.3.12752': attribute type 21 has an invalid length. [ 2688.821587][ T9868] netlink: 'syz.3.12752': attribute type 1 has an invalid length. [ 2688.916904][ T9868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12752'. [ 2689.383290][ T9875] syzkaller0: entered promiscuous mode [ 2689.411165][ T9875] syzkaller0: entered allmulticast mode [ 2693.242225][ T9892] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 2693.343298][ T9897] netlink: 'syz.3.12758': attribute type 21 has an invalid length. [ 2693.365089][ T9897] netlink: 'syz.3.12758': attribute type 1 has an invalid length. [ 2693.381271][ T9897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12758'. [ 2695.081767][ T9916] netlink: 'syz.3.12762': attribute type 13 has an invalid length. [ 2695.114709][ T9916] netlink: 172 bytes leftover after parsing attributes in process `syz.3.12762'. [ 2695.459234][ T9916] erspan0: refused to change device tx_queue_len [ 2695.581282][ T9923] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.12763'. [ 2697.768604][ T9957] netlink: 'syz.1.12770': attribute type 2 has an invalid length. [ 2697.798401][ T9957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12770'. [ 2698.083461][ T9955] syzkaller0: entered promiscuous mode [ 2698.089137][ T9955] syzkaller0: entered allmulticast mode [ 2701.712021][ T9987] syzkaller0: entered promiscuous mode [ 2701.717580][ T9987] syzkaller0: entered allmulticast mode [ 2701.875437][ T9975] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 2702.766118][ T9997] netlink: 'syz.2.12782': attribute type 2 has an invalid length. [ 2702.802164][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12782'. [ 2703.054662][T10001] syzkaller0: entered promiscuous mode [ 2703.081488][T10001] syzkaller0: entered allmulticast mode [ 2708.265710][T10044] netlink: 'syz.0.12795': attribute type 2 has an invalid length. [ 2708.275006][T10044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12795'. [ 2708.425150][T10052] netlink: 'syz.3.12800': attribute type 21 has an invalid length. [ 2708.451854][T10052] netlink: 'syz.3.12800': attribute type 1 has an invalid length. [ 2708.471761][T10052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12800'. [ 2709.195793][T10058] syzkaller0: entered promiscuous mode [ 2709.240082][T10058] syzkaller0: entered allmulticast mode [ 2712.547148][T10069] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.12802'. [ 2712.866284][T10074] netlink: 'syz.0.12812': attribute type 21 has an invalid length. [ 2712.890263][T10074] netlink: 'syz.0.12812': attribute type 1 has an invalid length. [ 2712.915877][T10074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12812'. [ 2713.510219][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.516842][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.141631][T10099] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2715.033954][T10103] syzkaller0: entered promiscuous mode [ 2715.039613][T10103] syzkaller0: entered allmulticast mode [ 2715.053185][T10106] netlink: 'syz.0.12815': attribute type 21 has an invalid length. [ 2715.101785][T10106] netlink: 'syz.0.12815': attribute type 1 has an invalid length. [ 2715.132502][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12815'. [ 2718.897273][T10126] netlink: 'syz.0.12819': attribute type 2 has an invalid length. [ 2718.906171][T10126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12819'. [ 2720.403191][T10150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12827'. [ 2720.974415][T10150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12827'. [ 2720.986060][T10153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12827'. [ 2721.013812][T10155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12827'. [ 2721.132940][T10159] netlink: 'syz.3.12828': attribute type 21 has an invalid length. [ 2721.161442][T10159] netlink: 'syz.3.12828': attribute type 1 has an invalid length. [ 2721.169433][T10159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12828'. [ 2721.379827][T10166] netlink: 'syz.2.12832': attribute type 2 has an invalid length. [ 2721.391969][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12832'. [ 2721.559245][T10170] netlink: 'syz.1.12833': attribute type 21 has an invalid length. [ 2721.583108][T10170] netlink: 'syz.1.12833': attribute type 1 has an invalid length. [ 2721.617359][T10170] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12833'. [ 2721.822613][T10177] netlink: 'syz.2.12834': attribute type 9 has an invalid length. [ 2721.833615][T10177] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12834'. [ 2724.101281][ T9052] wlan1: Trigger new scan to find an IBSS to join [ 2724.666611][T10213] netlink: 'syz.3.12843': attribute type 2 has an invalid length. [ 2724.681123][T10213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12843'. [ 2724.864407][T10217] netlink: 'syz.0.12845': attribute type 9 has an invalid length. [ 2724.891640][T10217] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12845'. [ 2725.097973][T10219] netlink: 'syz.1.12846': attribute type 21 has an invalid length. [ 2725.132607][T10219] netlink: 'syz.1.12846': attribute type 1 has an invalid length. [ 2725.832114][T10235] __nla_validate_parse: 1 callbacks suppressed [ 2725.832185][T10235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12849'. [ 2727.117087][ T1001] wlan1: Trigger new scan to find an IBSS to join [ 2727.454703][T10258] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 2730.051356][T12390] wlan1: Creating new IBSS network, BSSID 9a:ec:26:64:59:c7 [ 2730.074801][T10273] validate_nla: 2 callbacks suppressed [ 2730.074891][T10273] netlink: 'syz.1.12858': attribute type 9 has an invalid length. [ 2730.165331][T10273] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12858'. [ 2730.809182][T10276] delete_channel: no stack [ 2731.782685][T10284] netlink: 'syz.1.12863': attribute type 21 has an invalid length. [ 2731.797701][T10284] netlink: 'syz.1.12863': attribute type 1 has an invalid length. [ 2731.828030][T10284] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12863'. [ 2732.359714][T10295] netlink: 'syz.1.12868': attribute type 2 has an invalid length. [ 2732.375326][T10295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12868'. [ 2733.259180][T10308] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 2733.575360][T10320] netlink: 'syz.3.12875': attribute type 21 has an invalid length. [ 2733.585452][T10320] netlink: 'syz.3.12875': attribute type 1 has an invalid length. [ 2733.602350][T10320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12875'. [ 2734.803939][T10339] netlink: 'syz.3.12877': attribute type 9 has an invalid length. [ 2734.821236][T10339] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12877'. [ 2735.699031][T10344] delete_channel: no stack [ 2736.145591][T10355] netlink: 'syz.2.12894': attribute type 2 has an invalid length. [ 2736.163261][T10355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12894'. [ 2736.225903][T10359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12887'. [ 2736.252086][T10359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12887'. [ 2736.284250][T10360] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 2736.404544][T10359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12887'. [ 2736.460666][T10362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12887'. [ 2737.338946][T10382] netlink: 'syz.3.12893': attribute type 9 has an invalid length. [ 2737.351418][T10382] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12893'. [ 2738.134762][T10400] netlink: 'syz.2.12898': attribute type 2 has an invalid length. [ 2738.142988][T10400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12898'. [ 2738.276545][T10391] delete_channel: no stack [ 2738.598045][T10416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12902'. [ 2739.305242][T10416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12902'. [ 2739.331693][T10421] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12902'. [ 2739.375994][T10422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12902'. [ 2739.508880][T10424] netlink: 'syz.3.12908': attribute type 2 has an invalid length. [ 2739.541208][T10424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12908'. [ 2739.684937][T10431] netlink: 'syz.1.12906': attribute type 9 has an invalid length. [ 2739.702428][T10431] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12906'. [ 2740.869357][T10458] netlink: 'syz.1.12914': attribute type 21 has an invalid length. [ 2740.884371][T10458] netlink: 'syz.1.12914': attribute type 1 has an invalid length. [ 2740.893769][T10458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12914'. [ 2741.047733][T10464] netlink: 'syz.0.12917': attribute type 2 has an invalid length. [ 2741.065879][T10464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12917'. [ 2741.506837][T10475] netlink: 'syz.3.12921': attribute type 9 has an invalid length. [ 2742.378532][T10481] netlink: 'syz.0.12922': attribute type 29 has an invalid length. [ 2742.404162][T10481] netlink: 'syz.0.12922': attribute type 29 has an invalid length. [ 2742.436899][T10481] netlink: 'syz.0.12922': attribute type 29 has an invalid length. [ 2742.462816][T10481] netlink: 'syz.0.12922': attribute type 29 has an invalid length. [ 2742.476561][T10481] netlink: 'syz.0.12922': attribute type 29 has an invalid length. [ 2742.609374][T10482] netlink: 'syz.0.12922': attribute type 29 has an invalid length. [ 2742.784097][T10489] netlink: 'syz.3.12926': attribute type 21 has an invalid length. [ 2742.804432][T10489] netlink: 'syz.3.12926': attribute type 1 has an invalid length. [ 2742.823078][T10489] __nla_validate_parse: 5 callbacks suppressed [ 2742.823116][T10489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12926'. [ 2742.874957][T10492] netlink: 'syz.2.12925': attribute type 2 has an invalid length. [ 2742.883008][T10492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12925'. [ 2743.610027][T10502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12929'. [ 2743.956337][T10508] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12932'. [ 2744.816722][T10513] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12934'. [ 2746.010224][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12938'. [ 2746.068566][T10534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12940'. [ 2748.845640][T10567] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12949'. [ 2748.941195][T10569] validate_nla: 5 callbacks suppressed [ 2748.941238][T10569] netlink: 'syz.2.12950': attribute type 21 has an invalid length. [ 2749.012111][T10569] netlink: 'syz.2.12950': attribute type 1 has an invalid length. [ 2749.091627][T10569] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12950'. [ 2749.127436][T10574] netlink: 'syz.0.12952': attribute type 2 has an invalid length. [ 2749.136195][T10574] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12952'. [ 2749.232370][T10580] netlink: 'syz.3.12951': attribute type 2 has an invalid length. [ 2749.262460][T10580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12951'. [ 2750.075067][T10592] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12957'. [ 2750.710618][T10594] netlink: 'syz.0.12958': attribute type 3 has an invalid length. [ 2750.732332][T10594] netlink: 'syz.0.12958': attribute type 1 has an invalid length. [ 2750.761285][T10594] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.12958'. [ 2751.645844][T10609] netlink: 'syz.1.12962': attribute type 2 has an invalid length. [ 2751.661268][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12962'. [ 2751.773332][T10612] netlink: 'syz.3.12963': attribute type 21 has an invalid length. [ 2751.824949][T10612] netlink: 'syz.3.12963': attribute type 1 has an invalid length. [ 2751.851268][T10612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12963'. [ 2752.288634][T10622] netlink: 'syz.1.12967': attribute type 2 has an invalid length. [ 2752.300939][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12967'. [ 2754.724068][T10642] validate_nla: 6 callbacks suppressed [ 2754.724122][T10642] netlink: 'syz.1.12974': attribute type 21 has an invalid length. [ 2754.755379][T10642] netlink: 'syz.1.12974': attribute type 1 has an invalid length. [ 2754.776594][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12974'. [ 2754.836167][T10641] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12973'. [ 2755.342298][T10647] netlink: 'syz.1.12975': attribute type 2 has an invalid length. [ 2755.350714][T10647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12975'. [ 2755.468323][T10649] netlink: 'syz.3.12976': attribute type 2 has an invalid length. [ 2755.482881][T10649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12976'. [ 2755.576781][T10651] netlink: 'syz.0.12985': attribute type 2 has an invalid length. [ 2755.591347][T10651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12985'. [ 2755.852083][T10656] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12987'. [ 2755.996609][T10659] netlink: 'syz.3.12979': attribute type 29 has an invalid length. [ 2756.034084][T10659] netlink: 'syz.3.12979': attribute type 29 has an invalid length. [ 2756.065997][T10662] netlink: 'syz.3.12979': attribute type 29 has an invalid length. [ 2756.103314][T10659] netlink: 'syz.3.12979': attribute type 29 has an invalid length. [ 2756.173190][T10659] netlink: 'syz.3.12979': attribute type 29 has an invalid length. [ 2756.496639][T10668] netlink: 160 bytes leftover after parsing attributes in process `syz.1.12982'. [ 2756.746799][T10671] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.12983'. [ 2757.120743][T10682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12988'. [ 2757.136391][T10678] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12986'. [ 2760.158930][T10697] __nla_validate_parse: 2 callbacks suppressed [ 2760.158976][T10697] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12996'. [ 2760.230805][T10701] validate_nla: 5 callbacks suppressed [ 2760.230843][T10701] netlink: 'syz.2.12994': attribute type 29 has an invalid length. [ 2760.273791][T10701] netlink: 'syz.2.12994': attribute type 29 has an invalid length. [ 2760.303588][T10706] netlink: 'syz.2.12994': attribute type 29 has an invalid length. [ 2760.326893][T10707] netlink: 'syz.3.12998': attribute type 2 has an invalid length. [ 2760.344075][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12998'. [ 2760.354873][T10701] netlink: 'syz.2.12994': attribute type 29 has an invalid length. [ 2760.388480][T10701] netlink: 'syz.2.12994': attribute type 29 has an invalid length. [ 2760.561939][T10701] netlink: 'syz.2.12994': attribute type 29 has an invalid length. [ 2760.607787][T10709] netlink: 'syz.3.13000': attribute type 28 has an invalid length. [ 2760.656218][T10711] netlink: 'syz.1.12999': attribute type 2 has an invalid length. [ 2760.672356][T10711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12999'. [ 2760.773211][T10714] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.13001'. [ 2761.653300][T10723] netlink: 'syz.3.13005': attribute type 2 has an invalid length. [ 2761.665516][T10723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13005'. [ 2761.719422][T10726] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.13006'. [ 2762.132363][ T1001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2762.405498][T10736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13009'. [ 2763.028020][T10748] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 2763.227248][T10752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13016'. [ 2763.532490][T10762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13020'. [ 2764.754758][T10778] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2764.980978][T10785] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13026'. [ 2765.181041][T10790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13029'. [ 2766.488577][T10800] validate_nla: 6 callbacks suppressed [ 2766.488652][T10800] netlink: 'syz.2.13032': attribute type 29 has an invalid length. [ 2766.504147][T10800] netlink: 'syz.2.13032': attribute type 29 has an invalid length. [ 2766.519419][T10800] netlink: 'syz.2.13032': attribute type 29 has an invalid length. [ 2766.542204][T10800] netlink: 'syz.2.13032': attribute type 29 has an invalid length. [ 2766.556942][T10800] netlink: 'syz.2.13032': attribute type 29 has an invalid length. [ 2766.662496][T10800] netlink: 'syz.2.13032': attribute type 29 has an invalid length. [ 2767.145832][T10814] netlink: 'syz.0.13037': attribute type 2 has an invalid length. [ 2767.156958][T10814] netlink: 'syz.0.13037': attribute type 1 has an invalid length. [ 2767.166438][T10814] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13037'. [ 2767.301919][T10816] netlink: 'syz.2.13038': attribute type 2 has an invalid length. [ 2767.310692][T10816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13038'. [ 2768.045898][T10827] netlink: 'syz.1.13043': attribute type 29 has an invalid length. [ 2768.485957][T10839] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13047'. [ 2768.565573][T10841] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13048'. [ 2770.752032][T10866] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13057'. [ 2770.817800][T10868] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13058'. [ 2772.025020][T10887] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2772.314578][T10889] validate_nla: 11 callbacks suppressed [ 2772.314620][T10889] netlink: 'syz.2.13065': attribute type 2 has an invalid length. [ 2772.333134][T10889] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13065'. [ 2772.376755][T10892] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.13066'. [ 2772.409932][T10894] netlink: 'syz.0.13067': attribute type 2 has an invalid length. [ 2772.419622][T10894] netlink: 'syz.0.13067': attribute type 1 has an invalid length. [ 2772.428263][T10894] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13067'. [ 2772.815190][T10900] netlink: 'syz.0.13069': attribute type 2 has an invalid length. [ 2772.834862][T10900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13069'. [ 2774.614063][T10918] netlink: 'syz.2.13076': attribute type 2 has an invalid length. [ 2774.622394][T10918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13076'. [ 2774.726869][T10922] netlink: 'syz.2.13077': attribute type 2 has an invalid length. [ 2774.736408][T10922] netlink: 'syz.2.13077': attribute type 1 has an invalid length. [ 2774.802229][T10922] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13077'. [ 2774.897331][T10927] netlink: 'syz.3.13079': attribute type 2 has an invalid length. [ 2774.911293][T10927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13079'. [ 2774.935160][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.942929][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2779.470011][T10944] netlink: 'syz.1.13085': attribute type 2 has an invalid length. [ 2779.485799][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13085'. [ 2779.616082][T10947] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13086'. [ 2779.730261][T10947] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2779.771192][T10947] CPU: 1 PID: 10947 Comm: syz.2.13086 Not tainted syzkaller #0 [ 2779.778817][T10947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2779.788910][T10947] Call Trace: [ 2779.792220][T10947] [ 2779.795179][T10947] dump_stack_lvl+0x18c/0x250 [ 2779.799913][T10947] ? show_regs_print_info+0x20/0x20 [ 2779.805163][T10947] ? load_image+0x420/0x420 [ 2779.809742][T10947] sysfs_warn_dup+0x8e/0xa0 [ 2779.814289][T10947] sysfs_do_create_link_sd+0xc0/0x110 [ 2779.819720][T10947] device_add_class_symlinks+0x1cf/0x240 [ 2779.825401][T10947] device_add+0x4f9/0xc40 [ 2779.829779][T10947] wiphy_register+0x1d99/0x2ac0 [ 2779.834709][T10947] ? cfg80211_event_work+0x40/0x40 [ 2779.839865][T10947] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2779.846080][T10947] ieee80211_register_hw+0x2dd8/0x3b30 [ 2779.851608][T10947] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2779.857210][T10947] ? ieee80211_tasklet_handler+0x20/0x20 [ 2779.862915][T10947] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2779.868865][T10947] ? __debug_object_init+0xec/0x450 [ 2779.874105][T10947] ? __asan_memset+0x22/0x40 [ 2779.878736][T10947] ? __hrtimer_init+0x189/0x270 [ 2779.883635][T10947] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2779.889440][T10947] ? mac80211_hwsim_free+0x220/0x220 [ 2779.894761][T10947] ? rcu_is_watching+0x15/0xb0 [ 2779.899586][T10947] ? kstrndup+0xbd/0x140 [ 2779.903893][T10947] hwsim_new_radio_nl+0xdad/0x1a70 [ 2779.909048][T10947] ? mark_lock+0x94/0x320 [ 2779.913424][T10947] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2779.919886][T10947] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2779.926082][T10947] ? lockdep_hardirqs_on+0x98/0x150 [ 2779.931331][T10947] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2779.937646][T10947] genl_family_rcv_msg_doit+0x21a/0x310 [ 2779.943288][T10947] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2779.949232][T10947] ? bpf_lsm_capable+0x9/0x10 [ 2779.953954][T10947] ? security_capable+0x89/0xb0 [ 2779.958845][T10947] genl_rcv_msg+0x611/0x7a0 [ 2779.963387][T10947] ? genl_bind+0x360/0x360 [ 2779.967857][T10947] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2779.974233][T10947] ? lockdep_hardirqs_on+0x98/0x150 [ 2779.979476][T10947] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2779.985681][T10947] netlink_rcv_skb+0x235/0x4c0 [ 2779.990502][T10947] ? genl_bind+0x360/0x360 [ 2779.994968][T10947] ? netlink_ack+0x1160/0x1160 [ 2779.999785][T10947] ? __lock_acquire+0x7d80/0x7d80 [ 2780.004858][T10947] ? net_generic+0x1e/0x240 [ 2780.009421][T10947] ? down_read+0x1ac/0x2e0 [ 2780.013891][T10947] genl_rcv+0x28/0x40 [ 2780.017911][T10947] netlink_unicast+0x7b1/0x930 [ 2780.022738][T10947] netlink_sendmsg+0x8d0/0xbf0 [ 2780.027555][T10947] ? netlink_getsockopt+0x590/0x590 [ 2780.032798][T10947] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2780.038392][T10947] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2780.043733][T10947] ? security_socket_sendmsg+0x80/0xa0 [ 2780.049246][T10947] ? netlink_getsockopt+0x590/0x590 [ 2780.054503][T10947] ____sys_sendmsg+0x61b/0x980 [ 2780.059324][T10947] ? __asan_memset+0x22/0x40 [ 2780.063969][T10947] ? __sys_sendmsg_sock+0x30/0x30 [ 2780.069026][T10947] ? __import_iovec+0x5f2/0x850 [ 2780.073953][T10947] ? import_iovec+0x73/0xa0 [ 2780.078499][T10947] ___sys_sendmsg+0x2a6/0x360 [ 2780.083216][T10947] ? __sys_sendmsg+0x2b0/0x2b0 [ 2780.088045][T10947] ? ktime_get+0x7f/0x280 [ 2780.092418][T10947] ? trace_call_bpf+0xc3/0x6c0 [ 2780.097245][T10947] __se_sys_sendmsg+0x1d0/0x2c0 [ 2780.102131][T10947] ? perf_trace_preemptirq_template+0x269/0x330 [ 2780.108593][T10947] ? __x64_sys_sendmsg+0x80/0x80 [ 2780.113607][T10947] ? lockdep_hardirqs_on+0x98/0x150 [ 2780.118871][T10947] do_syscall_64+0x55/0xb0 [ 2780.123324][T10947] ? clear_bhb_loop+0x40/0x90 [ 2780.128044][T10947] ? clear_bhb_loop+0x40/0x90 [ 2780.132770][T10947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2780.138725][T10947] RIP: 0033:0x7fb257f9e0d9 [ 2780.143188][T10947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2780.162921][T10947] RSP: 002b:00007fb258e8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2780.171373][T10947] RAX: ffffffffffffffda RBX: 00007fb258225fa0 RCX: 00007fb257f9e0d9 [ 2780.179383][T10947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2780.187421][T10947] RBP: 00007fb258035024 R08: 0000000000000000 R09: 0000000000000000 [ 2780.195435][T10947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2780.203440][T10947] R13: 00007fb258226038 R14: 00007fb258225fa0 R15: 00007ffe37926bc8 [ 2780.211463][T10947] [ 2780.644224][T10964] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2781.388279][T10981] netlink: 'syz.1.13095': attribute type 2 has an invalid length. [ 2781.396972][T10981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13095'. [ 2781.449793][T10983] netlink: 'syz.2.13096': attribute type 2 has an invalid length. [ 2781.459509][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13096'. [ 2784.346868][T10998] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13101'. [ 2784.377110][T10998] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2784.385836][T10998] CPU: 0 PID: 10998 Comm: syz.3.13101 Not tainted syzkaller #0 [ 2784.393448][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2784.403574][T10998] Call Trace: [ 2784.406923][T10998] [ 2784.409922][T10998] dump_stack_lvl+0x18c/0x250 [ 2784.410966][T11000] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.13100'. [ 2784.414645][T10998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2784.430300][T10998] ? show_regs_print_info+0x20/0x20 [ 2784.435595][T10998] ? load_image+0x420/0x420 [ 2784.440200][T10998] ? sysfs_warn_dup+0x65/0xa0 [ 2784.444980][T10998] sysfs_warn_dup+0x8e/0xa0 [ 2784.449553][T10998] sysfs_do_create_link_sd+0xc0/0x110 [ 2784.454998][T10998] device_add_class_symlinks+0x1cf/0x240 [ 2784.460808][T10998] device_add+0x4f9/0xc40 [ 2784.465186][T10998] wiphy_register+0x1d99/0x2ac0 [ 2784.470179][T10998] ? cfg80211_event_work+0x40/0x40 [ 2784.475346][T10998] ? minstrel_ht_alloc+0x88a/0x990 [ 2784.480575][T10998] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2784.486718][T10998] ieee80211_register_hw+0x2dd8/0x3b30 [ 2784.492286][T10998] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2784.497890][T10998] ? ieee80211_tasklet_handler+0x20/0x20 [ 2784.503551][T10998] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2784.509635][T10998] ? __debug_object_init+0xec/0x450 [ 2784.514945][T10998] ? __asan_memset+0x22/0x40 [ 2784.519657][T10998] ? __hrtimer_init+0x189/0x270 [ 2784.524587][T10998] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2784.530401][T10998] ? mac80211_hwsim_free+0x220/0x220 [ 2784.535743][T10998] ? rcu_is_watching+0x15/0xb0 [ 2784.540547][T10998] ? kstrndup+0xbd/0x140 [ 2784.544854][T10998] hwsim_new_radio_nl+0xdad/0x1a70 [ 2784.550017][T10998] ? __nla_validate+0x50/0x50 [ 2784.554769][T10998] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2784.561216][T10998] ? __nla_parse+0x40/0x50 [ 2784.565691][T10998] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2784.572074][T10998] genl_family_rcv_msg_doit+0x21a/0x310 [ 2784.577672][T10998] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2784.583658][T10998] ? bpf_lsm_capable+0x9/0x10 [ 2784.588426][T10998] ? security_capable+0x89/0xb0 [ 2784.593393][T10998] genl_rcv_msg+0x611/0x7a0 [ 2784.597992][T10998] ? genl_bind+0x360/0x360 [ 2784.602464][T10998] ? perf_trace_lock+0xfc/0x3b0 [ 2784.607363][T10998] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2784.613735][T10998] ? perf_trace_lock+0xfc/0x3b0 [ 2784.618679][T10998] netlink_rcv_skb+0x235/0x4c0 [ 2784.623502][T10998] ? genl_bind+0x360/0x360 [ 2784.627987][T10998] ? netlink_ack+0x1160/0x1160 [ 2784.632879][T10998] ? __lock_acquire+0x7d80/0x7d80 [ 2784.637943][T10998] ? net_generic+0x1e/0x240 [ 2784.642517][T10998] ? down_read+0x1ac/0x2e0 [ 2784.646994][T10998] genl_rcv+0x28/0x40 [ 2784.651049][T10998] netlink_unicast+0x7b1/0x930 [ 2784.655951][T10998] netlink_sendmsg+0x8d0/0xbf0 [ 2784.660794][T10998] ? lockdep_hardirqs_on+0x98/0x150 [ 2784.666036][T10998] ? netlink_getsockopt+0x590/0x590 [ 2784.671344][T10998] ? netlink_getsockopt+0x590/0x590 [ 2784.676616][T10998] ____sys_sendmsg+0x61b/0x980 [ 2784.681459][T10998] ? __asan_memset+0x22/0x40 [ 2784.686110][T10998] ? __sys_sendmsg_sock+0x30/0x30 [ 2784.691201][T10998] ? __import_iovec+0x5f2/0x850 [ 2784.696182][T10998] ? import_iovec+0x73/0xa0 [ 2784.700784][T10998] ___sys_sendmsg+0x2a6/0x360 [ 2784.705542][T10998] ? __sys_sendmsg+0x2b0/0x2b0 [ 2784.710435][T10998] ? ktime_get+0x7f/0x280 [ 2784.714800][T10998] ? trace_call_bpf+0xc3/0x6c0 [ 2784.719708][T10998] __se_sys_sendmsg+0x1d0/0x2c0 [ 2784.724616][T10998] ? perf_trace_preemptirq_template+0x269/0x330 [ 2784.730931][T10998] ? __x64_sys_sendmsg+0x80/0x80 [ 2784.735969][T10998] ? lockdep_hardirqs_on+0x98/0x150 [ 2784.741250][T10998] do_syscall_64+0x55/0xb0 [ 2784.745767][T10998] ? clear_bhb_loop+0x40/0x90 [ 2784.750504][T10998] ? clear_bhb_loop+0x40/0x90 [ 2784.755247][T10998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2784.761215][T10998] RIP: 0033:0x7f914b79e0d9 [ 2784.765693][T10998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2784.785369][T10998] RSP: 002b:00007f914c6dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2784.793846][T10998] RAX: ffffffffffffffda RBX: 00007f914ba25fa0 RCX: 00007f914b79e0d9 [ 2784.801859][T10998] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2784.809900][T10998] RBP: 00007f914b835024 R08: 0000000000000000 R09: 0000000000000000 [ 2784.817919][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2784.825939][T10998] R13: 00007f914ba26038 R14: 00007f914ba25fa0 R15: 00007ffefb0b3be8 [ 2784.834086][T10998] [ 2785.206941][T11004] netlink: 'syz.3.13103': attribute type 2 has an invalid length. [ 2785.215623][T11004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13103'. [ 2785.389745][T11010] netlink: 'syz.3.13106': attribute type 2 has an invalid length. [ 2785.399218][T11010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13106'. [ 2785.410127][T11008] netlink: 'syz.2.13105': attribute type 2 has an invalid length. [ 2785.420717][T11008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13105'. [ 2787.408317][T11024] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13112'. [ 2787.447945][T11024] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2787.457164][T11024] CPU: 1 PID: 11024 Comm: syz.1.13112 Not tainted syzkaller #0 [ 2787.464779][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2787.474885][T11024] Call Trace: [ 2787.478292][T11024] [ 2787.481268][T11024] dump_stack_lvl+0x18c/0x250 [ 2787.486019][T11024] ? show_regs_print_info+0x20/0x20 [ 2787.491268][T11024] ? load_image+0x420/0x420 [ 2787.495848][T11024] sysfs_warn_dup+0x8e/0xa0 [ 2787.500428][T11024] sysfs_do_create_link_sd+0xc0/0x110 [ 2787.505942][T11024] device_add_class_symlinks+0x1cf/0x240 [ 2787.511636][T11024] device_add+0x4f9/0xc40 [ 2787.516039][T11024] wiphy_register+0x1d99/0x2ac0 [ 2787.520966][T11024] ? cfg80211_event_work+0x40/0x40 [ 2787.526126][T11024] ? minstrel_ht_alloc+0x88a/0x990 [ 2787.531375][T11024] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2787.537484][T11024] ieee80211_register_hw+0x2dd8/0x3b30 [ 2787.542991][T11024] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2787.548582][T11024] ? ieee80211_tasklet_handler+0x20/0x20 [ 2787.554325][T11024] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2787.560350][T11024] ? __debug_object_init+0xec/0x450 [ 2787.565592][T11024] ? __asan_memset+0x22/0x40 [ 2787.570223][T11024] ? __hrtimer_init+0x189/0x270 [ 2787.575114][T11024] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2787.580897][T11024] ? mac80211_hwsim_free+0x220/0x220 [ 2787.586292][T11024] ? rcu_is_watching+0x15/0xb0 [ 2787.591092][T11024] ? kstrndup+0xbd/0x140 [ 2787.595381][T11024] hwsim_new_radio_nl+0xdad/0x1a70 [ 2787.600525][T11024] ? __nla_validate+0x50/0x50 [ 2787.605245][T11024] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2787.611709][T11024] ? __nla_parse+0x40/0x50 [ 2787.616160][T11024] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2787.622519][T11024] genl_family_rcv_msg_doit+0x21a/0x310 [ 2787.628093][T11024] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2787.634036][T11024] ? bpf_lsm_capable+0x9/0x10 [ 2787.638742][T11024] ? security_capable+0x89/0xb0 [ 2787.643628][T11024] genl_rcv_msg+0x611/0x7a0 [ 2787.648166][T11024] ? genl_bind+0x360/0x360 [ 2787.652623][T11024] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2787.658990][T11024] netlink_rcv_skb+0x235/0x4c0 [ 2787.663776][T11024] ? genl_bind+0x360/0x360 [ 2787.668218][T11024] ? netlink_ack+0x1160/0x1160 [ 2787.673040][T11024] ? __lock_acquire+0x7d80/0x7d80 [ 2787.678111][T11024] ? net_generic+0x1e/0x240 [ 2787.682671][T11024] ? down_read+0x1ac/0x2e0 [ 2787.687123][T11024] genl_rcv+0x28/0x40 [ 2787.691135][T11024] netlink_unicast+0x7b1/0x930 [ 2787.695928][T11024] netlink_sendmsg+0x8d0/0xbf0 [ 2787.700716][T11024] ? netlink_getsockopt+0x590/0x590 [ 2787.706054][T11024] ? netlink_getsockopt+0x590/0x590 [ 2787.711277][T11024] ____sys_sendmsg+0x61b/0x980 [ 2787.716067][T11024] ? __asan_memset+0x22/0x40 [ 2787.720691][T11024] ? __sys_sendmsg_sock+0x30/0x30 [ 2787.725743][T11024] ? __import_iovec+0x5f2/0x850 [ 2787.730635][T11024] ? import_iovec+0x73/0xa0 [ 2787.735172][T11024] ___sys_sendmsg+0x2a6/0x360 [ 2787.739884][T11024] ? __sys_sendmsg+0x2b0/0x2b0 [ 2787.744720][T11024] __se_sys_sendmsg+0x1d0/0x2c0 [ 2787.749617][T11024] ? __x64_sys_sendmsg+0x80/0x80 [ 2787.754607][T11024] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2787.760538][T11024] do_syscall_64+0x55/0xb0 [ 2787.764976][T11024] ? clear_bhb_loop+0x40/0x90 [ 2787.769687][T11024] ? clear_bhb_loop+0x40/0x90 [ 2787.774650][T11024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2787.780564][T11024] RIP: 0033:0x7f9f37d9e0d9 [ 2787.785010][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2787.804631][T11024] RSP: 002b:00007f9f38ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2787.813074][T11024] RAX: ffffffffffffffda RBX: 00007f9f38025fa0 RCX: 00007f9f37d9e0d9 [ 2787.821081][T11024] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2787.829519][T11024] RBP: 00007f9f37e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2787.837519][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2787.845512][T11024] R13: 00007f9f38026038 R14: 00007f9f38025fa0 R15: 00007fffb5567308 [ 2787.853519][T11024] [ 2788.121853][T11032] netlink: 'syz.1.13115': attribute type 2 has an invalid length. [ 2788.130337][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13115'. [ 2788.268784][T11034] netlink: 'syz.2.13117': attribute type 2 has an invalid length. [ 2788.277794][T11034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13117'. [ 2788.339396][T11037] netlink: 'syz.1.13124': attribute type 2 has an invalid length. [ 2788.349347][T11037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13124'. [ 2788.395833][T11039] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.13116'. [ 2788.814802][T11043] netlink: 'syz.0.13119': attribute type 2 has an invalid length. [ 2788.823754][T11043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13119'. [ 2790.621709][T11068] netlink: 'syz.0.13129': attribute type 2 has an invalid length. [ 2790.630174][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13129'. [ 2790.808549][T11073] netlink: 'syz.0.13131': attribute type 2 has an invalid length. [ 2790.818121][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13131'. [ 2791.286722][T11083] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13133'. [ 2792.165999][T11085] netlink: 'syz.1.13135': attribute type 2 has an invalid length. [ 2792.183117][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13135'. [ 2793.291966][T11101] netlink: 'syz.2.13139': attribute type 2 has an invalid length. [ 2793.300663][T11101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13139'. [ 2793.501754][T12390] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2793.791815][T11108] netlink: 'syz.2.13141': attribute type 2 has an invalid length. [ 2793.840858][T11108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13141'. [ 2794.222377][T11116] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2794.512896][T11122] netlink: 'syz.0.13146': attribute type 2 has an invalid length. [ 2794.531415][T11122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13146'. [ 2794.612301][T11126] netlink: 'syz.1.13149': attribute type 2 has an invalid length. [ 2794.641558][T11126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13149'. [ 2794.754493][T11130] netlink: 'syz.0.13150': attribute type 2 has an invalid length. [ 2794.772408][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13150'. [ 2795.028445][T11135] netlink: 'syz.2.13152': attribute type 9 has an invalid length. [ 2795.040749][T11135] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.13152'. [ 2795.588396][T11144] netlink: 'syz.3.13154': attribute type 2 has an invalid length. [ 2797.977418][T11158] netlink: 'syz.3.13158': attribute type 2 has an invalid length. [ 2797.986454][T11158] __nla_validate_parse: 1 callbacks suppressed [ 2797.986490][T11158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13158'. [ 2798.030742][T11161] netlink: 'syz.1.13159': attribute type 2 has an invalid length. [ 2798.040246][T11161] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13159'. [ 2798.166956][T11165] netlink: 'syz.2.13161': attribute type 2 has an invalid length. [ 2798.180260][T11165] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13161'. [ 2799.189975][T11172] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13172'. [ 2799.366245][T11176] netlink: 'syz.2.13173': attribute type 10 has an invalid length. [ 2799.375167][T11176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13173'. [ 2800.955834][T11183] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2801.252990][T11185] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13165'. [ 2801.359253][T11185] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2801.391314][T11185] CPU: 1 PID: 11185 Comm: syz.0.13165 Not tainted syzkaller #0 [ 2801.398954][T11185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2801.409067][T11185] Call Trace: [ 2801.412393][T11185] [ 2801.415419][T11185] dump_stack_lvl+0x18c/0x250 [ 2801.420158][T11185] ? show_regs_print_info+0x20/0x20 [ 2801.425416][T11185] ? load_image+0x420/0x420 [ 2801.430026][T11185] sysfs_warn_dup+0x8e/0xa0 [ 2801.434679][T11185] sysfs_do_create_link_sd+0xc0/0x110 [ 2801.440112][T11185] device_add_class_symlinks+0x1cf/0x240 [ 2801.445803][T11185] device_add+0x4f9/0xc40 [ 2801.450193][T11185] wiphy_register+0x1d99/0x2ac0 [ 2801.455124][T11185] ? cfg80211_event_work+0x40/0x40 [ 2801.460282][T11185] ? minstrel_ht_alloc+0x88a/0x990 [ 2801.465615][T11185] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2801.471727][T11185] ieee80211_register_hw+0x2dd8/0x3b30 [ 2801.477226][T11185] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2801.482799][T11185] ? ieee80211_tasklet_handler+0x20/0x20 [ 2801.488455][T11185] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2801.494395][T11185] ? __debug_object_init+0xec/0x450 [ 2801.499635][T11185] ? __asan_memset+0x22/0x40 [ 2801.504289][T11185] ? __hrtimer_init+0x189/0x270 [ 2801.509181][T11185] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2801.514940][T11185] ? mac80211_hwsim_free+0x220/0x220 [ 2801.520250][T11185] ? rcu_is_watching+0x15/0xb0 [ 2801.525051][T11185] ? kstrndup+0xbd/0x140 [ 2801.529336][T11185] hwsim_new_radio_nl+0xdad/0x1a70 [ 2801.534479][T11185] ? __nla_validate+0x50/0x50 [ 2801.539219][T11185] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2801.545608][T11185] ? __nla_parse+0x40/0x50 [ 2801.550069][T11185] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2801.556428][T11185] genl_family_rcv_msg_doit+0x21a/0x310 [ 2801.562012][T11185] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2801.567942][T11185] ? bpf_lsm_capable+0x9/0x10 [ 2801.572665][T11185] ? security_capable+0x89/0xb0 [ 2801.577560][T11185] genl_rcv_msg+0x611/0x7a0 [ 2801.582124][T11185] ? genl_bind+0x360/0x360 [ 2801.586564][T11185] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2801.592927][T11185] netlink_rcv_skb+0x235/0x4c0 [ 2801.597710][T11185] ? genl_bind+0x360/0x360 [ 2801.602162][T11185] ? netlink_ack+0x1160/0x1160 [ 2801.606969][T11185] ? down_read+0x1ac/0x2e0 [ 2801.611428][T11185] genl_rcv+0x28/0x40 [ 2801.615432][T11185] netlink_unicast+0x7b1/0x930 [ 2801.620235][T11185] netlink_sendmsg+0x8d0/0xbf0 [ 2801.625032][T11185] ? netlink_getsockopt+0x590/0x590 [ 2801.630281][T11185] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2801.635868][T11185] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2801.641176][T11185] ? security_socket_sendmsg+0x80/0xa0 [ 2801.646659][T11185] ? netlink_getsockopt+0x590/0x590 [ 2801.651901][T11185] ____sys_sendmsg+0x61b/0x980 [ 2801.656705][T11185] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2801.662897][T11185] ? __asan_memset+0x22/0x40 [ 2801.667511][T11185] ? __sys_sendmsg_sock+0x30/0x30 [ 2801.672576][T11185] ? __import_iovec+0x5f2/0x850 [ 2801.677461][T11185] ? import_iovec+0x73/0xa0 [ 2801.682002][T11185] ___sys_sendmsg+0x2a6/0x360 [ 2801.686714][T11185] ? __sys_sendmsg+0x2b0/0x2b0 [ 2801.691545][T11185] __se_sys_sendmsg+0x1d0/0x2c0 [ 2801.696429][T11185] ? __x64_sys_sendmsg+0x80/0x80 [ 2801.701407][T11185] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2801.707359][T11185] do_syscall_64+0x55/0xb0 [ 2801.711803][T11185] ? clear_bhb_loop+0x40/0x90 [ 2801.716506][T11185] ? clear_bhb_loop+0x40/0x90 [ 2801.721199][T11185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2801.727109][T11185] RIP: 0033:0x7f2aab39e0d9 [ 2801.731566][T11185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2801.751199][T11185] RSP: 002b:00007f2aac310028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2801.759653][T11185] RAX: ffffffffffffffda RBX: 00007f2aab625fa0 RCX: 00007f2aab39e0d9 [ 2801.767655][T11185] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2801.775657][T11185] RBP: 00007f2aab435024 R08: 0000000000000000 R09: 0000000000000000 [ 2801.783653][T11185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2801.791648][T11185] R13: 00007f2aab626038 R14: 00007f2aab625fa0 R15: 00007ffdc57996f8 [ 2801.799687][T11185] [ 2802.023574][T11194] netlink: 'syz.2.13169': attribute type 2 has an invalid length. [ 2802.041547][T11194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13169'. [ 2802.077444][T11197] netlink: 'syz.3.13171': attribute type 2 has an invalid length. [ 2802.101291][T11197] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13171'. [ 2802.370212][T11205] netlink: 'syz.2.13176': attribute type 2 has an invalid length. [ 2802.380274][T11205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13176'. [ 2802.435485][T11210] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.13177'. [ 2802.448304][T11210] netlink: 'syz.3.13177': attribute type 4 has an invalid length. [ 2802.859962][T11214] syzkaller0: entered promiscuous mode [ 2802.866954][T11214] syzkaller0: entered allmulticast mode [ 2803.101495][T11222] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2803.422710][T11228] __nla_validate_parse: 1 callbacks suppressed [ 2803.422750][T11228] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13183'. [ 2803.520408][T11228] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2803.539254][T11228] CPU: 1 PID: 11228 Comm: syz.0.13183 Not tainted syzkaller #0 [ 2803.546877][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2803.556970][T11228] Call Trace: [ 2803.560293][T11228] [ 2803.563271][T11228] dump_stack_lvl+0x18c/0x250 [ 2803.568011][T11228] ? show_regs_print_info+0x20/0x20 [ 2803.573271][T11228] ? load_image+0x420/0x420 [ 2803.577939][T11228] sysfs_warn_dup+0x8e/0xa0 [ 2803.582496][T11228] sysfs_do_create_link_sd+0xc0/0x110 [ 2803.587930][T11228] device_add_class_symlinks+0x1cf/0x240 [ 2803.593650][T11228] device_add+0x4f9/0xc40 [ 2803.598047][T11228] wiphy_register+0x1d99/0x2ac0 [ 2803.602971][T11228] ? cfg80211_event_work+0x40/0x40 [ 2803.608150][T11228] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2803.614283][T11228] ieee80211_register_hw+0x2dd8/0x3b30 [ 2803.619811][T11228] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2803.625431][T11228] ? ieee80211_tasklet_handler+0x20/0x20 [ 2803.631122][T11228] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 2803.637174][T11228] ? __debug_object_init+0xec/0x450 [ 2803.642432][T11228] ? __asan_memset+0x22/0x40 [ 2803.647075][T11228] ? __hrtimer_init+0x189/0x270 [ 2803.651978][T11228] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2803.657748][T11228] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2803.663976][T11228] ? mac80211_hwsim_free+0x220/0x220 [ 2803.669304][T11228] ? rcu_is_watching+0x15/0xb0 [ 2803.674119][T11228] ? kstrndup+0xbd/0x140 [ 2803.678422][T11228] hwsim_new_radio_nl+0xdad/0x1a70 [ 2803.683584][T11228] ? __nla_validate+0x50/0x50 [ 2803.688331][T11228] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2803.694723][T11228] ? __nla_parse+0x40/0x50 [ 2803.699200][T11228] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2803.705600][T11228] genl_family_rcv_msg_doit+0x21a/0x310 [ 2803.711232][T11228] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2803.717191][T11228] ? bpf_lsm_capable+0x9/0x10 [ 2803.721930][T11228] ? security_capable+0x89/0xb0 [ 2803.726840][T11228] genl_rcv_msg+0x611/0x7a0 [ 2803.731392][T11228] ? genl_bind+0x360/0x360 [ 2803.735849][T11228] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2803.742226][T11228] ? lockdep_hardirqs_on+0x98/0x150 [ 2803.747483][T11228] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2803.753688][T11228] netlink_rcv_skb+0x235/0x4c0 [ 2803.758488][T11228] ? genl_bind+0x360/0x360 [ 2803.762945][T11228] ? netlink_ack+0x1160/0x1160 [ 2803.767759][T11228] ? __lock_acquire+0x7d80/0x7d80 [ 2803.772835][T11228] ? net_generic+0x1e/0x240 [ 2803.777402][T11228] ? down_read+0x1ac/0x2e0 [ 2803.781886][T11228] genl_rcv+0x28/0x40 [ 2803.785910][T11228] netlink_unicast+0x7b1/0x930 [ 2803.790761][T11228] netlink_sendmsg+0x8d0/0xbf0 [ 2803.795592][T11228] ? netlink_getsockopt+0x590/0x590 [ 2803.800853][T11228] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2803.806457][T11228] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2803.811793][T11228] ? security_socket_sendmsg+0x80/0xa0 [ 2803.817294][T11228] ? netlink_getsockopt+0x590/0x590 [ 2803.822538][T11228] ____sys_sendmsg+0x61b/0x980 [ 2803.827355][T11228] ? __asan_memset+0x22/0x40 [ 2803.832006][T11228] ? __sys_sendmsg_sock+0x30/0x30 [ 2803.837075][T11228] ? __import_iovec+0x5f2/0x850 [ 2803.841990][T11228] ? import_iovec+0x73/0xa0 [ 2803.846556][T11228] ___sys_sendmsg+0x2a6/0x360 [ 2803.851298][T11228] ? __sys_sendmsg+0x2b0/0x2b0 [ 2803.856109][T11228] ? irqentry_enter+0x37/0x50 [ 2803.860908][T11228] __se_sys_sendmsg+0x1d0/0x2c0 [ 2803.865815][T11228] ? __x64_sys_sendmsg+0x80/0x80 [ 2803.870840][T11228] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2803.876799][T11228] do_syscall_64+0x55/0xb0 [ 2803.881267][T11228] ? clear_bhb_loop+0x40/0x90 [ 2803.885992][T11228] ? clear_bhb_loop+0x40/0x90 [ 2803.890731][T11228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2803.896689][T11228] RIP: 0033:0x7f2aab39e0d9 [ 2803.901159][T11228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2803.920822][T11228] RSP: 002b:00007f2aac310028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2803.929298][T11228] RAX: ffffffffffffffda RBX: 00007f2aab625fa0 RCX: 00007f2aab39e0d9 [ 2803.937322][T11228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2803.945360][T11228] RBP: 00007f2aab435024 R08: 0000000000000000 R09: 0000000000000000 [ 2803.953376][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2803.961389][T11228] R13: 00007f2aab626038 R14: 00007f2aab625fa0 R15: 00007ffdc57996f8 [ 2803.969422][T11228] [ 2804.044103][T11236] netlink: 'syz.3.13184': attribute type 2 has an invalid length. [ 2804.062345][T11236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13184'. [ 2804.172643][T11239] netlink: 'syz.2.13185': attribute type 2 has an invalid length. [ 2804.181296][T11239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13185'. [ 2804.226084][T11241] netlink: 'syz.3.13186': attribute type 2 has an invalid length. [ 2804.234456][T11241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13186'. [ 2804.380074][T11243] netlink: 'syz.0.13187': attribute type 9 has an invalid length. [ 2804.390319][T11243] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.13187'. [ 2804.794814][T11251] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13190'. [ 2805.449965][T11261] netlink: 'syz.3.13192': attribute type 10 has an invalid length. [ 2805.458764][T11261] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13192'. [ 2808.384963][T11267] netlink: 'syz.3.13196': attribute type 2 has an invalid length. [ 2808.397985][T11267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13196'. [ 2808.457853][T11273] netlink: 'syz.1.13194': attribute type 2 has an invalid length. [ 2808.481222][T11273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13194'. [ 2808.513518][T11271] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 2808.610826][T11275] netlink: 'syz.3.13198': attribute type 2 has an invalid length. [ 2808.626778][T11275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13198'. [ 2808.833351][T11277] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13199'. [ 2808.906113][T11277] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2808.961116][T11277] CPU: 0 PID: 11277 Comm: syz.1.13199 Not tainted syzkaller #0 [ 2808.968758][T11277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2808.978846][T11277] Call Trace: [ 2808.982156][T11277] [ 2808.985122][T11277] dump_stack_lvl+0x18c/0x250 [ 2808.989840][T11277] ? show_regs_print_info+0x20/0x20 [ 2808.995068][T11277] ? load_image+0x420/0x420 [ 2808.999661][T11277] sysfs_warn_dup+0x8e/0xa0 [ 2809.004197][T11277] sysfs_do_create_link_sd+0xc0/0x110 [ 2809.009600][T11277] device_add_class_symlinks+0x1cf/0x240 [ 2809.015276][T11277] device_add+0x4f9/0xc40 [ 2809.019642][T11277] wiphy_register+0x1d99/0x2ac0 [ 2809.024544][T11277] ? cfg80211_event_work+0x40/0x40 [ 2809.029689][T11277] ? _dev_printk+0x16a/0x180 [ 2809.034344][T11277] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2809.040446][T11277] ieee80211_register_hw+0x2dd8/0x3b30 [ 2809.045945][T11277] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2809.051552][T11277] ? ieee80211_tasklet_handler+0x20/0x20 [ 2809.057207][T11277] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2809.063153][T11277] ? __debug_object_init+0xec/0x450 [ 2809.068387][T11277] ? __asan_memset+0x22/0x40 [ 2809.073013][T11277] ? __hrtimer_init+0x189/0x270 [ 2809.077896][T11277] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2809.083667][T11277] ? mac80211_hwsim_free+0x220/0x220 [ 2809.088987][T11277] ? rcu_is_watching+0x15/0xb0 [ 2809.093810][T11277] ? kstrndup+0xbd/0x140 [ 2809.098098][T11277] hwsim_new_radio_nl+0xdad/0x1a70 [ 2809.103243][T11277] ? __nla_validate+0x50/0x50 [ 2809.107962][T11277] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2809.114327][T11277] ? __nla_parse+0x40/0x50 [ 2809.118789][T11277] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2809.125156][T11277] genl_family_rcv_msg_doit+0x21a/0x310 [ 2809.130739][T11277] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2809.136670][T11277] ? bpf_lsm_capable+0x9/0x10 [ 2809.141408][T11277] ? security_capable+0x89/0xb0 [ 2809.146295][T11277] genl_rcv_msg+0x611/0x7a0 [ 2809.150830][T11277] ? genl_bind+0x360/0x360 [ 2809.155269][T11277] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2809.161629][T11277] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2809.167477][T11277] netlink_rcv_skb+0x235/0x4c0 [ 2809.172272][T11277] ? genl_bind+0x360/0x360 [ 2809.176732][T11277] ? netlink_ack+0x1160/0x1160 [ 2809.181533][T11277] ? __lock_acquire+0x7d80/0x7d80 [ 2809.186586][T11277] ? net_generic+0x1e/0x240 [ 2809.191138][T11277] ? down_read+0x1ac/0x2e0 [ 2809.195669][T11277] genl_rcv+0x28/0x40 [ 2809.199707][T11277] netlink_unicast+0x7b1/0x930 [ 2809.204519][T11277] netlink_sendmsg+0x8d0/0xbf0 [ 2809.209313][T11277] ? netlink_getsockopt+0x590/0x590 [ 2809.214543][T11277] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2809.220136][T11277] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2809.225461][T11277] ? security_socket_sendmsg+0x80/0xa0 [ 2809.230939][T11277] ? netlink_getsockopt+0x590/0x590 [ 2809.236168][T11277] ____sys_sendmsg+0x61b/0x980 [ 2809.240975][T11277] ? __asan_memset+0x22/0x40 [ 2809.245614][T11277] ? __sys_sendmsg_sock+0x30/0x30 [ 2809.250669][T11277] ? __import_iovec+0x5f2/0x850 [ 2809.255559][T11277] ? import_iovec+0x73/0xa0 [ 2809.260089][T11277] ___sys_sendmsg+0x2a6/0x360 [ 2809.264822][T11277] ? __sys_sendmsg+0x2b0/0x2b0 [ 2809.269697][T11277] __se_sys_sendmsg+0x1d0/0x2c0 [ 2809.274576][T11277] ? __x64_sys_sendmsg+0x80/0x80 [ 2809.279648][T11277] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2809.285577][T11277] do_syscall_64+0x55/0xb0 [ 2809.290025][T11277] ? clear_bhb_loop+0x40/0x90 [ 2809.294731][T11277] ? clear_bhb_loop+0x40/0x90 [ 2809.299442][T11277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2809.305515][T11277] RIP: 0033:0x7f9f37d9e0d9 [ 2809.309962][T11277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2809.329629][T11277] RSP: 002b:00007f9f38ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2809.338169][T11277] RAX: ffffffffffffffda RBX: 00007f9f38025fa0 RCX: 00007f9f37d9e0d9 [ 2809.346183][T11277] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2809.354208][T11277] RBP: 00007f9f37e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2809.362202][T11277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2809.370197][T11277] R13: 00007f9f38026038 R14: 00007f9f38025fa0 R15: 00007fffb5567308 [ 2809.378228][T11277] [ 2809.444978][T11282] netlink: 'syz.2.13210': attribute type 2 has an invalid length. [ 2809.481215][T11282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13210'. [ 2809.513813][T11287] netlink: 'syz.3.13202': attribute type 9 has an invalid length. [ 2809.528979][T11287] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13202'. [ 2809.950079][T11296] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13206'. [ 2810.535019][T11299] netlink: 'syz.0.13207': attribute type 10 has an invalid length. [ 2810.554117][T11299] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13207'. [ 2810.610796][T11305] netlink: 'syz.1.13208': attribute type 2 has an invalid length. [ 2810.621855][T11305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13208'. [ 2810.705810][T11307] netlink: 'syz.3.13209': attribute type 2 has an invalid length. [ 2810.720014][T11307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13209'. [ 2810.769733][T11311] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13212'. [ 2810.868650][T11309] netlink: 'syz.0.13211': attribute type 4 has an invalid length. [ 2813.628316][T11328] __nla_validate_parse: 2 callbacks suppressed [ 2813.628334][T11328] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13216'. [ 2813.911544][T11319] netlink: 'syz.0.13214': attribute type 2 has an invalid length. [ 2813.919402][T11319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13214'. [ 2813.969914][T11328] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2813.994301][T11328] CPU: 0 PID: 11328 Comm: syz.2.13216 Not tainted syzkaller #0 [ 2814.001887][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2814.011979][T11328] Call Trace: [ 2814.015282][T11328] [ 2814.018215][T11328] dump_stack_lvl+0x18c/0x250 [ 2814.022902][T11328] ? show_regs_print_info+0x20/0x20 [ 2814.028112][T11328] ? load_image+0x420/0x420 [ 2814.032654][T11328] sysfs_warn_dup+0x8e/0xa0 [ 2814.037172][T11328] sysfs_do_create_link_sd+0xc0/0x110 [ 2814.042562][T11328] device_add_class_symlinks+0x1cf/0x240 [ 2814.048292][T11328] device_add+0x4f9/0xc40 [ 2814.052627][T11328] wiphy_register+0x1d99/0x2ac0 [ 2814.057501][T11328] ? cfg80211_event_work+0x40/0x40 [ 2814.062617][T11328] ? minstrel_ht_alloc+0x88a/0x990 [ 2814.067835][T11328] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2814.073915][T11328] ieee80211_register_hw+0x2dd8/0x3b30 [ 2814.079389][T11328] ? ieee80211_register_hw+0xfb1/0x3b30 [ 2814.084953][T11328] ? ieee80211_tasklet_handler+0x20/0x20 [ 2814.090597][T11328] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2814.096507][T11328] ? __debug_object_init+0xec/0x450 [ 2814.101741][T11328] ? __asan_memset+0x22/0x40 [ 2814.106353][T11328] ? __hrtimer_init+0x189/0x270 [ 2814.111216][T11328] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2814.116964][T11328] ? mac80211_hwsim_free+0x220/0x220 [ 2814.122274][T11328] ? rcu_is_watching+0x15/0xb0 [ 2814.127051][T11328] ? kstrndup+0xbd/0x140 [ 2814.131324][T11328] hwsim_new_radio_nl+0xdad/0x1a70 [ 2814.136480][T11328] ? __nla_validate+0x50/0x50 [ 2814.141213][T11328] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2814.147583][T11328] ? __nla_parse+0x40/0x50 [ 2814.152009][T11328] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2814.158351][T11328] genl_family_rcv_msg_doit+0x21a/0x310 [ 2814.163913][T11328] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2814.169835][T11328] ? bpf_lsm_capable+0x9/0x10 [ 2814.174528][T11328] ? security_capable+0x89/0xb0 [ 2814.179397][T11328] genl_rcv_msg+0x611/0x7a0 [ 2814.184018][T11328] ? genl_bind+0x360/0x360 [ 2814.188462][T11328] ? perf_trace_lock+0xfc/0x3b0 [ 2814.193328][T11328] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2814.199687][T11328] ? perf_trace_lock+0xfc/0x3b0 [ 2814.204559][T11328] netlink_rcv_skb+0x235/0x4c0 [ 2814.209336][T11328] ? genl_bind+0x360/0x360 [ 2814.213760][T11328] ? netlink_ack+0x1160/0x1160 [ 2814.218534][T11328] ? __lock_acquire+0x7d80/0x7d80 [ 2814.223576][T11328] ? net_generic+0x1e/0x240 [ 2814.228102][T11328] ? down_read+0x1ac/0x2e0 [ 2814.232566][T11328] genl_rcv+0x28/0x40 [ 2814.236584][T11328] netlink_unicast+0x7b1/0x930 [ 2814.241409][T11328] netlink_sendmsg+0x8d0/0xbf0 [ 2814.246198][T11328] ? netlink_getsockopt+0x590/0x590 [ 2814.251497][T11328] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2814.257143][T11328] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2814.262449][T11328] ? security_socket_sendmsg+0x80/0xa0 [ 2814.267921][T11328] ? netlink_getsockopt+0x590/0x590 [ 2814.273134][T11328] ____sys_sendmsg+0x61b/0x980 [ 2814.278013][T11328] ? __asan_memset+0x22/0x40 [ 2814.282712][T11328] ? __sys_sendmsg_sock+0x30/0x30 [ 2814.287759][T11328] ? __import_iovec+0x5f2/0x850 [ 2814.292634][T11328] ? import_iovec+0x73/0xa0 [ 2814.297168][T11328] ___sys_sendmsg+0x2a6/0x360 [ 2814.301868][T11328] ? __sys_sendmsg+0x2b0/0x2b0 [ 2814.306742][T11328] __se_sys_sendmsg+0x1d0/0x2c0 [ 2814.311634][T11328] ? __x64_sys_sendmsg+0x80/0x80 [ 2814.316624][T11328] ? lockdep_hardirqs_on+0x98/0x150 [ 2814.321865][T11328] do_syscall_64+0x55/0xb0 [ 2814.326296][T11328] ? clear_bhb_loop+0x40/0x90 [ 2814.331000][T11328] ? clear_bhb_loop+0x40/0x90 [ 2814.335725][T11328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2814.341659][T11328] RIP: 0033:0x7fb257f9e0d9 [ 2814.346092][T11328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2814.365708][T11328] RSP: 002b:00007fb258e48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2814.374155][T11328] RAX: ffffffffffffffda RBX: 00007fb258226180 RCX: 00007fb257f9e0d9 [ 2814.382135][T11328] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2814.390155][T11328] RBP: 00007fb258035024 R08: 0000000000000000 R09: 0000000000000000 [ 2814.398133][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2814.406109][T11328] R13: 00007fb258226218 R14: 00007fb258226180 R15: 00007ffe37926bc8 [ 2814.414104][T11328] [ 2814.588266][T11331] netlink: 'syz.1.13217': attribute type 9 has an invalid length. [ 2814.601265][T11331] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13217'. [ 2815.596857][T11343] netlink: 'syz.3.13230': attribute type 9 has an invalid length. [ 2815.608827][T11343] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13230'. [ 2816.702324][T11365] netlink: 'syz.1.13221': attribute type 2 has an invalid length. [ 2816.710812][T11365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13221'. [ 2816.851505][T11367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13220'. [ 2817.128248][T11376] netlink: 'syz.1.13226': attribute type 10 has an invalid length. [ 2817.136623][T11376] netlink: 2 bytes leftover after parsing attributes in process `syz.1.13226'. [ 2818.395870][T11390] netlink: 'syz.1.13234': attribute type 9 has an invalid length. [ 2818.406088][T11390] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13234'. [ 2818.826509][T11396] netlink: 'syz.0.13237': attribute type 2 has an invalid length. [ 2818.835262][T11396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13237'. [ 2819.117882][T11401] syzkaller0: entered promiscuous mode [ 2819.152952][T11401] syzkaller0: entered allmulticast mode [ 2819.177378][T11404] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13240'. [ 2821.214067][T11440] netlink: 'syz.3.13251': attribute type 9 has an invalid length. [ 2821.229228][T11440] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13251'. [ 2821.657731][T11442] netlink: 'syz.1.13249': attribute type 2 has an invalid length. [ 2821.671254][T11442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13249'. [ 2822.148644][T11452] syzkaller0: entered promiscuous mode [ 2822.156816][T11452] syzkaller0: entered allmulticast mode [ 2824.459320][T11482] netlink: 'syz.0.13263': attribute type 2 has an invalid length. [ 2824.468000][T11482] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13263'. [ 2825.122037][T11488] netlink: 'syz.2.13266': attribute type 2 has an invalid length. [ 2825.131183][T11488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13266'. [ 2825.374806][T11496] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13267'. [ 2825.445030][T11494] netlink: 'syz.1.13276': attribute type 9 has an invalid length. [ 2825.473793][T11494] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13276'. [ 2825.492009][T12400] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2826.721669][T11517] netlink: 'syz.3.13275': attribute type 2 has an invalid length. [ 2826.760790][T11517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13275'. [ 2827.505298][T11524] netlink: 'syz.3.13278': attribute type 2 has an invalid length. [ 2827.516605][T11524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13278'. [ 2827.741663][T11528] netlink: 'syz.1.13287': attribute type 2 has an invalid length. [ 2827.750803][T11528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13287'. [ 2827.965302][T11531] netlink: 'syz.2.13281': attribute type 9 has an invalid length. [ 2827.984112][T11531] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.13281'. [ 2828.870742][T11539] netlink: 'syz.1.13291': attribute type 9 has an invalid length. [ 2828.891206][T11539] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.13291'. [ 2832.604208][T11584] netlink: 'syz.1.13297': attribute type 2 has an invalid length. [ 2832.613309][T11584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13297'. [ 2833.080844][T11596] netlink: 'syz.1.13303': attribute type 2 has an invalid length. [ 2833.100639][T11596] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.13303'. [ 2833.394210][T11601] netlink: 'syz.0.13310': attribute type 2 has an invalid length. [ 2833.421459][T11601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13310'. [ 2833.472871][T11602] syzkaller0: entered promiscuous mode [ 2833.489015][T11602] syzkaller0: entered allmulticast mode [ 2834.408499][T11616] sctp: [Deprecated]: syz.3.13307 (pid 11616) Use of int in maxseg socket option. [ 2834.408499][T11616] Use struct sctp_assoc_value instead [ 2835.295909][T11628] netlink: 'syz.1.13313': attribute type 2 has an invalid length. [ 2835.304766][T11628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13313'. [ 2835.375760][T11630] netlink: 'syz.3.13315': attribute type 2 has an invalid length. [ 2835.389581][T11630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13315'. [ 2835.499426][T11636] netlink: 'syz.0.13324': attribute type 2 has an invalid length. [ 2835.508470][T11636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13324'. [ 2835.623062][T11634] syzkaller0: entered promiscuous mode [ 2835.628905][T11634] syzkaller0: entered allmulticast mode [ 2835.945557][T11646] netlink: 'syz.0.13327': attribute type 2 has an invalid length. [ 2835.954535][T11646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13327'. [ 2836.059964][T11650] netlink: 10 bytes leftover after parsing attributes in process `syz.2.13321'. [ 2836.376322][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.391121][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.695460][T11662] netlink: 'syz.1.13325': attribute type 2 has an invalid length. [ 2837.704026][T11662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13325'. [ 2837.929317][T11670] netlink: 'syz.0.13328': attribute type 2 has an invalid length. [ 2837.937853][T11670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13328'. [ 2839.218952][T11682] syzkaller0: entered promiscuous mode [ 2839.224842][T11682] syzkaller0: entered allmulticast mode [ 2839.497119][T11702] netlink: 'syz.3.13336': attribute type 2 has an invalid length. [ 2839.514410][T11702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13336'. [ 2839.578759][T11704] netlink: 'syz.1.13337': attribute type 2 has an invalid length. [ 2839.596577][T11704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13337'. [ 2839.663362][T11706] netlink: 'syz.2.13339': attribute type 2 has an invalid length. [ 2839.698834][T11706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13339'. [ 2843.337060][T11728] netlink: 'syz.3.13349': attribute type 2 has an invalid length. [ 2843.368205][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13349'. [ 2843.522664][T11731] netlink: 'syz.2.13350': attribute type 2 has an invalid length. [ 2843.544619][T11731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13350'. [ 2843.778338][T11735] sctp: [Deprecated]: syz.2.13351 (pid 11735) Use of int in maxseg socket option. [ 2843.778338][T11735] Use struct sctp_assoc_value instead [ 2843.824737][T11737] netlink: 'syz.3.13353': attribute type 5 has an invalid length. [ 2846.429595][T11748] netlink: 'syz.3.13355': attribute type 2 has an invalid length. [ 2846.440568][T11748] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.13355'. [ 2847.082775][T11755] netlink: 'syz.0.13357': attribute type 4 has an invalid length. [ 2847.090704][T11755] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13357'. [ 2850.448150][T11768] netlink: 'syz.0.13359': attribute type 2 has an invalid length. [ 2850.476902][T11768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13359'. [ 2850.489887][T11770] netlink: 'syz.2.13360': attribute type 2 has an invalid length. [ 2850.498017][T11770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13360'. [ 2850.680945][T11776] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13364'. [ 2852.940007][T11804] netlink: 'syz.0.13371': attribute type 5 has an invalid length. [ 2855.966827][T11806] netlink: 'syz.1.13373': attribute type 2 has an invalid length. [ 2855.981238][T11806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13373'. [ 2856.062508][T11812] netlink: 'syz.2.13376': attribute type 2 has an invalid length. [ 2856.071482][T11812] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.13376'. [ 2856.083495][T11809] netlink: 'syz.3.13374': attribute type 2 has an invalid length. [ 2856.102073][T11809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13374'. [ 2856.307339][T11816] netlink: 10 bytes leftover after parsing attributes in process `syz.1.13377'. [ 2856.658011][T11825] netlink: 'syz.0.13381': attribute type 39 has an invalid length. [ 2856.792392][T11828] netlink: 'syz.1.13382': attribute type 2 has an invalid length. [ 2856.806438][T11828] netlink: 'syz.1.13382': attribute type 1 has an invalid length. [ 2856.820199][T11828] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13382'. [ 2857.278328][T11832] netlink: 'syz.2.13383': attribute type 2 has an invalid length. [ 2857.291541][T11832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13383'. [ 2857.419911][T11834] netlink: 'syz.1.13384': attribute type 2 has an invalid length. [ 2857.429052][T11834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13384'. [ 2857.973553][T11842] netlink: 'syz.0.13387': attribute type 2 has an invalid length. [ 2857.987459][T11842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13387'. [ 2857.997135][T11844] netlink: 'syz.1.13388': attribute type 2 has an invalid length. [ 2858.006247][T11844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13388'. [ 2858.268652][T11849] sit0: entered promiscuous mode [ 2858.499229][T11853] netlink: 9 bytes leftover after parsing attributes in process `syz.1.13393'. [ 2858.562317][T11853] sit0: left promiscuous mode [ 2861.529607][T11925] validate_nla: 12 callbacks suppressed [ 2861.529643][T11925] netlink: 'syz.3.13416': attribute type 2 has an invalid length. [ 2861.545837][T11925] __nla_validate_parse: 10 callbacks suppressed [ 2861.546175][T11925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13416'. [ 2861.736408][T11932] netlink: 'syz.3.13419': attribute type 2 has an invalid length. [ 2861.746902][T11932] netlink: 'syz.3.13419': attribute type 1 has an invalid length. [ 2861.781340][T11932] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13419'. [ 2861.926032][T11937] netlink: 'syz.0.13421': attribute type 2 has an invalid length. [ 2861.950291][T11937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13421'. [ 2862.515066][T11942] netlink: 'syz.3.13422': attribute type 2 has an invalid length. [ 2862.523150][T11942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13422'. [ 2862.632597][T11944] netlink: 'syz.0.13423': attribute type 2 has an invalid length. [ 2862.641512][T11944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13423'. [ 2863.273907][T11957] netlink: 'syz.3.13428': attribute type 2 has an invalid length. [ 2863.307401][T11957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13428'. [ 2863.696158][T11961] netlink: 'syz.2.13430': attribute type 2 has an invalid length. [ 2863.705888][T11961] netlink: 'syz.2.13430': attribute type 1 has an invalid length. [ 2863.715326][T11961] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13430'. [ 2863.878651][T11965] netlink: 'syz.0.13431': attribute type 2 has an invalid length. [ 2863.892944][T11965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13431'. [ 2864.237974][T11975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13432'. [ 2864.268844][T11978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13434'. [ 2866.641427][T12015] sit0: entered promiscuous mode [ 2868.261155][T12037] sit0: left promiscuous mode [ 2868.403921][T12042] validate_nla: 8 callbacks suppressed [ 2868.403957][T12042] netlink: 'syz.3.13455': attribute type 2 has an invalid length. [ 2868.421635][T12042] __nla_validate_parse: 5 callbacks suppressed [ 2868.421670][T12042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13455'. [ 2868.563025][T12047] netlink: 'syz.0.13456': attribute type 2 has an invalid length. [ 2868.573411][T12047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13456'. [ 2869.696928][T12058] netlink: 'syz.1.13469': attribute type 2 has an invalid length. [ 2869.711139][T12058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13469'. [ 2870.813500][T12083] netlink: 'syz.2.13467': attribute type 2 has an invalid length. [ 2870.821726][T12083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13467'. [ 2871.052285][T12085] netlink: 'syz.2.13468': attribute type 2 has an invalid length. [ 2871.061573][T12085] netlink: 'syz.2.13468': attribute type 1 has an invalid length. [ 2871.070644][T12085] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13468'. [ 2871.941198][T12099] netlink: 'syz.3.13473': attribute type 2 has an invalid length. [ 2871.949620][T12099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13473'. [ 2873.318284][T12116] netlink: 'syz.1.13477': attribute type 2 has an invalid length. [ 2873.326388][T12116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13477'. [ 2874.277390][T12143] netlink: 'syz.1.13484': attribute type 2 has an invalid length. [ 2874.285395][T12143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13484'. [ 2874.318729][T12144] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.13485'. [ 2874.606381][T12151] netlink: 'syz.3.13487': attribute type 3 has an invalid length. [ 2874.621438][T12151] netlink: 'syz.3.13487': attribute type 1 has an invalid length. [ 2874.630951][T12151] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.13487'. [ 2874.655813][T12154] netlink: 'syz.0.13485': attribute type 39 has an invalid length. [ 2874.769685][T12156] netlink: 'syz.3.13489': attribute type 2 has an invalid length. [ 2874.778545][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13489'. [ 2876.829665][T12167] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13493'. [ 2877.417533][T12184] netlink: 'syz.2.13495': attribute type 2 has an invalid length. [ 2877.451065][T12184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13495'. [ 2877.809924][T12191] sit0: entered promiscuous mode [ 2879.033968][T12212] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13504'. [ 2879.467956][T12226] netlink: 'syz.3.13507': attribute type 2 has an invalid length. [ 2879.485965][T12226] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13507'. [ 2879.643462][T12229] netlink: 'syz.1.13508': attribute type 3 has an invalid length. [ 2879.652884][T12229] netlink: 'syz.1.13508': attribute type 1 has an invalid length. [ 2879.661902][T12229] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.13508'. [ 2879.917684][T12233] sit0: entered promiscuous mode [ 2882.420435][T12261] netlink: 'syz.1.13517': attribute type 2 has an invalid length. [ 2882.428495][T12261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13517'. [ 2882.524625][T12266] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13519'. [ 2882.584818][T12268] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13520'. [ 2884.503658][T12293] netlink: 'syz.0.13526': attribute type 21 has an invalid length. [ 2884.503979][T12291] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.13525'. [ 2884.513375][T12293] IPv6: NLM_F_CREATE should be specified when creating new route [ 2884.530502][T12293] IPv6: Can't replace route, no match found [ 2884.609880][T12295] mac80211_hwsim hwsim107 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2884.688818][T12293] netlink: 'syz.0.13526': attribute type 10 has an invalid length. [ 2884.832050][T12302] netlink: 'syz.3.13525': attribute type 39 has an invalid length. [ 2885.080178][T12307] netlink: 'syz.0.13529': attribute type 2 has an invalid length. [ 2885.097378][T12307] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13529'. [ 2885.348375][T12310] IPv6: pim6reg1: Disabled Multicast RS [ 2885.443485][T12312] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 2885.461296][T12312] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 2885.640000][T12316] netlink: 'syz.2.13533': attribute type 2 has an invalid length. [ 2885.649430][T12316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13533'. [ 2886.582611][T12334] netlink: 'syz.1.13543': attribute type 2 has an invalid length. [ 2886.590637][T12334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13543'. [ 2886.854973][T12340] netlink: 'syz.1.13539': attribute type 2 has an invalid length. [ 2886.865709][T12340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13539'. [ 2887.004115][T12345] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13540'. [ 2887.279740][T12348] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13542'. [ 2888.033823][T12363] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.13544'. [ 2888.865682][T12373] netlink: 'syz.2.13544': attribute type 39 has an invalid length. [ 2889.599172][T12378] IPv6: pim6reg1: Disabled Multicast RS [ 2889.761661][T12382] netlink: 'syz.0.13548': attribute type 2 has an invalid length. [ 2889.793908][T12382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13548'. [ 2889.910605][T12385] netlink: 'syz.2.13549': attribute type 2 has an invalid length. [ 2889.919304][T12385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13549'. [ 2890.060841][T12387] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 2890.070073][T12387] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 2890.142400][T12392] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 2890.151168][T12392] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 2890.427999][T12403] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13552'. [ 2890.500350][T12404] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.13561'. [ 2890.821869][T12395] netlink: 'syz.0.13559': attribute type 2 has an invalid length. [ 2890.851710][T12395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13559'. [ 2890.918757][T12410] netlink: 'syz.1.13561': attribute type 39 has an invalid length. [ 2892.419967][T12424] IPv6: pim6reg1: Disabled Multicast RS [ 2892.434839][T12427] netlink: 'syz.2.13560': attribute type 2 has an invalid length. [ 2892.451405][T12427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13560'. [ 2892.574023][T12433] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.13571'. [ 2892.613487][T12432] netlink: 'syz.0.13570': attribute type 2 has an invalid length. [ 2892.622177][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13570'. [ 2892.636959][T12435] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 2892.644810][T12435] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 2892.685976][T12435] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 2892.699062][T12435] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 2892.859580][T12441] netlink: 'syz.2.13564': attribute type 2 has an invalid length. [ 2892.872212][T12441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13564'. [ 2892.908229][T12443] netlink: 'syz.3.13571': attribute type 39 has an invalid length. [ 2893.077877][T12445] mac80211_hwsim hwsim105 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2894.472139][T12464] netlink: 'syz.3.13575': attribute type 2 has an invalid length. [ 2894.480179][T12464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13575'. [ 2895.467114][T12466] mac80211_hwsim hwsim108 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2895.631565][T12471] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 2895.638450][T12471] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 2895.752215][T12474] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 2895.759963][T12474] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 2895.797909][T12477] netlink: 'syz.2.13580': attribute type 2 has an invalid length. [ 2895.806707][T12477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13580'. [ 2897.814914][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.821385][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2902.593536][T12500] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 2902.602030][T12500] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 2902.657137][T12509] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13589'. [ 2902.671816][T12508] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 2902.678983][T12508] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 2902.708885][T12504] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2903.114016][T12517] netlink: 'syz.1.13591': attribute type 2 has an invalid length. [ 2903.122701][T12517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13591'. [ 2903.211495][T12519] netlink: 'syz.0.13595': attribute type 21 has an invalid length. [ 2903.239260][T12519] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13595'. [ 2903.299518][T12519] sit0: left promiscuous mode [ 2903.626294][T12524] sit0: entered promiscuous mode [ 2903.731342][T12540] netlink: 'syz.2.13606': attribute type 2 has an invalid length. [ 2903.740458][T12540] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13606'. [ 2903.970981][T12547] netlink: 'syz.3.13609': attribute type 2 has an invalid length. [ 2903.979652][T12547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13609'. [ 2904.177100][T12551] mac80211_hwsim hwsim105 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2904.473650][T12561] netlink: 'syz.2.13605': attribute type 2 has an invalid length. [ 2904.482012][T12561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13605'. [ 2905.033995][T12563] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 2905.089744][T12563] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 2905.115563][T12566] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 2905.123699][T12566] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 2906.403292][T12569] netlink: 'syz.3.13612': attribute type 21 has an invalid length. [ 2906.428771][T12569] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13612'. [ 2906.570414][T12577] sit0: left promiscuous mode [ 2906.639680][T12579] netlink: 'syz.2.13613': attribute type 2 has an invalid length. [ 2906.666033][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13613'. [ 2906.696617][T12569] sit0: entered promiscuous mode [ 2906.997449][T12585] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13615'. [ 2908.199535][T12599] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13621'. [ 2908.502489][T12608] netlink: 'syz.1.13625': attribute type 2 has an invalid length. [ 2908.511149][T12608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13625'. [ 2908.722560][T12616] netlink: 'syz.1.13627': attribute type 21 has an invalid length. [ 2908.734512][T12616] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13627'. [ 2908.940786][T12616] sit0: entered promiscuous mode [ 2909.679494][T12630] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 2909.686838][T12630] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 2909.714824][T12631] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 2909.723200][T12631] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 2909.934227][T12633] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13633'. [ 2910.270773][T12642] netlink: 'syz.1.13635': attribute type 2 has an invalid length. [ 2910.280295][T12642] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13635'. [ 2910.535887][T12648] netlink: 'syz.1.13638': attribute type 2 has an invalid length. [ 2910.554011][T12648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13638'. [ 2910.999532][T12659] netlink: 'syz.2.13641': attribute type 21 has an invalid length. [ 2911.008963][T12659] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13641'. [ 2911.061364][T12659] sit0: entered promiscuous mode [ 2911.835347][T12660] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 2911.842326][T12660] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 2911.862383][T12661] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 2911.869473][T12661] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 2913.647521][T12675] netlink: 'syz.3.13646': attribute type 2 has an invalid length. [ 2913.662523][T12675] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13646'. [ 2913.719803][T12674] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13644'. [ 2913.880248][T12682] netlink: 'syz.3.13650': attribute type 2 has an invalid length. [ 2913.889041][T12682] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13650'. [ 2914.267292][T12692] netlink: 'syz.0.13656': attribute type 21 has an invalid length. [ 2914.277796][T12692] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13656'. [ 2914.302667][T12692] sit0: left promiscuous mode [ 2914.476975][T12693] sit0: entered promiscuous mode [ 2914.839822][T12702] netlink: 'syz.0.13666': attribute type 21 has an invalid length. [ 2914.849325][T12702] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13666'. [ 2914.881316][T12702] sit0: left promiscuous mode [ 2915.038651][T12705] sit0: entered promiscuous mode [ 2915.380093][T12717] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13662'. [ 2915.483854][T12719] netlink: 'syz.0.13663': attribute type 2 has an invalid length. [ 2915.496659][T12719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13663'. [ 2915.609707][T12721] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13665'. [ 2916.051805][T12734] mac80211_hwsim hwsim108 wlan1: entered allmulticast mode [ 2916.150377][T12736] netlink: 'syz.0.13671': attribute type 21 has an invalid length. [ 2916.159231][T12736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13671'. [ 2916.183077][T12736] sit0: left promiscuous mode [ 2916.294549][T12738] sit0: entered promiscuous mode [ 2916.609215][T12744] netlink: 'syz.1.13674': attribute type 2 has an invalid length. [ 2916.617391][T12744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13674'. [ 2918.568523][T12777] netlink: 'syz.2.13681': attribute type 21 has an invalid length. [ 2918.680471][T12779] sit0: left promiscuous mode [ 2918.766166][T12777] sit0: entered promiscuous mode [ 2918.997032][T12782] netlink: 'syz.2.13683': attribute type 2 has an invalid length. [ 2919.008028][T12782] __nla_validate_parse: 2 callbacks suppressed [ 2919.008061][T12782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13683'. [ 2919.994800][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13692'. [ 2920.093249][T12803] netlink: 'syz.0.13693': attribute type 2 has an invalid length. [ 2920.102487][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13693'. [ 2920.262754][T12806] netlink: 'syz.0.13694': attribute type 21 has an invalid length. [ 2920.272134][T12806] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13694'. [ 2920.314907][T12806] sit0: left promiscuous mode [ 2920.485254][T12807] sit0: entered promiscuous mode [ 2922.269614][T12826] netlink: 188 bytes leftover after parsing attributes in process `syz.3.13701'. [ 2923.061384][T12831] netlink: 'syz.2.13702': attribute type 2 has an invalid length. [ 2923.069717][T12831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13702'. [ 2923.194519][T12835] netlink: 'syz.2.13704': attribute type 21 has an invalid length. [ 2923.203541][T12835] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13704'. [ 2923.239749][T12835] sit0: left promiscuous mode [ 2923.440124][T12838] sit0: entered promiscuous mode [ 2924.017979][T12850] netlink: 'syz.0.13712': attribute type 21 has an invalid length. [ 2924.239004][T12852] netlink: 'syz.0.13714': attribute type 2 has an invalid length. [ 2924.248947][T12852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13714'. [ 2924.474037][T12859] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13715'. [ 2927.155921][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13724'. [ 2928.059902][T12897] netlink: 188 bytes leftover after parsing attributes in process `syz.1.13728'. [ 2928.200528][T12901] netlink: 'syz.0.13731': attribute type 2 has an invalid length. [ 2928.209558][T12901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13731'. [ 2930.158703][T12922] netlink: 'syz.3.13738': attribute type 2 has an invalid length. [ 2930.176214][T12922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13738'. [ 2930.235647][T12924] netlink: 'syz.1.13741': attribute type 2 has an invalid length. [ 2930.263164][T12924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13741'. [ 2931.685109][T12948] netlink: 'syz.1.13755': attribute type 3 has an invalid length. [ 2931.703099][T12948] netlink: 'syz.1.13755': attribute type 1 has an invalid length. [ 2931.714249][T12948] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.13755'. [ 2932.469142][T12961] netlink: 'syz.3.13750': attribute type 2 has an invalid length. [ 2932.477145][T12961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13750'. [ 2932.690157][T12967] netlink: 'syz.3.13753': attribute type 2 has an invalid length. [ 2932.700652][T12967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13753'. [ 2932.722173][T12963] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.13751'. [ 2932.732266][T12963] openvswitch: netlink: IP tunnel dst address not specified [ 2934.020289][T12982] netlink: 'syz.3.13758': attribute type 39 has an invalid length. [ 2934.589593][T12997] netlink: 'syz.1.13762': attribute type 2 has an invalid length. [ 2934.612443][T12997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13762'. [ 2935.041332][T12999] netlink: 'syz.0.13763': attribute type 2 has an invalid length. [ 2935.053422][T12999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13763'. [ 2936.682619][T13012] netlink: 'syz.0.13776': attribute type 2 has an invalid length. [ 2936.690826][T13012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13776'. [ 2937.804388][T13034] netlink: 'syz.2.13772': attribute type 2 has an invalid length. [ 2937.844306][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13772'. [ 2938.103815][T13039] netlink: 'syz.0.13774': attribute type 2 has an invalid length. [ 2938.134154][T13039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13774'. [ 2938.602978][T13052] netlink: 'syz.3.13777': attribute type 3 has an invalid length. [ 2938.660848][T13052] netlink: 'syz.3.13777': attribute type 1 has an invalid length. [ 2938.688600][T13052] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.13777'. [ 2939.232954][T13051] netlink: 'syz.1.13780': attribute type 2 has an invalid length. [ 2939.240865][T13051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13780'. [ 2939.456530][T13058] netlink: 'syz.0.13789': attribute type 2 has an invalid length. [ 2939.477352][T13058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13789'. [ 2940.066022][T13063] sit0: left promiscuous mode [ 2940.123743][T13064] sit0: entered promiscuous mode [ 2940.492015][T13076] netlink: 'syz.3.13787': attribute type 2 has an invalid length. [ 2940.500505][T13076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13787'. [ 2940.856408][T13085] netlink: 'syz.3.13793': attribute type 2 has an invalid length. [ 2940.864826][T13085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13793'. [ 2941.009548][T13087] netlink: 'syz.2.13792': attribute type 3 has an invalid length. [ 2941.019211][T13087] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.13792'. [ 2942.198947][T13105] validate_nla: 1 callbacks suppressed [ 2942.198991][T13105] netlink: 'syz.3.13799': attribute type 2 has an invalid length. [ 2942.214704][T13105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13799'. [ 2942.918507][T13116] netlink: 'syz.2.13802': attribute type 2 has an invalid length. [ 2942.927504][T13116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13802'. [ 2942.957276][T13113] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.13801'. [ 2944.324656][T13135] netlink: 'syz.2.13809': attribute type 2 has an invalid length. [ 2944.359207][T13135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13809'. [ 2946.409834][T13164] mac80211_hwsim hwsim108 wlan1: entered promiscuous mode [ 2947.146574][T13171] netlink: 'syz.3.13820': attribute type 2 has an invalid length. [ 2947.164558][T13171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13820'. [ 2948.463833][T13194] netlink: 'syz.2.13828': attribute type 10 has an invalid length. [ 2951.123314][T13222] netlink: 'syz.2.13835': attribute type 2 has an invalid length. [ 2951.131956][T13222] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13835'. [ 2951.208262][T13225] netlink: 'syz.3.13838': attribute type 2 has an invalid length. [ 2951.216924][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13838'. [ 2951.593932][T13232] netlink: 'syz.3.13842': attribute type 10 has an invalid length. [ 2952.238847][T13243] netlink: 'syz.3.13845': attribute type 2 has an invalid length. [ 2952.247812][T13243] netlink: 'syz.3.13845': attribute type 8 has an invalid length. [ 2952.257686][T13243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13845'. [ 2952.272745][T13243] netlink: 'syz.3.13845': attribute type 11 has an invalid length. [ 2952.285254][T13243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13845'. [ 2953.053840][T13255] netlink: 'syz.3.13848': attribute type 2 has an invalid length. [ 2953.081231][T13255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13848'. [ 2953.518098][T13260] netlink: 'syz.3.13850': attribute type 2 has an invalid length. [ 2953.526276][T13260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13850'. [ 2955.236623][T13270] netlink: 'syz.1.13853': attribute type 10 has an invalid length. [ 2956.722883][T13285] netlink: 'syz.3.13858': attribute type 2 has an invalid length. [ 2956.742002][T13285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13858'. [ 2957.164854][T13290] netlink: 'syz.2.13861': attribute type 39 has an invalid length. [ 2957.625887][T13297] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.13863'. [ 2959.258625][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.268825][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.318532][T13314] netlink: 'syz.0.13874': attribute type 2 has an invalid length. [ 2959.336891][T13314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13874'. [ 2959.386491][T13311] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13867'. [ 2959.396252][T13311] bridge_slave_1: default FDB implementation only supports local addresses [ 2959.618626][T13320] netlink: 'syz.1.13869': attribute type 2 has an invalid length. [ 2959.630006][T13320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13869'. [ 2959.863305][T13325] netlink: 'syz.2.13870': attribute type 2 has an invalid length. [ 2959.886763][T13325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13870'. [ 2960.840610][T13338] netlink: 'syz.0.13877': attribute type 2 has an invalid length. [ 2960.855313][T13338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13877'. [ 2961.053369][T13343] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.13878'. [ 2961.438857][T13353] netlink: 'syz.1.13880': attribute type 2 has an invalid length. [ 2961.448256][T13353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13880'. [ 2961.483288][T13352] netlink: 'syz.0.13887': attribute type 2 has an invalid length. [ 2961.506847][T13352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13887'. [ 2961.635710][T13355] netlink: 'syz.1.13881': attribute type 2 has an invalid length. [ 2963.067628][T13330] ------------[ cut here ]------------ [ 2963.073293][T13330] WARNING: CPU: 1 PID: 13330 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 2963.083186][T13330] Modules linked in: [ 2963.087131][T13330] CPU: 1 PID: 13330 Comm: syz.2.13872 Not tainted syzkaller #0 [ 2963.094895][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2963.105049][T13330] RIP: 0010:perf_pending_task+0x357/0x480 [ 2963.110848][T13330] Code: e8 1e c9 d5 ff 84 db 75 10 e8 85 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 c6 d5 ff e8 20 f2 4e ff eb e9 e8 69 c6 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 2963.130650][T13330] RSP: 0018:ffffc9000b6ff9c8 EFLAGS: 00010293 [ 2963.136923][T13330] RAX: ffffffff81b1ab17 RBX: ffff888044d30468 RCX: ffff88807b023c00 [ 2963.145113][T13330] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2963.153189][T13330] RBP: ffff888044d30228 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 2963.161273][T13330] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88807b023c00 [ 2963.169297][T13330] R13: ffff88804a588d30 R14: 0000000000000000 R15: 1ffff110089a6045 [ 2963.177769][T13330] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2963.187102][T13330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2963.193788][T13330] CR2: 0000200000151000 CR3: 0000000022c14000 CR4: 00000000003506e0 [ 2963.201848][T13330] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 2963.209866][T13330] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2963.217957][T13330] Call Trace: [ 2963.221310][T13330] [ 2963.224295][T13330] task_work_run+0x1d4/0x260 [ 2963.228944][T13330] ? task_work_cancel+0x220/0x220 [ 2963.234081][T13330] do_exit+0x986/0x2530 [ 2963.238297][T13330] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2963.244394][T13330] ? put_task_struct+0xc0/0xc0 [ 2963.249235][T13330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2963.255475][T13330] ? lockdep_hardirqs_on+0x98/0x150 [ 2963.260746][T13330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2963.267024][T13330] do_group_exit+0x22d/0x2f0 [ 2963.271779][T13330] get_signal+0x12a6/0x1390 [ 2963.276351][T13330] arch_do_signal_or_restart+0xc2/0x7b0 [ 2963.282049][T13330] ? mutex_unlock+0x10/0x10 [ 2963.286698][T13330] ? get_sigframe_size+0x20/0x20 [ 2963.291726][T13330] ? ksys_write+0x201/0x260 [ 2963.296306][T13330] ? exit_to_user_mode_loop+0x3b/0x110 [ 2963.301877][T13330] exit_to_user_mode_loop+0x70/0x110 [ 2963.307219][T13330] exit_to_user_mode_prepare+0xee/0x180 [ 2963.312863][T13330] syscall_exit_to_user_mode+0x1a/0x50 [ 2963.318456][T13330] do_syscall_64+0x61/0xb0 [ 2963.322962][T13330] ? clear_bhb_loop+0x40/0x90 [ 2963.327681][T13330] ? clear_bhb_loop+0x40/0x90 [ 2963.332483][T13330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2963.338432][T13330] RIP: 0033:0x7fb257f9e0d9 [ 2963.342956][T13330] Code: Unable to access opcode bytes at 0x7fb257f9e0af. [ 2963.350094][T13330] RSP: 002b:00007fb258e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2963.358582][T13330] RAX: 0000000000000012 RBX: 00007fb258225fa0 RCX: 00007fb257f9e0d9 [ 2963.366670][T13330] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008 [ 2963.374711][T13330] RBP: 00007fb258035024 R08: 0000000000000000 R09: 0000000000000000 [ 2963.382799][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2963.390813][T13330] R13: 00007fb258226038 R14: 00007fb258225fa0 R15: 00007ffe37926bc8 [ 2963.398891][T13330] [ 2963.402010][T13330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2963.409306][T13330] CPU: 1 PID: 13330 Comm: syz.2.13872 Not tainted syzkaller #0 [ 2963.416873][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2963.426953][T13330] Call Trace: [ 2963.430253][T13330] [ 2963.433204][T13330] dump_stack_lvl+0x18c/0x250 [ 2963.437916][T13330] ? show_regs_print_info+0x20/0x20 [ 2963.443139][T13330] ? load_image+0x420/0x420 [ 2963.447691][T13330] panic+0x2ca/0x720 [ 2963.451626][T13330] ? bpf_jit_dump+0xd0/0xd0 [ 2963.456172][T13330] __warn+0x2e0/0x470 [ 2963.460220][T13330] ? perf_pending_task+0x357/0x480 [ 2963.465380][T13330] ? perf_pending_task+0x357/0x480 [ 2963.470535][T13330] report_bug+0x2be/0x4f0 [ 2963.474926][T13330] ? perf_pending_task+0x357/0x480 [ 2963.480075][T13330] ? perf_pending_task+0x357/0x480 [ 2963.485219][T13330] ? perf_pending_task+0x359/0x480 [ 2963.490356][T13330] handle_bug+0xcf/0x120 [ 2963.494623][T13330] exc_invalid_op+0x1a/0x50 [ 2963.499157][T13330] asm_exc_invalid_op+0x1a/0x20 [ 2963.504037][T13330] RIP: 0010:perf_pending_task+0x357/0x480 [ 2963.509793][T13330] Code: e8 1e c9 d5 ff 84 db 75 10 e8 85 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 75 c6 d5 ff e8 20 f2 4e ff eb e9 e8 69 c6 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 2963.529429][T13330] RSP: 0018:ffffc9000b6ff9c8 EFLAGS: 00010293 [ 2963.535525][T13330] RAX: ffffffff81b1ab17 RBX: ffff888044d30468 RCX: ffff88807b023c00 [ 2963.543526][T13330] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2963.551524][T13330] RBP: ffff888044d30228 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 2963.559525][T13330] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff88807b023c00 [ 2963.567519][T13330] R13: ffff88804a588d30 R14: 0000000000000000 R15: 1ffff110089a6045 [ 2963.575530][T13330] ? perf_pending_task+0x357/0x480 [ 2963.580681][T13330] ? perf_pending_task+0x357/0x480 [ 2963.585825][T13330] task_work_run+0x1d4/0x260 [ 2963.590447][T13330] ? task_work_cancel+0x220/0x220 [ 2963.595513][T13330] do_exit+0x986/0x2530 [ 2963.599743][T13330] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2963.605763][T13330] ? put_task_struct+0xc0/0xc0 [ 2963.610566][T13330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2963.616742][T13330] ? lockdep_hardirqs_on+0x98/0x150 [ 2963.621961][T13330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2963.628138][T13330] do_group_exit+0x22d/0x2f0 [ 2963.632776][T13330] get_signal+0x12a6/0x1390 [ 2963.637328][T13330] arch_do_signal_or_restart+0xc2/0x7b0 [ 2963.642914][T13330] ? mutex_unlock+0x10/0x10 [ 2963.647443][T13330] ? get_sigframe_size+0x20/0x20 [ 2963.652423][T13330] ? ksys_write+0x201/0x260 [ 2963.656973][T13330] ? exit_to_user_mode_loop+0x3b/0x110 [ 2963.662462][T13330] exit_to_user_mode_loop+0x70/0x110 [ 2963.667782][T13330] exit_to_user_mode_prepare+0xee/0x180 [ 2963.673362][T13330] syscall_exit_to_user_mode+0x1a/0x50 [ 2963.678846][T13330] do_syscall_64+0x61/0xb0 [ 2963.683287][T13330] ? clear_bhb_loop+0x40/0x90 [ 2963.687989][T13330] ? clear_bhb_loop+0x40/0x90 [ 2963.692693][T13330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2963.698607][T13330] RIP: 0033:0x7fb257f9e0d9 [ 2963.703044][T13330] Code: Unable to access opcode bytes at 0x7fb257f9e0af. [ 2963.710073][T13330] RSP: 002b:00007fb258e8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2963.718503][T13330] RAX: 0000000000000012 RBX: 00007fb258225fa0 RCX: 00007fb257f9e0d9 [ 2963.726484][T13330] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008 [ 2963.734467][T13330] RBP: 00007fb258035024 R08: 0000000000000000 R09: 0000000000000000 [ 2963.742501][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2963.750502][T13330] R13: 00007fb258226038 R14: 00007fb258225fa0 R15: 00007ffe37926bc8 [ 2963.758510][T13330] [ 2963.762115][T13330] Kernel Offset: disabled [ 2963.766448][T13330] Rebooting in 86400 seconds..