last executing test programs: 4.890502383s ago: executing program 4 (id=6318): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b204007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000000000000000c87bd5b7cb8c5ae18218963f6d71cfa8b8afb7a4ade932aa3c4701a1c3284cf6b08a4c265dbf4c96cf1ccbcf8f43fd0abf415e581956070f52673a4fa63fb36788bbbcdc0cb1519e8e8fdd9c1463230ce4ccfa63d7069135d9804765a62bd12c2cf388b09c3a0bbd296a4ce6e523145bb6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0x3, 0x8, 0xb, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x1, 0x6, 0x8, 0x1, 0x100, 0xfffffffffffffff0}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0xa94}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 3.938514334s ago: executing program 0 (id=6321): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10b000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}], 0x10, 0x10004080}, 0x0) close(r2) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x48) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.938000074s ago: executing program 2 (id=6323): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10004880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff8880b860f080, 0x80000000}, 0x104010}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff050000", @ANYRES32=0x1], 0x48) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a489, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0x2018, 0x10, 0x0, 0x9, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.937627664s ago: executing program 4 (id=6325): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.950801645s ago: executing program 0 (id=6327): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x10120) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.950124705s ago: executing program 2 (id=6329): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 2.949897696s ago: executing program 3 (id=6330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0xc0045878, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000300)}, 0x40000040) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000402000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000), 0xc) 2.949653516s ago: executing program 4 (id=6331): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0xfffffffffffffffd, 0x0) 2.724201638s ago: executing program 2 (id=6332): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='N-'], 0x6a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) 2.510177061s ago: executing program 0 (id=6333): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1}, 0x0, &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.509805411s ago: executing program 1 (id=6334): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}, 0x80, 0x0}, 0x40814) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000002400", 0x6}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe"], 0xfe33) 2.500334141s ago: executing program 4 (id=6343): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 2.320740043s ago: executing program 3 (id=6335): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.220987704s ago: executing program 4 (id=6336): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000900), 0xce, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.219220104s ago: executing program 1 (id=6347): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 2.172182304s ago: executing program 2 (id=6337): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='N-'], 0x6a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) 1.68037575s ago: executing program 1 (id=6338): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x10004880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff8880b860f080, 0x80000000}, 0x104010}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff050000", @ANYRES32=0x1], 0x48) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a489, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0x2018, 0x10, 0x0, 0x9, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x5, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.451880173s ago: executing program 3 (id=6339): r0 = socket$kcm(0x10, 0x94a22854d1bdcef8, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x18, 0xa, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) 1.323682374s ago: executing program 0 (id=6340): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.117694827s ago: executing program 2 (id=6341): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10b000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}], 0x10, 0x10004080}, 0x0) close(r2) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYBLOB], 0x48) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.054461008s ago: executing program 4 (id=6342): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0380, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.006159739s ago: executing program 3 (id=6344): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 1.004857648s ago: executing program 1 (id=6345): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1a, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x10120) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 697.055032ms ago: executing program 1 (id=6346): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0xc0045878, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000300)}, 0x40000040) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x3f00, &(0x7f0000000000)=[{&(0x7f0000000040)="0209000402000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000), 0xc) 696.691332ms ago: executing program 3 (id=6348): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}, 0x80, 0x0}, 0x40814) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000002400", 0x6}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe"], 0xfe33) 690.158722ms ago: executing program 0 (id=6349): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='N-'], 0x6a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) 397.659455ms ago: executing program 3 (id=6350): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{0x0}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 145.409859ms ago: executing program 0 (id=6351): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x31, 0x4}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000000)=""/31}, 0x20) 15.86083ms ago: executing program 2 (id=6352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 0s ago: executing program 1 (id=6353): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='N-'], 0x6a) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) kernel console output (not intermixed with test programs): length. [ 651.027163][T14405] netlink: 'syz.3.3860': attribute type 1 has an invalid length. [ 651.216796][T14409] netlink: 'syz.4.3865': attribute type 21 has an invalid length. [ 651.334086][T14409] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 652.402205][T14446] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3881'. [ 652.462090][T14446] netlink: zone id is out of range [ 652.485728][T14446] netlink: zone id is out of range [ 652.491146][T14446] netlink: zone id is out of range [ 654.278891][T14505] validate_nla: 16 callbacks suppressed [ 654.279011][T14505] netlink: 'syz.0.3907': attribute type 21 has an invalid length. [ 654.295545][T14505] netlink: 'syz.0.3907': attribute type 1 has an invalid length. [ 654.415196][T14507] netlink: 'syz.3.3908': attribute type 21 has an invalid length. [ 654.448171][T14507] netlink: 'syz.3.3908': attribute type 1 has an invalid length. [ 654.530021][T14511] netlink: 'syz.1.3910': attribute type 21 has an invalid length. [ 654.547963][T14511] netlink: 'syz.1.3910': attribute type 1 has an invalid length. [ 655.386691][T14537] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3918'. [ 655.462737][T14537] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 655.487120][T14537] CPU: 1 PID: 14537 Comm: syz.2.3918 Not tainted 6.1.134-syzkaller #0 [ 655.495334][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 655.505432][T14537] Call Trace: [ 655.508734][T14537] [ 655.511690][T14537] dump_stack_lvl+0x1e3/0x2cb [ 655.516417][T14537] ? nf_tcp_handle_invalid+0x647/0x647 [ 655.522005][T14537] ? panic+0x764/0x764 [ 655.526223][T14537] sysfs_warn_dup+0x8a/0xa0 [ 655.530774][T14537] sysfs_do_create_link_sd+0xbe/0x100 [ 655.536195][T14537] device_add+0x7d4/0xfd0 [ 655.540612][T14537] wiphy_register+0x1e91/0x2d10 [ 655.545516][T14537] ? cfg80211_event_work+0x40/0x40 [ 655.550662][T14537] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 655.556873][T14537] ieee80211_register_hw+0x31bd/0x3f10 [ 655.562470][T14537] ? ieee80211_register_hw+0x1141/0x3f10 [ 655.568155][T14537] ? ieee80211_register_hw+0x1141/0x3f10 [ 655.573832][T14537] ? ieee80211_tasklet_handler+0x20/0x20 [ 655.579509][T14537] ? __debug_object_init+0xe9/0x450 [ 655.584755][T14537] ? memset+0x1f/0x40 [ 655.588772][T14537] ? __hrtimer_init+0x181/0x260 [ 655.593663][T14537] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 655.599546][T14537] hwsim_new_radio_nl+0xc54/0x1190 [ 655.604700][T14537] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 655.611045][T14537] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 655.617231][T14537] genl_rcv_msg+0xbfa/0xf50 [ 655.621759][T14537] ? genl_bind+0x400/0x400 [ 655.626212][T14537] ? validate_chain+0x112/0x5950 [ 655.631164][T14537] ? lock_acquire+0x26f/0x5a0 [ 655.635855][T14537] ? read_lock_is_recursive+0x10/0x10 [ 655.641245][T14537] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 655.647616][T14537] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 655.653702][T14537] netlink_rcv_skb+0x1cd/0x410 [ 655.658477][T14537] ? genl_bind+0x400/0x400 [ 655.662931][T14537] ? netlink_ack+0x12a0/0x12a0 [ 655.667723][T14537] ? __rcu_read_unlock+0x92/0x100 [ 655.672753][T14537] genl_rcv+0x24/0x40 [ 655.676742][T14537] netlink_unicast+0x7e2/0x970 [ 655.681521][T14537] ? netlink_detachskb+0x90/0x90 [ 655.686468][T14537] ? 0xffffffff81000000 [ 655.690623][T14537] ? __check_object_size+0x47c/0xa30 [ 655.695916][T14537] ? __phys_addr_symbol+0x2b/0x70 [ 655.700966][T14537] ? __check_object_size+0x4dd/0xa30 [ 655.706261][T14537] ? bpf_lsm_netlink_send+0x5/0x10 [ 655.711384][T14537] netlink_sendmsg+0xa26/0xd60 [ 655.716171][T14537] ? netlink_getsockopt+0x580/0x580 [ 655.721386][T14537] ? aa_sock_msg_perm+0x91/0x150 [ 655.726340][T14537] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 655.731638][T14537] ? security_socket_sendmsg+0x7d/0xa0 [ 655.737113][T14537] ? netlink_getsockopt+0x580/0x580 [ 655.742329][T14537] ____sys_sendmsg+0x5d3/0x9a0 [ 655.747123][T14537] ? __sys_sendmsg_sock+0x30/0x30 [ 655.752174][T14537] __sys_sendmsg+0x2a9/0x390 [ 655.756776][T14537] ? ____sys_sendmsg+0x9a0/0x9a0 [ 655.761752][T14537] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 655.767758][T14537] ? syscall_enter_from_user_mode+0x2e/0x230 [ 655.773751][T14537] ? lockdep_hardirqs_on+0x94/0x130 [ 655.778967][T14537] ? syscall_enter_from_user_mode+0x2e/0x230 [ 655.784963][T14537] do_syscall_64+0x3b/0x80 [ 655.789400][T14537] ? clear_bhb_loop+0x45/0xa0 [ 655.794090][T14537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.800002][T14537] RIP: 0033:0x7efdfd38e969 [ 655.804423][T14537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.824033][T14537] RSP: 002b:00007efdfe1eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.832451][T14537] RAX: ffffffffffffffda RBX: 00007efdfd5b5fa0 RCX: 00007efdfd38e969 [ 655.840526][T14537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 655.848532][T14537] RBP: 00007efdfd410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 655.856514][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.864491][T14537] R13: 0000000000000000 R14: 00007efdfd5b5fa0 R15: 00007fff20f4a828 [ 655.872511][T14537] [ 655.920416][T14540] netlink: 'syz.1.3922': attribute type 21 has an invalid length. [ 656.020459][T14540] netlink: 'syz.1.3922': attribute type 1 has an invalid length. [ 656.063891][T14542] netlink: 'syz.4.3923': attribute type 10 has an invalid length. [ 656.333866][T14542] bond0: (slave netdevsim0): Releasing backup interface [ 656.467668][T14542] device netdevsim0 left promiscuous mode [ 656.475576][T14542] device netdevsim0 entered promiscuous mode [ 656.486124][T14542] team0: Port device netdevsim0 added [ 656.503740][T14548] netlink: 'syz.4.3923': attribute type 10 has an invalid length. [ 656.520995][T14548] device netdevsim0 left promiscuous mode [ 656.550010][T14548] team0: Port device netdevsim0 removed [ 656.576486][T14548] device netdevsim0 entered promiscuous mode [ 656.601295][T14548] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 656.720286][T14560] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3931'. [ 657.967265][T14599] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3949'. [ 658.548539][T14620] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3959'. [ 659.003286][T14636] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3966'. [ 659.443356][T14643] validate_nla: 14 callbacks suppressed [ 659.443593][T14643] netlink: 'syz.4.3970': attribute type 21 has an invalid length. [ 659.477938][T14643] netlink: 'syz.4.3970': attribute type 1 has an invalid length. [ 659.830924][T14653] netlink: 'syz.2.3975': attribute type 21 has an invalid length. [ 659.869620][T14653] netlink: 'syz.2.3975': attribute type 1 has an invalid length. [ 660.279357][T14666] netlink: 'syz.2.3980': attribute type 21 has an invalid length. [ 660.296034][T14666] netlink: 'syz.2.3980': attribute type 1 has an invalid length. [ 660.383023][T14671] netlink: 'syz.4.3982': attribute type 10 has an invalid length. [ 660.393188][T14671] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3982'. [ 660.594399][T14673] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3979'. [ 660.693752][T14673] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 660.704162][T14673] CPU: 0 PID: 14673 Comm: syz.1.3979 Not tainted 6.1.134-syzkaller #0 [ 660.712511][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 660.722590][T14673] Call Trace: [ 660.725888][T14673] [ 660.728851][T14673] dump_stack_lvl+0x1e3/0x2cb [ 660.733582][T14673] ? nf_tcp_handle_invalid+0x647/0x647 [ 660.739084][T14673] ? panic+0x764/0x764 [ 660.743295][T14673] ? sysfs_warn_dup+0x61/0xa0 [ 660.748025][T14673] sysfs_warn_dup+0x8a/0xa0 [ 660.752568][T14673] sysfs_do_create_link_sd+0xbe/0x100 [ 660.757979][T14673] device_add+0x7d4/0xfd0 [ 660.762352][T14673] wiphy_register+0x1e91/0x2d10 [ 660.767239][T14673] ? cfg80211_event_work+0x40/0x40 [ 660.772369][T14673] ? minstrel_ht_alloc+0x874/0x9e0 [ 660.777502][T14673] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 660.783591][T14673] ieee80211_register_hw+0x31bd/0x3f10 [ 660.789076][T14673] ? ieee80211_register_hw+0x1141/0x3f10 [ 660.794722][T14673] ? ieee80211_register_hw+0x1141/0x3f10 [ 660.800374][T14673] ? ieee80211_tasklet_handler+0x20/0x20 [ 660.806022][T14673] ? __debug_object_init+0xe9/0x450 [ 660.811240][T14673] ? memset+0x1f/0x40 [ 660.815317][T14673] ? __hrtimer_init+0x181/0x260 [ 660.820178][T14673] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 660.825964][T14673] hwsim_new_radio_nl+0xc54/0x1190 [ 660.831119][T14673] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 660.837471][T14673] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 660.843931][T14673] genl_rcv_msg+0xbfa/0xf50 [ 660.848485][T14673] ? perf_trace_run_bpf_submit+0x12c/0x1d0 [ 660.854308][T14673] ? genl_bind+0x400/0x400 [ 660.858745][T14673] ? mark_lock+0x9a/0x340 [ 660.863091][T14673] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 660.869087][T14673] ? print_irqtrace_events+0x210/0x210 [ 660.874560][T14673] ? rcu_is_watching+0x11/0xb0 [ 660.879339][T14673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.885522][T14673] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 660.891868][T14673] ? kasan_check_range+0x7b/0x290 [ 660.896916][T14673] netlink_rcv_skb+0x1cd/0x410 [ 660.901718][T14673] ? genl_bind+0x400/0x400 [ 660.906150][T14673] ? netlink_ack+0x12a0/0x12a0 [ 660.910957][T14673] genl_rcv+0x24/0x40 [ 660.914958][T14673] netlink_unicast+0x7e2/0x970 [ 660.919737][T14673] ? netlink_detachskb+0x90/0x90 [ 660.924690][T14673] ? security_netlink_send+0x52/0x90 [ 660.929980][T14673] ? bpf_lsm_netlink_send+0x5/0x10 [ 660.935103][T14673] netlink_sendmsg+0xa26/0xd60 [ 660.939889][T14673] ? netlink_getsockopt+0x580/0x580 [ 660.945120][T14673] ? aa_sock_msg_perm+0x91/0x150 [ 660.950068][T14673] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 660.955358][T14673] ? security_socket_sendmsg+0x7d/0xa0 [ 660.960825][T14673] ? netlink_getsockopt+0x580/0x580 [ 660.966043][T14673] ____sys_sendmsg+0x5d3/0x9a0 [ 660.970836][T14673] ? __sys_sendmsg_sock+0x30/0x30 [ 660.975924][T14673] __sys_sendmsg+0x2a9/0x390 [ 660.980539][T14673] ? ____sys_sendmsg+0x9a0/0x9a0 [ 660.985518][T14673] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.991695][T14673] ? lockdep_hardirqs_on+0x94/0x130 [ 660.996921][T14673] ? syscall_enter_from_user_mode+0x37/0x230 [ 661.002919][T14673] ? syscall_enter_from_user_mode+0x2e/0x230 [ 661.008920][T14673] do_syscall_64+0x3b/0x80 [ 661.013346][T14673] ? clear_bhb_loop+0x45/0xa0 [ 661.018037][T14673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.023946][T14673] RIP: 0033:0x7fb08838e969 [ 661.028386][T14673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.048106][T14673] RSP: 002b:00007fb08916c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.056534][T14673] RAX: ffffffffffffffda RBX: 00007fb0885b5fa0 RCX: 00007fb08838e969 [ 661.064509][T14673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 661.072568][T14673] RBP: 00007fb088410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 661.080543][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.088515][T14673] R13: 0000000000000000 R14: 00007fb0885b5fa0 R15: 00007ffdaed25788 [ 661.096502][T14673] [ 661.198516][T14679] netlink: 'syz.0.3984': attribute type 10 has an invalid length. [ 661.235710][T14679] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3984'. [ 661.264607][T14682] netlink: 'syz.2.3987': attribute type 10 has an invalid length. [ 661.281958][T14682] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3987'. [ 661.603006][T14692] netlink: 'syz.0.3992': attribute type 10 has an invalid length. [ 661.642611][T14692] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3992'. [ 662.290533][T14708] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3998'. [ 662.619296][T14718] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4002'. [ 662.856519][T14721] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 662.880244][T14721] CPU: 0 PID: 14721 Comm: syz.2.4005 Not tainted 6.1.134-syzkaller #0 [ 662.888449][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 662.898540][T14721] Call Trace: [ 662.901846][T14721] [ 662.904809][T14721] dump_stack_lvl+0x1e3/0x2cb [ 662.909541][T14721] ? nf_tcp_handle_invalid+0x647/0x647 [ 662.915039][T14721] ? panic+0x764/0x764 [ 662.919166][T14721] sysfs_warn_dup+0x8a/0xa0 [ 662.923721][T14721] sysfs_do_create_link_sd+0xbe/0x100 [ 662.929135][T14721] device_add+0x7d4/0xfd0 [ 662.933526][T14721] wiphy_register+0x1e91/0x2d10 [ 662.938437][T14721] ? cfg80211_event_work+0x40/0x40 [ 662.943621][T14721] ? minstrel_ht_alloc+0x62b/0x9e0 [ 662.948773][T14721] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 662.954870][T14721] ieee80211_register_hw+0x31bd/0x3f10 [ 662.960354][T14721] ? ieee80211_register_hw+0x1141/0x3f10 [ 662.965999][T14721] ? ieee80211_register_hw+0x1141/0x3f10 [ 662.971649][T14721] ? ieee80211_tasklet_handler+0x20/0x20 [ 662.977296][T14721] ? __debug_object_init+0xe9/0x450 [ 662.982539][T14721] ? memset+0x1f/0x40 [ 662.986534][T14721] ? __hrtimer_init+0x181/0x260 [ 662.991397][T14721] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 662.997150][T14721] hwsim_new_radio_nl+0xc54/0x1190 [ 663.002305][T14721] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 663.008658][T14721] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 663.015012][T14721] genl_rcv_msg+0xbfa/0xf50 [ 663.019543][T14721] ? genl_bind+0x400/0x400 [ 663.023986][T14721] ? read_lock_is_recursive+0x10/0x10 [ 663.029379][T14721] ? ref_tracker_free+0x638/0x7d0 [ 663.034415][T14721] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 663.040763][T14721] ? refcount_inc+0x80/0x80 [ 663.045283][T14721] netlink_rcv_skb+0x1cd/0x410 [ 663.050055][T14721] ? genl_bind+0x400/0x400 [ 663.054478][T14721] ? netlink_ack+0x12a0/0x12a0 [ 663.059264][T14721] genl_rcv+0x24/0x40 [ 663.063253][T14721] netlink_unicast+0x7e2/0x970 [ 663.068032][T14721] ? netlink_detachskb+0x90/0x90 [ 663.072975][T14721] ? find_vmap_area+0xf3/0x100 [ 663.077750][T14721] ? __phys_addr_symbol+0x2b/0x70 [ 663.082782][T14721] ? __check_object_size+0x4dd/0xa30 [ 663.088066][T14721] ? bpf_lsm_netlink_send+0x5/0x10 [ 663.093205][T14721] netlink_sendmsg+0xa26/0xd60 [ 663.097983][T14721] ? netlink_getsockopt+0x580/0x580 [ 663.103196][T14721] ? __sanitizer_cov_trace_pc+0x58/0x60 [ 663.108749][T14721] ? aa_sock_msg_perm+0x91/0x150 [ 663.113692][T14721] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 663.118995][T14721] ? security_socket_sendmsg+0x7d/0xa0 [ 663.124479][T14721] ? netlink_getsockopt+0x580/0x580 [ 663.129688][T14721] ____sys_sendmsg+0x5d3/0x9a0 [ 663.134483][T14721] ? __sys_sendmsg_sock+0x30/0x30 [ 663.139535][T14721] __sys_sendmsg+0x2a9/0x390 [ 663.144137][T14721] ? ____sys_sendmsg+0x9a0/0x9a0 [ 663.149123][T14721] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 663.155137][T14721] ? syscall_enter_from_user_mode+0x2e/0x230 [ 663.161157][T14721] ? lockdep_hardirqs_on+0x94/0x130 [ 663.166375][T14721] ? syscall_enter_from_user_mode+0x2e/0x230 [ 663.172374][T14721] do_syscall_64+0x3b/0x80 [ 663.176821][T14721] ? clear_bhb_loop+0x45/0xa0 [ 663.181519][T14721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.187432][T14721] RIP: 0033:0x7efdfd38e969 [ 663.191861][T14721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.211480][T14721] RSP: 002b:00007efdfe1eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.219902][T14721] RAX: ffffffffffffffda RBX: 00007efdfd5b5fa0 RCX: 00007efdfd38e969 [ 663.227874][T14721] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 663.235844][T14721] RBP: 00007efdfd410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 663.243833][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.251806][T14721] R13: 0000000000000000 R14: 00007efdfd5b5fa0 R15: 00007fff20f4a828 [ 663.259798][T14721] [ 663.370208][T14725] __nla_validate_parse: 2 callbacks suppressed [ 663.370247][T14725] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4007'. [ 664.133114][T14742] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4013'. [ 664.278028][T14745] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4014'. [ 664.575231][T14752] validate_nla: 8 callbacks suppressed [ 664.575253][T14752] netlink: 'syz.0.4016': attribute type 21 has an invalid length. [ 664.642815][T14752] netlink: 'syz.0.4016': attribute type 1 has an invalid length. [ 664.749411][T14756] netlink: 'syz.1.4019': attribute type 21 has an invalid length. [ 664.779708][T14756] netlink: 'syz.1.4019': attribute type 1 has an invalid length. [ 664.991306][T14761] netlink: 'syz.4.4021': attribute type 21 has an invalid length. [ 665.025450][T14761] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 665.262432][T14772] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4026'. [ 665.335401][T14772] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 665.354311][T14772] CPU: 0 PID: 14772 Comm: syz.0.4026 Not tainted 6.1.134-syzkaller #0 [ 665.362618][T14772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 665.372690][T14772] Call Trace: [ 665.375986][T14772] [ 665.378941][T14772] dump_stack_lvl+0x1e3/0x2cb [ 665.383656][T14772] ? nf_tcp_handle_invalid+0x647/0x647 [ 665.389149][T14772] ? panic+0x764/0x764 [ 665.393269][T14772] sysfs_warn_dup+0x8a/0xa0 [ 665.397812][T14772] sysfs_do_create_link_sd+0xbe/0x100 [ 665.403228][T14772] device_add+0x7d4/0xfd0 [ 665.407600][T14772] wiphy_register+0x1e91/0x2d10 [ 665.412507][T14772] ? cfg80211_event_work+0x40/0x40 [ 665.417671][T14772] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 665.423867][T14772] ? ieee80211_register_hw+0x2f0e/0x3f10 [ 665.429546][T14772] ieee80211_register_hw+0x31bd/0x3f10 [ 665.435036][T14772] ? ieee80211_register_hw+0x1141/0x3f10 [ 665.440682][T14772] ? ieee80211_register_hw+0x1141/0x3f10 [ 665.446330][T14772] ? ieee80211_tasklet_handler+0x20/0x20 [ 665.451977][T14772] ? __debug_object_init+0xe9/0x450 [ 665.457190][T14772] ? memset+0x1f/0x40 [ 665.461223][T14772] ? __hrtimer_init+0x181/0x260 [ 665.466089][T14772] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 665.471847][T14772] hwsim_new_radio_nl+0xc54/0x1190 [ 665.476980][T14772] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 665.483336][T14772] ? __nla_validate_parse+0x1/0x2c30 [ 665.488639][T14772] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 665.494991][T14772] genl_rcv_msg+0xbfa/0xf50 [ 665.499526][T14772] ? genl_bind+0x400/0x400 [ 665.503980][T14772] ? read_lock_is_recursive+0x10/0x10 [ 665.509376][T14772] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 665.515718][T14772] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 665.521806][T14772] netlink_rcv_skb+0x1cd/0x410 [ 665.526580][T14772] ? genl_bind+0x400/0x400 [ 665.531010][T14772] ? netlink_ack+0x12a0/0x12a0 [ 665.535788][T14772] ? __rcu_read_unlock+0x92/0x100 [ 665.540819][T14772] genl_rcv+0x24/0x40 [ 665.544808][T14772] netlink_unicast+0x7e2/0x970 [ 665.549584][T14772] ? netlink_detachskb+0x90/0x90 [ 665.554529][T14772] ? find_vmap_area+0xf3/0x100 [ 665.559297][T14772] ? __phys_addr_symbol+0x2b/0x70 [ 665.564328][T14772] ? __check_object_size+0x4dd/0xa30 [ 665.569612][T14772] ? bpf_lsm_netlink_send+0x5/0x10 [ 665.574756][T14772] netlink_sendmsg+0xa26/0xd60 [ 665.579539][T14772] ? netlink_getsockopt+0x580/0x580 [ 665.584743][T14772] ? netlink_getsockopt+0x580/0x580 [ 665.589950][T14772] ? tomoyo_socket_sendmsg_permission+0x129/0x410 [ 665.596364][T14772] ? ____sys_sendmsg+0x54c/0x9a0 [ 665.601329][T14772] ? netlink_getsockopt+0x580/0x580 [ 665.606538][T14772] ____sys_sendmsg+0x5d3/0x9a0 [ 665.611338][T14772] ? __sys_sendmsg_sock+0x30/0x30 [ 665.616386][T14772] __sys_sendmsg+0x2a9/0x390 [ 665.620985][T14772] ? ____sys_sendmsg+0x9a0/0x9a0 [ 665.625960][T14772] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 665.631961][T14772] ? syscall_enter_from_user_mode+0x2e/0x230 [ 665.637955][T14772] ? lockdep_hardirqs_on+0x94/0x130 [ 665.643166][T14772] ? syscall_enter_from_user_mode+0x2e/0x230 [ 665.649159][T14772] do_syscall_64+0x3b/0x80 [ 665.653581][T14772] ? clear_bhb_loop+0x45/0xa0 [ 665.658272][T14772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.664201][T14772] RIP: 0033:0x7fc033b8e969 [ 665.668618][T14772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.688225][T14772] RSP: 002b:00007fc03499e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.696646][T14772] RAX: ffffffffffffffda RBX: 00007fc033db5fa0 RCX: 00007fc033b8e969 [ 665.704622][T14772] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 665.712592][T14772] RBP: 00007fc033c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 665.720563][T14772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.728532][T14772] R13: 0000000000000000 R14: 00007fc033db5fa0 R15: 00007ffe9f2ba808 [ 665.736521][T14772] [ 665.888985][T14781] netlink: 'syz.2.4027': attribute type 10 has an invalid length. [ 665.914496][T14781] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4027'. [ 666.444781][T14790] netlink: 'syz.0.4033': attribute type 21 has an invalid length. [ 666.465143][T14790] netlink: 'syz.0.4033': attribute type 1 has an invalid length. [ 666.689838][T14794] netlink: 'syz.1.4036': attribute type 21 has an invalid length. [ 666.863015][T14804] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4038'. [ 667.580777][T14813] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4045'. [ 667.658421][T14813] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 667.692071][T14813] CPU: 1 PID: 14813 Comm: syz.2.4045 Not tainted 6.1.134-syzkaller #0 [ 667.700286][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 667.710364][T14813] Call Trace: [ 667.713658][T14813] [ 667.716609][T14813] dump_stack_lvl+0x1e3/0x2cb [ 667.721337][T14813] ? nf_tcp_handle_invalid+0x647/0x647 [ 667.726835][T14813] ? panic+0x764/0x764 [ 667.730963][T14813] sysfs_warn_dup+0x8a/0xa0 [ 667.735508][T14813] sysfs_do_create_link_sd+0xbe/0x100 [ 667.740929][T14813] device_add+0x7d4/0xfd0 [ 667.745318][T14813] wiphy_register+0x1e91/0x2d10 [ 667.750239][T14813] ? cfg80211_event_work+0x40/0x40 [ 667.755402][T14813] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 667.761629][T14813] ieee80211_register_hw+0x31bd/0x3f10 [ 667.767146][T14813] ? ieee80211_register_hw+0x1141/0x3f10 [ 667.772816][T14813] ? ieee80211_register_hw+0x1141/0x3f10 [ 667.778497][T14813] ? ieee80211_tasklet_handler+0x20/0x20 [ 667.784169][T14813] ? __debug_object_init+0xe9/0x450 [ 667.789394][T14813] ? memset+0x1f/0x40 [ 667.793386][T14813] ? __hrtimer_init+0x181/0x260 [ 667.798255][T14813] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 667.804024][T14813] hwsim_new_radio_nl+0xc54/0x1190 [ 667.809152][T14813] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 667.815336][T14813] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 667.821704][T14813] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 667.828068][T14813] genl_rcv_msg+0xbfa/0xf50 [ 667.832599][T14813] ? genl_bind+0x400/0x400 [ 667.837057][T14813] ? read_lock_is_recursive+0x10/0x10 [ 667.842468][T14813] ? ref_tracker_free+0x638/0x7d0 [ 667.847518][T14813] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 667.853879][T14813] ? refcount_inc+0x80/0x80 [ 667.858396][T14813] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 667.864587][T14813] netlink_rcv_skb+0x1cd/0x410 [ 667.869376][T14813] ? genl_bind+0x400/0x400 [ 667.873809][T14813] ? netlink_ack+0x12a0/0x12a0 [ 667.878603][T14813] genl_rcv+0x24/0x40 [ 667.882600][T14813] netlink_unicast+0x7e2/0x970 [ 667.887471][T14813] ? netlink_detachskb+0x90/0x90 [ 667.892422][T14813] ? bpf_lsm_netlink_send+0x5/0x10 [ 667.897550][T14813] netlink_sendmsg+0xa26/0xd60 [ 667.902342][T14813] ? netlink_getsockopt+0x580/0x580 [ 667.907551][T14813] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 667.913114][T14813] ? aa_sock_msg_perm+0x91/0x150 [ 667.918081][T14813] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 667.923378][T14813] ? security_socket_sendmsg+0x7d/0xa0 [ 667.928843][T14813] ? netlink_getsockopt+0x580/0x580 [ 667.934053][T14813] ____sys_sendmsg+0x5d3/0x9a0 [ 667.938847][T14813] ? __sys_sendmsg_sock+0x30/0x30 [ 667.943895][T14813] __sys_sendmsg+0x2a9/0x390 [ 667.948500][T14813] ? ____sys_sendmsg+0x9a0/0x9a0 [ 667.953477][T14813] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 667.959478][T14813] ? syscall_enter_from_user_mode+0x2e/0x230 [ 667.965472][T14813] ? lockdep_hardirqs_on+0x94/0x130 [ 667.970684][T14813] ? syscall_enter_from_user_mode+0x2e/0x230 [ 667.976681][T14813] do_syscall_64+0x3b/0x80 [ 667.981451][T14813] ? clear_bhb_loop+0x45/0xa0 [ 667.986148][T14813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.992082][T14813] RIP: 0033:0x7efdfd38e969 [ 667.996504][T14813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.016130][T14813] RSP: 002b:00007efdfe1eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.024555][T14813] RAX: ffffffffffffffda RBX: 00007efdfd5b5fa0 RCX: 00007efdfd38e969 [ 668.032556][T14813] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 668.040543][T14813] RBP: 00007efdfd410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 668.048518][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.056491][T14813] R13: 0000000000000000 R14: 00007efdfd5b5fa0 R15: 00007fff20f4a828 [ 668.064483][T14813] [ 669.152834][T14842] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4056'. [ 669.671362][T14857] validate_nla: 9 callbacks suppressed [ 669.671464][T14857] netlink: 'syz.2.4064': attribute type 21 has an invalid length. [ 669.727174][T14857] netlink: 'syz.2.4064': attribute type 1 has an invalid length. [ 669.795166][T14860] netlink: 'syz.1.4075': attribute type 10 has an invalid length. [ 669.827645][T14860] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4075'. [ 670.192568][T14874] netlink: 'syz.0.4071': attribute type 21 has an invalid length. [ 670.223730][T14874] netlink: 'syz.0.4071': attribute type 1 has an invalid length. [ 670.913256][T14886] netlink: 'syz.2.4076': attribute type 10 has an invalid length. [ 670.984740][T14886] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4076'. [ 671.589217][T14893] netlink: 'syz.3.4079': attribute type 21 has an invalid length. [ 671.632472][T14893] netlink: 'syz.3.4079': attribute type 1 has an invalid length. [ 671.737590][T14898] netlink: 'syz.4.4081': attribute type 10 has an invalid length. [ 671.778601][T14898] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4081'. [ 672.104738][T14906] netlink: 'syz.3.4085': attribute type 21 has an invalid length. [ 672.434568][T14921] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4090'. [ 672.606940][T14926] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4095'. [ 672.902140][T14934] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4097'. [ 672.921504][T14935] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4096'. [ 673.526060][T14956] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4107'. [ 674.258007][T14978] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4116'. [ 674.409772][T14981] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4118'. [ 674.712709][T14989] validate_nla: 16 callbacks suppressed [ 674.712730][T14989] netlink: 'syz.3.4119': attribute type 21 has an invalid length. [ 674.764190][T14989] netlink: 'syz.3.4119': attribute type 1 has an invalid length. [ 674.785632][T14987] netlink: 'syz.4.4120': attribute type 21 has an invalid length. [ 674.819208][T14987] netlink: 'syz.4.4120': attribute type 1 has an invalid length. [ 674.844303][T14996] netlink: 'syz.0.4122': attribute type 10 has an invalid length. [ 674.852180][T14996] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4122'. [ 675.608677][T15019] netlink: 'syz.1.4133': attribute type 21 has an invalid length. [ 675.635945][T15019] netlink: 'syz.1.4133': attribute type 1 has an invalid length. [ 675.684418][T15022] netlink: 'syz.2.4134': attribute type 10 has an invalid length. [ 675.693721][T15022] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4134'. [ 675.956052][T15028] netlink: 'syz.4.4137': attribute type 10 has an invalid length. [ 676.050441][T15028] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4137'. [ 676.203707][T15026] netlink: 'syz.3.4136': attribute type 21 has an invalid length. [ 676.955629][T15058] batman_adv: batadv0: Adding interface: [ 676.961940][T15058] batman_adv: batadv0: The MTU of interface is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.150842][T15058] batman_adv: batadv0: Not using interface (retrying later): interface not active [ 677.215393][T15066] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4152'. [ 678.117400][T15086] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4160'. [ 678.705595][T15103] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4167'. [ 679.270270][T15120] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4175'. [ 679.412156][T15124] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4177'. [ 680.060043][T15143] validate_nla: 19 callbacks suppressed [ 680.060121][T15143] netlink: 'syz.4.4185': attribute type 21 has an invalid length. [ 680.101001][T15143] netlink: 'syz.4.4185': attribute type 1 has an invalid length. [ 680.145931][T15145] netlink: 'syz.2.4186': attribute type 10 has an invalid length. [ 680.194697][T15145] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4186'. [ 680.225824][T15148] netlink: 'syz.1.4187': attribute type 21 has an invalid length. [ 680.294867][T15148] netlink: 'syz.1.4187': attribute type 1 has an invalid length. [ 680.529115][T15160] netlink: 'syz.4.4191': attribute type 10 has an invalid length. [ 680.565308][T15160] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4191'. [ 680.622458][T15162] netlink: 'syz.2.4192': attribute type 10 has an invalid length. [ 680.640114][T15162] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4192'. [ 680.880638][T15171] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 680.905218][T15171] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4196'. [ 681.482928][T15189] netlink: 'syz.2.4203': attribute type 10 has an invalid length. [ 681.496180][T15189] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4203'. [ 681.527415][T15191] netlink: 'syz.3.4202': attribute type 21 has an invalid length. [ 681.944609][T15204] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4209'. [ 681.988150][T15203] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4208'. [ 682.075581][T15211] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4212'. [ 682.116875][T15209] netlink: zone id is out of range [ 682.133420][T15209] netlink: zone id is out of range [ 682.139602][T15209] netlink: zone id is out of range [ 683.792706][T15255] device bond0 left promiscuous mode [ 683.802159][T15255] device bond_slave_1 left promiscuous mode [ 683.810678][T15255] device netdevsim0 left promiscuous mode [ 683.820399][T15255] bridge0: port 5(bond0) entered disabled state [ 683.834504][T15255] device bond_slave_1 entered promiscuous mode [ 683.841154][T15255] device netdevsim0 entered promiscuous mode [ 683.849516][T15255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.879525][T15255] device bond0 entered promiscuous mode [ 683.897791][T15255] team0: Port device bond0 added [ 684.402589][T15274] __nla_validate_parse: 6 callbacks suppressed [ 684.402634][T15274] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4236'. [ 684.468338][T15274] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 684.481741][T15274] CPU: 0 PID: 15274 Comm: syz.4.4236 Not tainted 6.1.134-syzkaller #0 [ 684.489957][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 684.500046][T15274] Call Trace: [ 684.503353][T15274] [ 684.506316][T15274] dump_stack_lvl+0x1e3/0x2cb [ 684.511039][T15274] ? nf_tcp_handle_invalid+0x647/0x647 [ 684.516539][T15274] ? panic+0x764/0x764 [ 684.520687][T15274] sysfs_warn_dup+0x8a/0xa0 [ 684.525236][T15274] sysfs_do_create_link_sd+0xbe/0x100 [ 684.530659][T15274] device_add+0x7d4/0xfd0 [ 684.535049][T15274] wiphy_register+0x1e91/0x2d10 [ 684.539967][T15274] ? cfg80211_event_work+0x40/0x40 [ 684.545130][T15274] ? minstrel_ht_alloc+0x874/0x9e0 [ 684.550291][T15274] ? ieee80211_init_rate_ctrl_alg+0x592/0x610 [ 684.556416][T15274] ieee80211_register_hw+0x31bd/0x3f10 [ 684.561945][T15274] ? ieee80211_register_hw+0x1141/0x3f10 [ 684.567622][T15274] ? ieee80211_register_hw+0x1141/0x3f10 [ 684.573305][T15274] ? ieee80211_tasklet_handler+0x20/0x20 [ 684.578984][T15274] ? __debug_object_init+0xe9/0x450 [ 684.584234][T15274] ? memset+0x1f/0x40 [ 684.588255][T15274] ? __hrtimer_init+0x181/0x260 [ 684.593151][T15274] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 684.598957][T15274] hwsim_new_radio_nl+0xc54/0x1190 [ 684.604133][T15274] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 684.610510][T15274] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.616719][T15274] genl_rcv_msg+0xbfa/0xf50 [ 684.621260][T15274] ? genl_bind+0x400/0x400 [ 684.625712][T15274] ? read_lock_is_recursive+0x10/0x10 [ 684.631107][T15274] ? perf_trace_preemptirq_template+0x2d1/0x3d0 [ 684.637365][T15274] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 684.643730][T15274] netlink_rcv_skb+0x1cd/0x410 [ 684.648515][T15274] ? genl_bind+0x400/0x400 [ 684.652967][T15274] ? netlink_ack+0x12a0/0x12a0 [ 684.657755][T15274] ? lockdep_hardirqs_on+0x94/0x130 [ 684.662982][T15274] genl_rcv+0x24/0x40 [ 684.666982][T15274] netlink_unicast+0x7e2/0x970 [ 684.671766][T15274] ? netlink_detachskb+0x90/0x90 [ 684.676716][T15274] ? find_vmap_area+0xf3/0x100 [ 684.681491][T15274] ? __phys_addr_symbol+0x2b/0x70 [ 684.686532][T15274] ? __check_object_size+0x4dd/0xa30 [ 684.691835][T15274] ? bpf_lsm_netlink_send+0x5/0x10 [ 684.696961][T15274] netlink_sendmsg+0xa26/0xd60 [ 684.701751][T15274] ? netlink_getsockopt+0x580/0x580 [ 684.707055][T15274] ? aa_sock_msg_perm+0x91/0x150 [ 684.712017][T15274] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 684.717402][T15274] ? security_socket_sendmsg+0x7d/0xa0 [ 684.722870][T15274] ? netlink_getsockopt+0x580/0x580 [ 684.728087][T15274] ____sys_sendmsg+0x5d3/0x9a0 [ 684.732873][T15274] ? __sys_sendmsg_sock+0x30/0x30 [ 684.737933][T15274] __sys_sendmsg+0x2a9/0x390 [ 684.742539][T15274] ? ____sys_sendmsg+0x9a0/0x9a0 [ 684.747513][T15274] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 684.753679][T15274] ? lockdep_hardirqs_on+0x94/0x130 [ 684.758909][T15274] ? syscall_enter_from_user_mode+0x37/0x230 [ 684.764913][T15274] ? syscall_enter_from_user_mode+0x2e/0x230 [ 684.770937][T15274] do_syscall_64+0x3b/0x80 [ 684.775389][T15274] ? clear_bhb_loop+0x45/0xa0 [ 684.780105][T15274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.786025][T15274] RIP: 0033:0x7f51f838e969 [ 684.790452][T15274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.810070][T15274] RSP: 002b:00007f51f9131038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.818496][T15274] RAX: ffffffffffffffda RBX: 00007f51f85b5fa0 RCX: 00007f51f838e969 [ 684.826476][T15274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 684.834464][T15274] RBP: 00007f51f8410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 684.842458][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.850466][T15274] R13: 0000000000000000 R14: 00007f51f85b5fa0 R15: 00007ffde62c27e8 [ 684.858638][T15274] [ 685.163627][T15286] validate_nla: 16 callbacks suppressed [ 685.163666][T15286] netlink: 'syz.2.4243': attribute type 10 has an invalid length. [ 685.200488][T15286] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4243'. [ 685.398708][T15284] netlink: 'syz.3.4244': attribute type 21 has an invalid length. [ 685.458787][T15284] netlink: 'syz.3.4244': attribute type 1 has an invalid length. [ 685.667594][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.674170][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.813467][T15292] netlink: 'syz.4.4246': attribute type 21 has an invalid length. [ 685.849759][T15292] netlink: 'syz.4.4246': attribute type 1 has an invalid length. [ 686.250228][T15312] netlink: 'syz.4.4251': attribute type 21 has an invalid length. [ 686.261913][T15312] netlink: 'syz.4.4251': attribute type 1 has an invalid length. [ 686.377333][T15311] netlink: 'syz.2.4253': attribute type 21 has an invalid length. [ 686.394848][T15311] netlink: 'syz.2.4253': attribute type 1 has an invalid length. [ 686.671442][T15318] netlink: 'syz.1.4257': attribute type 21 has an invalid length. [ 686.758461][T15322] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4259'. [ 686.828573][T15329] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4262'. [ 687.809219][T15355] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4275'. [ 687.922806][T15359] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4277'. [ 688.949680][T15388] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4290'. [ 689.289950][T15400] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4295'. [ 690.647050][T15439] validate_nla: 11 callbacks suppressed [ 690.647120][T15439] netlink: 'syz.3.4309': attribute type 10 has an invalid length. [ 690.673635][T15439] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4309'. [ 690.982875][T15443] netlink: 'syz.2.4311': attribute type 10 has an invalid length. [ 691.024126][T15443] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4311'. [ 692.406803][T15482] netlink: 'syz.4.4327': attribute type 10 has an invalid length. [ 692.427189][T15482] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4327'. [ 692.503652][T15484] netlink: 'syz.0.4328': attribute type 10 has an invalid length. [ 692.536460][T15484] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4328'. [ 692.588983][T15488] netlink: 'syz.2.4330': attribute type 10 has an invalid length. [ 692.612638][T15488] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4330'. [ 694.129286][T15526] netlink: 'syz.4.4344': attribute type 10 has an invalid length. [ 694.148828][T15526] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4344'. [ 694.673410][T15538] netlink: 'syz.3.4352': attribute type 10 has an invalid length. [ 694.697921][T15538] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4352'. [ 695.351318][T15557] netlink: 'syz.0.4361': attribute type 10 has an invalid length. [ 695.371369][T15557] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4361'. [ 696.049240][T15567] netlink: 'syz.0.4366': attribute type 10 has an invalid length. [ 696.058301][T15567] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4366'. [ 696.532024][T15574] netlink: 'syz.2.4369': attribute type 10 has an invalid length. [ 696.595832][T15574] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4369'. [ 697.490357][T15602] netlink: 'syz.0.4380': attribute type 10 has an invalid length. [ 697.561209][T15602] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4380'. [ 698.152771][T15610] netlink: 'syz.2.4383': attribute type 10 has an invalid length. [ 698.173318][T15610] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4383'. [ 698.658908][T15615] netlink: 'syz.4.4385': attribute type 10 has an invalid length. [ 698.706646][T15615] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4385'. [ 699.942086][T15645] netlink: 'syz.3.4397': attribute type 10 has an invalid length. [ 699.963044][T15645] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4397'. [ 699.996021][T15647] netlink: 'syz.0.4398': attribute type 10 has an invalid length. [ 700.007090][T15647] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4398'. [ 700.016801][T15650] netlink: 'syz.2.4399': attribute type 10 has an invalid length. [ 700.034211][T15650] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4399'. [ 700.192240][T15655] netlink: 'syz.3.4401': attribute type 10 has an invalid length. [ 700.204237][T15655] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4401'. [ 701.484100][T15681] netlink: 'syz.4.4413': attribute type 10 has an invalid length. [ 701.514351][T15681] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4413'. [ 701.523978][T15679] netlink: 'syz.3.4412': attribute type 10 has an invalid length. [ 701.560141][T15679] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4412'. [ 701.867773][T15693] netlink: 'syz.2.4417': attribute type 10 has an invalid length. [ 701.907372][T15693] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4417'. [ 703.212047][T15722] netlink: 'syz.1.4430': attribute type 10 has an invalid length. [ 703.225773][T15722] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4430'. [ 703.247736][T15720] netlink: 'syz.4.4429': attribute type 10 has an invalid length. [ 703.264023][T15720] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4429'. [ 703.370121][T15726] netlink: 'syz.2.4432': attribute type 10 has an invalid length. [ 703.403746][T15726] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4432'. [ 704.807072][T15763] netlink: 'syz.1.4446': attribute type 10 has an invalid length. [ 704.832932][T15763] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4446'. [ 705.338922][T15771] netlink: 'syz.1.4448': attribute type 10 has an invalid length. [ 705.410907][T15771] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4448'. [ 705.909629][T15780] netlink: 'syz.1.4452': attribute type 10 has an invalid length. [ 705.945732][T15780] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4452'. [ 706.383722][T15795] netlink: 'syz.1.4459': attribute type 10 has an invalid length. [ 706.415445][T15795] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4459'. [ 706.932968][T15808] netlink: 'syz.3.4464': attribute type 10 has an invalid length. [ 706.958230][T15808] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4464'. [ 707.660778][T15830] netlink: 'syz.0.4473': attribute type 10 has an invalid length. [ 707.669514][T15830] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4473'. [ 708.051700][T15838] netlink: 'syz.0.4477': attribute type 10 has an invalid length. [ 708.071689][T15838] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4477'. [ 708.350662][T15842] netlink: 'syz.1.4479': attribute type 10 has an invalid length. [ 708.383003][T15842] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4479'. [ 709.483348][T15870] netlink: 'syz.4.4492': attribute type 10 has an invalid length. [ 709.494637][T15870] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4492'. [ 709.717719][T15876] netlink: 'syz.3.4495': attribute type 10 has an invalid length. [ 709.764207][T15876] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4495'. [ 710.139544][T15887] netlink: 'syz.1.4499': attribute type 10 has an invalid length. [ 710.156577][T15887] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4499'. [ 710.917589][T15909] netlink: 'syz.1.4510': attribute type 10 has an invalid length. [ 710.931513][T15909] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4510'. [ 711.097620][T15914] netlink: 'syz.2.4511': attribute type 10 has an invalid length. [ 711.117480][T15914] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4511'. [ 711.393067][T15920] netlink: 'syz.2.4514': attribute type 10 has an invalid length. [ 711.408667][T15920] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4514'. [ 712.417448][T15945] netlink: 'syz.3.4524': attribute type 10 has an invalid length. [ 712.462924][T15945] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4524'. [ 712.476109][T15944] netlink: 'syz.1.4525': attribute type 10 has an invalid length. [ 712.533485][T15944] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4525'. [ 712.568096][T15951] netlink: 'syz.0.4528': attribute type 10 has an invalid length. [ 712.576754][T15951] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4528'. [ 713.071151][T15965] netlink: 'syz.2.4534': attribute type 10 has an invalid length. [ 713.094287][T15965] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4534'. [ 713.764534][T15980] netlink: 'syz.0.4541': attribute type 10 has an invalid length. [ 713.783187][T15980] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4541'. [ 713.860437][T15982] netlink: 'syz.2.4542': attribute type 10 has an invalid length. [ 713.880468][T15982] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4542'. [ 713.983046][T15988] netlink: 'syz.3.4544': attribute type 10 has an invalid length. [ 714.049789][T15988] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4544'. [ 715.019614][T16015] netlink: 'syz.4.4557': attribute type 10 has an invalid length. [ 715.033263][T16015] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4557'. [ 715.050847][T16020] netlink: 'syz.2.4556': attribute type 10 has an invalid length. [ 715.063104][T16020] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4556'. [ 715.175735][T16023] netlink: 'syz.0.4559': attribute type 10 has an invalid length. [ 715.188457][T16023] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4559'. [ 717.558639][T16089] validate_nla: 5 callbacks suppressed [ 717.558675][T16089] netlink: 'syz.2.4592': attribute type 10 has an invalid length. [ 717.578167][T16089] __nla_validate_parse: 5 callbacks suppressed [ 717.578203][T16089] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4592'. [ 717.724787][T16093] netlink: 'syz.4.4593': attribute type 10 has an invalid length. [ 717.768333][T16093] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4593'. [ 718.516031][T16114] netlink: 'syz.0.4601': attribute type 10 has an invalid length. [ 718.578531][T16114] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4601'. [ 719.039852][T16120] netlink: 'syz.2.4604': attribute type 10 has an invalid length. [ 719.049958][T16120] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4604'. [ 719.476587][T16129] netlink: 'syz.3.4608': attribute type 10 has an invalid length. [ 719.494789][T16129] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4608'. [ 719.997665][T16150] netlink: 'syz.2.4617': attribute type 10 has an invalid length. [ 720.062234][T16150] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4617'. [ 720.968147][T16166] netlink: 'syz.4.4623': attribute type 10 has an invalid length. [ 720.995676][T16166] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4623'. [ 721.124343][T16169] netlink: 'syz.2.4625': attribute type 10 has an invalid length. [ 721.153117][T16169] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4625'. [ 721.738250][T16189] netlink: 'syz.0.4634': attribute type 10 has an invalid length. [ 721.748503][T16189] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4634'. [ 721.805617][T16193] netlink: 'syz.1.4636': attribute type 10 has an invalid length. [ 721.853364][T16193] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4636'. [ 722.663459][T16208] netlink: 'syz.0.4641': attribute type 10 has an invalid length. [ 722.700087][T16208] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4641'. [ 723.116446][T16215] netlink: 'syz.2.4644': attribute type 10 has an invalid length. [ 723.147370][T16215] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4644'. [ 723.460258][T16231] netlink: 'syz.1.4649': attribute type 10 has an invalid length. [ 723.490050][T16231] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4649'. [ 723.727584][T16237] netlink: 'syz.4.4653': attribute type 10 has an invalid length. [ 723.746271][T16237] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4653'. [ 723.879951][T16242] netlink: 'syz.2.4655': attribute type 10 has an invalid length. [ 723.901230][T16242] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4655'. [ 725.274309][T16267] netlink: 'syz.1.4666': attribute type 10 has an invalid length. [ 725.283464][T16267] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4666'. [ 725.336841][T16269] netlink: 'syz.0.4667': attribute type 10 has an invalid length. [ 725.356666][T16269] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4667'. [ 725.724896][T16277] netlink: 'syz.2.4671': attribute type 10 has an invalid length. [ 725.739342][T16277] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4671'. [ 725.957818][T16286] netlink: 'syz.1.4674': attribute type 10 has an invalid length. [ 726.004141][T16286] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4674'. [ 726.510218][T16299] netlink: 'syz.1.4679': attribute type 10 has an invalid length. [ 726.547235][T16299] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4679'. [ 727.757741][T16320] validate_nla: 1 callbacks suppressed [ 727.757775][T16320] netlink: 'syz.0.4689': attribute type 10 has an invalid length. [ 727.785184][T16320] __nla_validate_parse: 1 callbacks suppressed [ 727.785221][T16320] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4689'. [ 728.125511][T16326] netlink: 'syz.3.4692': attribute type 10 has an invalid length. [ 728.133665][T16326] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4692'. [ 728.219958][T16330] netlink: 'syz.0.4694': attribute type 10 has an invalid length. [ 728.251643][T16330] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4694'. [ 729.159876][T16347] netlink: 'syz.4.4700': attribute type 10 has an invalid length. [ 729.172954][T16347] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4700'. [ 729.479464][T16357] netlink: 'syz.1.4705': attribute type 10 has an invalid length. [ 729.504971][T16357] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4705'. [ 730.051794][T16369] netlink: 'syz.4.4709': attribute type 10 has an invalid length. [ 730.076692][T16369] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4709'. [ 730.467948][T16379] netlink: 'syz.4.4713': attribute type 10 has an invalid length. [ 730.485123][T16379] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4713'. [ 730.937614][T16393] netlink: 'syz.4.4718': attribute type 10 has an invalid length. [ 730.979868][T16393] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4718'. [ 731.112399][T16403] netlink: 'syz.3.4720': attribute type 10 has an invalid length. [ 731.171599][T16403] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4720'. [ 731.739577][T16411] netlink: 'syz.1.4725': attribute type 10 has an invalid length. [ 731.771409][T16411] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4725'. [ 732.902702][T16441] validate_nla: 3 callbacks suppressed [ 732.902743][T16441] netlink: 'syz.4.4738': attribute type 10 has an invalid length. [ 732.921509][T16441] __nla_validate_parse: 3 callbacks suppressed [ 732.921544][T16441] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4738'. [ 734.078414][T16467] netlink: 'syz.1.4749': attribute type 10 has an invalid length. [ 734.104283][T16467] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4749'. [ 734.185275][T16469] netlink: 'syz.3.4750': attribute type 10 has an invalid length. [ 734.226689][T16469] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4750'. [ 734.295384][T16472] netlink: 'syz.2.4751': attribute type 10 has an invalid length. [ 734.314359][T16472] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4751'. [ 734.702375][T16487] netlink: 'syz.0.4758': attribute type 10 has an invalid length. [ 734.751294][T16487] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4758'. [ 735.291697][T16503] netlink: 'syz.2.4764': attribute type 10 has an invalid length. [ 735.303476][T16503] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4764'. [ 735.382586][T16507] netlink: 'syz.0.4766': attribute type 10 has an invalid length. [ 735.391758][T16507] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4766'. [ 736.035566][T16525] netlink: 'syz.2.4773': attribute type 10 has an invalid length. [ 736.050365][T16525] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4773'. [ 736.181584][T16529] netlink: 'syz.1.4775': attribute type 10 has an invalid length. [ 736.220661][T16529] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4775'. [ 736.418061][T16537] netlink: 'syz.4.4778': attribute type 10 has an invalid length. [ 736.426824][T16537] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4778'. [ 738.127796][T16580] validate_nla: 5 callbacks suppressed [ 738.127837][T16580] netlink: 'syz.2.4798': attribute type 10 has an invalid length. [ 738.199282][T16580] __nla_validate_parse: 5 callbacks suppressed [ 738.199322][T16580] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4798'. [ 738.587634][T16597] netlink: 'syz.3.4806': attribute type 10 has an invalid length. [ 738.624300][T16597] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4806'. [ 738.892033][T16605] netlink: 'syz.2.4809': attribute type 10 has an invalid length. [ 738.918678][T16605] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4809'. [ 739.370942][T16618] netlink: 'syz.2.4815': attribute type 10 has an invalid length. [ 739.398213][T16618] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4815'. [ 739.447897][T16623] netlink: 'syz.1.4816': attribute type 10 has an invalid length. [ 739.461260][T16623] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4816'. [ 739.477458][T16621] netlink: 'syz.4.4817': attribute type 10 has an invalid length. [ 739.497893][T16621] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4817'. [ 740.215360][T16643] netlink: 'syz.0.4825': attribute type 10 has an invalid length. [ 740.275480][T16643] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4825'. [ 740.777917][T16652] netlink: 'syz.0.4831': attribute type 10 has an invalid length. [ 740.819741][T16652] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4831'. [ 740.830786][T16653] netlink: 'syz.1.4829': attribute type 10 has an invalid length. [ 740.840959][T16653] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4829'. [ 740.861140][T16657] netlink: 'syz.4.4833': attribute type 10 has an invalid length. [ 740.880179][T16657] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4833'. [ 742.381666][T16700] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 742.396343][T16700] CPU: 1 PID: 16700 Comm: syz.1.4853 Not tainted 6.1.134-syzkaller #0 [ 742.404557][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 742.414661][T16700] Call Trace: [ 742.417965][T16700] [ 742.420920][T16700] dump_stack_lvl+0x1e3/0x2cb [ 742.425643][T16700] ? nf_tcp_handle_invalid+0x647/0x647 [ 742.431143][T16700] ? panic+0x764/0x764 [ 742.435271][T16700] sysfs_warn_dup+0x8a/0xa0 [ 742.440116][T16700] sysfs_do_create_link_sd+0xbe/0x100 [ 742.445548][T16700] device_add+0x7d4/0xfd0 [ 742.449929][T16700] wiphy_register+0x1e91/0x2d10 [ 742.454837][T16700] ? cfg80211_event_work+0x40/0x40 [ 742.459988][T16700] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 742.466203][T16700] ieee80211_register_hw+0x31bd/0x3f10 [ 742.471732][T16700] ? ieee80211_register_hw+0x1141/0x3f10 [ 742.477405][T16700] ? ieee80211_register_hw+0x1141/0x3f10 [ 742.483080][T16700] ? ieee80211_tasklet_handler+0x20/0x20 [ 742.488773][T16700] ? __debug_object_init+0xe9/0x450 [ 742.494015][T16700] ? memset+0x1f/0x40 [ 742.498025][T16700] ? __hrtimer_init+0x181/0x260 [ 742.502890][T16700] mac80211_hwsim_new_radio+0x2355/0x41c0 [ 742.508659][T16700] hwsim_new_radio_nl+0xc54/0x1190 [ 742.513793][T16700] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 742.520142][T16700] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 742.526491][T16700] genl_rcv_msg+0xbfa/0xf50 [ 742.531012][T16700] ? genl_bind+0x400/0x400 [ 742.535455][T16700] ? read_lock_is_recursive+0x10/0x10 [ 742.540880][T16700] ? perf_trace_preemptirq_template+0x2d1/0x3d0 [ 742.547134][T16700] ? hwsim_tx_info_frame_received_nl+0xde0/0xde0 [ 742.553486][T16700] netlink_rcv_skb+0x1cd/0x410 [ 742.558258][T16700] ? genl_bind+0x400/0x400 [ 742.562688][T16700] ? netlink_ack+0x12a0/0x12a0 [ 742.567486][T16700] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 742.573668][T16700] genl_rcv+0x24/0x40 [ 742.577674][T16700] netlink_unicast+0x7e2/0x970 [ 742.582473][T16700] ? netlink_detachskb+0x90/0x90 [ 742.587419][T16700] ? find_vmap_area+0xf3/0x100 [ 742.592196][T16700] ? __phys_addr_symbol+0x2b/0x70 [ 742.597231][T16700] ? __check_object_size+0x4dd/0xa30 [ 742.602529][T16700] ? bpf_lsm_netlink_send+0x5/0x10 [ 742.607664][T16700] netlink_sendmsg+0xa26/0xd60 [ 742.612451][T16700] ? netlink_getsockopt+0x580/0x580 [ 742.617676][T16700] ? aa_sock_msg_perm+0x91/0x150 [ 742.622629][T16700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 742.627918][T16700] ? security_socket_sendmsg+0x7d/0xa0 [ 742.633382][T16700] ? netlink_getsockopt+0x580/0x580 [ 742.638590][T16700] ____sys_sendmsg+0x5d3/0x9a0 [ 742.643372][T16700] ? __sys_sendmsg_sock+0x30/0x30 [ 742.648424][T16700] __sys_sendmsg+0x2a9/0x390 [ 742.653030][T16700] ? ____sys_sendmsg+0x9a0/0x9a0 [ 742.658004][T16700] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 742.664173][T16700] ? lockdep_hardirqs_on+0x94/0x130 [ 742.669394][T16700] ? syscall_enter_from_user_mode+0x37/0x230 [ 742.675386][T16700] ? syscall_enter_from_user_mode+0x2e/0x230 [ 742.681392][T16700] do_syscall_64+0x3b/0x80 [ 742.685815][T16700] ? clear_bhb_loop+0x45/0xa0 [ 742.690538][T16700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.696445][T16700] RIP: 0033:0x7fb08838e969 [ 742.700863][T16700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.720594][T16700] RSP: 002b:00007fb08916c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.729034][T16700] RAX: ffffffffffffffda RBX: 00007fb0885b5fa0 RCX: 00007fb08838e969 [ 742.737009][T16700] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 742.744997][T16700] RBP: 00007fb088410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 742.752985][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.760955][T16700] R13: 0000000000000000 R14: 00007fb0885b5fa0 R15: 00007ffdaed25788 [ 742.768947][T16700] [ 743.643561][T16723] validate_nla: 9 callbacks suppressed [ 743.643583][T16723] netlink: 'syz.2.4861': attribute type 10 has an invalid length. [ 743.663644][T16723] __nla_validate_parse: 10 callbacks suppressed [ 743.663664][T16723] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4861'. [ 743.695271][T16722] netlink: 'syz.3.4862': attribute type 10 has an invalid length. [ 743.703539][T16722] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4862'. [ 743.862844][T16724] netlink: 'syz.0.4863': attribute type 10 has an invalid length. [ 743.935244][T16724] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4863'. [ 744.084331][T16728] netlink: 'syz.2.4865': attribute type 10 has an invalid length. [ 744.092371][T16728] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4865'. [ 744.273154][T16736] netlink: 'syz.0.4869': attribute type 10 has an invalid length. [ 744.288605][T16736] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4869'. [ 744.393622][T16742] netlink: 'syz.4.4872': attribute type 10 has an invalid length. [ 744.402067][T16742] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4872'. [ 744.604503][T16748] netlink: 'syz.2.4875': attribute type 10 has an invalid length. [ 744.624067][T16748] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4875'. [ 744.688097][T16750] netlink: 'syz.1.4876': attribute type 10 has an invalid length. [ 744.715108][T16750] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4876'. [ 745.168554][T16759] netlink: 'syz.2.4879': attribute type 10 has an invalid length. [ 745.178508][T16759] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4879'. [ 745.253641][T16764] netlink: 'syz.1.4881': attribute type 10 has an invalid length. [ 745.262626][T16764] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4881'. [ 747.108785][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.115376][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.079985][T16851] : port 1(erspan0) entered blocking state [ 749.098524][T16851] : port 1(erspan0) entered disabled state [ 749.122605][T16851] device erspan0 entered promiscuous mode [ 749.813320][T16861] validate_nla: 13 callbacks suppressed [ 749.813364][T16861] netlink: 'syz.0.4922': attribute type 10 has an invalid length. [ 749.832636][T16861] __nla_validate_parse: 13 callbacks suppressed [ 749.832670][T16861] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4922'. [ 749.868435][T16859] netlink: 'syz.2.4923': attribute type 10 has an invalid length. [ 749.890918][T16859] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4923'. [ 749.968703][T16863] netlink: 'syz.4.4924': attribute type 10 has an invalid length. [ 750.007914][T16863] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4924'. [ 750.033838][T16865] netlink: 'syz.3.4925': attribute type 10 has an invalid length. [ 750.052300][T16865] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4925'. [ 750.153171][T16870] netlink: 'syz.0.4927': attribute type 10 has an invalid length. [ 750.177915][T16870] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4927'. [ 750.256682][T16874] netlink: 'syz.2.4928': attribute type 10 has an invalid length. [ 750.281379][T16874] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4928'. [ 751.753047][T16898] netlink: 'syz.4.4937': attribute type 10 has an invalid length. [ 751.916332][T16898] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4937'. [ 752.030724][T16902] netlink: 'syz.1.4938': attribute type 10 has an invalid length. [ 752.048164][T16902] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4938'. [ 752.508245][T16913] netlink: 'syz.1.4942': attribute type 10 has an invalid length. [ 752.528157][T16913] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4942'. [ 752.542166][T16912] netlink: 'syz.4.4941': attribute type 10 has an invalid length. [ 752.553156][T16912] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4941'. [ 753.249291][T16937] Y4`Ҙ: renamed from lo [ 754.938558][T16975] validate_nla: 9 callbacks suppressed [ 754.938579][T16975] netlink: 'syz.4.4967': attribute type 10 has an invalid length. [ 754.982850][T16975] __nla_validate_parse: 9 callbacks suppressed [ 754.982868][T16975] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4967'. [ 755.245583][T16986] netlink: 'syz.0.4971': attribute type 10 has an invalid length. [ 755.268835][T16986] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4971'. [ 755.315336][T16988] netlink: 'syz.1.4972': attribute type 10 has an invalid length. [ 755.339227][T16988] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4972'. [ 755.559535][T16992] netlink: 'syz.3.4974': attribute type 10 has an invalid length. [ 755.583842][T16992] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4974'. [ 755.743047][T16998] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 755.770187][T16998] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4976'. [ 755.982325][T17005] netlink: 'syz.0.4979': attribute type 10 has an invalid length. [ 756.034385][T17005] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4979'. [ 756.375850][T17021] netlink: 'syz.3.4983': attribute type 10 has an invalid length. [ 756.388037][T17021] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4983'. [ 756.643653][T17025] netlink: 'syz.1.4986': attribute type 10 has an invalid length. [ 756.657354][T17025] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4986'. [ 756.706209][T17027] netlink: 'syz.0.4987': attribute type 10 has an invalid length. [ 756.738408][T17027] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4987'. [ 756.857403][T17030] netlink: 'syz.3.4988': attribute type 10 has an invalid length. [ 756.891337][T17030] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4988'. [ 759.962436][T17124] validate_nla: 14 callbacks suppressed [ 759.962480][T17124] netlink: 'syz.3.5028': attribute type 10 has an invalid length. [ 760.001153][T17124] __nla_validate_parse: 14 callbacks suppressed [ 760.001195][T17124] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5028'. [ 760.061606][T17126] netlink: 'syz.1.5029': attribute type 10 has an invalid length. [ 760.079408][T17126] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5029'. [ 760.099721][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 760.209690][T17134] netlink: 'syz.2.5030': attribute type 10 has an invalid length. [ 760.256249][T17134] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5030'. [ 760.414371][T17141] netlink: 'syz.1.5035': attribute type 10 has an invalid length. [ 760.422285][T17141] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5035'. [ 760.787401][T17152] netlink: 'syz.0.5038': attribute type 10 has an invalid length. [ 760.838832][T17152] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5038'. [ 760.989346][T17158] netlink: 'syz.2.5042': attribute type 28 has an invalid length. [ 761.094820][T17161] netlink: 'syz.3.5043': attribute type 10 has an invalid length. [ 761.102818][T17161] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5043'. [ 761.216753][T17164] netlink: 'syz.4.5045': attribute type 10 has an invalid length. [ 761.234354][T17164] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5045'. [ 761.297081][T17169] netlink: 'syz.2.5047': attribute type 10 has an invalid length. [ 761.314129][T17169] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5047'. [ 761.380775][T17167] netlink: 'syz.1.5046': attribute type 10 has an invalid length. [ 761.400464][T17167] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5046'. [ 761.445728][T17178] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5050'. [ 762.285642][T17198] device team0 left promiscuous mode [ 762.335235][T17198] device team_slave_0 left promiscuous mode [ 762.400044][T17198] device team_slave_1 left promiscuous mode [ 762.413315][T17198] device geneve1 left promiscuous mode [ 762.492764][T17198] bridge0: port 5(team0) entered disabled state [ 762.570627][T17198] device macsec0 left promiscuous mode [ 762.627557][T17198] bridge0: port 4(macsec0) entered disabled state [ 762.638222][T17198] bridge0: port 3(bond0) entered disabled state [ 762.653430][T17198] device bridge_slave_1 left promiscuous mode [ 762.660598][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.669933][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.569745][T17271] netlink: zone id is out of range [ 764.602133][T17271] netlink: zone id is out of range [ 764.643355][T17271] netlink: zone id is out of range [ 764.983397][T17283] validate_nla: 17 callbacks suppressed [ 764.983438][T17283] netlink: 'syz.4.5095': attribute type 10 has an invalid length. [ 765.079088][T17288] netlink: 'syz.3.5097': attribute type 10 has an invalid length. [ 765.087555][T17288] __nla_validate_parse: 19 callbacks suppressed [ 765.087590][T17288] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5097'. [ 765.243388][T17293] netlink: 'syz.4.5100': attribute type 10 has an invalid length. [ 765.267796][T17293] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5100'. [ 765.305024][T17297] netlink: 'syz.3.5102': attribute type 10 has an invalid length. [ 765.313882][T17297] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5102'. [ 765.548832][T17301] netlink: 'syz.4.5104': attribute type 10 has an invalid length. [ 765.573845][T17301] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5104'. [ 765.755530][T17309] netlink: 'syz.1.5108': attribute type 10 has an invalid length. [ 765.770183][T17309] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5108'. [ 766.052433][T17321] netlink: 'syz.1.5112': attribute type 10 has an invalid length. [ 766.086487][T17321] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5112'. [ 766.116626][T17320] netlink: 'syz.3.5113': attribute type 10 has an invalid length. [ 766.127001][T17320] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5113'. [ 766.176446][T17326] netlink: 'syz.4.5116': attribute type 10 has an invalid length. [ 766.193000][T17326] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5116'. [ 766.242726][T17329] netlink: 'syz.0.5115': attribute type 10 has an invalid length. [ 766.288487][T17329] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5115'. [ 766.721495][T17345] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5121'. [ 769.822538][T17446] batman_adv: batadv0: Adding interface: [ 769.837174][T17446] batman_adv: batadv0: The MTU of interface is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.882338][T17446] batman_adv: batadv0: Not using interface (retrying later): interface not active [ 769.993731][T17450] validate_nla: 22 callbacks suppressed [ 769.993770][T17450] netlink: 'syz.1.5170': attribute type 10 has an invalid length. [ 770.073630][T17452] netlink: 'syz.3.5171': attribute type 10 has an invalid length. [ 770.124176][T17452] __nla_validate_parse: 19 callbacks suppressed [ 770.124214][T17452] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5171'. [ 770.208607][T17455] netlink: 'syz.0.5182': attribute type 10 has an invalid length. [ 770.245473][T17455] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5182'. [ 770.530426][T17465] netlink: 'syz.4.5177': attribute type 10 has an invalid length. [ 770.554299][T17465] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5177'. [ 770.574894][T17470] netlink: 'syz.2.5178': attribute type 10 has an invalid length. [ 770.589350][T17470] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5178'. [ 770.886504][T17477] netlink: 'syz.1.5181': attribute type 10 has an invalid length. [ 770.903380][T17477] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5181'. [ 771.018198][T17483] netlink: 'syz.3.5185': attribute type 10 has an invalid length. [ 771.066918][T17485] netlink: 'syz.0.5186': attribute type 10 has an invalid length. [ 771.085163][T17485] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5186'. [ 771.156067][T17488] netlink: 'syz.4.5187': attribute type 10 has an invalid length. [ 771.194894][T17488] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5187'. [ 771.275380][T17491] netlink: 'syz.1.5188': attribute type 10 has an invalid length. [ 771.283425][T17491] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5188'. [ 771.575798][T17504] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5194'. [ 771.599140][T17505] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5193'. [ 775.112223][T17627] validate_nla: 24 callbacks suppressed [ 775.112276][T17627] netlink: 'syz.3.5252': attribute type 10 has an invalid length. [ 775.142783][T17623] netlink: 'syz.2.5251': attribute type 10 has an invalid length. [ 775.174194][T17623] __nla_validate_parse: 22 callbacks suppressed [ 775.174232][T17623] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5251'. [ 775.678376][T17650] netlink: 'syz.0.5259': attribute type 10 has an invalid length. [ 775.713198][T17650] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5259'. [ 775.810951][T17647] netlink: 'syz.4.5258': attribute type 10 has an invalid length. [ 775.844138][T17647] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5258'. [ 775.864367][T17652] netlink: 'syz.3.5262': attribute type 10 has an invalid length. [ 775.873464][T17652] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5262'. [ 776.067467][T17660] netlink: 'syz.2.5264': attribute type 10 has an invalid length. [ 776.088931][T17660] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5264'. [ 776.140354][T17663] netlink: 'syz.3.5267': attribute type 10 has an invalid length. [ 776.171364][T17663] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5267'. [ 776.415694][T17673] netlink: 'syz.4.5270': attribute type 10 has an invalid length. [ 776.424424][T17673] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5270'. [ 776.743951][T17683] netlink: 'syz.0.5273': attribute type 10 has an invalid length. [ 776.776725][T17683] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5273'. [ 776.800613][T17685] netlink: 'syz.1.5275': attribute type 10 has an invalid length. [ 776.811006][T17685] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5275'. [ 776.922300][T17687] device syzkaller0 entered promiscuous mode [ 778.765663][T17695] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5278'. [ 779.910854][T17734] device syzkaller0 entered promiscuous mode [ 781.830555][T17756] validate_nla: 10 callbacks suppressed [ 781.830574][T17756] netlink: 'syz.1.5303': attribute type 10 has an invalid length. [ 781.848277][T17756] __nla_validate_parse: 9 callbacks suppressed [ 781.848293][T17756] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5303'. [ 782.113664][T17764] netlink: 'syz.0.5304': attribute type 10 has an invalid length. [ 782.144094][T17764] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5304'. [ 782.212981][T17772] netlink: 'syz.1.5306': attribute type 10 has an invalid length. [ 782.237253][T17772] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5306'. [ 782.336601][T17777] netlink: 'syz.2.5310': attribute type 10 has an invalid length. [ 782.368836][T17777] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5310'. [ 782.507516][T17781] netlink: 'syz.3.5312': attribute type 10 has an invalid length. [ 782.525513][T17781] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5312'. [ 782.603115][T17785] netlink: 'syz.1.5313': attribute type 10 has an invalid length. [ 782.652295][T17785] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5313'. [ 782.985750][T17795] device syzkaller0 entered promiscuous mode [ 783.015677][T17798] netlink: 'syz.4.5317': attribute type 10 has an invalid length. [ 783.035088][T17798] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5317'. [ 783.063089][T17803] netlink: 'syz.3.5328': attribute type 10 has an invalid length. [ 783.086825][T17803] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5328'. [ 785.222465][T17818] netlink: 'syz.1.5321': attribute type 10 has an invalid length. [ 785.230415][T17818] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5321'. [ 785.240320][T17823] netlink: 'syz.4.5323': attribute type 10 has an invalid length. [ 785.255801][T17823] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5323'. [ 786.687128][T17868] device syzkaller0 entered promiscuous mode [ 788.484526][T17883] validate_nla: 10 callbacks suppressed [ 788.484543][T17883] netlink: 'syz.0.5360': attribute type 10 has an invalid length. [ 788.497993][T17883] __nla_validate_parse: 10 callbacks suppressed [ 788.498024][T17883] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5360'. [ 788.678629][T17888] netlink: 'syz.3.5354': attribute type 10 has an invalid length. [ 788.695825][T17888] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5354'. [ 788.726310][T17895] netlink: 'syz.4.5355': attribute type 10 has an invalid length. [ 788.746797][T17895] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5355'. [ 788.929949][T17898] netlink: 'syz.2.5356': attribute type 10 has an invalid length. [ 788.979003][T17898] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5356'. [ 789.010019][T17901] netlink: 'syz.1.5357': attribute type 10 has an invalid length. [ 789.022142][T17901] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5357'. [ 789.060534][T17908] netlink: 'syz.4.5359': attribute type 10 has an invalid length. [ 789.076661][T17908] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5359'. [ 789.463010][T17921] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5365'. [ 789.499224][T17921] netlink: zone id is out of range [ 789.518583][T17924] netlink: 'syz.0.5366': attribute type 10 has an invalid length. [ 789.527097][T17921] netlink: zone id is out of range [ 789.532602][T17921] netlink: zone id is out of range [ 789.537265][T17924] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5366'. [ 789.825155][T17935] netlink: 'syz.3.5369': attribute type 10 has an invalid length. [ 789.835069][T17935] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5369'. [ 789.878054][T17939] netlink: 'syz.4.5371': attribute type 10 has an invalid length. [ 789.892886][T17939] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5371'. [ 790.058219][T17943] netlink: 'syz.0.5373': attribute type 10 has an invalid length. [ 793.645632][T18019] validate_nla: 10 callbacks suppressed [ 793.645673][T18019] netlink: 'syz.4.5403': attribute type 10 has an invalid length. [ 793.665663][T18019] __nla_validate_parse: 11 callbacks suppressed [ 793.665698][T18019] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5403'. [ 793.685495][T18024] netlink: 'syz.0.5404': attribute type 10 has an invalid length. [ 793.697373][T18024] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5404'. [ 795.548771][T18037] netlink: 'syz.4.5407': attribute type 10 has an invalid length. [ 795.556930][T18037] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5407'. [ 795.566553][T18036] netlink: 'syz.0.5409': attribute type 10 has an invalid length. [ 795.577889][T18036] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5409'. [ 795.594036][T18042] netlink: 'syz.3.5410': attribute type 10 has an invalid length. [ 795.606363][T18042] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5410'. [ 796.036121][T18056] netlink: 'syz.4.5416': attribute type 10 has an invalid length. [ 796.062605][T18056] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5416'. [ 796.224298][T18063] netlink: 'syz.2.5418': attribute type 10 has an invalid length. [ 796.236575][T18063] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5418'. [ 796.266029][T18066] netlink: 'syz.1.5419': attribute type 10 has an invalid length. [ 796.283436][T18066] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5419'. [ 796.532912][T18074] netlink: 'syz.0.5422': attribute type 10 has an invalid length. [ 796.549416][T18074] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5422'. [ 796.568189][T18076] netlink: 'syz.1.5423': attribute type 10 has an invalid length. [ 796.632835][T18076] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5423'. [ 798.962587][T18097] validate_nla: 1 callbacks suppressed [ 798.962603][T18097] netlink: 'syz.0.5430': attribute type 10 has an invalid length. [ 798.976634][T18097] __nla_validate_parse: 1 callbacks suppressed [ 798.976649][T18097] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5430'. [ 798.992270][T18098] netlink: 'syz.4.5440': attribute type 10 has an invalid length. [ 799.012516][T18098] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5440'. [ 799.034559][T18107] netlink: 'syz.1.5442': attribute type 10 has an invalid length. [ 799.042446][T18107] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5442'. [ 799.104343][T18118] netlink: 'syz.2.5434': attribute type 10 has an invalid length. [ 799.112217][T18118] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5434'. [ 799.161977][T18121] netlink: 'syz.4.5436': attribute type 10 has an invalid length. [ 799.191969][T18121] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5436'. [ 799.287214][T18125] netlink: 'syz.3.5437': attribute type 10 has an invalid length. [ 799.334054][T18125] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5437'. [ 799.902702][T18150] netlink: 'syz.3.5448': attribute type 10 has an invalid length. [ 799.933285][T18150] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5448'. [ 800.032727][T18154] netlink: 'syz.1.5449': attribute type 10 has an invalid length. [ 800.055496][T18154] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5449'. [ 800.079157][T18155] netlink: 'syz.2.5450': attribute type 10 has an invalid length. [ 800.119946][T18155] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5450'. [ 800.308726][T18161] netlink: 'syz.3.5451': attribute type 10 has an invalid length. [ 800.322860][T18161] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5451'. [ 804.072431][T18235] validate_nla: 12 callbacks suppressed [ 804.072470][T18235] netlink: 'syz.2.5482': attribute type 10 has an invalid length. [ 804.129398][T18235] __nla_validate_parse: 13 callbacks suppressed [ 804.129435][T18235] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5482'. [ 804.190082][T18237] netlink: 'syz.0.5483': attribute type 10 has an invalid length. [ 804.241314][T18237] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5483'. [ 804.510946][T18253] netlink: 'syz.2.5489': attribute type 10 has an invalid length. [ 804.539098][T18253] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5489'. [ 804.806599][T18262] netlink: 'syz.4.5491': attribute type 10 has an invalid length. [ 804.829933][T18262] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5491'. [ 805.336497][T18272] netlink: 'syz.1.5504': attribute type 10 has an invalid length. [ 805.396175][T18272] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5504'. [ 805.575381][T18276] netlink: 'syz.3.5495': attribute type 10 has an invalid length. [ 805.647726][T18276] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5495'. [ 805.762300][T18280] netlink: 'syz.2.5496': attribute type 10 has an invalid length. [ 805.813388][T18280] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5496'. [ 805.882313][T18284] netlink: 'syz.0.5499': attribute type 10 has an invalid length. [ 805.903120][T18284] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5499'. [ 806.056032][T18296] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5497'. [ 806.102489][T18294] netlink: 'syz.4.5502': attribute type 10 has an invalid length. [ 806.147937][T18294] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5502'. [ 806.176071][T18295] netlink: 'syz.2.5501': attribute type 10 has an invalid length. [ 808.547444][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.553799][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.228858][T18376] validate_nla: 11 callbacks suppressed [ 809.228899][T18376] netlink: 'syz.3.5530': attribute type 10 has an invalid length. [ 809.285487][T18376] __nla_validate_parse: 13 callbacks suppressed [ 809.285522][T18376] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5530'. [ 809.366849][T18378] netlink: 'syz.4.5532': attribute type 10 has an invalid length. [ 809.393605][T18378] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5532'. [ 809.490955][T18383] netlink: 'syz.0.5533': attribute type 10 has an invalid length. [ 809.534379][T18383] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5533'. [ 810.287467][T18397] netlink: 'syz.0.5547': attribute type 10 has an invalid length. [ 810.314256][T18397] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5547'. [ 810.340203][T18406] netlink: 'syz.1.5539': attribute type 10 has an invalid length. [ 810.363511][T18406] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5539'. [ 810.781008][T18408] netlink: 'syz.2.5541': attribute type 10 has an invalid length. [ 810.859891][T18408] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5541'. [ 810.941162][T18415] netlink: 'syz.1.5543': attribute type 10 has an invalid length. [ 810.979682][T18415] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5543'. [ 811.151160][T18419] netlink: 'syz.4.5545': attribute type 10 has an invalid length. [ 811.178317][T18419] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5545'. [ 811.194143][T18423] netlink: 'syz.2.5548': attribute type 10 has an invalid length. [ 811.207808][T18423] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5548'. [ 811.229924][T18422] netlink: 'syz.0.5557': attribute type 10 has an invalid length. [ 811.251915][T18422] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5557'. [ 814.265878][T18503] validate_nla: 13 callbacks suppressed [ 814.265919][T18503] netlink: 'syz.1.5577': attribute type 10 has an invalid length. [ 814.295956][T18503] __nla_validate_parse: 14 callbacks suppressed [ 814.295994][T18503] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5577'. [ 814.404791][T18505] netlink: 'syz.2.5578': attribute type 10 has an invalid length. [ 814.420945][T18505] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5578'. [ 814.600453][T18510] netlink: 'syz.1.5580': attribute type 10 has an invalid length. [ 814.611015][T18510] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5580'. [ 814.887587][T18517] netlink: 'syz.0.5592': attribute type 10 has an invalid length. [ 815.006587][T18517] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5592'. [ 815.489583][T18526] netlink: 'syz.4.5587': attribute type 10 has an invalid length. [ 815.528565][T18526] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5587'. [ 815.641807][T18531] netlink: 'syz.0.5588': attribute type 10 has an invalid length. [ 815.685528][T18531] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5588'. [ 815.778316][T18535] netlink: 'syz.3.5590': attribute type 21 has an invalid length. [ 815.803095][T18535] netlink: 'syz.3.5590': attribute type 1 has an invalid length. [ 815.811511][T18535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5590'. [ 815.822582][T18536] netlink: 'syz.2.5589': attribute type 10 has an invalid length. [ 815.842977][T18536] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5589'. [ 815.861045][T18539] netlink: 'syz.4.5591': attribute type 10 has an invalid length. [ 815.870150][T18539] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5591'. [ 815.881498][T18540] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5593'. [ 816.273323][T18557] device sit0 entered promiscuous mode [ 818.388417][T18593] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 818.463858][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.499865][T18603] device bridge_slave_1 left promiscuous mode [ 818.524252][T18603] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.543417][T18603] device bridge_slave_1 entered promiscuous mode [ 818.553019][T18603] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 818.564460][T18606] device sit0 entered promiscuous mode [ 819.321039][T18633] validate_nla: 17 callbacks suppressed [ 819.321085][T18633] netlink: 'syz.4.5630': attribute type 10 has an invalid length. [ 819.362226][T18633] __nla_validate_parse: 15 callbacks suppressed [ 819.362266][T18633] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5630'. [ 819.510983][T18637] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5631'. [ 819.890632][T18646] netlink: 'syz.1.5635': attribute type 10 has an invalid length. [ 819.907217][T18646] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5635'. [ 819.910531][ T4268] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 820.070972][T18649] netlink: 'syz.3.5636': attribute type 10 has an invalid length. [ 820.097590][T18649] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5636'. [ 820.663392][T18655] netlink: 'syz.4.5640': attribute type 10 has an invalid length. [ 820.701635][T18655] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5640'. [ 820.712453][T18656] netlink: 'syz.0.5641': attribute type 10 has an invalid length. [ 820.727260][T18656] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5641'. [ 820.744330][T18657] netlink: 'syz.3.5638': attribute type 10 has an invalid length. [ 820.757974][T18657] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5638'. [ 820.991267][T18670] netlink: 'syz.0.5644': attribute type 10 has an invalid length. [ 821.028182][T18670] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5644'. [ 821.063646][T18668] netlink: 'syz.4.5643': attribute type 39 has an invalid length. [ 821.584361][T18686] netlink: 'syz.1.5648': attribute type 10 has an invalid length. [ 821.636373][T18686] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5648'. [ 821.704550][T18690] sctp: [Deprecated]: syz.0.5649 (pid 18690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.704550][T18690] Use struct sctp_sack_info instead [ 821.791665][T18692] netlink: 'syz.4.5650': attribute type 10 has an invalid length. [ 821.824269][T18692] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5650'. [ 823.628253][T18725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 823.675445][T18725] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 824.639478][T18747] validate_nla: 8 callbacks suppressed [ 824.639513][T18747] netlink: 'syz.2.5670': attribute type 10 has an invalid length. [ 824.663657][T18747] __nla_validate_parse: 8 callbacks suppressed [ 824.663694][T18747] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5670'. [ 824.706169][T18750] netlink: 'syz.4.5671': attribute type 10 has an invalid length. [ 824.734085][T18750] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5671'. [ 824.753345][T18752] netlink: 'syz.0.5673': attribute type 10 has an invalid length. [ 824.767828][T18752] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5673'. [ 824.825738][T18756] netlink: 'syz.1.5672': attribute type 10 has an invalid length. [ 824.844357][T18756] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5672'. [ 825.090911][T18768] netlink: 'syz.0.5677': attribute type 10 has an invalid length. [ 825.112980][T18768] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5677'. [ 825.156247][T18770] netlink: 'syz.3.5679': attribute type 10 has an invalid length. [ 825.191113][T18770] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5679'. [ 825.251441][T18772] netlink: 'syz.1.5678': attribute type 10 has an invalid length. [ 825.299138][T18772] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5678'. [ 825.521952][T18786] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 825.794554][T18792] netlink: 'syz.4.5685': attribute type 10 has an invalid length. [ 825.833558][T18792] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5685'. [ 825.936702][T18795] netlink: 'syz.0.5686': attribute type 10 has an invalid length. [ 825.969557][T18795] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5686'. [ 826.238919][T18804] netlink: 'syz.0.5689': attribute type 10 has an invalid length. [ 826.281060][T18804] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5689'. [ 826.346108][T18809] device hsr_slave_0 left promiscuous mode [ 826.373609][T18809] device hsr_slave_1 left promiscuous mode [ 827.039080][T18837] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 827.313616][ T4268] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 828.681097][ T4268] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 829.759897][T18935] validate_nla: 26 callbacks suppressed [ 829.759942][T18935] netlink: 'syz.2.5747': attribute type 10 has an invalid length. [ 829.785257][T18935] __nla_validate_parse: 25 callbacks suppressed [ 829.785294][T18935] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5747'. [ 829.812333][ T4268] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 829.953776][T18942] netlink: 'syz.1.5750': attribute type 10 has an invalid length. [ 830.047945][T18942] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5750'. [ 830.058782][T18943] netlink: 'syz.4.5759': attribute type 10 has an invalid length. [ 830.094353][T18943] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5759'. [ 830.301187][T18950] netlink: 'syz.2.5753': attribute type 10 has an invalid length. [ 830.320098][T18950] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5753'. [ 830.349820][T18955] netlink: 'syz.4.5754': attribute type 10 has an invalid length. [ 830.372587][T18955] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5754'. [ 830.486790][T18956] bridge0: port 3(macsec0) entered disabled state [ 830.494832][T18956] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.556572][T18956] device bridge0 left promiscuous mode [ 830.803031][T18962] device macsec0 left promiscuous mode [ 830.822452][T18962] bridge0: port 3(macsec0) entered disabled state [ 830.831230][T18962] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.933740][T18969] netlink: 'syz.2.5768': attribute type 10 has an invalid length. [ 830.942334][T18969] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5768'. [ 831.237040][T18979] netlink: 'syz.1.5761': attribute type 10 has an invalid length. [ 831.254416][T18979] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5761'. [ 831.402181][T18982] netlink: 'syz.2.5763': attribute type 10 has an invalid length. [ 831.437520][T18982] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5763'. [ 831.464099][T18984] netlink: 'syz.0.5764': attribute type 10 has an invalid length. [ 831.487130][T18984] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5764'. [ 831.514600][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 831.518811][T18993] netlink: 'syz.3.5765': attribute type 10 has an invalid length. [ 831.559190][T18993] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5765'. [ 832.291827][T19001] bridge0: port 4(team0) entered disabled state [ 832.305300][T19001] bridge0: port 3(bond0) entered disabled state [ 832.321695][T19001] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.332917][T19001] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.534443][T19007] device team0 left promiscuous mode [ 832.543303][T19007] device team_slave_0 left promiscuous mode [ 832.550771][T19007] device team_slave_1 left promiscuous mode [ 832.557050][T19007] device geneve1 left promiscuous mode [ 832.562794][T19007] bridge0: port 4(team0) entered disabled state [ 832.570884][T19007] bridge0: port 3(bond0) entered disabled state [ 832.578764][T19007] device bridge_slave_1 left promiscuous mode [ 832.585153][T19007] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.593406][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.010549][T19081] validate_nla: 16 callbacks suppressed [ 835.010590][T19081] netlink: 'syz.2.5807': attribute type 10 has an invalid length. [ 835.026228][T19081] __nla_validate_parse: 16 callbacks suppressed [ 835.026260][T19081] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5807'. [ 835.077517][T19085] netlink: 'syz.3.5809': attribute type 10 has an invalid length. [ 835.092663][T19085] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5809'. [ 835.159673][T19087] netlink: 'syz.1.5810': attribute type 10 has an invalid length. [ 835.178474][T19087] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5810'. [ 835.326588][T19090] netlink: 'syz.2.5812': attribute type 10 has an invalid length. [ 835.364135][T19090] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5812'. [ 835.379740][T19091] netlink: 'syz.4.5811': attribute type 10 has an invalid length. [ 835.396671][T19091] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5811'. [ 835.418026][T19093] netlink: 'syz.3.5823': attribute type 10 has an invalid length. [ 835.444285][T19093] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5823'. [ 835.717303][T19105] netlink: 'syz.4.5816': attribute type 10 has an invalid length. [ 835.735816][T19105] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5816'. [ 835.858798][T19109] netlink: 'syz.1.5818': attribute type 21 has an invalid length. [ 835.894423][T19109] netlink: 'syz.1.5818': attribute type 1 has an invalid length. [ 835.902558][T19109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5818'. [ 836.373756][T19124] netlink: 'syz.3.5822': attribute type 10 has an invalid length. [ 836.387376][T19124] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5822'. [ 836.486027][T19128] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5825'. [ 836.557835][T19130] device sit0 entered promiscuous mode [ 837.091084][T19135] Y4`Ҙ: renamed from lo [ 837.508104][T19149] Y4`Ҙ: renamed from lo [ 837.539152][T19150] : port 1(erspan0) entered blocking state [ 837.552036][T19150] : port 1(erspan0) entered disabled state [ 837.622682][T19150] device erspan0 entered promiscuous mode [ 839.560405][T19192] Y4`Ҙ: renamed from lo [ 839.865761][T19206] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 839.988574][T19206] device bridge_slave_1 entered promiscuous mode [ 840.019236][T19206] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 840.055331][T19210] validate_nla: 10 callbacks suppressed [ 840.055369][T19210] netlink: 'syz.0.5864': attribute type 10 has an invalid length. [ 840.085993][T19210] __nla_validate_parse: 10 callbacks suppressed [ 840.086079][T19210] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5864'. [ 840.659721][T19225] netlink: 'syz.0.5857': attribute type 10 has an invalid length. [ 840.680858][T19225] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5857'. [ 840.778024][T19229] netlink: 'syz.2.5858': attribute type 10 has an invalid length. [ 840.805803][T19229] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5858'. [ 841.161702][T19237] netlink: 'syz.0.5873': attribute type 10 has an invalid length. [ 841.214870][T19237] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5873'. [ 841.765995][T19254] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5863'. [ 841.819030][T19252] Y4`Ҙ: renamed from lo [ 842.179888][T19263] netlink: 'syz.2.5865': attribute type 10 has an invalid length. [ 842.191750][T19263] device bond0 left promiscuous mode [ 842.197254][T19263] device bond_slave_1 left promiscuous mode [ 842.203763][T19263] device netdevsim0 left promiscuous mode [ 842.222650][T19263] device bond_slave_1 entered promiscuous mode [ 842.229385][T19263] device netdevsim0 entered promiscuous mode [ 842.246728][T19263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.297019][T19263] team0: Port device bond0 added [ 842.572873][T19264] : port 1(erspan0) entered blocking state [ 842.582951][T19264] : port 1(erspan0) entered disabled state [ 842.592037][T19264] device erspan0 entered promiscuous mode [ 842.722108][T19269] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 842.795791][T19269] netlink: 'syz.4.5869': attribute type 10 has an invalid length. [ 842.860825][T19269] device bridge_slave_1 left promiscuous mode [ 842.871908][T19269] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.942931][T19269] device bridge_slave_1 entered promiscuous mode [ 842.960414][T19269] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 842.970541][T19276] netlink: 'syz.1.5870': attribute type 10 has an invalid length. [ 842.985417][T19276] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5870'. [ 842.998963][T19277] netlink: 'syz.0.5883': attribute type 10 has an invalid length. [ 843.020404][T19277] device bond_slave_1 left promiscuous mode [ 843.044842][T19277] device batadv_slave_0 left promiscuous mode [ 843.059040][T19277] device netdevsim0 left promiscuous mode [ 843.227239][T19277] device bond_slave_1 entered promiscuous mode [ 843.234665][T19277] device batadv_slave_0 entered promiscuous mode [ 843.243240][T19277] device netdevsim0 entered promiscuous mode [ 843.325924][T19277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.348729][T19277] device bond0 entered promiscuous mode [ 843.381098][T19277] team0: Port device bond0 added [ 843.415872][T19282] netlink: 'syz.2.5872': attribute type 10 has an invalid length. [ 843.435145][T19282] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5872'. [ 843.473624][T19292] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.5878'. [ 843.741312][T19298] netlink: 'syz.2.5891': attribute type 10 has an invalid length. [ 843.781986][T19298] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5891'. [ 843.850941][T19301] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5882'. [ 843.957170][T19299] device team0 left promiscuous mode [ 843.963496][T19299] device team_slave_0 left promiscuous mode [ 843.972435][T19299] device team_slave_1 left promiscuous mode [ 843.979822][T19299] device geneve1 left promiscuous mode [ 843.986731][T19299] device bond0 left promiscuous mode [ 844.005597][T19299] bridge0: port 4(team0) entered disabled state [ 844.197840][T19299] device macsec0 left promiscuous mode [ 844.241568][T19299] bridge0: port 3(macsec0) entered disabled state [ 844.336486][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.725744][T19316] : port 1(erspan0) entered blocking state [ 844.731977][T19316] : port 1(erspan0) entered disabled state [ 844.785350][T19316] device erspan0 entered promiscuous mode [ 845.471659][T19341] validate_nla: 2 callbacks suppressed [ 845.471727][T19341] netlink: 'syz.4.5895': attribute type 10 has an invalid length. [ 845.495083][T19341] __nla_validate_parse: 3 callbacks suppressed [ 845.495119][T19341] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5895'. [ 845.544709][T19344] netlink: 'syz.1.5896': attribute type 10 has an invalid length. [ 845.552847][T19344] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5896'. [ 845.659900][T19346] netlink: 'syz.2.5897': attribute type 39 has an invalid length. [ 846.028324][T19360] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.5898'. [ 846.418238][T19370] netlink: 'syz.4.5902': attribute type 10 has an invalid length. [ 846.440130][T19370] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5902'. [ 846.465185][T19373] netlink: 'syz.2.5903': attribute type 10 has an invalid length. [ 846.485327][T19373] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5903'. [ 846.528941][T19376] netlink: 'syz.1.5904': attribute type 10 has an invalid length. [ 846.556848][T19376] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5904'. [ 846.709801][T19381] sctp: [Deprecated]: syz.3.5907 (pid 19381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.709801][T19381] Use struct sctp_sack_info instead [ 846.929624][T19388] netlink: 'syz.1.5918': attribute type 10 has an invalid length. [ 846.949432][T19388] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5918'. [ 847.060975][T19394] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5909'. [ 847.155798][T19393] netlink: 'syz.0.5910': attribute type 10 has an invalid length. [ 847.174742][T19393] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5910'. [ 847.227606][T19400] netlink: 'syz.3.5922': attribute type 10 has an invalid length. [ 847.244457][T19400] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5922'. [ 847.565374][T19407] netlink: 'syz.1.5914': attribute type 39 has an invalid length. [ 848.415857][T19432] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 848.468551][T19432] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.498475][T19432] device bridge_slave_1 left promiscuous mode [ 848.514876][T19432] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.548480][T19432] device bridge_slave_1 entered promiscuous mode [ 848.561669][T19432] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 850.824369][T19481] device pim6reg1 entered promiscuous mode [ 851.332213][T19483] validate_nla: 12 callbacks suppressed [ 851.332253][T19483] netlink: 'syz.2.5942': attribute type 10 has an invalid length. [ 851.378607][T19483] __nla_validate_parse: 11 callbacks suppressed [ 851.378645][T19483] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5942'. [ 851.408931][T19485] sctp: [Deprecated]: syz.1.5944 (pid 19485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 851.408931][T19485] Use struct sctp_sack_info instead [ 851.566975][T19491] netlink: 'syz.4.5947': attribute type 10 has an invalid length. [ 851.637780][T19491] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5947'. [ 851.956141][T19500] netlink: 'syz.2.5950': attribute type 10 has an invalid length. [ 851.965115][T19500] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5950'. [ 853.012432][T19504] netlink: 'syz.1.5951': attribute type 10 has an invalid length. [ 853.034556][T19504] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5951'. [ 853.094595][T19508] netlink: 'syz.4.5953': attribute type 10 has an invalid length. [ 853.102923][T19508] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5953'. [ 853.338028][T19514] netlink: 'syz.1.5965': attribute type 10 has an invalid length. [ 853.387370][T19514] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5965'. [ 853.427665][T19516] netlink: 'syz.3.5955': attribute type 39 has an invalid length. [ 853.873417][T19522] netlink: 'syz.4.5957': attribute type 10 has an invalid length. [ 853.882833][T19522] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.5957'. [ 854.652423][T19543] netlink: 'syz.2.5963': attribute type 10 has an invalid length. [ 854.663559][T19543] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5963'. [ 854.940084][T19556] netlink: 'syz.4.5968': attribute type 10 has an invalid length. [ 854.949716][T19556] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5968'. [ 855.000725][T19557] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 855.034102][T19557] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 855.139683][T19560] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5970'. [ 856.398053][T19588] validate_nla: 3 callbacks suppressed [ 856.398094][T19588] netlink: 'syz.2.5979': attribute type 10 has an invalid length. [ 856.421614][T19588] __nla_validate_parse: 3 callbacks suppressed [ 856.421651][T19588] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5979'. [ 857.111989][T19599] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5980'. [ 857.140090][T19599] device hsr_slave_0 left promiscuous mode [ 857.174342][T19599] device hsr_slave_1 left promiscuous mode [ 857.433787][T19604] netlink: 'syz.0.5982': attribute type 10 has an invalid length. [ 857.455042][T19604] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5982'. [ 857.626927][T19615] netlink: 'syz.4.5987': attribute type 10 has an invalid length. [ 857.649942][T19615] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5987'. [ 857.738418][T19619] netlink: 'syz.0.6000': attribute type 10 has an invalid length. [ 857.754768][T19619] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6000'. [ 858.273699][T19630] netlink: 'syz.3.6003': attribute type 10 has an invalid length. [ 858.284098][T19630] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6003'. [ 858.295443][T19626] netlink: 'syz.0.5991': attribute type 10 has an invalid length. [ 858.303623][T19626] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5991'. [ 858.324873][T19637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 858.341726][T19637] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 858.551520][T19641] netlink: 'syz.0.5994': attribute type 10 has an invalid length. [ 858.580325][T19641] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5994'. [ 858.761491][T19650] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5997'. [ 858.933361][T19655] netlink: 'syz.2.6011': attribute type 10 has an invalid length. [ 858.974244][T19655] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6011'. [ 859.500539][T19664] netlink: 'syz.1.6013': attribute type 10 has an invalid length. [ 859.549826][T19668] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 859.561346][T19668] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 859.790313][T19673] netlink: 'syz.0.6002': attribute type 39 has an invalid length. [ 860.937075][T19699] device pim6reg1 entered promiscuous mode [ 861.371030][ T4268] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 861.603129][T19721] validate_nla: 3 callbacks suppressed [ 861.603168][T19721] netlink: 'syz.1.6024': attribute type 10 has an invalid length. [ 861.699851][T19721] __nla_validate_parse: 5 callbacks suppressed [ 861.699888][T19721] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6024'. [ 861.788361][T19722] netlink: 'syz.0.6022': attribute type 39 has an invalid length. [ 861.941316][T19734] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 862.116789][T19735] netlink: 766 bytes leftover after parsing attributes in process `syz.3.6026'. [ 862.249120][T19745] netlink: 'syz.0.6028': attribute type 10 has an invalid length. [ 862.314325][T19745] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6028'. [ 863.052548][T19757] netlink: 'syz.4.6033': attribute type 10 has an invalid length. [ 863.092046][T19757] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6033'. [ 863.231677][T19761] netlink: 'syz.0.6035': attribute type 10 has an invalid length. [ 863.285344][T19761] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6035'. [ 863.331025][T19765] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6036'. [ 863.366164][T19765] device hsr_slave_0 left promiscuous mode [ 863.420980][T19765] device hsr_slave_1 left promiscuous mode [ 863.605890][T19773] netlink: 'syz.4.6038': attribute type 10 has an invalid length. [ 863.613986][T19773] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6038'. [ 863.861125][T19782] netlink: 'syz.4.6041': attribute type 10 has an invalid length. [ 863.888238][T19782] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6041'. [ 864.256823][T19798] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 864.527180][T19802] netlink: 766 bytes leftover after parsing attributes in process `syz.4.6045'. [ 864.988337][T19809] netlink: 'syz.3.6049': attribute type 10 has an invalid length. [ 865.007175][T19809] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6049'. [ 865.080381][T19812] netlink: 'syz.2.6050': attribute type 10 has an invalid length. [ 865.377531][T19818] netlink: 'syz.3.6052': attribute type 10 has an invalid length. [ 865.589302][T19826] device hsr_slave_0 left promiscuous mode [ 865.628525][T19826] device hsr_slave_1 left promiscuous mode [ 866.708508][T19859] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 866.836529][T19868] __nla_validate_parse: 8 callbacks suppressed [ 866.836549][T19868] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6068'. [ 866.889283][T19863] validate_nla: 5 callbacks suppressed [ 866.889319][T19863] netlink: 'syz.4.6069': attribute type 10 has an invalid length. [ 866.917113][T19863] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6069'. [ 866.997985][T19869] netlink: 'syz.1.6070': attribute type 10 has an invalid length. [ 867.033377][T19869] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6070'. [ 867.095252][T19871] netlink: 'syz.2.6071': attribute type 10 has an invalid length. [ 867.133900][T19871] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6071'. [ 867.447809][T19880] netlink: 'syz.0.6085': attribute type 10 has an invalid length. [ 867.480791][T19880] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6085'. [ 867.785170][T19890] netlink: 'syz.2.6079': attribute type 10 has an invalid length. [ 867.829102][T19890] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6079'. [ 867.873015][T19893] netlink: 'syz.0.6080': attribute type 10 has an invalid length. [ 867.948346][T19893] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6080'. [ 868.000875][T19898] netlink: 'syz.3.6081': attribute type 10 has an invalid length. [ 868.026907][T19898] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6081'. [ 868.231112][T19908] netlink: 'syz.2.6083': attribute type 10 has an invalid length. [ 868.250112][T19908] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6083'. [ 868.360116][T19911] netlink: 'syz.0.6084': attribute type 10 has an invalid length. [ 868.387263][T19911] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6084'. [ 868.764326][T19927] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 868.848018][T19926] netlink: 'syz.1.6091': attribute type 10 has an invalid length. [ 869.987917][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.994420][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.139326][T19987] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 871.868539][T19993] __nla_validate_parse: 9 callbacks suppressed [ 871.868578][T19993] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6114'. [ 871.902850][T19996] validate_nla: 9 callbacks suppressed [ 871.902869][T19996] netlink: 'syz.1.6113': attribute type 10 has an invalid length. [ 871.948781][T19996] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6113'. [ 871.992803][T20004] netlink: 'syz.3.6117': attribute type 10 has an invalid length. [ 872.014401][T20004] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6117'. [ 872.023513][T20003] netlink: 'syz.0.6116': attribute type 10 has an invalid length. [ 872.049559][T20003] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6116'. [ 872.610525][T20027] netlink: 'syz.0.6129': attribute type 10 has an invalid length. [ 872.620037][T20027] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6129'. [ 872.682035][T20029] netlink: 'syz.2.6128': attribute type 10 has an invalid length. [ 872.696740][T20032] netlink: 'syz.4.6130': attribute type 3 has an invalid length. [ 872.731082][T20029] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6128'. [ 872.734675][T20032] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.6130'. [ 872.777025][T20031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6131'. [ 872.788245][T20031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6131'. [ 872.838618][T20034] netlink: 'syz.0.6132': attribute type 10 has an invalid length. [ 872.853348][T20034] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6132'. [ 872.918331][T20036] netlink: 'syz.1.6133': attribute type 10 has an invalid length. [ 873.124486][T20042] device hsr_slave_0 left promiscuous mode [ 873.146860][T20042] device hsr_slave_1 left promiscuous mode [ 873.787416][T20062] netlink: 'syz.1.6141': attribute type 10 has an invalid length. [ 873.823092][T20064] netlink: 'syz.0.6143': attribute type 10 has an invalid length. [ 877.392821][T20171] validate_nla: 17 callbacks suppressed [ 877.392858][T20171] netlink: 'syz.4.6188': attribute type 10 has an invalid length. [ 877.448141][T20171] __nla_validate_parse: 24 callbacks suppressed [ 877.448179][T20171] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6188'. [ 877.495620][T20178] netlink: 'syz.2.6189': attribute type 10 has an invalid length. [ 877.503839][T20178] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6189'. [ 877.590516][T20180] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.6190'. [ 877.737057][T20183] netlink: 'syz.4.6191': attribute type 10 has an invalid length. [ 877.754528][T20183] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6191'. [ 877.829996][T20185] netlink: 'syz.0.6192': attribute type 10 has an invalid length. [ 877.854115][T20185] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6192'. [ 878.021169][T20190] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.6206'. [ 878.067263][T20193] netlink: 'syz.1.6205': attribute type 10 has an invalid length. [ 878.120214][T20193] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6205'. [ 878.447732][T20206] netlink: 'syz.0.6198': attribute type 21 has an invalid length. [ 878.468098][T20206] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6198'. [ 878.540938][T20208] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6199'. [ 878.606479][T20207] delete_channel: no stack [ 878.628216][T20211] netlink: 'syz.4.6200': attribute type 10 has an invalid length. [ 878.676882][T20211] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6200'. [ 879.009653][T20223] netlink: 'syz.2.6209': attribute type 10 has an invalid length. [ 879.152353][T20230] netlink: 'syz.3.6211': attribute type 10 has an invalid length. [ 879.162189][T20227] netlink: 'syz.1.6210': attribute type 10 has an invalid length. [ 882.311185][T20306] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 882.565632][T20313] validate_nla: 4 callbacks suppressed [ 882.565671][T20313] netlink: 'syz.4.6237': attribute type 10 has an invalid length. [ 882.623234][T20313] __nla_validate_parse: 13 callbacks suppressed [ 882.623305][T20313] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6237'. [ 882.700921][T20316] netlink: 'syz.3.6239': attribute type 10 has an invalid length. [ 882.735160][T20316] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6239'. [ 883.073046][T20327] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6242'. [ 883.134698][T20325] delete_channel: no stack [ 883.483760][T20346] netlink: 'syz.3.6249': attribute type 10 has an invalid length. [ 883.492202][T20346] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6249'. [ 883.848497][T20352] netlink: 'syz.2.6254': attribute type 10 has an invalid length. [ 883.875316][T20352] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6254'. [ 883.938273][T20354] netlink: 'syz.4.6250': attribute type 4 has an invalid length. [ 883.966300][T20354] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6250'. [ 884.058983][T20358] netlink: 'syz.3.6256': attribute type 10 has an invalid length. [ 884.085224][T20358] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6256'. [ 884.309803][T20367] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6257'. [ 884.380573][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6257'. [ 885.312064][T20390] netlink: 'syz.3.6265': attribute type 10 has an invalid length. [ 885.344566][T20390] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6265'. [ 885.546808][T20396] netlink: 'syz.2.6267': attribute type 10 has an invalid length. [ 885.873340][T20403] netlink: 'syz.2.6268': attribute type 4 has an invalid length. [ 886.790495][T20416] device syzkaller0 entered promiscuous mode [ 886.961108][T20433] netlink: 'syz.3.6281': attribute type 3 has an invalid length. [ 889.600407][T20456] netlink: 'syz.1.6288': attribute type 4 has an invalid length. [ 889.609694][T20456] __nla_validate_parse: 3 callbacks suppressed [ 889.609730][T20456] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6288'. [ 889.746030][T20456] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 889.797111][T20460] netlink: 'syz.0.6291': attribute type 10 has an invalid length. [ 889.817532][T20460] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6291'. [ 891.463118][T20505] netlink: 'syz.0.6306': attribute type 10 has an invalid length. [ 891.489517][T20505] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6306'. [ 891.982380][T20521] netlink: 'syz.2.6311': attribute type 10 has an invalid length. [ 892.129292][T20521] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.420443][T20528] netlink: 'syz.4.6314': attribute type 10 has an invalid length. [ 892.468318][T20528] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6314'. [ 894.679388][T20569] netlink: 'syz.1.6328': attribute type 10 has an invalid length. [ 894.751911][T20569] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6328'. [ 894.824722][T20573] netlink: 'syz.0.6327': attribute type 4 has an invalid length. [ 894.846083][T20573] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6327'. [ 896.582832][T20615] netlink: 'syz.3.6344': attribute type 10 has an invalid length. [ 896.591986][T20615] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6344'. [ 896.672319][T20616] netlink: 'syz.1.6345': attribute type 4 has an invalid length. [ 896.683173][T20616] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6345'. [ 896.692678][T20616] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 896.956304][T20612] device syzkaller0 entered promiscuous mode [ 898.010880][T20640] [ 898.013334][T20640] ====================================================== [ 898.020337][T20640] WARNING: possible circular locking dependency detected [ 898.027344][T20640] 6.1.134-syzkaller #0 Not tainted [ 898.032441][T20640] ------------------------------------------------------ [ 898.039440][T20640] syz.1.6353/20640 is trying to acquire lock: [ 898.045508][T20640] ffff888055bbb068 (&htab->lockdep_key){-.-.}-{2:2}, at: htab_lock_bucket+0x1a0/0x360 [ 898.055069][T20640] [ 898.055069][T20640] but task is already holding lock: [ 898.062503][T20640] ffff888057c7f8b0 (&htab->lockdep_key#2){-.-.}-{2:2}, at: htab_lock_bucket+0x1a0/0x360 [ 898.072245][T20640] [ 898.072245][T20640] which lock already depends on the new lock. [ 898.072245][T20640] [ 898.082653][T20640] [ 898.082653][T20640] the existing dependency chain (in reverse order) is: [ 898.091652][T20640] [ 898.091652][T20640] -> #1 (&htab->lockdep_key#2){-.-.}-{2:2}: [ 898.099727][T20640] lock_acquire+0x1f8/0x5a0 [ 898.104767][T20640] _raw_spin_lock+0x2a/0x40 [ 898.109785][T20640] htab_lock_bucket+0x1a0/0x360 [ 898.115149][T20640] htab_map_delete_elem+0x1d5/0x6b0 [ 898.120857][T20640] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 898.126834][T20640] bpf_trace_run2+0x1fd/0x410 [ 898.132020][T20640] __traceiter_contention_end+0x74/0xa0 [ 898.138078][T20640] trace_contention_end+0x14c/0x190 [ 898.143791][T20640] __pv_queued_spin_lock_slowpath+0x935/0xc50 [ 898.150375][T20640] queued_spin_lock_slowpath+0x42/0x50 [ 898.156340][T20640] do_raw_spin_lock+0x269/0x370 [ 898.161711][T20640] htab_lock_bucket+0x1a0/0x360 [ 898.167072][T20640] htab_map_delete_elem+0x1d5/0x6b0 [ 898.172778][T20640] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 898.178832][T20640] bpf_trace_run2+0x1fd/0x410 [ 898.184035][T20640] __traceiter_contention_end+0x74/0xa0 [ 898.190096][T20640] trace_contention_end+0x12f/0x170 [ 898.195810][T20640] __mutex_lock+0x2ed/0xd80 [ 898.200828][T20640] perf_event_ctx_lock_nested+0x412/0x580 [ 898.207063][T20640] perf_event_release_kernel+0x17a/0x900 [ 898.213208][T20640] perf_release+0x37/0x40 [ 898.218067][T20640] __fput+0x3f6/0x8d0 [ 898.222557][T20640] task_work_run+0x246/0x300 [ 898.227657][T20640] do_exit+0xa6e/0x26a0 [ 898.232329][T20640] __x64_sys_exit+0x3c/0x40 [ 898.237351][T20640] do_syscall_64+0x3b/0x80 [ 898.242287][T20640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.248699][T20640] [ 898.248699][T20640] -> #0 (&htab->lockdep_key){-.-.}-{2:2}: [ 898.256593][T20640] validate_chain+0x1661/0x5950 [ 898.261969][T20640] __lock_acquire+0x125b/0x1f80 [ 898.267336][T20640] lock_acquire+0x1f8/0x5a0 [ 898.272365][T20640] _raw_spin_lock+0x2a/0x40 [ 898.277403][T20640] htab_lock_bucket+0x1a0/0x360 [ 898.282761][T20640] htab_map_delete_elem+0x1d5/0x6b0 [ 898.288472][T20640] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 898.294464][T20640] bpf_trace_run2+0x1fd/0x410 [ 898.299646][T20640] __traceiter_contention_end+0x74/0xa0 [ 898.305704][T20640] trace_contention_end+0x14c/0x190 [ 898.311460][T20640] __pv_queued_spin_lock_slowpath+0x935/0xc50 [ 898.318068][T20640] queued_spin_lock_slowpath+0x42/0x50 [ 898.324039][T20640] do_raw_spin_lock+0x269/0x370 [ 898.329407][T20640] htab_lock_bucket+0x1a0/0x360 [ 898.334807][T20640] htab_map_delete_elem+0x1d5/0x6b0 [ 898.340517][T20640] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 898.346507][T20640] bpf_trace_run2+0x1fd/0x410 [ 898.351713][T20640] __traceiter_contention_end+0x74/0xa0 [ 898.357773][T20640] trace_contention_end+0x12f/0x170 [ 898.363525][T20640] __mutex_lock+0x2ed/0xd80 [ 898.368664][T20640] perf_event_release_kernel+0x1eb/0x900 [ 898.374808][T20640] perf_release+0x37/0x40 [ 898.379651][T20640] __fput+0x3f6/0x8d0 [ 898.384142][T20640] task_work_run+0x246/0x300 [ 898.389248][T20640] do_exit+0xa6e/0x26a0 [ 898.393916][T20640] __x64_sys_exit+0x3c/0x40 [ 898.398934][T20640] do_syscall_64+0x3b/0x80 [ 898.403873][T20640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.410286][T20640] [ 898.410286][T20640] other info that might help us debug this: [ 898.410286][T20640] [ 898.420584][T20640] Possible unsafe locking scenario: [ 898.420584][T20640] [ 898.428019][T20640] CPU0 CPU1 [ 898.433368][T20640] ---- ---- [ 898.438718][T20640] lock(&htab->lockdep_key#2); [ 898.443567][T20640] lock(&htab->lockdep_key); [ 898.450751][T20640] lock(&htab->lockdep_key#2); [ 898.458118][T20640] lock(&htab->lockdep_key); [ 898.462784][T20640] [ 898.462784][T20640] *** DEADLOCK *** [ 898.462784][T20640] [ 898.470929][T20640] 4 locks held by syz.1.6353/20640: [ 898.476110][T20640] #0: ffff888053eceea8 (&event->child_mutex){+.+.}-{3:3}, at: perf_event_release_kernel+0x1eb/0x900 [ 898.486973][T20640] #1: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 898.496355][T20640] #2: ffff888057c7f8b0 (&htab->lockdep_key#2){-.-.}-{2:2}, at: htab_lock_bucket+0x1a0/0x360 [ 898.506524][T20640] #3: ffffffff8d32e740 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x110/0x410 [ 898.515910][T20640] [ 898.515910][T20640] stack backtrace: [ 898.521789][T20640] CPU: 1 PID: 20640 Comm: syz.1.6353 Not tainted 6.1.134-syzkaller #0 [ 898.529949][T20640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 898.539992][T20640] Call Trace: [ 898.543261][T20640] [ 898.546183][T20640] dump_stack_lvl+0x1e3/0x2cb [ 898.550855][T20640] ? nf_tcp_handle_invalid+0x647/0x647 [ 898.556313][T20640] ? print_circular_bug+0x12b/0x1a0 [ 898.561512][T20640] check_noncircular+0x2fa/0x3b0 [ 898.566447][T20640] ? add_lock_to_list+0x1de/0x2e0 [ 898.571473][T20640] ? add_chain_block+0x850/0x850 [ 898.576410][T20640] ? lockdep_lock+0x11f/0x2a0 [ 898.581085][T20640] ? _find_first_zero_bit+0xd0/0x100 [ 898.586371][T20640] validate_chain+0x1661/0x5950 [ 898.591230][T20640] ? reacquire_held_locks+0x660/0x660 [ 898.596602][T20640] ? stack_trace_save+0x1c0/0x1c0 [ 898.601642][T20640] ? __lock_acquire+0x125b/0x1f80 [ 898.606668][T20640] ? mark_lock+0x9a/0x340 [ 898.610995][T20640] __lock_acquire+0x125b/0x1f80 [ 898.615849][T20640] lock_acquire+0x1f8/0x5a0 [ 898.620348][T20640] ? htab_lock_bucket+0x1a0/0x360 [ 898.625369][T20640] ? read_lock_is_recursive+0x10/0x10 [ 898.630737][T20640] ? htab_map_delete_elem+0x378/0x6b0 [ 898.636106][T20640] ? do_raw_spin_lock+0x14a/0x370 [ 898.641132][T20640] ? mark_lock+0x9a/0x340 [ 898.645464][T20640] _raw_spin_lock+0x2a/0x40 [ 898.649962][T20640] ? htab_lock_bucket+0x1a0/0x360 [ 898.654997][T20640] htab_lock_bucket+0x1a0/0x360 [ 898.659846][T20640] ? htab_lru_map_delete_node+0x6b0/0x6b0 [ 898.665578][T20640] ? htab_map_hash+0x2ad/0x6c0 [ 898.670338][T20640] htab_map_delete_elem+0x1d5/0x6b0 [ 898.675532][T20640] ? htab_map_update_elem+0xbd0/0xbd0 [ 898.680894][T20640] ? __cant_sleep+0x270/0x270 [ 898.685572][T20640] ? mark_lock+0x9a/0x340 [ 898.689901][T20640] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 898.695350][T20640] bpf_trace_run2+0x1fd/0x410 [ 898.700018][T20640] ? bpf_trace_run2+0x110/0x410 [ 898.704858][T20640] ? bpf_trace_run1+0x3d0/0x3d0 [ 898.709701][T20640] ? mark_lock+0x9a/0x340 [ 898.714035][T20640] ? __bpf_trace_contention_begin+0x10/0x10 [ 898.719925][T20640] __traceiter_contention_end+0x74/0xa0 [ 898.725465][T20640] trace_contention_end+0x14c/0x190 [ 898.730663][T20640] __pv_queued_spin_lock_slowpath+0x935/0xc50 [ 898.736748][T20640] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 898.743183][T20640] queued_spin_lock_slowpath+0x42/0x50 [ 898.748660][T20640] do_raw_spin_lock+0x269/0x370 [ 898.753508][T20640] ? __rwlock_init+0x140/0x140 [ 898.758288][T20640] ? mark_lock+0x9a/0x340 [ 898.762622][T20640] ? htab_lock_bucket+0x138/0x360 [ 898.767642][T20640] htab_lock_bucket+0x1a0/0x360 [ 898.772490][T20640] ? htab_lru_map_delete_node+0x6b0/0x6b0 [ 898.778206][T20640] ? htab_map_hash+0x2ad/0x6c0 [ 898.782965][T20640] htab_map_delete_elem+0x1d5/0x6b0 [ 898.788169][T20640] ? bpf_trace_run2+0x110/0x410 [ 898.793012][T20640] ? htab_map_update_elem+0xbd0/0xbd0 [ 898.798381][T20640] ? __cant_sleep+0x270/0x270 [ 898.803061][T20640] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 898.808528][T20640] bpf_trace_run2+0x1fd/0x410 [ 898.813277][T20640] ? bpf_trace_run2+0x110/0x410 [ 898.818130][T20640] ? bpf_trace_run1+0x3d0/0x3d0 [ 898.822993][T20640] ? __mutex_trylock_common+0x17e/0x2e0 [ 898.828542][T20640] ? __might_sleep+0xb0/0xb0 [ 898.833184][T20640] ? __bpf_trace_contention_begin+0x10/0x10 [ 898.839078][T20640] __traceiter_contention_end+0x74/0xa0 [ 898.844630][T20640] trace_contention_end+0x12f/0x170 [ 898.849846][T20640] __mutex_lock+0x2ed/0xd80 [ 898.854355][T20640] ? __mutex_unlock_slowpath+0x218/0x750 [ 898.859989][T20640] ? perf_event_release_kernel+0x1eb/0x900 [ 898.865806][T20640] ? mutex_lock_nested+0x10/0x10 [ 898.870757][T20640] ? do_raw_spin_unlock+0x137/0x8a0 [ 898.875967][T20640] perf_event_release_kernel+0x1eb/0x900 [ 898.881609][T20640] ? calc_timer_values+0x420/0x420 [ 898.886723][T20640] ? ima_file_free+0xe8/0x3c0 [ 898.891402][T20640] perf_release+0x37/0x40 [ 898.895743][T20640] ? perf_mmap+0x13e0/0x13e0 [ 898.900344][T20640] __fput+0x3f6/0x8d0 [ 898.904332][T20640] task_work_run+0x246/0x300 [ 898.908918][T20640] ? kasan_quarantine_put+0xd4/0x220 [ 898.914199][T20640] ? task_work_cancel+0x2e0/0x2e0 [ 898.919221][T20640] ? kmem_cache_free+0x292/0x510 [ 898.924154][T20640] ? do_exit+0xa69/0x26a0 [ 898.928487][T20640] do_exit+0xa6e/0x26a0 [ 898.932646][T20640] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 898.938628][T20640] ? put_task_struct+0x80/0x80 [ 898.943389][T20640] ? print_irqtrace_events+0x210/0x210 [ 898.948854][T20640] ? print_irqtrace_events+0x210/0x210 [ 898.954314][T20640] ? lockdep_hardirqs_on+0x94/0x130 [ 898.959603][T20640] __x64_sys_exit+0x3c/0x40 [ 898.964213][T20640] do_syscall_64+0x3b/0x80 [ 898.968628][T20640] ? clear_bhb_loop+0x45/0xa0 [ 898.973306][T20640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.979202][T20640] RIP: 0033:0x7fb08838e969 [ 898.983610][T20640] Code: Unable to access opcode bytes at 0x7fb08838e93f. [ 898.990626][T20640] RSP: 002b:00007fb08916bfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 898.999048][T20640] RAX: ffffffffffffffda RBX: 00007fb0885b5fa0 RCX: 00007fb08838e969 [ 899.007028][T20640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 899.014996][T20640] RBP: 00007fb088410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 899.022983][T20640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.030963][T20640] R13: 0000000000000000 R14: 00007fb0885b5fa0 R15: 00007ffdaed25788 [ 899.038962][T20640] [ 900.158663][T20633] netlink: 'syz.0.6351': attribute type 10 has an invalid length. [ 900.166671][T20633] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6351'.