last executing test programs: 3.306850425s ago: executing program 2 (id=15437): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./cgroup\x00', 0x0, 0x8}, 0x18) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, &(0x7f00000002c0), 0x4) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 3.107786892s ago: executing program 3 (id=15438): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) socket$kcm(0x28, 0x5, 0x28) sendmsg$sock(r2, &(0x7f0000000680)={&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x80, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, 0x0, 0x200048cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r6 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r6, 0x0, 0x900000000000000) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r7, 0x2e, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000100)=[0x0]}, 0x40) recvmsg$kcm(r7, 0x0, 0x40002000) 3.107097742s ago: executing program 0 (id=15439): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x94, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80000, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000200)=""/76}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x9c) r5 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000004c0)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x80081) r10 = getpid() write$cgroup_pid(r5, &(0x7f0000000080)=r10, 0x12) r11 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072bd3b452e59256200"/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000002a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r11, &(0x7f0000000180)=0x3, 0x12) 3.106705322s ago: executing program 2 (id=15440): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x9a) 2.578953778s ago: executing program 3 (id=15441): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0}, 0x4, 0x10004, 0x9e4, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638477fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x100fe, 0x60000000}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0xa242, 0x0, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a08", 0x3a}], 0x1}, 0x4000040) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff01000000000007000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x7, 0x0, &(0x7f0000000140)="e9020400000000", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffdffe}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'pim6reg1\x00', 0x20}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) 2.054094855s ago: executing program 1 (id=15442): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./cgroup\x00', 0x0, 0x8}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socket$kcm(0xa, 0x3, 0x106) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x88, 0xa, &(0x7f00000002c0), 0x4) unlink(&(0x7f0000000200)='./cgroup\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 2.004009746s ago: executing program 0 (id=15443): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x18, 0x0, 0x2) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r5, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x40, 0x110, 0x2, "c8487de08683b22f78b0b8e9eec5a72e82ce5a3a8a32e4fcb9cbbcc9fa0dc113481c1c5e8e12f101b0769271b246"}, {0x30, 0x111, 0x4, "bb5368282c62339738430d5d34368966ef467e6ea9cdfa97c1836b"}, {0x18, 0x11, 0x4, "6b555b9f5f"}, {0xa8, 0x10b, 0x5, "adfee51f5f285b5787436a375743768f01631a8cb82f9cb88531e2d494f40caff77b75624131d8994f5392c9ffe489547475f4e340ec189e69f904277e1d31e30eadbba3fc95ffb02a206e3a4d460cd8a8fef145f2dd3692f2c35ee09e42cf17537d35eab6d7cdc34aa8f5d79c0c7749b98c3f980b0725e3928f2e36944aa71d188fdbece27a198612e684c6ac4035a24a7b"}, {0x88, 0x102, 0x5, "fd7d1462da3a3346c416368595ec22abe62dc680bb936ca39a988523ee6e023cc7b121edcb2f05fa9f8dd9087c4e3eaf8d4db247e52a2d6b682be3024cf6960363c41dad3950bf4fe9568df47a353ac84c03d348feae1a0ed2818126c7159dfcb8ee1339a5ff690d744539f03f4d52f6fe2c56fb1d3b"}], 0x1b8}, 0x4041) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.960694908s ago: executing program 2 (id=15445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @loopback}, 0x10, 0x0}, 0x200440e4) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x18, 0x0, 0x2) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b8af8ff00", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000009400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$kcm(r5, 0x0, 0x4041) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.910962149s ago: executing program 3 (id=15446): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/37, 0x25}, {0x0}], 0x2, &(0x7f0000000b00)=""/182, 0xb6}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000003780)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000", 0x46}], 0x1}, 0x1800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x20005, 0xc8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001940)="4aa8477184a1cda20a6a0e11bcc3c555be4bf2a8a81248fd2c337965e5429e8419478143ce06c46753e8aabedbd67dd652eaa6f22331a6ac0141153d0ec349f19a82ced47f44de1d12d6d131d6c6af675b16a3d0a1444597d25b8b3a5094", 0x20071, r8, 0x4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f00000013c0)=""/61, 0x187, 0x3d, 0x0, 0x5}, 0x28) 1.792680873s ago: executing program 1 (id=15447): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./cgroup\x00', 0x0, 0x8}, 0x18) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, &(0x7f00000002c0), 0x4) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 1.770920214s ago: executing program 0 (id=15448): r0 = socket$kcm(0x11, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES32=r1, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="e8908ff6d765fa0934e59f9d96d62b7dea018327aa5820a8fafcd1a29801c3d43a435194ff4e393d01aaef594a0c8554cc4b9678980ec97394cf0fae4356f934", @ANYRES64=r1, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f00000008c0)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba077747e6f750f641789acfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x7a}, {&(0x7f0000000280)="63f805d2649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26", 0x77}, {&(0x7f0000001ec0)="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", 0xa91}], 0x3}, 0x20000085) perf_event_open(0x0, 0x0, 0x100000000, r3, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200000000e4ffff0d1208000f0100810401880016ea1f000b400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d800000018009d064e81060000000000000036660730e70d12c9dd97021d080006007cfce7fe55a10a0015000200142603600e1208000f", 0x37}], 0x1}, 0x48080) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0xb) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0xfffffffffffffff9}, 0x186e2, 0x0, 0x0, 0x0, 0x200010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 1.713491566s ago: executing program 2 (id=15449): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000500), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440e4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x18, 0x0, 0x2) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x40, 0x110, 0x2, "c8487de08683b22f78b0b8e9eec5a72e82ce5a3a8a32e4fcb9cbbcc9fa0dc113481c1c5e8e12f101b0"}, {0x30, 0x111, 0x4, "bb5368282c62339738430d5d34368966ef467e6ea9cdfa97c1836b"}, {0x18, 0x11, 0x4, "6b555b9f5f"}, {0xa8, 0x10b, 0x5, "adfee51f5f285b5787436a375743768f01631a8cb82f9cb88531e2d494f40caff77b75624131d8994f5392c9ffe489547475f4e340ec189e69f904277e1d31e30eadbba3fc95ffb02a206e3a4d460cd8a8fef145f2dd3692f2c35ee09e42cf17537d35eab6d7cdc34aa8f5d79c0c7749b98c3f980b0725e3928f2e36944aa71d188fdbece27a198612e684c6ac4035a24a7b"}, {0x98, 0x102, 0x5, "fd7d1462da3a3346c416368595ec22abe62dc680bb936ca39a988523ee6e023cc7b121edcb2f05fa9f8dd9087c4e3eaf8d4db247e52a2d6b682be3024cf6960363c41dad3950bf4fe9568df47a353ac84c03d348feae1a0ed2818126c7159dfcb8ee1339a5ff690d744539f03f4d52f6fe2c56fb1d3b5b43c1864c607b4cc6a105a9"}], 0x1c8}, 0x4041) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.611865679s ago: executing program 3 (id=15450): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5ae) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r2, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000c40)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r5, &(0x7f0000000040)=0x2d00, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) 1.556485691s ago: executing program 1 (id=15451): sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002480)=[{&(0x7f00000001c0)}, {&(0x7f00000012c0)="60116c29a972bd5e8d8f4fd8410c635bbee570a7bdacfe88c27bcadd1b12e58afed138", 0x23}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7596b0a6fb5b106a7e0359f", 0x17}, {&(0x7f0000001340)}, {&(0x7f0000001400)="aa48455b99b872cc35267db06314a7274bdab807da5d1cc6e86e3de9664e4a8efb2269e57e028f95220b8adf7d1acd0bfafd562646", 0x35}, {&(0x7f0000001480)="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", 0xe00}], 0x6, 0x0, 0x110}, 0x40000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.346811717s ago: executing program 3 (id=15452): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x8000) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{0x0}], 0x1}, 0xc000) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x1, @perf_bp={&(0x7f0000000280), 0xb}, 0x100708, 0x8, 0x2, 0x8, 0x800000000010001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x4008000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0xb2bfa2996394e58b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000002c0)=ANY=[@ANYBLOB="88e316a1fc2c414be4c0ba49e1cabf2c22031096bbb18ba095694c4f86a33bb49cf35960c47b9db275f8f4102cde1b0038d09c9f9e"]) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:'], 0x6a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) 1.344633647s ago: executing program 0 (id=15460): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000500), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440e4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x18, 0x0, 0x2) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x40, 0x110, 0x2, "c8487de08683b22f78b0b8e9eec5a72e82ce5a3a8a32e4fcb9cbbcc9fa0dc113481c1c5e8e12f101b0"}, {0x30, 0x111, 0x4, "bb5368282c62339738430d5d34368966ef467e6ea9cdfa97c1836b"}, {0x18, 0x11, 0x4, "6b555b9f5f"}, {0xa8, 0x10b, 0x5, "adfee51f5f285b5787436a375743768f01631a8cb82f9cb88531e2d494f40caff77b75624131d8994f5392c9ffe489547475f4e340ec189e69f904277e1d31e30eadbba3fc95ffb02a206e3a4d460cd8a8fef145f2dd3692f2c35ee09e42cf17537d35eab6d7cdc34aa8f5d79c0c7749b98c3f980b0725e3928f2e36944aa71d188fdbece27a198612e684c6ac4035a24a7b"}, {0x98, 0x102, 0x5, "fd7d1462da3a3346c416368595ec22abe62dc680bb936ca39a988523ee6e023cc7b121edcb2f05fa9f8dd9087c4e3eaf8d4db247e52a2d6b682be3024cf6960363c41dad3950bf4fe9568df47a353ac84c03d348feae1a0ed2818126c7159dfcb8ee1339a5ff690d744539f03f4d52f6fe2c56fb1d3b5b43c1864c607b4cc6a105a9"}], 0x1c8}, 0x4041) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.344167227s ago: executing program 2 (id=15453): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x94, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x80000, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000200)=""/76}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x9c) r5 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000004c0)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x80081) r10 = getpid() write$cgroup_pid(r5, &(0x7f0000000080)=r10, 0x12) r11 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000072bd3b452e59256200"/28], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000002a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r11, &(0x7f0000000180)=0x3, 0x12) 1.343269427s ago: executing program 1 (id=15461): sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002480)=[{&(0x7f00000001c0)}, {&(0x7f00000012c0)="60116c29a972bd5e8d8f4fd8410c635bbee570a7bdacfe88c27bcadd1b12e58afed138", 0x23}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7596b0a6fb5b106a7e0359f", 0x17}, {&(0x7f0000001340)}, {&(0x7f0000001400)="aa48455b99b872cc35267db06314a7274bdab807da5d1cc6e86e3de9664e4a8efb2269e57e028f95220b8adf7d1acd0bfafd562646", 0x35}, {&(0x7f0000001480)="faa247b38c6e8294840b0b598ae2d155fc99d70e01e379582ce36c484c2be3bf866ef1fc5852f58ba5b2daad4d5d0df6d45bda6b7c8b232402246a7b16c3e2768b31eb746421907459d1f099ccc84acb0e21fa2cdd23d90a16117568666f0af08f6b6bfaf54e2cb1847a69467fb6d63dd26b036e32024f812ab2c22bde75ef47fe9f709e129deab20dbb501aa8672cfd0f175b807eb836f5f373518224faf95c84cea89bcb380077f59af28989535c876de01c7ae6211a069c89746bbd999c4117faf5c3e4e4a56c6ec931d89ba6bc00f5508af6eba6663f2858bf7de4c7b9b0e91524503e9498ae444eaa6b0bcb42e7ffe9f0214ca4bb0f20ee268e7444d584caeb0c5d1175ffb9396629f63eda6e95ca592fd70265af8ef7e0caf1ca31a07d54855b52d8dfff8c3db6e23d81d4926609f6e17a83134966a2f4f7c734cfe192bdbf95b242d6f72d94b7d57122f7f881a3bbad070a805fc3132c378d7de4ef0b3ed69a93361b7fb4ae3951f52afd2da040262c79e7f3c1586934f323d8ad54e5ffaf541b79ba6616fa2a94c8892174704664419992148d2c5eea8add371487681f444626d6c8887754c1fe8b95add707f80672574cd5571520ccd9b406ef31d1f8ca05a5680276e18157e4696c83a2af6090c29e553082110920da5f94eab716add6f16e8164c62b83f0d4e999a069764b54bf6c95992d50211183d1e9bc2f568f2634cbda537e192ce6d695cb5daa23cf59e62ec7f7f30248cf8834811d588862d6532d2e29ab958d7d5ae9f3e968b0d3afc7886ac68c729f962ddeb08ccfbb84afad64f0f7d4a28ba6b73162bb899725bebe442f597d31f5788987364404f324ea6f39768d14e3ce1f85c26f4e3aeca515e59c77b073ab981a829d210dbdb30f312385ccdc7e660b43e14180e6a42941da1bd1a69ddf693b64a5ab8b6b9700a132d8a5bb2388e7fe4e8356a581df95891970244aafd39e88c92964fb9f9e6772640167a67987dc8f8a12596bdc2d033cfc3937a7b883a0934382c2de5bcba14ed12fd43c40e38fcd5a3a82c6c1e8c62e09567027b75aba9fd472f8e393fdee44f4ef8aa4961123eb139a0d2446439c37aba11becf45a1aa3a152942f679fc21dc41dca136c6462cb7aa824db3d1d4dd9eccd3ed39568d3ed4dfb3fb1ac9a52c5f800061c0274d1c04a0239a9f373cfa475d1fa08ac07f490b1352b75383f5482311bd0b92f12b7971e6fc762a4dace4c54c2719e251b0cc3991050f310cc8e710068be7c773cb1627b580372b474c6aaf1aba6981643215a030a1510617962e9d68c5da79eca732010d5c8a284ed3abb4e3ae3251ae69b1335dc013b958d1e6c24ada73fc96481d7dabf5362293fdf8e9fdee85b67d1f01083adeb07bfc22cb39117b3f20ece7dcb280c0be353cb12058f6ac2e8c96c4179583872964e29070a742f2d38af2faf7b9d6008a6bb9af6f4b74b3c60fcab31f0c5c7a1fc55173b673d50091e62d6db71880bbe17d1160053e06373fb957e6d82a6d93d0e9253cb24cb5b4ea39ac0ebc4c13795e01b22e6a6856595a04a5396e2431becf5d84a02f6d940ab4d86c533da67470089205b0fad6960e3c7ac315b871f53f0e4ba2d3ca49f81f19a49bba9891e83033a5cc09f3e3889d38409e9dc4890590890426ff87657559b9d6cb8cec712346dd19af99e20a81bbbb725cfc0eca9980b0da67811252a87b07039feb5ba99f84b4f7681323452c12458b275fc9c5a78e06120dc4f10b124aac5dacedd33f1c52ed1abe90306ce62be50d2770ae270d397777b536d44de3425e671b16a90fdafdef476e4b3217b9979dc0b4eb778a5025ca745220d5af51ff2b5e7d83bbb031e327d29585337a074f8c1a1036a1ff44bea1ae27265d183b59fb3de254bc8bd28a0fef75981d47a3c8305fd545fc037b91a28dd0967da96100a2cb16e3fa97d513f33387581ae97f52da0a7a169d52dfb766829e378d3cb34744f2c0efdd62f432e2d0208072971de5586031da8f7855d34b0d4ae86973e3fa6d6f9daaa264aca03fc0412146e47515e47a4614880fc3eaaa511ee7bd03c78d4ebcadd66df5b70fab0e775c465e89c26d68c46c14ecbe9eb5c1c04f2339d103d9b9463d877f45deb94d5e68741bc58bdc009fb29e03e07d6904a0dd3da922c0a5c1a45981ab739761c64b60fbb7fc15a40cc0cc4a06cffeb73819550d7ce23d842418d269238f96586e624b1ac38de7a5a87d7e8bf68ee25f23f560be44f536707901fce922b002e3de5f477f43b459e691f209fa4002fbfef27fe64f503a8743234accffd213f60d6c3d4fe1e26d27106d8e35f04711e4d944a74dcbeffa1138f778313f2e0eb13477e293758373f2f09cd9a91a4b06c52c080cd2cd385c081ef47eee16a2e1a3e4fd2ba540cfdd4dff12a8fbdee4237bfdc460708edaef39fe50dd83cb0c7fdc7cb01209ce5311f40811c266486324c55b5de241a64e7d937709135cfe0d2ce23471dbb422bbc7094468571ac68d1fdee2d04ce5dde9658f62a79d7c33b15abd97089e92e7bf54ee32f2bdb3241b2c2471d9476db3a432f31943e82c75e98b84e61f4b4caa299f27b8bb83d29800a195a8563363562d1e3a35528640bda8596bfd0dc435dda470da3397f9a023f66c377aa9153395629612b0f1a89b09d53de2336d3da20e08f7c848080ec2575007ee6a5f9d12ff33e188758de149e6222a49c77ed9dac7c33f863b592e1a2073dcb06f5bae4faba0ed7f20e2e19624ecc506a491a01a1a70f08c67f43a6af182449431c583995ea1d0700915f69383a3f816af851c7b6a0e3dc94478677ae69ab3e65f0af7af46719a56f6d8f1afc93ca617958bde64d8c433c5f3a8d392c553e067ff8f5a353816a62468d212f98f732d4f9f23f183ca530f5a09b8bc258c07ac051ea5e05b96af4c939ae0d92ba8eb2ad732e9259dcc4d66a05bdda00d1924783146a66e7e767b3d68e10ef90b51edef5ad306cea77f2bb8ea4ac5052444ae25b260adeaf1df0065169be7f17b5b978dde0dc60a00eb81783a1f81bdf2a1d9c3e52a5cb24b2ee0367bfc60da67f5d6e6504cdcaaa7d67d2b8730e30c7d307504797dccef882fbd09bfff4d56174ce076c08ecea32d836ffac40122ecebd637e8c3f92487ff7a54f843bfb2c13a4d057841f06f05658bbbd8e0dd874bf6daa598c16b56d2e86b541f66c0bca99698f55be86e41ae6d32ba648ae3d0720beac001c22fa26eab9d24cc52ba6286ea35a6f7c5651b34ab050554a54701cde1dda2ef2b03ffa4805eb98d0daad74c77220bd428c520afaeaea89354b56d47118edda08625252adbdc39d0dda96f3aae0a3616bcb3226a913a4d7471d13819bf8871ccc23b1ffc9c90e4ab1b81d84138d5af6bbccb0f30c2b123eea819599b158687cbffa74533cda52e84818e07be33dc2d6ea9f475996c74be17ff2770437278977c8eb6703ff0d4e4b750e9b733ca1599e1018741f2bd2c90974d57e8fd7a0db927f169a3f248802972bbb5b9cdf6b1142a2c2136d685f8621d405bbe75288a54f3d2918d71f4a96d444e6ecec13218f4ff60403521aaabaada5acfeec6da1a75a5bb440c814a1e1029957dd56696f8bfd6b663cfcc791c9da12446f4dd886c7a3b398af8b4835cd5755dbb4d955195c5b99eb0207b0e8e9c82d18602522311e5f22323bccff620390f8a2da70d004e24e54601f38a03900fffd4767d01fff1eaae064c1d57a2a7d071ed53e4219922b5b15bf63ca3c6efa03ea4c43e0ddd3071a47a52bb5ad771fdc78988e27543f0a15efee8dcd2f00b1bced05f2e04c758546eb55062e41fd7a226f8fe107b955057f24f957517bf1c8ddef225eedb88684b4c51bf7233d1bd91b72325496459018b8725c773a4edc9f863924d73ac6fd074f94478e371f5663eee19a126266b0f70a530af4c355871c4f475317b3c01b72d7e6d2d2fcd5167b56ad998160613ca81363479e73a14aa18d43ac85ac14cded173dfdafbbf46ce14e150d7182f2a9de4cc3ba8906e303f25b652e5073470072e9724e58308e662adf3438e3fa8fb186dce5074d22a02a094c3f35a9fb2f7c05ff704e8609f27285c52aa470d6747a6f9b0032170c86ca7fc85b8ef21c60f4c01d0c55baabcf2807cade98c00b52fe9149a79ab0269f98005427ce6cff40421a127741413a8af29ebf9784f99cc1f0d7f0121d7baf41e6d5c23f83117c004072d2a3d6f8201a893c79950da7727b127c3f81750e034f4f5ac39d08cc06eead0dd8b3e6afb315a0c5e89e19a0ba7788d3f1efdba124fe6b38e2e1599e4a8af027bff5ba0ef3d0a4d3925de2c6535519b982ef5af2fece9f1fef2b2c2959003cce2829fd86c2fba3e2cc489e486517250f8fda506a171b7b8eb553d1f5c30b97f81c76dc91a8507ad73642511a6394d64f69ed75a172da4913cf8c3325509b360ce29125cf61c3812da3a31d8c136aba797065ad4b4e9bbb4d980a99f1485d3c1e2234afbd5f415322d5a30f674736bc505a080e5d6a94b9f034e33fbde23c705db37ce267af88a328f9f7023f3c0423916e73977ae1748bf19b07ff55189ce09bb755d3f3f5d9bfedf3977dc62b0f2b9c879106a0348f148d27c6d9ee8545832dc4e5ac2bbc7a6e2cd35b2b302146f9c3fdc740b4deb3c75db2ee91faec30fdcfbe47f50ae322798da772c26058a08f704cb94d0c89e59981c2b5bcd07edad9ce7e9de77e2f1aa8ba922280c26eea19f44184a038d59f9b2a1bf120d90e621e75a3d669888a6e7e69705066345c7402a24b276a9fe72f6dca1e8a5a04db7f06ae363cc0717788569fc1690e93868d44496f2a2f9871ac640e704f29c9a1e058d2b76e14693fbb7c0a63a57b1ce4f23b88e1dcbdb5a16333af8703f482ae48a9a6c2a9613eecd0bf99246dc6394c94c34d42bbca0507da92ef682fa0fe6fb90a2201bdf9a16c53f9511c3f77d5c9930b7b9be96ce079c059874981899a261fd049a8dd4cb2705c97df6bbf86e44083d6cdd45e96d2ca547bc354a2c72b7063600c3b3f087b3fd051", 0xe00}], 0x6, 0x0, 0x110}, 0x40000) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.158402993s ago: executing program 1 (id=15454): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000200)}, 0x20) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000000000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x80000, 0xca, 0x9, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x9a) 1.132894054s ago: executing program 0 (id=15455): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./cgroup\x00', 0x0, 0x8}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socket$kcm(0xa, 0x3, 0x106) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x88, 0xa, &(0x7f00000002c0), 0x4) unlink(&(0x7f0000000200)='./cgroup\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 802.539555ms ago: executing program 0 (id=15456): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000500)=r1, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10100) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8cffffffffffffff}, 0x3b35}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x18, 0x0, 0x2) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000800000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r5, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x40, 0x110, 0x2, "c8487de08683b22f78b0b8e9eec5a72e82ce5a3a8a32e4fcb9cbbcc9fa0dc113481c1c5e8e12f101b0769271b246"}, {0x30, 0x111, 0x4, "bb5368282c62339738430d5d34368966ef467e6ea9cdfa97c1836b"}, {0x18, 0x11, 0x4, "6b555b9f5f"}, {0xa8, 0x10b, 0x5, "adfee51f5f285b5787436a375743768f01631a8cb82f9cb88531e2d494f40caff77b75624131d8994f5392c9ffe489547475f4e340ec189e69f904277e1d31e30eadbba3fc95ffb02a206e3a4d460cd8a8fef145f2dd3692f2c35ee09e42cf17537d35eab6d7cdc34aa8f5d79c0c7749b98c3f980b0725e3928f2e36944aa71d188fdbece27a198612e684c6ac4035a24a7b"}, {0x88, 0x102, 0x5, "fd7d1462da3a3346c416368595ec22abe62dc680bb936ca39a988523ee6e023cc7b121edcb2f05fa9f8dd9087c4e3eaf8d4db247e52a2d6b682be3024cf6960363c41dad3950bf4fe9568df47a353ac84c03d348feae1a0ed2818126c7159dfcb8ee1339a5ff690d744539f03f4d52f6fe2c56fb1d3b"}], 0x1b8}, 0x4041) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 728.784617ms ago: executing program 2 (id=15457): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540)}, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r4, 0x6, 0xc, &(0x7f0000000500)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x23, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x6}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x0) 122.445327ms ago: executing program 3 (id=15458): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4a, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcde, 0x43a1bd76, 0x7, 0x9, 0x400006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003080)={r0, 0x0, 0xf00, 0x1000, &(0x7f0000000f00)="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", &(0x7f0000001f00)=""/4096, 0xfff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002f80), 0x6, 0x0, 0xba87}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6, 0x9c, &(0x7f0000000000)=""/156}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000800) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000900)="c1dfb080cd21d3", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6, 0x80, 0x0, 0x0, &(0x7f0000001a00)=""/108, 0x6c}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x261) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x894b, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) 0s ago: executing program 1 (id=15459): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./cgroup\x00', 0x0, 0x8}, 0x18) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r4 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, &(0x7f00000002c0), 0x4) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) kernel console output (not intermixed with test programs): 911] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13424'. [ 2770.995025][T11909] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13425'. [ 2771.409290][T11921] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13432'. [ 2771.497799][T11928] netlink: 'syz.0.13434': attribute type 10 has an invalid length. [ 2771.985802][T11939] netlink: 'syz.2.13437': attribute type 2 has an invalid length. [ 2771.996748][T11939] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13437'. [ 2772.096935][T11942] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13439'. [ 2772.935048][T11972] netlink: 'syz.1.13451': attribute type 2 has an invalid length. [ 2773.971503][T12000] netlink: 'syz.3.13465': attribute type 2 has an invalid length. [ 2774.294647][T12019] netlink: 'syz.1.13469': attribute type 2 has an invalid length. [ 2774.599445][T12025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2774.878864][T12039] __nla_validate_parse: 9 callbacks suppressed [ 2774.878889][T12039] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13482'. [ 2774.987775][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.994328][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.030608][T12037] netlink: 'syz.3.13480': attribute type 2 has an invalid length. [ 2775.040913][T12037] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13480'. [ 2775.094499][T12044] netlink: 'syz.1.13484': attribute type 2 has an invalid length. [ 2775.105166][T12044] netlink: 'syz.1.13484': attribute type 8 has an invalid length. [ 2775.126246][T12044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13484'. [ 2775.341552][T12047] netlink: 'syz.2.13485': attribute type 2 has an invalid length. [ 2775.364366][T12047] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13485'. [ 2775.491952][T12051] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13486'. [ 2775.838431][T12065] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13492'. [ 2775.881889][T12067] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13493'. [ 2776.102162][T12072] netlink: 'syz.1.13496': attribute type 2 has an invalid length. [ 2776.114111][T12072] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13496'. [ 2776.611454][T12086] netlink: 'syz.2.13499': attribute type 2 has an invalid length. [ 2776.620289][T12086] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13499'. [ 2776.809860][T12092] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13502'. [ 2777.575478][T12109] netlink: 'syz.3.13508': attribute type 2 has an invalid length. [ 2777.938953][T12122] netlink: 'syz.0.13512': attribute type 2 has an invalid length. [ 2778.779031][T12139] netlink: 'syz.0.13522': attribute type 2 has an invalid length. [ 2779.545729][T12161] netlink: 'syz.3.13526': attribute type 2 has an invalid length. [ 2780.046890][T12170] __nla_validate_parse: 9 callbacks suppressed [ 2780.046930][T12170] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13530'. [ 2780.261608][T12178] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13534'. [ 2780.643805][T12189] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13537'. [ 2781.107803][T12203] netlink: 'syz.2.13539': attribute type 2 has an invalid length. [ 2781.116579][T12203] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13539'. [ 2781.667401][T12206] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13542'. [ 2781.837506][T12210] netlink: 'syz.3.13541': attribute type 2 has an invalid length. [ 2781.870486][T12210] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13541'. [ 2781.972650][T12214] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13545'. [ 2782.252647][T12227] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13550'. [ 2782.346385][T12229] netlink: 'syz.3.13554': attribute type 2 has an invalid length. [ 2782.362114][T12229] netlink: 'syz.3.13554': attribute type 8 has an invalid length. [ 2782.371098][T12229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13554'. [ 2782.484570][T12231] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13553'. [ 2782.816069][T12237] netlink: 'syz.1.13555': attribute type 2 has an invalid length. [ 2782.921427][T12244] netlink: 'syz.3.13556': attribute type 2 has an invalid length. [ 2783.692659][T12268] netlink: 'syz.0.13565': attribute type 2 has an invalid length. [ 2783.703478][T12268] netlink: 'syz.0.13565': attribute type 8 has an invalid length. [ 2783.792706][T12271] netlink: 'syz.1.13566': attribute type 2 has an invalid length. [ 2783.872106][T12257] delete_channel: no stack [ 2784.153927][T12273] netlink: 'syz.3.13568': attribute type 2 has an invalid length. [ 2785.077867][T12303] __nla_validate_parse: 14 callbacks suppressed [ 2785.077888][T12303] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13576'. [ 2785.150544][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13579'. [ 2785.161835][T12305] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13579'. [ 2785.173981][T12307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13578'. [ 2785.529819][T12309] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13580'. [ 2785.723667][T12304] delete_channel: no stack [ 2785.742479][T12313] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13581'. [ 2785.885255][T12317] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13583'. [ 2786.324953][T12329] validate_nla: 4 callbacks suppressed [ 2786.324976][T12329] netlink: 'syz.3.13586': attribute type 2 has an invalid length. [ 2786.385267][T12329] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13586'. [ 2786.736967][T12341] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13591'. [ 2786.770234][T12346] netlink: 'syz.2.13589': attribute type 2 has an invalid length. [ 2786.801436][T12346] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13589'. [ 2786.891008][T12343] netlink: 'syz.0.13599': attribute type 2 has an invalid length. [ 2788.214132][T12377] netlink: 'syz.0.13603': attribute type 2 has an invalid length. [ 2788.261517][T12380] netlink: 'syz.3.13604': attribute type 2 has an invalid length. [ 2788.720347][T12389] netlink: 'syz.3.13607': attribute type 3 has an invalid length. [ 2789.063708][T12383] delete_channel: no stack [ 2789.337141][T12405] netlink: 'syz.0.13613': attribute type 2 has an invalid length. [ 2790.364634][T12427] netlink: 'syz.2.13621': attribute type 3 has an invalid length. [ 2790.372976][T12427] __nla_validate_parse: 17 callbacks suppressed [ 2790.373013][T12427] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13621'. [ 2790.439623][T12427] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.13621'. [ 2791.143283][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13624'. [ 2791.163224][T12434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13624'. [ 2791.246843][T12441] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13626'. [ 2791.373445][T12445] netlink: 'syz.0.13633': attribute type 2 has an invalid length. [ 2791.425220][T12445] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13633'. [ 2791.454463][T12436] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13625'. [ 2791.715412][T12454] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13629'. [ 2791.783544][T12433] delete_channel: no stack [ 2792.079820][T12463] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13632'. [ 2792.590554][T12470] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13637'. [ 2792.642248][T12471] netlink: 'syz.0.13636': attribute type 3 has an invalid length. [ 2792.798625][T12473] netlink: 'syz.1.13638': attribute type 2 has an invalid length. [ 2792.886051][T12475] netlink: 'syz.2.13639': attribute type 6 has an invalid length. [ 2794.189864][T12505] netlink: 'syz.0.13650': attribute type 2 has an invalid length. [ 2795.018971][T12515] netlink: 'syz.1.13651': attribute type 3 has an invalid length. [ 2795.199523][T12520] netlink: 'syz.2.13655': attribute type 10 has an invalid length. [ 2795.584858][T12532] __nla_validate_parse: 14 callbacks suppressed [ 2795.584892][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13661'. [ 2795.601224][T12532] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13661'. [ 2795.932374][T12531] delete_channel: no stack [ 2796.455301][T12552] netlink: 'syz.1.13666': attribute type 2 has an invalid length. [ 2796.467899][T12551] netlink: 'syz.3.13667': attribute type 10 has an invalid length. [ 2796.480643][T12552] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13666'. [ 2797.196006][T12557] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13669'. [ 2797.233803][T12557] netlink: 'syz.1.13669': attribute type 6 has an invalid length. [ 2797.253848][T12557] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13669'. [ 2797.323052][T12562] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13670'. [ 2797.336472][T12561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13671'. [ 2797.612133][T12570] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13672'. [ 2797.722762][T12576] netlink: 'syz.0.13676': attribute type 10 has an invalid length. [ 2797.841757][T12578] netlink: 'syz.0.13677': attribute type 2 has an invalid length. [ 2797.849978][T12578] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13677'. [ 2798.956968][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13683'. [ 2799.284729][T12596] delete_channel: no stack [ 2799.336094][T12606] netlink: 'syz.3.13685': attribute type 10 has an invalid length. [ 2799.653988][T12614] netlink: 'syz.0.13686': attribute type 2 has an invalid length. [ 2800.733644][T12633] netlink: 'syz.2.13696': attribute type 10 has an invalid length. [ 2801.434156][T12652] netlink: 'syz.3.13700': attribute type 2 has an invalid length. [ 2801.522288][T12652] __nla_validate_parse: 4 callbacks suppressed [ 2801.522308][T12652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13700'. [ 2801.831634][T12655] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13701'. [ 2801.997785][T12663] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13703'. [ 2802.161656][T12667] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13704'. [ 2802.198223][T12668] netlink: 'syz.3.13705': attribute type 2 has an invalid length. [ 2802.207371][T12668] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13705'. [ 2802.228495][T12670] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13706'. [ 2802.392111][T12677] netlink: 'syz.1.13707': attribute type 10 has an invalid length. [ 2803.229577][T12688] netlink: 'syz.2.13711': attribute type 2 has an invalid length. [ 2803.242396][T12688] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13711'. [ 2803.448318][T12697] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13714'. [ 2803.735662][T12706] netlink: 'syz.1.13716': attribute type 10 has an invalid length. [ 2803.993740][T12717] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13719'. [ 2804.145035][T12716] netlink: 'syz.2.13721': attribute type 2 has an invalid length. [ 2804.154353][T12716] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13721'. [ 2804.342663][T12727] netlink: 'syz.3.13724': attribute type 10 has an invalid length. [ 2805.293795][T12724] delete_channel: no stack [ 2805.478131][T12741] netlink: 'syz.2.13727': attribute type 10 has an invalid length. [ 2807.195965][T12767] __nla_validate_parse: 5 callbacks suppressed [ 2807.196004][T12767] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13736'. [ 2807.204549][T12768] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13744'. [ 2807.252396][T12769] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13743'. [ 2807.340721][T12774] netlink: 'syz.2.13737': attribute type 10 has an invalid length. [ 2807.890904][T12782] netlink: 'syz.2.13740': attribute type 2 has an invalid length. [ 2807.951957][T12782] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13740'. [ 2808.414802][T12792] netlink: 'syz.1.13746': attribute type 10 has an invalid length. [ 2808.497766][T12792] team0: Device wg1 is of different type [ 2808.768610][T12797] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13748'. [ 2809.825892][T12804] netlink: 'syz.1.13749': attribute type 10 has an invalid length. [ 2809.950160][T12812] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13751'. [ 2809.990527][T12815] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13752'. [ 2810.089850][T12813] netlink: 'syz.1.13753': attribute type 2 has an invalid length. [ 2810.098201][T12813] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13753'. [ 2810.501757][T12826] netlink: 'syz.1.13766': attribute type 10 has an invalid length. [ 2810.523699][T12826] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13766'. [ 2810.538895][T12828] netlink: 'syz.2.13758': attribute type 10 has an invalid length. [ 2810.922169][T12836] netlink: 'syz.2.13761': attribute type 10 has an invalid length. [ 2810.946017][T12834] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.13760'. [ 2811.545686][T12845] netlink: 'syz.0.13764': attribute type 2 has an invalid length. [ 2812.961333][T12840] delete_channel: no stack [ 2813.192727][T12869] netlink: 'syz.0.13772': attribute type 10 has an invalid length. [ 2813.211099][T12868] __nla_validate_parse: 4 callbacks suppressed [ 2813.211143][T12868] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13773'. [ 2813.241497][T12870] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13771'. [ 2813.568077][T12881] netlink: 'syz.3.13776': attribute type 2 has an invalid length. [ 2813.597524][T12881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13776'. [ 2814.075820][T12883] netlink: 'syz.0.13777': attribute type 2 has an invalid length. [ 2814.084580][T12883] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13777'. [ 2814.342812][T12894] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13787'. [ 2815.219474][T18786] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2815.663072][T12905] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13781'. [ 2815.684517][T12904] netlink: 'syz.1.13783': attribute type 10 has an invalid length. [ 2815.915616][T12913] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13788'. [ 2816.007493][T12914] netlink: 'syz.2.13789': attribute type 2 has an invalid length. [ 2816.016307][T12914] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13789'. [ 2816.230314][T12920] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13791'. [ 2819.625525][T12936] netlink: 'syz.0.13804': attribute type 10 has an invalid length. [ 2819.649403][T12936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13804'. [ 2819.688509][T12938] netlink: 'syz.1.13796': attribute type 10 has an invalid length. [ 2820.206784][T12947] netlink: 'syz.1.13799': attribute type 2 has an invalid length. [ 2820.242313][T12947] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13799'. [ 2821.056775][T12950] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13800'. [ 2821.166807][T12958] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13801'. [ 2821.180135][T12959] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13803'. [ 2822.099713][T12966] netlink: 'syz.0.13808': attribute type 10 has an invalid length. [ 2822.451684][T12975] netlink: 'syz.0.13811': attribute type 2 has an invalid length. [ 2822.461098][T12975] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13811'. [ 2822.586960][T12982] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13813'. [ 2823.292213][T12991] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13815'. [ 2823.328971][T12994] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13816'. [ 2823.787855][T13002] netlink: 'syz.1.13820': attribute type 10 has an invalid length. [ 2824.050892][T13009] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13822'. [ 2824.247659][T13011] netlink: 'syz.2.13824': attribute type 2 has an invalid length. [ 2825.114335][T13021] netlink: 'syz.1.13835': attribute type 2 has an invalid length. [ 2825.153277][T13021] __nla_validate_parse: 2 callbacks suppressed [ 2825.153322][T13021] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13835'. [ 2825.224150][T13028] netlink: 'syz.2.13829': attribute type 10 has an invalid length. [ 2825.787648][T13037] netlink: 'syz.2.13832': attribute type 2 has an invalid length. [ 2825.843000][T13037] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13832'. [ 2825.953565][T13043] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13834'. [ 2826.034938][T13045] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13836'. [ 2826.407784][T13051] netlink: 'syz.0.13838': attribute type 2 has an invalid length. [ 2826.415828][T13051] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13838'. [ 2826.731098][T13054] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13839'. [ 2826.878456][T13058] netlink: 'syz.2.13841': attribute type 10 has an invalid length. [ 2827.679620][T13069] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13851'. [ 2828.187508][T13079] netlink: 'syz.0.13846': attribute type 2 has an invalid length. [ 2828.198652][T13079] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13846'. [ 2828.391477][T13085] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13848'. [ 2828.669507][T13089] netlink: 'syz.1.13850': attribute type 2 has an invalid length. [ 2828.678676][T13089] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13850'. [ 2829.177678][T13099] netlink: 'syz.0.13862': attribute type 2 has an invalid length. [ 2829.619119][T13114] netlink: 'syz.3.13868': attribute type 10 has an invalid length. [ 2829.657448][T13110] openvswitch: netlink: Key type 4112 is out of range max 32 [ 2829.938848][T13121] netlink: 'syz.0.13870': attribute type 21 has an invalid length. [ 2830.906873][T13137] __nla_validate_parse: 5 callbacks suppressed [ 2830.906909][T13137] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13866'. [ 2831.156428][T13139] netlink: 'syz.3.13867': attribute type 2 has an invalid length. [ 2831.169408][T13139] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13867'. [ 2831.421879][T13149] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13871'. [ 2831.871257][T13162] netlink: 'syz.2.13877': attribute type 21 has an invalid length. [ 2831.881573][T13162] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13877'. [ 2832.216393][T13169] netlink: 'syz.2.13881': attribute type 2 has an invalid length. [ 2832.224887][T13169] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13881'. [ 2832.461685][T13174] netlink: 'syz.1.13883': attribute type 2 has an invalid length. [ 2832.471988][T13174] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13883'. [ 2832.510209][T13180] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13884'. [ 2833.044396][T13198] netlink: 'syz.1.13891': attribute type 21 has an invalid length. [ 2833.054225][T13198] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13891'. [ 2833.069717][T13199] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13892'. [ 2833.398057][T13204] netlink: 'syz.3.13894': attribute type 2 has an invalid length. [ 2833.406513][T13204] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13894'. [ 2833.664873][T13210] netlink: 'syz.3.13896': attribute type 2 has an invalid length. [ 2834.653538][T13234] netlink: 'syz.1.13907': attribute type 2 has an invalid length. [ 2835.037670][T13244] netlink: 'syz.3.13911': attribute type 10 has an invalid length. [ 2835.276464][T13250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.913277][T13261] netlink: 'syz.3.13918': attribute type 21 has an invalid length. [ 2835.928931][T13261] __nla_validate_parse: 6 callbacks suppressed [ 2835.928972][T13261] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13918'. [ 2836.294998][T13270] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13920'. [ 2836.429226][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.436678][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.451759][T13274] netlink: 'syz.1.13922': attribute type 10 has an invalid length. [ 2836.645967][T13282] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13923'. [ 2836.864366][T13286] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13924'. [ 2837.593480][T13296] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13928'. [ 2837.828212][T13301] netlink: 'syz.1.13931': attribute type 21 has an invalid length. [ 2837.926711][T13301] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13931'. [ 2838.034563][T13307] netlink: 'syz.3.13933': attribute type 10 has an invalid length. [ 2838.400314][T13314] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13936'. [ 2838.457426][T13311] netlink: 'syz.3.13934': attribute type 21 has an invalid length. [ 2838.484860][T13311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2838.492504][T13311] IPv6: NLM_F_CREATE should be set when creating new route [ 2838.500801][T13311] IPv6: NLM_F_CREATE should be set when creating new route [ 2838.508678][T13311] IPv6: NLM_F_CREATE should be set when creating new route [ 2838.776523][T13323] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13939'. [ 2839.089667][T13329] netlink: 'syz.0.13942': attribute type 10 has an invalid length. [ 2839.200433][T13331] netlink: 'syz.2.13943': attribute type 21 has an invalid length. [ 2839.246560][T13331] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13943'. [ 2839.435421][T13338] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13945'. [ 2840.478939][T13352] netlink: 'syz.0.13948': attribute type 21 has an invalid length. [ 2840.500940][T13352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2840.509225][T13352] IPv6: NLM_F_CREATE should be set when creating new route [ 2840.518745][T13352] IPv6: NLM_F_CREATE should be set when creating new route [ 2840.527071][T13352] IPv6: NLM_F_CREATE should be set when creating new route [ 2841.017712][T13365] netlink: 'syz.3.13953': attribute type 10 has an invalid length. [ 2841.038920][T13369] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13952'. [ 2841.516109][T13385] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13959'. [ 2841.544558][T13384] netlink: 'syz.1.13961': attribute type 21 has an invalid length. [ 2841.553591][T13384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2841.561098][T13384] IPv6: NLM_F_CREATE should be set when creating new route [ 2841.569123][T13384] IPv6: NLM_F_CREATE should be set when creating new route [ 2841.576709][T13384] IPv6: NLM_F_CREATE should be set when creating new route [ 2841.788362][T13391] mac80211_hwsim hwsim90 .3ãc¤±: renamed from wlan1 [ 2841.801526][T13391] netlink: 'syz.0.13963': attribute type 21 has an invalid length. [ 2841.809988][T13391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13963'. [ 2841.826947][T13393] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13970'. [ 2842.690555][T13406] netlink: 'syz.3.13966': attribute type 10 has an invalid length. [ 2843.255221][T13420] netlink: 'syz.2.13971': attribute type 21 has an invalid length. [ 2843.274069][T13420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2843.281829][T13420] IPv6: NLM_F_CREATE should be set when creating new route [ 2843.290185][T13420] IPv6: NLM_F_CREATE should be set when creating new route [ 2843.298318][T13420] IPv6: NLM_F_CREATE should be set when creating new route [ 2844.339563][T13434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13975'. [ 2844.721906][T13447] netlink: 'syz.2.13978': attribute type 10 has an invalid length. [ 2844.736458][T13448] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13977'. [ 2844.927618][T13456] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.13983'. [ 2845.187633][T13456] netlink: 'syz.3.13983': attribute type 10 has an invalid length. [ 2845.198893][T13456] macvlan0: entered promiscuous mode [ 2845.206257][T13456] macvlan0: entered allmulticast mode [ 2845.719083][T13464] netlink: 'syz.3.13986': attribute type 4 has an invalid length. [ 2845.730161][T13464] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13986'. [ 2845.755863][T13467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13993'. [ 2846.246287][T13477] netlink: 'syz.3.13987': attribute type 33 has an invalid length. [ 2846.254844][T13477] netlink: 160 bytes leftover after parsing attributes in process `syz.3.13987'. [ 2846.490134][T13483] netlink: 'syz.2.13999': attribute type 9 has an invalid length. [ 2846.499790][T13483] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.13999'. [ 2846.602161][T13487] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13991'. [ 2846.917665][T13495] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.13996'. [ 2846.942776][T13497] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14004'. [ 2847.077394][T13495] netlink: 'syz.1.13996': attribute type 10 has an invalid length. [ 2847.086685][T13495] macvlan0: entered promiscuous mode [ 2847.106602][T13495] macvlan0: entered allmulticast mode [ 2847.168517][T13504] netlink: 'syz.0.13997': attribute type 4 has an invalid length. [ 2847.193032][T13504] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13997'. [ 2849.641184][T13519] netlink: 'syz.0.14002': attribute type 10 has an invalid length. [ 2849.688331][T13519] nla_validate_range_unsigned: 25 callbacks suppressed [ 2849.688377][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.732579][T13510] netlink: 'syz.1.14000': attribute type 33 has an invalid length. [ 2849.746738][T13510] netlink: 160 bytes leftover after parsing attributes in process `syz.1.14000'. [ 2849.757351][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.773589][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.787121][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.796177][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.804789][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.833470][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.845143][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.858332][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.867070][T13519] netlink: 'syz.0.14002': attribute type 11 has an invalid length. [ 2849.876563][T13519] netlink: 'syz.0.14002': attribute type 4 has an invalid length. [ 2849.902732][T13519] netlink: 'syz.0.14002': attribute type 5 has an invalid length. [ 2849.911353][T13519] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.14002'. [ 2850.142123][T13532] netlink: 'syz.1.14006': attribute type 9 has an invalid length. [ 2850.171753][T13532] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.14006'. [ 2850.196434][T13534] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14007'. [ 2851.546744][T13553] netlink: 'syz.0.14010': attribute type 10 has an invalid length. [ 2851.976110][T13553] macvlan0: entered promiscuous mode [ 2852.044900][T13553] macvlan0: entered allmulticast mode [ 2852.414870][T13564] netlink: 'syz.1.14013': attribute type 4 has an invalid length. [ 2852.432950][T13564] __nla_validate_parse: 1 callbacks suppressed [ 2852.433012][T13564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14013'. [ 2853.100854][T13573] netlink: 'syz.2.14015': attribute type 33 has an invalid length. [ 2853.151468][T13573] netlink: 160 bytes leftover after parsing attributes in process `syz.2.14015'. [ 2853.915193][T13589] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14019'. [ 2854.210945][T13598] netlink: 'syz.1.14023': attribute type 10 has an invalid length. [ 2854.277858][T13598] netlink: 'syz.1.14023': attribute type 10 has an invalid length. [ 2854.293096][T13598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14023'. [ 2854.899061][T13610] netlink: 763 bytes leftover after parsing attributes in process `syz.2.14027'. [ 2856.380808][T13614] netlink: 'syz.0.14025': attribute type 33 has an invalid length. [ 2856.390681][T13614] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14025'. [ 2857.011390][T13636] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14033'. [ 2858.110504][T13648] netlink: 'syz.0.14037': attribute type 9 has an invalid length. [ 2858.139071][T13648] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.14037'. [ 2858.554821][T13659] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14041'. [ 2858.714168][T13665] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.14042'. [ 2858.796116][T13665] netlink: 'syz.2.14042': attribute type 10 has an invalid length. [ 2858.818431][T13665] macvlan0: entered promiscuous mode [ 2858.838464][T13665] macvlan0: entered allmulticast mode [ 2859.037143][T13669] netlink: 763 bytes leftover after parsing attributes in process `syz.0.14044'. [ 2859.251881][T13671] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14045'. [ 2860.211340][T13679] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14055'. [ 2860.710233][T13689] netlink: 'syz.2.14049': attribute type 10 has an invalid length. [ 2860.729953][T13689] nla_validate_range_unsigned: 25 callbacks suppressed [ 2860.730014][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.767320][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.793272][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.810133][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.821101][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.831407][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.840836][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.850107][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.859397][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.881453][T13689] netlink: 'syz.2.14049': attribute type 11 has an invalid length. [ 2860.913613][T13689] netlink: 'syz.2.14049': attribute type 4 has an invalid length. [ 2860.943019][T13689] netlink: 'syz.2.14049': attribute type 5 has an invalid length. [ 2860.951862][T13689] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.14049'. [ 2861.167082][T13697] netlink: 'syz.3.14051': attribute type 9 has an invalid length. [ 2861.183404][T13697] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.14051'. [ 2861.836373][T13712] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14059'. [ 2862.418149][T13725] netlink: 'syz.3.14062': attribute type 10 has an invalid length. [ 2862.435179][T13725] netlink: 'syz.3.14062': attribute type 4 has an invalid length. [ 2862.447984][T13725] netlink: 'syz.3.14062': attribute type 5 has an invalid length. [ 2862.459633][T13725] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.14062'. [ 2862.508079][T13727] netlink: 'syz.0.14069': attribute type 2 has an invalid length. [ 2864.090243][T18786] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 2864.536314][T13757] __nla_validate_parse: 3 callbacks suppressed [ 2864.536454][T13757] netlink: 763 bytes leftover after parsing attributes in process `syz.3.14072'. [ 2864.703356][T13762] validate_nla: 2 callbacks suppressed [ 2864.703398][T13762] netlink: 'syz.1.14074': attribute type 2 has an invalid length. [ 2864.770774][T13762] netlink: 'syz.1.14074': attribute type 8 has an invalid length. [ 2864.823061][T13762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14074'. [ 2864.906200][T13768] netlink: 'syz.2.14075': attribute type 21 has an invalid length. [ 2864.943717][T13768] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14075'. [ 2864.966062][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14075'. [ 2865.617830][T13777] netlink: 'syz.1.14077': attribute type 10 has an invalid length. [ 2865.656699][T13777] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14077'. [ 2867.097447][T13790] netlink: 'syz.1.14083': attribute type 10 has an invalid length. [ 2867.165029][T13790] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 2867.794046][T13808] netlink: 763 bytes leftover after parsing attributes in process `syz.1.14086'. [ 2868.201444][T13807] netlink: 'syz.2.14087': attribute type 2 has an invalid length. [ 2868.271342][T13807] netlink: 'syz.2.14087': attribute type 8 has an invalid length. [ 2868.304200][T13807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14087'. [ 2868.475132][T13813] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14089'. [ 2869.043348][T13823] netlink: 'syz.3.14092': attribute type 10 has an invalid length. [ 2869.063237][T13823] netlink: 55 bytes leftover after parsing attributes in process `syz.3.14092'. [ 2871.002384][T13846] netlink: 'syz.3.14102': attribute type 21 has an invalid length. [ 2871.040782][T13846] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14102'. [ 2871.094172][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14102'. [ 2871.957982][T13857] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14104'. [ 2872.020973][T13861] netlink: 'syz.3.14107': attribute type 39 has an invalid length. [ 2872.619657][T13868] netlink: 'syz.0.14108': attribute type 10 has an invalid length. [ 2872.638497][T13868] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14108'. [ 2872.756484][T13873] netlink: 'syz.1.14118': attribute type 21 has an invalid length. [ 2872.773433][T13873] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14118'. [ 2872.796866][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14118'. [ 2873.190589][T13870] netlink: 'syz.3.14109': attribute type 10 has an invalid length. [ 2874.850103][T13909] netlink: 'syz.3.14123': attribute type 2 has an invalid length. [ 2874.868007][T13909] netlink: 'syz.3.14123': attribute type 8 has an invalid length. [ 2874.878146][T13909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14123'. [ 2875.030676][T13915] netlink: 'syz.2.14122': attribute type 10 has an invalid length. [ 2875.039575][T13915] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14122'. [ 2875.817729][T13921] netlink: 'syz.0.14125': attribute type 10 has an invalid length. [ 2875.944273][T13935] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.14131'. [ 2876.914908][T13950] netlink: 'syz.0.14136': attribute type 21 has an invalid length. [ 2876.925361][T13950] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14136'. [ 2876.936183][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14136'. [ 2877.599484][T13963] netlink: 'syz.2.14143': attribute type 10 has an invalid length. [ 2877.901716][T13977] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.14147'. [ 2878.255975][T13985] netlink: 'syz.2.14151': attribute type 21 has an invalid length. [ 2878.266551][T13985] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14151'. [ 2878.280662][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14151'. [ 2878.728840][T13997] netlink: 'syz.2.14157': attribute type 39 has an invalid length. [ 2879.522217][T14009] netlink: 'syz.1.14159': attribute type 10 has an invalid length. [ 2879.533054][T14009] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14159'. [ 2879.542553][T13994] netlink: 'syz.0.14156': attribute type 10 has an invalid length. [ 2879.686637][T14012] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.14161'. [ 2879.932448][T14020] netlink: 'syz.2.14165': attribute type 21 has an invalid length. [ 2879.953906][T14020] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14165'. [ 2879.973345][T14020] netlink: 'syz.2.14165': attribute type 5 has an invalid length. [ 2879.981238][T14020] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14165'. [ 2881.486094][T14049] netlink: 'syz.0.14175': attribute type 21 has an invalid length. [ 2881.554979][T14049] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14175'. [ 2881.662085][T14055] netlink: 'syz.1.14176': attribute type 29 has an invalid length. [ 2882.172078][T14067] validate_nla: 2 callbacks suppressed [ 2882.172098][T14067] netlink: 'syz.3.14182': attribute type 21 has an invalid length. [ 2882.188411][T14067] __nla_validate_parse: 1 callbacks suppressed [ 2882.188425][T14067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14182'. [ 2882.839631][T14088] netlink: 'syz.0.14186': attribute type 10 has an invalid length. [ 2882.880957][T14088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14186'. [ 2882.958841][T14088] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2884.774104][T14122] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.14200'. [ 2884.879413][T14125] netlink: 'syz.2.14202': attribute type 29 has an invalid length. [ 2884.908980][T14125] netlink: 'syz.2.14202': attribute type 29 has an invalid length. [ 2886.670373][T14159] netlink: 'syz.0.14216': attribute type 29 has an invalid length. [ 2886.688605][T14156] netlink: 'syz.2.14215': attribute type 10 has an invalid length. [ 2886.713322][T14156] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14215'. [ 2886.739711][T14159] netlink: 'syz.0.14216': attribute type 29 has an invalid length. [ 2888.947573][T14197] netlink: 'syz.1.14230': attribute type 10 has an invalid length. [ 2888.975095][T14202] netlink: 'syz.3.14232': attribute type 29 has an invalid length. [ 2888.983628][T14197] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14230'. [ 2889.106634][T14202] netlink: 'syz.3.14232': attribute type 29 has an invalid length. [ 2889.898118][T14225] netlink: 'syz.1.14240': attribute type 21 has an invalid length. [ 2889.993047][T14225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14240'. [ 2890.187856][T14220] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14239'. [ 2890.296180][T14234] netlink: 'syz.0.14250': attribute type 21 has an invalid length. [ 2890.313040][T14234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14250'. [ 2892.482400][T14263] netlink: 'syz.0.14255': attribute type 29 has an invalid length. [ 2892.505002][T14263] netlink: 'syz.0.14255': attribute type 29 has an invalid length. [ 2892.556320][T14269] netlink: 'syz.0.14255': attribute type 29 has an invalid length. [ 2892.581029][T14271] netlink: 'syz.0.14255': attribute type 29 has an invalid length. [ 2892.591374][T14273] netlink: 'syz.0.14255': attribute type 29 has an invalid length. [ 2894.156547][T14296] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.14266'. [ 2894.188380][T14289] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14264'. [ 2897.867264][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.873943][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.913795][T14343] netlink: 'syz.3.14283': attribute type 29 has an invalid length. [ 2897.935972][T14343] netlink: 'syz.3.14283': attribute type 29 has an invalid length. [ 2897.963453][T14342] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14284'. [ 2897.984225][T14343] netlink: 'syz.3.14283': attribute type 29 has an invalid length. [ 2898.036813][T14343] netlink: 'syz.3.14283': attribute type 29 has an invalid length. [ 2898.083952][T14343] netlink: 'syz.3.14283': attribute type 29 has an invalid length. [ 2898.658473][T14363] netlink: 'syz.3.14290': attribute type 29 has an invalid length. [ 2898.696904][T14363] netlink: 'syz.3.14290': attribute type 29 has an invalid length. [ 2898.919204][T14365] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.14291'. [ 2899.084717][T14372] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14293'. [ 2899.482448][T14387] netlink: 'syz.2.14297': attribute type 29 has an invalid length. [ 2899.500134][T14387] netlink: 'syz.2.14297': attribute type 29 has an invalid length. [ 2899.515088][T14391] netlink: 'syz.2.14297': attribute type 29 has an invalid length. [ 2899.691194][T14392] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14306'. [ 2901.071972][T14420] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.14305'. [ 2903.508528][T14455] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14320'. [ 2903.785682][T14466] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14330'. [ 2904.188607][T14471] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14322'. [ 2905.810491][T14484] validate_nla: 7 callbacks suppressed [ 2905.821000][T14484] netlink: 'syz.3.14327': attribute type 29 has an invalid length. [ 2905.858333][T14484] netlink: 'syz.3.14327': attribute type 29 has an invalid length. [ 2905.907551][T14493] netlink: 'syz.3.14327': attribute type 29 has an invalid length. [ 2906.069667][T14491] netlink: 'syz.3.14327': attribute type 29 has an invalid length. [ 2906.174714][T14484] netlink: 'syz.3.14327': attribute type 29 has an invalid length. [ 2906.938023][T14506] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14334'. [ 2907.290425][T14510] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14333'. [ 2908.034476][T14531] netlink: 'syz.2.14343': attribute type 29 has an invalid length. [ 2908.267812][T14531] netlink: 'syz.2.14343': attribute type 29 has an invalid length. [ 2908.327331][T14532] netlink: 'syz.2.14343': attribute type 29 has an invalid length. [ 2908.363214][T14534] netlink: 'syz.2.14343': attribute type 29 has an invalid length. [ 2908.428518][T14536] netlink: 'syz.2.14343': attribute type 29 has an invalid length. [ 2910.570047][T14562] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.14353'. [ 2911.791139][T14580] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14358'. [ 2912.776460][T14586] validate_nla: 1 callbacks suppressed [ 2912.776483][T14586] netlink: 'syz.1.14360': attribute type 3 has an invalid length. [ 2912.854452][T14586] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.14360'. [ 2915.916252][T14639] netlink: 'syz.3.14377': attribute type 3 has an invalid length. [ 2915.933126][T14639] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.14377'. [ 2916.659099][T14662] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14383'. [ 2917.115818][T14665] delete_channel: no stack [ 2917.386183][T14676] netlink: 164 bytes leftover after parsing attributes in process `syz.1.14389'. [ 2917.862494][T14680] netlink: 'syz.2.14391': attribute type 3 has an invalid length. [ 2917.948103][T14680] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.14391'. [ 2918.150704][T14691] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14394'. [ 2919.538429][T14719] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14406'. [ 2919.664498][T14723] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14405'. [ 2920.846079][T14742] netlink: 196 bytes leftover after parsing attributes in process `syz.3.14416'. [ 2921.058538][T14742] netlink: 'syz.3.14416': attribute type 29 has an invalid length. [ 2921.164776][T14742] netlink: 'syz.3.14416': attribute type 29 has an invalid length. [ 2921.205135][T14748] netlink: 'syz.3.14416': attribute type 29 has an invalid length. [ 2921.215248][T14749] netlink: 'syz.3.14416': attribute type 29 has an invalid length. [ 2922.624925][T14766] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14421'. [ 2922.654307][T14769] netlink: 'syz.2.14429': attribute type 10 has an invalid length. [ 2923.003995][T14770] netlink: 'syz.2.14429': attribute type 21 has an invalid length. [ 2923.451582][T14789] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14430'. [ 2924.786440][T14809] delete_channel: no stack [ 2925.040827][T14820] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14440'. [ 2925.331129][T14827] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14445'. [ 2925.637708][T14836] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14449'. [ 2925.882105][T14847] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14453'. [ 2926.156040][T14843] delete_channel: no stack [ 2926.371467][T14858] netlink: 'syz.3.14458': attribute type 10 has an invalid length. [ 2927.018431][T14875] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14464'. [ 2927.157819][T14879] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14466'. [ 2927.297030][T14883] netlink: 'syz.1.14468': attribute type 21 has an invalid length. [ 2927.314917][T14883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2927.614357][T14890] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 2927.623296][T14890] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14470'. [ 2927.952524][T14900] netlink: 196 bytes leftover after parsing attributes in process `syz.1.14476'. [ 2927.988509][T14900] netlink: 'syz.1.14476': attribute type 29 has an invalid length. [ 2928.000786][T14900] netlink: 'syz.1.14476': attribute type 29 has an invalid length. [ 2928.016312][T14900] netlink: 'syz.1.14476': attribute type 29 has an invalid length. [ 2928.031998][T14900] netlink: 'syz.1.14476': attribute type 29 has an invalid length. [ 2928.139090][T14906] netlink: 'syz.3.14477': attribute type 29 has an invalid length. [ 2928.159526][T14906] netlink: 'syz.3.14477': attribute type 29 has an invalid length. [ 2928.175222][T14906] netlink: 'syz.3.14477': attribute type 29 has an invalid length. [ 2928.252247][T14909] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14478'. [ 2930.072273][T14917] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14481'. [ 2930.218978][T14925] netlink: 'syz.3.14482': attribute type 10 has an invalid length. [ 2930.818068][T14936] netlink: 'syz.1.14488': attribute type 9 has an invalid length. [ 2930.831191][T14936] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14488'. [ 2930.862693][T14938] netlink: 'syz.0.14489': attribute type 10 has an invalid length. [ 2931.356733][T14950] netlink: 'syz.3.14492': attribute type 10 has an invalid length. [ 2931.407205][T14953] netlink: 'syz.3.14492': attribute type 21 has an invalid length. [ 2931.581543][T14948] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14490'. [ 2932.285637][T14979] netlink: 188 bytes leftover after parsing attributes in process `syz.1.14503'. [ 2932.546201][T14983] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14505'. [ 2933.245389][T14989] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.14514'. [ 2933.311173][T14988] validate_nla: 3 callbacks suppressed [ 2933.311221][T14988] netlink: 'syz.3.14506': attribute type 9 has an invalid length. [ 2933.335066][T14988] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.14506'. [ 2933.828783][T15000] netlink: 'syz.1.14509': attribute type 10 has an invalid length. [ 2933.878872][T15000] team0 (unregistering): Port device C removed [ 2933.907705][T15000] team0 (unregistering): Port device team_slave_1 removed [ 2933.924648][T15000] team0 (unregistering): Port device hsr_slave_0 removed [ 2933.936888][T15000] team0 (unregistering): Port device geneve1 removed [ 2933.956456][T15000] team0 (unregistering): Port device bridge_slave_1 removed [ 2933.966921][T15000] team0 (unregistering): Port device macvlan0 removed [ 2933.977821][T15000] team0 (unregistering): Port device wlan1 removed [ 2934.211682][T15012] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 2934.235580][T15012] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14516'. [ 2934.360598][T15017] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14518'. [ 2934.767704][T15025] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.14520'. [ 2935.382017][T15044] __nla_validate_parse: 1 callbacks suppressed [ 2935.382058][T15044] netlink: 196 bytes leftover after parsing attributes in process `syz.0.14527'. [ 2935.419412][T15040] netlink: 'syz.2.14525': attribute type 9 has an invalid length. [ 2935.434146][T15044] netlink: 'syz.0.14527': attribute type 29 has an invalid length. [ 2935.446042][T15044] netlink: 'syz.0.14527': attribute type 29 has an invalid length. [ 2935.454167][T15040] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.14525'. [ 2935.486638][T15046] netlink: 'syz.0.14527': attribute type 29 has an invalid length. [ 2935.833676][T15044] netlink: 'syz.0.14527': attribute type 29 has an invalid length. [ 2935.983143][T15054] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.14532'. [ 2936.434165][T15061] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14535'. [ 2937.038188][T15076] netlink: 'syz.0.14548': attribute type 29 has an invalid length. [ 2937.073773][T15076] netlink: 'syz.0.14548': attribute type 29 has an invalid length. [ 2937.103165][T15076] netlink: 'syz.0.14548': attribute type 29 has an invalid length. [ 2937.240725][T15084] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.14543'. [ 2937.644633][T15088] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.14544'. [ 2939.674276][T15095] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14546'. [ 2940.043708][T15109] netlink: 10 bytes leftover after parsing attributes in process `syz.1.14554'. [ 2940.624503][T15120] netlink: 196 bytes leftover after parsing attributes in process `syz.2.14556'. [ 2940.700312][T15120] validate_nla: 2 callbacks suppressed [ 2940.700355][T15120] netlink: 'syz.2.14556': attribute type 29 has an invalid length. [ 2940.741566][T15120] netlink: 'syz.2.14556': attribute type 29 has an invalid length. [ 2940.839013][T15119] netlink: 'syz.1.14558': attribute type 9 has an invalid length. [ 2940.848884][T15119] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14558'. [ 2940.851904][T15120] netlink: 'syz.2.14556': attribute type 29 has an invalid length. [ 2940.893454][T15121] netlink: 'syz.2.14556': attribute type 29 has an invalid length. [ 2941.231681][T15123] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14559'. [ 2941.696027][T15132] netlink: 'syz.0.14560': attribute type 3 has an invalid length. [ 2941.755540][T15132] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.14560'. [ 2942.087047][T15131] netlink: 188 bytes leftover after parsing attributes in process `syz.3.14562'. [ 2942.739857][T15142] netlink: 10 bytes leftover after parsing attributes in process `syz.3.14567'. [ 2942.854911][T15148] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14569'. [ 2943.061450][T15153] sit0: left allmulticast mode [ 2943.278577][T15160] syz.2.14573 (15160) used obsolete PPPIOCDETACH ioctl [ 2943.281577][T15154] netlink: 'syz.1.14571': attribute type 9 has an invalid length. [ 2943.336404][T15154] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14571'. [ 2944.193157][T15171] netlink: 'syz.1.14584': attribute type 9 has an invalid length. [ 2944.202216][T15171] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.14584'. [ 2944.726598][T15173] netlink: 188 bytes leftover after parsing attributes in process `syz.2.14576'. [ 2945.085880][T15179] netlink: 'syz.1.14577': attribute type 29 has an invalid length. [ 2945.153102][T15179] netlink: 'syz.1.14577': attribute type 29 has an invalid length. [ 2946.573815][T15205] validate_nla: 1 callbacks suppressed [ 2946.573842][T15205] netlink: 'syz.3.14589': attribute type 6 has an invalid length. [ 2946.642938][T15205] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14589'. [ 2947.482219][T15220] sctp: [Deprecated]: syz.3.14594 (pid 15220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2947.482219][T15220] Use struct sctp_sack_info instead [ 2949.896072][T15273] sctp: [Deprecated]: syz.2.14613 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2949.896072][T15273] Use struct sctp_sack_info instead [ 2952.606737][T15317] sctp: [Deprecated]: syz.0.14630 (pid 15317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2952.606737][T15317] Use struct sctp_sack_info instead [ 2953.219837][T15329] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 2954.024409][T15349] netlink: 'syz.3.14645': attribute type 9 has an invalid length. [ 2954.036988][T15349] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.14645'. [ 2955.600743][T15372] netlink: 'syz.0.14649': attribute type 6 has an invalid length. [ 2955.637007][T15372] netlink: 140 bytes leftover after parsing attributes in process `syz.0.14649'. [ 2959.163798][T15394] netlink: 'syz.2.14658': attribute type 21 has an invalid length. [ 2959.183035][T15394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2959.347490][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.363581][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.264390][T18786] Bluetooth: hci3: unexpected subevent 0x0c length: 15 > 5 [ 2960.482735][T15430] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14671'. [ 2962.248539][T15467] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14682'. [ 2962.989361][T18786] Bluetooth: hci1: unexpected subevent 0x0c length: 15 > 5 [ 2963.897062][T15495] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14695'. [ 2964.394964][T15492] delete_channel: no stack [ 2965.069781][T15520] netlink: 'syz.1.14704': attribute type 21 has an invalid length. [ 2965.115165][T15520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2965.451964][T15526] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14707'. [ 2965.605292][T15528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14708'. [ 2965.621292][T15528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14708'. [ 2965.635735][T15528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14708'. [ 2965.800198][T15538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14712'. [ 2965.839427][T15538] bridge_slave_0: entered allmulticast mode [ 2965.899899][T15538] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.14712'. [ 2966.402632][T15547] netlink: 'syz.0.14715': attribute type 2 has an invalid length. [ 2966.419536][T15547] netlink: 'syz.0.14715': attribute type 8 has an invalid length. [ 2966.431174][T15547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14715'. [ 2966.791872][T15556] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14720'. [ 2966.963761][T15558] netlink: 'syz.0.14719': attribute type 21 has an invalid length. [ 2966.985618][T15558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2967.223049][T15568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2967.232513][T15568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2967.242648][T15568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2967.252147][T15568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2967.270936][T15568] geneve1: entered promiscuous mode [ 2967.281623][T15568] geneve1: entered allmulticast mode [ 2967.653603][T15579] netlink: 'syz.0.14728': attribute type 10 has an invalid length. [ 2967.662030][T15579] netlink: 168 bytes leftover after parsing attributes in process `syz.0.14728'. [ 2967.952066][T15589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14732'. [ 2967.972723][T15592] netlink: 'syz.1.14731': attribute type 6 has an invalid length. [ 2968.000727][T15592] netlink: 140 bytes leftover after parsing attributes in process `syz.1.14731'. [ 2968.063718][T15595] IPv6: Can't replace route, no match found [ 2971.006965][T15605] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14740'. [ 2971.041516][T15605] bridge_slave_0: entered allmulticast mode [ 2971.130935][T15605] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.14740'. [ 2971.385999][T15614] netlink: 'syz.1.14744': attribute type 27 has an invalid length. [ 2971.400826][T15614] netlink: 'syz.1.14744': attribute type 4 has an invalid length. [ 2971.411264][T15614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14744'. [ 2971.631615][T15620] netlink: 'syz.3.14746': attribute type 10 has an invalid length. [ 2971.643843][T15620] netlink: 168 bytes leftover after parsing attributes in process `syz.3.14746'. [ 2971.871181][T15627] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14748'. [ 2972.244552][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14752'. [ 2972.554437][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14756'. [ 2972.594696][T15650] netlink: 'syz.1.14757': attribute type 29 has an invalid length. [ 2972.606913][T15650] netlink: 'syz.1.14757': attribute type 29 has an invalid length. [ 2972.625013][T15650] netlink: 'syz.1.14757': attribute type 29 has an invalid length. [ 2972.642454][T15650] netlink: 'syz.1.14757': attribute type 29 has an invalid length. [ 2972.659245][T15650] netlink: 'syz.1.14757': attribute type 29 has an invalid length. [ 2972.764595][T15653] netlink: 'syz.2.14758': attribute type 10 has an invalid length. [ 2972.774048][T15653] netlink: 168 bytes leftover after parsing attributes in process `syz.2.14758'. [ 2972.784979][T15654] netlink: 'syz.1.14757': attribute type 29 has an invalid length. [ 2974.043692][T15679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2974.065324][T15679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2974.074989][T15679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2974.085269][T15679] geneve1: entered promiscuous mode [ 2974.092279][T15679] geneve1: entered allmulticast mode [ 2974.243426][T15684] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14769'. [ 2974.414967][T15692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14771'. [ 2975.886715][T15715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.896860][T15715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.908466][T15715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2975.918678][T15715] geneve1: entered promiscuous mode [ 2975.924404][T15715] geneve1: entered allmulticast mode [ 2976.351240][T15726] __nla_validate_parse: 1 callbacks suppressed [ 2976.351305][T15726] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14786'. [ 2976.583445][T15736] sit0: left promiscuous mode [ 2976.604410][T15736] sit0: entered allmulticast mode [ 2976.627461][T15736] sit0: entered promiscuous mode [ 2977.437210][T15745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.485034][T15745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.516238][T15745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2977.533348][T15745] geneve1: entered promiscuous mode [ 2977.547090][T15745] geneve1: entered allmulticast mode [ 2977.643700][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14796'. [ 2977.890619][T15760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14800'. [ 2977.925278][T15758] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14798'. [ 2977.936437][T15760] bridge_slave_0: entered allmulticast mode [ 2978.019359][T15760] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.14800'. [ 2978.151321][T15765] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14809'. [ 2979.841650][T15816] validate_nla: 2 callbacks suppressed [ 2979.841680][T15816] netlink: 'syz.0.14823': attribute type 29 has an invalid length. [ 2979.861218][T15816] netlink: 'syz.0.14823': attribute type 29 has an invalid length. [ 2979.891976][T15816] netlink: 'syz.0.14823': attribute type 29 has an invalid length. [ 2979.932334][T15816] netlink: 'syz.0.14823': attribute type 29 has an invalid length. [ 2979.967846][T15816] netlink: 'syz.0.14823': attribute type 29 has an invalid length. [ 2980.212667][T15824] netlink: 'syz.0.14823': attribute type 29 has an invalid length. [ 2980.846167][T15819] delete_channel: no stack [ 2981.582326][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14837'. [ 2982.140042][T15868] netlink: 'syz.0.14844': attribute type 39 has an invalid length. [ 2982.505834][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14850'. [ 2982.545448][T15886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14851'. [ 2983.454867][T15914] netlink: 'syz.3.14860': attribute type 39 has an invalid length. [ 2983.827893][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14864'. [ 2984.045974][T15934] sit0: left promiscuous mode [ 2984.282157][T15937] sit0: entered promiscuous mode [ 2985.104121][T15952] netlink: 'syz.2.14873': attribute type 39 has an invalid length. [ 2985.766621][T15971] sit0: entered promiscuous mode [ 2985.864232][T15973] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.14883'. [ 2986.822439][T15990] netlink: 'syz.1.14886': attribute type 39 has an invalid length. [ 2987.283837][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14892'. [ 2987.666477][T16019] sit0: left promiscuous mode [ 2987.748274][T16021] sit0: entered promiscuous mode [ 2987.973025][T16022] netlink: 'syz.2.14901': attribute type 39 has an invalid length. [ 2989.104199][T16044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14910'. [ 2989.542521][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14915'. [ 2990.038483][T16071] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14920'. [ 2991.014380][T16096] netlink: 'syz.2.14931': attribute type 10 has an invalid length. [ 2991.211502][T16098] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14932'. [ 2992.279610][T16130] sit0: left promiscuous mode [ 2992.402547][T16135] sit0: entered promiscuous mode [ 2992.855300][T16145] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.14950'. [ 2993.126807][T16143] netlink: 763 bytes leftover after parsing attributes in process `syz.3.14950'. [ 2994.352962][T16174] sit0: left promiscuous mode [ 2994.536385][T16177] sit0: entered promiscuous mode [ 2994.562348][T16181] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14965'. [ 2994.723385][T16187] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.14966'. [ 2996.334940][T16213] veth0_vlan: left promiscuous mode [ 2996.352070][T16213] veth0_vlan: entered promiscuous mode [ 2996.394767][T16194] delete_channel: no stack [ 2996.429557][T16215] sit0: left promiscuous mode [ 2996.448814][T16213] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.14975'. [ 2996.711673][T16216] sit0: entered promiscuous mode [ 2997.439224][T16227] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.14982'. [ 2998.100814][T16244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14989'. [ 2998.789630][T16262] sit0: left promiscuous mode [ 2999.461043][T16262] sit0: entered promiscuous mode [ 2999.638745][T16274] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.14997'. [ 2999.669021][T16272] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15005'. [ 3000.151781][T16285] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15009'. [ 3000.160844][T16281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15000'. [ 3000.861846][T16301] sit0: left promiscuous mode [ 3000.985192][T16302] sit0: entered promiscuous mode [ 3001.802107][T16305] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.15010'. [ 3002.456676][T16319] netlink: 'syz.0.15012': attribute type 21 has an invalid length. [ 3002.467390][T16319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15012'. [ 3002.808362][T16322] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15013'. [ 3003.424614][T16337] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 3003.431701][T16337] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 3003.629057][T16341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15025'. [ 3004.666752][T16357] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15030'. [ 3006.845421][T16400] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15042'. [ 3008.407575][T16425] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15054'. [ 3008.689499][T16435] netlink: 'syz.1.15057': attribute type 21 has an invalid length. [ 3008.719524][T16433] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15066'. [ 3008.729922][T16435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15057'. [ 3009.416471][T16454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15065'. [ 3009.615990][T16459] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15069'. [ 3009.694634][T16463] netlink: 'syz.3.15070': attribute type 21 has an invalid length. [ 3009.718962][T16463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15070'. [ 3009.917689][T16467] sit0: left promiscuous mode [ 3011.921089][T16498] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15081'. [ 3012.062184][T16502] delete_channel: no stack [ 3012.074418][T16502] delete_channel: no stack [ 3012.771251][T16515] netlink: 'syz.2.15088': attribute type 21 has an invalid length. [ 3012.781459][T16515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15088'. [ 3013.221800][T16523] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 3013.241809][T16523] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 3013.340731][T16525] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15094'. [ 3014.270353][T16544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15109'. [ 3014.761991][T16552] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 3014.779542][T16552] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 3014.927038][T16561] netlink: 'syz.0.15105': attribute type 3 has an invalid length. [ 3014.935208][T16561] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.15105'. [ 3015.062365][T16562] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15107'. [ 3015.880644][T16572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15113'. [ 3016.851345][T16593] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15121'. [ 3016.897134][T16596] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 3016.970460][T16596] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 3017.052639][T16598] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 3017.072393][T16598] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 3017.335572][T16602] netlink: 'syz.0.15124': attribute type 10 has an invalid length. [ 3019.011520][T16624] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15133'. [ 3019.100723][T16626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15132'. [ 3019.173820][T16629] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 3019.194008][T16629] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 3019.959661][T16637] netlink: 'syz.2.15138': attribute type 8 has an invalid length. [ 3020.774182][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.781127][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.094048][T16642] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15140'. [ 3021.340181][T16649] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15143'. [ 3021.464668][T16652] netlink: 'syz.2.15144': attribute type 4 has an invalid length. [ 3021.480874][T16652] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15144'. [ 3021.563179][T16656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15146'. [ 3021.733980][T16663] netlink: 'syz.1.15149': attribute type 10 has an invalid length. [ 3022.753607][T16683] netlink: 'syz.1.15154': attribute type 3 has an invalid length. [ 3022.780168][T16683] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.15154'. [ 3023.099541][T16682] netlink: 'syz.3.15155': attribute type 10 has an invalid length. [ 3023.298409][T16689] mac80211_hwsim hwsim133 wlan1: entered allmulticast mode [ 3023.431757][T16696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15159'. [ 3023.570228][T16704] delete_channel: no stack [ 3023.575023][T16704] delete_channel: no stack [ 3024.175565][T16709] netlink: 'syz.2.15162': attribute type 10 has an invalid length. [ 3024.605872][T16722] netlink: 'syz.3.15177': attribute type 10 has an invalid length. [ 3024.908255][T16731] netlink: 'syz.2.15167': attribute type 3 has an invalid length. [ 3024.955908][T16731] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.15167'. [ 3025.996823][T16747] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15174'. [ 3026.066480][T16747] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3026.099080][T16753] delete_channel: no stack [ 3026.103805][T16747] CPU: 1 PID: 16747 Comm: syz.0.15174 Not tainted syzkaller #0 [ 3026.103834][T16747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3026.103849][T16747] Call Trace: [ 3026.103858][T16747] [ 3026.103868][T16747] dump_stack_lvl+0x18c/0x250 [ 3026.103915][T16747] ? show_regs_print_info+0x20/0x20 [ 3026.103951][T16747] ? load_image+0x420/0x420 [ 3026.103998][T16747] sysfs_warn_dup+0x8e/0xa0 [ 3026.115860][T16753] delete_channel: no stack [ 3026.122222][T16747] sysfs_do_create_link_sd+0xc0/0x110 [ 3026.122262][T16747] device_add_class_symlinks+0x1cf/0x240 [ 3026.163477][T16747] device_add+0x507/0xc20 [ 3026.167886][T16747] wiphy_register+0x1dad/0x2ae0 [ 3026.172829][T16747] ? cfg80211_event_work+0x40/0x40 [ 3026.178031][T16747] ? minstrel_ht_alloc+0x88a/0x990 [ 3026.183229][T16747] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 3026.189481][T16747] ieee80211_register_hw+0x3464/0x4250 [ 3026.195048][T16747] ? ieee80211_tasklet_handler+0x20/0x20 [ 3026.200749][T16747] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3026.206718][T16747] ? __debug_object_init+0xec/0x450 [ 3026.212181][T16747] ? __asan_memset+0x22/0x40 [ 3026.217193][T16747] ? __hrtimer_init+0x186/0x270 [ 3026.222097][T16747] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3026.227872][T16747] ? mac80211_hwsim_free+0x220/0x220 [ 3026.233190][T16747] ? rcu_is_watching+0x15/0xb0 [ 3026.237992][T16747] ? kstrndup+0xbd/0x140 [ 3026.242274][T16747] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3026.247422][T16747] ? __nla_validate+0x50/0x50 [ 3026.252129][T16747] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3026.258151][T16747] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3026.264507][T16747] ? lockdep_hardirqs_on+0x98/0x150 [ 3026.269750][T16747] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3026.275949][T16747] ? __nla_parse+0x40/0x50 [ 3026.280400][T16747] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3026.286761][T16747] genl_family_rcv_msg_doit+0x211/0x310 [ 3026.292340][T16747] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3026.298535][T16747] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3026.304477][T16747] ? bpf_lsm_capable+0x9/0x10 [ 3026.309191][T16747] ? security_capable+0x89/0xb0 [ 3026.314113][T16747] genl_rcv_msg+0x619/0x7a0 [ 3026.318688][T16747] ? genl_bind+0x360/0x360 [ 3026.323148][T16747] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3026.329609][T16747] netlink_rcv_skb+0x241/0x4d0 [ 3026.334429][T16747] ? genl_bind+0x360/0x360 [ 3026.338871][T16747] ? netlink_ack+0x1180/0x1180 [ 3026.343683][T16747] ? __lock_acquire+0x7d40/0x7d40 [ 3026.348750][T16747] ? down_read+0x1ac/0x2e0 [ 3026.353204][T16747] genl_rcv+0x28/0x40 [ 3026.357480][T16747] netlink_unicast+0x751/0x8d0 [ 3026.362284][T16747] netlink_sendmsg+0x8d0/0xbf0 [ 3026.367097][T16747] ? netlink_getsockopt+0x590/0x590 [ 3026.372339][T16747] ? aa_sock_msg_perm+0x94/0x150 [ 3026.377315][T16747] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3026.382905][T16747] ? security_socket_sendmsg+0x80/0xa0 [ 3026.388403][T16747] ? netlink_getsockopt+0x590/0x590 [ 3026.393652][T16747] ____sys_sendmsg+0x5ba/0x960 [ 3026.398721][T16747] ? __import_iovec+0x5f2/0x850 [ 3026.403612][T16747] ? __sys_sendmsg_sock+0x30/0x30 [ 3026.408692][T16747] ? import_iovec+0x73/0xa0 [ 3026.413241][T16747] ___sys_sendmsg+0x2a6/0x360 [ 3026.417956][T16747] ? __sys_sendmsg+0x2a0/0x2a0 [ 3026.422831][T16747] __se_sys_sendmsg+0x1c2/0x2b0 [ 3026.427729][T16747] ? __x64_sys_sendmsg+0x80/0x80 [ 3026.432717][T16747] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3026.438653][T16747] do_syscall_64+0x55/0xa0 [ 3026.443359][T16747] ? clear_bhb_loop+0x40/0x90 [ 3026.448502][T16747] ? clear_bhb_loop+0x40/0x90 [ 3026.453215][T16747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3026.459141][T16747] RIP: 0033:0x7fab1439ce59 [ 3026.463590][T16747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3026.483238][T16747] RSP: 002b:00007fab151c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3026.491683][T16747] RAX: ffffffffffffffda RBX: 00007fab14615fa0 RCX: 00007fab1439ce59 [ 3026.499682][T16747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3026.507682][T16747] RBP: 00007fab14432d6f R08: 0000000000000000 R09: 0000000000000000 [ 3026.515682][T16747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3026.523776][T16747] R13: 00007fab14616038 R14: 00007fab14615fa0 R15: 00007ffed3741878 [ 3026.531803][T16747] [ 3026.873170][T16761] netlink: 'syz.0.15180': attribute type 21 has an invalid length. [ 3026.937317][T16761] netlink: 'syz.0.15180': attribute type 1 has an invalid length. [ 3027.352207][T16773] netlink: 'syz.2.15184': attribute type 10 has an invalid length. [ 3028.039649][T16798] netlink: 'syz.3.15195': attribute type 21 has an invalid length. [ 3028.080850][T16798] netlink: 'syz.3.15195': attribute type 1 has an invalid length. [ 3028.922927][T16821] netlink: 'syz.1.15204': attribute type 10 has an invalid length. [ 3029.622664][T16840] netlink: 'syz.2.15207': attribute type 21 has an invalid length. [ 3029.719576][T16840] netlink: 'syz.2.15207': attribute type 1 has an invalid length. [ 3030.587837][T16857] netlink: 'syz.0.15217': attribute type 10 has an invalid length. [ 3031.058132][T16865] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 3031.501521][T16879] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15225'. [ 3031.577317][T18786] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 3031.626290][T16879] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3031.650547][T16879] CPU: 0 PID: 16879 Comm: syz.2.15225 Not tainted syzkaller #0 [ 3031.658205][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3031.668331][T16879] Call Trace: [ 3031.671658][T16879] [ 3031.674637][T16879] dump_stack_lvl+0x18c/0x250 [ 3031.679389][T16879] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3031.685616][T16879] ? show_regs_print_info+0x20/0x20 [ 3031.690901][T16879] ? load_image+0x420/0x420 [ 3031.695491][T16879] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3031.701639][T16879] sysfs_warn_dup+0x8e/0xa0 [ 3031.706214][T16879] sysfs_do_create_link_sd+0xc0/0x110 [ 3031.711663][T16879] device_add_class_symlinks+0x1cf/0x240 [ 3031.717470][T16879] device_add+0x507/0xc20 [ 3031.721886][T16879] wiphy_register+0x1dad/0x2ae0 [ 3031.726837][T16879] ? cfg80211_event_work+0x40/0x40 [ 3031.732046][T16879] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3031.738388][T16879] ieee80211_register_hw+0x3464/0x4250 [ 3031.743956][T16879] ? ieee80211_tasklet_handler+0x20/0x20 [ 3031.749734][T16879] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3031.755707][T16879] ? __debug_object_init+0xec/0x450 [ 3031.761000][T16879] ? __asan_memset+0x22/0x40 [ 3031.765664][T16879] ? __hrtimer_init+0x186/0x270 [ 3031.770584][T16879] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3031.776395][T16879] ? mac80211_hwsim_free+0x220/0x220 [ 3031.781741][T16879] ? rcu_is_watching+0x15/0xb0 [ 3031.786579][T16879] ? kstrndup+0xbd/0x140 [ 3031.790893][T16879] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3031.796080][T16879] ? __nla_validate+0x50/0x50 [ 3031.800823][T16879] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3031.807229][T16879] ? __nla_parse+0x40/0x50 [ 3031.811702][T16879] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3031.818108][T16879] genl_family_rcv_msg_doit+0x211/0x310 [ 3031.823719][T16879] ? end_current_label_crit_section+0x170/0x170 [ 3031.830037][T16879] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3031.835996][T16879] ? bpf_lsm_capable+0x9/0x10 [ 3031.840750][T16879] ? security_capable+0x89/0xb0 [ 3031.845684][T16879] genl_rcv_msg+0x619/0x7a0 [ 3031.850273][T16879] ? genl_bind+0x360/0x360 [ 3031.854767][T16879] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3031.861182][T16879] netlink_rcv_skb+0x241/0x4d0 [ 3031.866033][T16879] ? genl_bind+0x360/0x360 [ 3031.870513][T16879] ? netlink_ack+0x1180/0x1180 [ 3031.875387][T16879] ? down_read+0x1ac/0x2e0 [ 3031.879869][T16879] genl_rcv+0x28/0x40 [ 3031.883916][T16879] netlink_unicast+0x751/0x8d0 [ 3031.889209][T16879] netlink_sendmsg+0x8d0/0xbf0 [ 3031.894058][T16879] ? lockdep_hardirqs_on+0x98/0x150 [ 3031.899339][T16879] ? netlink_getsockopt+0x590/0x590 [ 3031.904656][T16879] ? aa_sock_msg_perm+0x94/0x150 [ 3031.909674][T16879] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3031.915028][T16879] ? security_socket_sendmsg+0x80/0xa0 [ 3031.920553][T16879] ? netlink_getsockopt+0x590/0x590 [ 3031.925825][T16879] ____sys_sendmsg+0x5ba/0x960 [ 3031.930666][T16879] ? __asan_memset+0x22/0x40 [ 3031.935325][T16879] ? __sys_sendmsg_sock+0x30/0x30 [ 3031.940406][T16879] ? __import_iovec+0x5f2/0x850 [ 3031.945329][T16879] ? import_iovec+0x73/0xa0 [ 3031.949901][T16879] ___sys_sendmsg+0x2a6/0x360 [ 3031.954641][T16879] ? __sys_sendmsg+0x2a0/0x2a0 [ 3031.959481][T16879] ? perf_trace_preemptirq_template+0x269/0x330 [ 3031.965863][T16879] __se_sys_sendmsg+0x1c2/0x2b0 [ 3031.970785][T16879] ? __x64_sys_sendmsg+0x80/0x80 [ 3031.975905][T16879] do_syscall_64+0x55/0xa0 [ 3031.980379][T16879] ? clear_bhb_loop+0x40/0x90 [ 3031.985122][T16879] ? clear_bhb_loop+0x40/0x90 [ 3031.989880][T16879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3031.995859][T16879] RIP: 0033:0x7fbb5179ce59 [ 3032.000339][T16879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3032.020015][T16879] RSP: 002b:00007fbb526cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3032.028501][T16879] RAX: ffffffffffffffda RBX: 00007fbb51a15fa0 RCX: 00007fbb5179ce59 [ 3032.036540][T16879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3032.044659][T16879] RBP: 00007fbb51832d6f R08: 0000000000000000 R09: 0000000000000000 [ 3032.052693][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3032.060723][T16879] R13: 00007fbb51a16038 R14: 00007fbb51a15fa0 R15: 00007ffc27cd2908 [ 3032.068784][T16879] [ 3032.885531][T16911] netlink: 'syz.1.15235': attribute type 21 has an invalid length. [ 3032.974456][T16911] netlink: 'syz.1.15235': attribute type 1 has an invalid length. [ 3033.624631][T18786] Bluetooth: hci3: command 0x0406 tx timeout [ 3033.833803][T16935] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.15251'. [ 3033.959998][T16934] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15242'. [ 3033.972663][T18786] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 3034.075924][T16934] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3034.086518][T16934] CPU: 1 PID: 16934 Comm: syz.1.15242 Not tainted syzkaller #0 [ 3034.094140][T16934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3034.104252][T16934] Call Trace: [ 3034.107629][T16934] [ 3034.110630][T16934] dump_stack_lvl+0x18c/0x250 [ 3034.115386][T16934] ? show_regs_print_info+0x20/0x20 [ 3034.120659][T16934] ? load_image+0x420/0x420 [ 3034.125244][T16934] sysfs_warn_dup+0x8e/0xa0 [ 3034.129810][T16934] sysfs_do_create_link_sd+0xc0/0x110 [ 3034.135262][T16934] device_add_class_symlinks+0x1cf/0x240 [ 3034.140980][T16934] device_add+0x507/0xc20 [ 3034.145465][T16934] wiphy_register+0x1dad/0x2ae0 [ 3034.150373][T16934] ? cfg80211_event_work+0x40/0x40 [ 3034.155530][T16934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3034.161736][T16934] ieee80211_register_hw+0x3464/0x4250 [ 3034.167254][T16934] ? ieee80211_tasklet_handler+0x20/0x20 [ 3034.172926][T16934] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3034.178864][T16934] ? __debug_object_init+0xec/0x450 [ 3034.184116][T16934] ? __asan_memset+0x22/0x40 [ 3034.188762][T16934] ? __hrtimer_init+0x186/0x270 [ 3034.193660][T16934] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3034.199437][T16934] ? mac80211_hwsim_free+0x220/0x220 [ 3034.204769][T16934] ? hwsim_new_radio_nl+0xc50/0x1a90 [ 3034.210100][T16934] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3034.215253][T16934] ? mark_lock+0x94/0x320 [ 3034.219618][T16934] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3034.225637][T16934] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3034.231996][T16934] ? lockdep_hardirqs_on+0x98/0x150 [ 3034.237231][T16934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3034.243435][T16934] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 3034.249804][T16934] genl_family_rcv_msg_doit+0x211/0x310 [ 3034.255384][T16934] ? end_current_label_crit_section+0x170/0x170 [ 3034.261761][T16934] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3034.267828][T16934] ? lockdep_hardirqs_on+0x98/0x150 [ 3034.273103][T16934] ? bpf_lsm_capable+0x9/0x10 [ 3034.277838][T16934] ? security_capable+0x89/0xb0 [ 3034.282769][T16934] genl_rcv_msg+0x619/0x7a0 [ 3034.287356][T16934] ? genl_bind+0x360/0x360 [ 3034.291829][T16934] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3034.298328][T16934] ? lockdep_hardirqs_on+0x98/0x150 [ 3034.303579][T16934] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3034.309800][T16934] netlink_rcv_skb+0x241/0x4d0 [ 3034.314625][T16934] ? genl_bind+0x360/0x360 [ 3034.319169][T16934] ? netlink_ack+0x1180/0x1180 [ 3034.324000][T16934] ? __lock_acquire+0x7d40/0x7d40 [ 3034.329080][T16934] ? net_generic+0x1e/0x240 [ 3034.333631][T16934] ? down_read+0x1ac/0x2e0 [ 3034.338084][T16934] genl_rcv+0x28/0x40 [ 3034.342098][T16934] netlink_unicast+0x751/0x8d0 [ 3034.346919][T16934] netlink_sendmsg+0x8d0/0xbf0 [ 3034.351755][T16934] ? netlink_getsockopt+0x590/0x590 [ 3034.357112][T16934] ? aa_sock_msg_perm+0x94/0x150 [ 3034.362196][T16934] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3034.367532][T16934] ? security_socket_sendmsg+0x80/0xa0 [ 3034.373030][T16934] ? netlink_getsockopt+0x590/0x590 [ 3034.378274][T16934] ____sys_sendmsg+0x5ba/0x960 [ 3034.383098][T16934] ? __asan_memset+0x22/0x40 [ 3034.387829][T16934] ? __sys_sendmsg_sock+0x30/0x30 [ 3034.392904][T16934] ? __import_iovec+0x5f2/0x850 [ 3034.397813][T16934] ? import_iovec+0x73/0xa0 [ 3034.402351][T16934] ___sys_sendmsg+0x2a6/0x360 [ 3034.407071][T16934] ? __sys_sendmsg+0x2a0/0x2a0 [ 3034.411879][T16934] ? perf_trace_preemptirq_template+0xac/0x330 [ 3034.418112][T16934] __se_sys_sendmsg+0x1c2/0x2b0 [ 3034.422999][T16934] ? __x64_sys_sendmsg+0x80/0x80 [ 3034.427985][T16934] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3034.434004][T16934] do_syscall_64+0x55/0xa0 [ 3034.438447][T16934] ? clear_bhb_loop+0x40/0x90 [ 3034.443158][T16934] ? clear_bhb_loop+0x40/0x90 [ 3034.447869][T16934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3034.453794][T16934] RIP: 0033:0x7f9698b9ce59 [ 3034.458240][T16934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3034.477890][T16934] RSP: 002b:00007f9699a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3034.486342][T16934] RAX: ffffffffffffffda RBX: 00007f9698e15fa0 RCX: 00007f9698b9ce59 [ 3034.494343][T16934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3034.502344][T16934] RBP: 00007f9698c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 3034.510346][T16934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3034.518352][T16934] R13: 00007f9698e16038 R14: 00007f9698e15fa0 R15: 00007ffe6addcd38 [ 3034.526375][T16934] [ 3035.671634][T16963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15255'. [ 3035.989866][T16975] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15258'. [ 3036.024067][T18786] Bluetooth: hci1: command 0x0406 tx timeout [ 3036.218832][T16975] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3036.244351][T16975] CPU: 0 PID: 16975 Comm: syz.3.15258 Not tainted syzkaller #0 [ 3036.252006][T16975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3036.262216][T16975] Call Trace: [ 3036.265547][T16975] [ 3036.268525][T16975] dump_stack_lvl+0x18c/0x250 [ 3036.273267][T16975] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3036.279500][T16975] ? show_regs_print_info+0x20/0x20 [ 3036.284787][T16975] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3036.291034][T16975] ? dump_stack+0x9/0x20 [ 3036.295345][T16975] sysfs_warn_dup+0x8e/0xa0 [ 3036.299906][T16975] sysfs_do_create_link_sd+0xc0/0x110 [ 3036.305350][T16975] device_add_class_symlinks+0x1cf/0x240 [ 3036.311048][T16975] device_add+0x507/0xc20 [ 3036.315431][T16975] wiphy_register+0x1dad/0x2ae0 [ 3036.320522][T16975] ? cfg80211_event_work+0x40/0x40 [ 3036.325671][T16975] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3036.331917][T16975] ? rtnl_unlock+0x9/0x10 [ 3036.336312][T16975] ieee80211_register_hw+0x3464/0x4250 [ 3036.341834][T16975] ? ieee80211_tasklet_handler+0x20/0x20 [ 3036.347508][T16975] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3036.353451][T16975] ? __debug_object_init+0xec/0x450 [ 3036.358732][T16975] ? __asan_memset+0x22/0x40 [ 3036.363378][T16975] ? __hrtimer_init+0x186/0x270 [ 3036.368273][T16975] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3036.374056][T16975] ? mac80211_hwsim_free+0x220/0x220 [ 3036.379382][T16975] ? rcu_is_watching+0x15/0xb0 [ 3036.384190][T16975] ? kstrndup+0xbd/0x140 [ 3036.388513][T16975] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3036.393763][T16975] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3036.399791][T16975] ? lock_chain_count+0x20/0x20 [ 3036.404699][T16975] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3036.411079][T16975] ? __nla_parse+0x40/0x50 [ 3036.415531][T16975] ? __nla_parse+0x40/0x50 [ 3036.420073][T16975] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3036.426448][T16975] genl_family_rcv_msg_doit+0x211/0x310 [ 3036.432034][T16975] ? end_current_label_crit_section+0x170/0x170 [ 3036.438315][T16975] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3036.444253][T16975] ? bpf_lsm_capable+0x9/0x10 [ 3036.449056][T16975] ? security_capable+0x89/0xb0 [ 3036.453960][T16975] genl_rcv_msg+0x619/0x7a0 [ 3036.458510][T16975] ? genl_bind+0x360/0x360 [ 3036.462963][T16975] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3036.469321][T16975] ? lockdep_hardirqs_on+0x98/0x150 [ 3036.474555][T16975] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3036.480756][T16975] netlink_rcv_skb+0x241/0x4d0 [ 3036.485563][T16975] ? genl_bind+0x360/0x360 [ 3036.490016][T16975] ? netlink_ack+0x1180/0x1180 [ 3036.494853][T16975] ? __lock_acquire+0x7d40/0x7d40 [ 3036.499928][T16975] ? net_generic+0x1e/0x240 [ 3036.504483][T16975] ? down_read+0x1ac/0x2e0 [ 3036.508944][T16975] genl_rcv+0x28/0x40 [ 3036.512968][T16975] netlink_unicast+0x751/0x8d0 [ 3036.517789][T16975] netlink_sendmsg+0x8d0/0xbf0 [ 3036.522651][T16975] ? netlink_getsockopt+0x590/0x590 [ 3036.527899][T16975] ? aa_sock_msg_perm+0x94/0x150 [ 3036.532905][T16975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3036.538248][T16975] ? security_socket_sendmsg+0x80/0xa0 [ 3036.543748][T16975] ? netlink_getsockopt+0x590/0x590 [ 3036.548997][T16975] ____sys_sendmsg+0x5ba/0x960 [ 3036.553807][T16975] ? __asan_memset+0x22/0x40 [ 3036.558441][T16975] ? __sys_sendmsg_sock+0x30/0x30 [ 3036.563503][T16975] ? __import_iovec+0x5f2/0x850 [ 3036.568401][T16975] ? import_iovec+0x73/0xa0 [ 3036.572954][T16975] ___sys_sendmsg+0x2a6/0x360 [ 3036.577682][T16975] ? __sys_sendmsg+0x2a0/0x2a0 [ 3036.582527][T16975] __se_sys_sendmsg+0x1c2/0x2b0 [ 3036.587417][T16975] ? __x64_sys_sendmsg+0x80/0x80 [ 3036.592404][T16975] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3036.598347][T16975] do_syscall_64+0x55/0xa0 [ 3036.602802][T16975] ? clear_bhb_loop+0x40/0x90 [ 3036.607524][T16975] ? clear_bhb_loop+0x40/0x90 [ 3036.612242][T16975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3036.618172][T16975] RIP: 0033:0x7f8ccd59ce59 [ 3036.622624][T16975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3036.642277][T16975] RSP: 002b:00007f8cce3ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3036.650728][T16975] RAX: ffffffffffffffda RBX: 00007f8ccd815fa0 RCX: 00007f8ccd59ce59 [ 3036.658735][T16975] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3036.666734][T16975] RBP: 00007f8ccd632d6f R08: 0000000000000000 R09: 0000000000000000 [ 3036.674739][T16975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3036.682754][T16975] R13: 00007f8ccd816038 R14: 00007f8ccd815fa0 R15: 00007ffde7d925b8 [ 3036.690781][T16975] [ 3037.269642][T16995] delete_channel: no stack [ 3037.286462][T16995] delete_channel: no stack [ 3037.896820][T17004] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15272'. [ 3037.963891][T18786] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 3038.037682][T17004] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3038.047163][T17004] CPU: 1 PID: 17004 Comm: syz.2.15272 Not tainted syzkaller #0 [ 3038.054789][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3038.064992][T17004] Call Trace: [ 3038.068318][T17004] [ 3038.071301][T17004] dump_stack_lvl+0x18c/0x250 [ 3038.076059][T17004] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3038.082279][T17004] ? show_regs_print_info+0x20/0x20 [ 3038.087563][T17004] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3038.093795][T17004] ? dump_stack+0x9/0x20 [ 3038.098105][T17004] ? dump_stack_lvl+0x5/0x250 [ 3038.102854][T17004] sysfs_warn_dup+0x8e/0xa0 [ 3038.107425][T17004] sysfs_do_create_link_sd+0xc0/0x110 [ 3038.112855][T17004] device_add_class_symlinks+0x1cf/0x240 [ 3038.118569][T17004] device_add+0x507/0xc20 [ 3038.122974][T17004] wiphy_register+0x1dad/0x2ae0 [ 3038.127914][T17004] ? cfg80211_event_work+0x40/0x40 [ 3038.133093][T17004] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3038.139387][T17004] ieee80211_register_hw+0x3464/0x4250 [ 3038.144939][T17004] ? ieee80211_tasklet_handler+0x20/0x20 [ 3038.150896][T17004] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3038.156859][T17004] ? __debug_object_init+0xec/0x450 [ 3038.162132][T17004] ? __asan_memset+0x22/0x40 [ 3038.166797][T17004] ? __hrtimer_init+0x186/0x270 [ 3038.171711][T17004] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3038.177515][T17004] ? mac80211_hwsim_free+0x220/0x220 [ 3038.182856][T17004] ? rcu_is_watching+0x15/0xb0 [ 3038.187688][T17004] ? kstrndup+0xbd/0x140 [ 3038.192010][T17004] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3038.197182][T17004] ? __nla_validate+0x50/0x50 [ 3038.201933][T17004] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3038.208331][T17004] ? __nla_parse+0x40/0x50 [ 3038.212812][T17004] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3038.219214][T17004] genl_family_rcv_msg_doit+0x211/0x310 [ 3038.224825][T17004] ? end_current_label_crit_section+0x170/0x170 [ 3038.231143][T17004] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3038.237101][T17004] ? lockdep_hardirqs_on+0x98/0x150 [ 3038.242377][T17004] ? bpf_lsm_capable+0x9/0x10 [ 3038.247126][T17004] ? security_capable+0x89/0xb0 [ 3038.252049][T17004] genl_rcv_msg+0x619/0x7a0 [ 3038.256627][T17004] ? genl_bind+0x360/0x360 [ 3038.261102][T17004] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3038.267487][T17004] ? lockdep_hardirqs_on+0x98/0x150 [ 3038.272784][T17004] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3038.279027][T17004] netlink_rcv_skb+0x241/0x4d0 [ 3038.283874][T17004] ? genl_bind+0x360/0x360 [ 3038.288359][T17004] ? netlink_ack+0x1180/0x1180 [ 3038.293220][T17004] ? __lock_acquire+0x7d40/0x7d40 [ 3038.298315][T17004] ? net_generic+0x1e/0x240 [ 3038.302897][T17004] ? down_read+0x1ac/0x2e0 [ 3038.307385][T17004] genl_rcv+0x28/0x40 [ 3038.311438][T17004] netlink_unicast+0x751/0x8d0 [ 3038.317041][T17004] netlink_sendmsg+0x8d0/0xbf0 [ 3038.321885][T17004] ? netlink_getsockopt+0x590/0x590 [ 3038.327139][T17004] ? aa_sock_msg_perm+0x94/0x150 [ 3038.332157][T17004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3038.337696][T17004] ? security_socket_sendmsg+0x80/0xa0 [ 3038.343206][T17004] ? netlink_getsockopt+0x590/0x590 [ 3038.348454][T17004] ____sys_sendmsg+0x5ba/0x960 [ 3038.353280][T17004] ? __asan_memset+0x22/0x40 [ 3038.357926][T17004] ? __sys_sendmsg_sock+0x30/0x30 [ 3038.363003][T17004] ? __import_iovec+0x5f2/0x850 [ 3038.367937][T17004] ? import_iovec+0x73/0xa0 [ 3038.372477][T17004] ___sys_sendmsg+0x2a6/0x360 [ 3038.377171][T17004] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 3038.383020][T17004] ? __sys_sendmsg+0x2a0/0x2a0 [ 3038.387856][T17004] ? lockdep_hardirqs_on+0x98/0x150 [ 3038.393130][T17004] __se_sys_sendmsg+0x1c2/0x2b0 [ 3038.398030][T17004] ? __x64_sys_sendmsg+0x80/0x80 [ 3038.403006][T17004] ? lockdep_hardirqs_on+0x98/0x150 [ 3038.408236][T17004] do_syscall_64+0x55/0xa0 [ 3038.412672][T17004] ? clear_bhb_loop+0x40/0x90 [ 3038.417419][T17004] ? clear_bhb_loop+0x40/0x90 [ 3038.422138][T17004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3038.428100][T17004] RIP: 0033:0x7fbb5179ce59 [ 3038.432584][T17004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3038.452217][T17004] RSP: 002b:00007fbb526cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3038.460657][T17004] RAX: ffffffffffffffda RBX: 00007fbb51a15fa0 RCX: 00007fbb5179ce59 [ 3038.468734][T17004] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3038.476740][T17004] RBP: 00007fbb51832d6f R08: 0000000000000000 R09: 0000000000000000 [ 3038.484835][T17004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3038.492837][T17004] R13: 00007fbb51a16038 R14: 00007fbb51a15fa0 R15: 00007ffc27cd2908 [ 3038.500862][T17004] [ 3038.544438][T17001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15270'. [ 3039.404095][T17030] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15280'. [ 3039.883191][T17039] netlink: 'syz.3.15283': attribute type 10 has an invalid length. [ 3039.891202][T17039] netlink: 2 bytes leftover after parsing attributes in process `syz.3.15283'. [ 3040.023065][T18786] Bluetooth: hci3: command 0x0406 tx timeout [ 3040.619604][T17059] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.15294'. [ 3041.564101][T17079] netlink: 'syz.3.15300': attribute type 3 has an invalid length. [ 3041.591743][T17079] netlink: 'syz.3.15300': attribute type 1 has an invalid length. [ 3041.607075][T17079] netlink: 116 bytes leftover after parsing attributes in process `syz.3.15300'. [ 3041.724735][T17089] netlink: 'syz.0.15302': attribute type 2 has an invalid length. [ 3041.743361][T17089] netlink: 'syz.0.15302': attribute type 8 has an invalid length. [ 3041.751941][T17089] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15302'. [ 3042.346826][T17100] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.15307'. [ 3043.709413][T17119] netlink: 'syz.0.15314': attribute type 10 has an invalid length. [ 3043.753619][T17119] netlink: 2 bytes leftover after parsing attributes in process `syz.0.15314'. [ 3044.018484][T17136] delete_channel: no stack [ 3044.024050][T17136] delete_channel: no stack [ 3044.048572][T17137] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15323'. [ 3045.842984][T17183] delete_channel: no stack [ 3045.850226][T17183] delete_channel: no stack [ 3048.977367][T17203] netlink: 'syz.1.15347': attribute type 2 has an invalid length. [ 3048.986419][T17203] netlink: 'syz.1.15347': attribute type 8 has an invalid length. [ 3048.997506][T17203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15347'. [ 3050.209355][T17231] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15361'. [ 3050.270110][T18786] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 3050.332147][T17231] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3050.385026][T17231] CPU: 1 PID: 17231 Comm: syz.1.15361 Not tainted syzkaller #0 [ 3050.392676][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3050.402794][T17231] Call Trace: [ 3050.406132][T17231] [ 3050.409111][T17231] dump_stack_lvl+0x18c/0x250 [ 3050.413872][T17231] ? show_regs_print_info+0x20/0x20 [ 3050.419135][T17231] ? load_image+0x420/0x420 [ 3050.423708][T17231] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3050.429834][T17231] ? __kasan_kmalloc+0x93/0xa0 [ 3050.434922][T17231] sysfs_warn_dup+0x8e/0xa0 [ 3050.439574][T17231] sysfs_do_create_link_sd+0xc0/0x110 [ 3050.445097][T17231] device_add_class_symlinks+0x1cf/0x240 [ 3050.450819][T17231] device_add+0x507/0xc20 [ 3050.455231][T17231] wiphy_register+0x1dad/0x2ae0 [ 3050.460164][T17231] ? cfg80211_event_work+0x40/0x40 [ 3050.465340][T17231] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3050.471593][T17231] ieee80211_register_hw+0x3464/0x4250 [ 3050.477154][T17231] ? ieee80211_tasklet_handler+0x20/0x20 [ 3050.482949][T17231] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3050.489101][T17231] ? __debug_object_init+0xec/0x450 [ 3050.494470][T17231] ? __asan_memset+0x22/0x40 [ 3050.499140][T17231] ? __hrtimer_init+0x186/0x270 [ 3050.504078][T17231] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3050.509880][T17231] ? mac80211_hwsim_free+0x220/0x220 [ 3050.515217][T17231] ? rcu_is_watching+0x15/0xb0 [ 3050.520049][T17231] ? kstrndup+0xbd/0x140 [ 3050.524367][T17231] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3050.529545][T17231] ? mark_lock+0x94/0x320 [ 3050.533955][T17231] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3050.540088][T17231] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3050.546570][T17231] ? lockdep_hardirqs_on+0x98/0x150 [ 3050.551841][T17231] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3050.558255][T17231] ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290 [ 3050.564676][T17231] genl_family_rcv_msg_doit+0x211/0x310 [ 3050.570290][T17231] ? end_current_label_crit_section+0x170/0x170 [ 3050.576699][T17231] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3050.582663][T17231] ? bpf_lsm_capable+0x9/0x10 [ 3050.587412][T17231] ? security_capable+0x89/0xb0 [ 3050.592346][T17231] genl_rcv_msg+0x619/0x7a0 [ 3050.596948][T17231] ? genl_bind+0x360/0x360 [ 3050.601431][T17231] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3050.607856][T17231] netlink_rcv_skb+0x241/0x4d0 [ 3050.612704][T17231] ? genl_bind+0x360/0x360 [ 3050.617186][T17231] ? netlink_ack+0x1180/0x1180 [ 3050.622027][T17231] ? __lock_acquire+0x7d40/0x7d40 [ 3050.627191][T17231] ? net_generic+0x1e/0x240 [ 3050.631766][T17231] ? down_read+0x1ac/0x2e0 [ 3050.636250][T17231] genl_rcv+0x28/0x40 [ 3050.640390][T17231] netlink_unicast+0x751/0x8d0 [ 3050.645244][T17231] netlink_sendmsg+0x8d0/0xbf0 [ 3050.650099][T17231] ? netlink_getsockopt+0x590/0x590 [ 3050.655470][T17231] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3050.661699][T17231] ? aa_sock_msg_perm+0x94/0x150 [ 3050.666746][T17231] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3050.672111][T17231] ? security_socket_sendmsg+0x80/0xa0 [ 3050.677646][T17231] ? netlink_getsockopt+0x590/0x590 [ 3050.683095][T17231] ____sys_sendmsg+0x5ba/0x960 [ 3050.687952][T17231] ? __asan_memset+0x22/0x40 [ 3050.692625][T17231] ? __sys_sendmsg_sock+0x30/0x30 [ 3050.697714][T17231] ? __import_iovec+0x5f2/0x850 [ 3050.702643][T17231] ? import_iovec+0x73/0xa0 [ 3050.707319][T17231] ___sys_sendmsg+0x2a6/0x360 [ 3050.712089][T17231] ? __sys_sendmsg+0x2a0/0x2a0 [ 3050.716953][T17231] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3050.723207][T17231] __se_sys_sendmsg+0x1c2/0x2b0 [ 3050.728123][T17231] ? __x64_sys_sendmsg+0x80/0x80 [ 3050.733152][T17231] ? lockdep_hardirqs_on+0x98/0x150 [ 3050.738431][T17231] do_syscall_64+0x55/0xa0 [ 3050.742914][T17231] ? clear_bhb_loop+0x40/0x90 [ 3050.747656][T17231] ? clear_bhb_loop+0x40/0x90 [ 3050.752381][T17231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3050.758308][T17231] RIP: 0033:0x7f9698b9ce59 [ 3050.762798][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3050.782455][T17231] RSP: 002b:00007f9699a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3050.790914][T17231] RAX: ffffffffffffffda RBX: 00007f9698e15fa0 RCX: 00007f9698b9ce59 [ 3050.798940][T17231] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3050.806983][T17231] RBP: 00007f9698c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 3050.815363][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3050.823375][T17231] R13: 00007f9698e16038 R14: 00007f9698e15fa0 R15: 00007ffe6addcd38 [ 3050.831441][T17231] [ 3051.360246][T17256] netlink: 'syz.2.15367': attribute type 2 has an invalid length. [ 3051.368806][T17256] netlink: 'syz.2.15367': attribute type 8 has an invalid length. [ 3051.383561][T17256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15367'. [ 3052.240041][T17281] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15378'. [ 3052.306250][T17281] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3052.320962][T17281] CPU: 1 PID: 17281 Comm: syz.3.15378 Not tainted syzkaller #0 [ 3052.328616][T17281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3052.338741][T17281] Call Trace: [ 3052.342072][T17281] [ 3052.345055][T17281] dump_stack_lvl+0x18c/0x250 [ 3052.349814][T17281] ? show_regs_print_info+0x20/0x20 [ 3052.355169][T17281] ? load_image+0x420/0x420 [ 3052.359849][T17281] sysfs_warn_dup+0x8e/0xa0 [ 3052.364420][T17281] sysfs_do_create_link_sd+0xc0/0x110 [ 3052.369860][T17281] device_add_class_symlinks+0x1cf/0x240 [ 3052.375570][T17281] device_add+0x507/0xc20 [ 3052.379971][T17281] wiphy_register+0x1dad/0x2ae0 [ 3052.384932][T17281] ? cfg80211_event_work+0x40/0x40 [ 3052.390111][T17281] ? minstrel_ht_alloc+0x88a/0x990 [ 3052.395397][T17281] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 3052.401630][T17281] ieee80211_register_hw+0x3464/0x4250 [ 3052.407277][T17281] ? ieee80211_tasklet_handler+0x20/0x20 [ 3052.412978][T17281] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3052.418962][T17281] ? __debug_object_init+0xec/0x450 [ 3052.424247][T17281] ? __asan_memset+0x22/0x40 [ 3052.428917][T17281] ? __hrtimer_init+0x186/0x270 [ 3052.433841][T17281] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3052.439660][T17281] ? mac80211_hwsim_free+0x220/0x220 [ 3052.445032][T17281] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3052.450217][T17281] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 3052.456112][T17281] ? mark_lock+0x94/0x320 [ 3052.460524][T17281] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3052.466927][T17281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3052.473170][T17281] ? lockdep_hardirqs_on+0x98/0x150 [ 3052.478447][T17281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3052.484686][T17281] genl_family_rcv_msg_doit+0x211/0x310 [ 3052.490301][T17281] ? end_current_label_crit_section+0x170/0x170 [ 3052.496621][T17281] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3052.502593][T17281] ? bpf_lsm_capable+0x9/0x10 [ 3052.507337][T17281] ? security_capable+0x89/0xb0 [ 3052.512270][T17281] genl_rcv_msg+0x619/0x7a0 [ 3052.516846][T17281] ? genl_bind+0x360/0x360 [ 3052.521398][T17281] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3052.527796][T17281] ? lockdep_hardirqs_on+0x98/0x150 [ 3052.533072][T17281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3052.539311][T17281] netlink_rcv_skb+0x241/0x4d0 [ 3052.544337][T17281] ? genl_bind+0x360/0x360 [ 3052.548818][T17281] ? netlink_ack+0x1180/0x1180 [ 3052.553773][T17281] ? __lock_acquire+0x7d40/0x7d40 [ 3052.558868][T17281] ? net_generic+0x1e/0x240 [ 3052.563444][T17281] ? down_read+0x1ac/0x2e0 [ 3052.567919][T17281] genl_rcv+0x28/0x40 [ 3052.571945][T17281] netlink_unicast+0x751/0x8d0 [ 3052.576779][T17281] netlink_sendmsg+0x8d0/0xbf0 [ 3052.581610][T17281] ? netlink_getsockopt+0x590/0x590 [ 3052.586866][T17281] ? aa_sock_msg_perm+0x94/0x150 [ 3052.591861][T17281] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3052.597376][T17281] ? security_socket_sendmsg+0x80/0xa0 [ 3052.602882][T17281] ? netlink_getsockopt+0x590/0x590 [ 3052.608160][T17281] ____sys_sendmsg+0x5ba/0x960 [ 3052.612982][T17281] ? __asan_memset+0x22/0x40 [ 3052.617620][T17281] ? __sys_sendmsg_sock+0x30/0x30 [ 3052.622690][T17281] ? __import_iovec+0x5f2/0x850 [ 3052.627593][T17281] ? import_iovec+0x73/0xa0 [ 3052.632143][T17281] ___sys_sendmsg+0x2a6/0x360 [ 3052.636870][T17281] ? __sys_sendmsg+0x2a0/0x2a0 [ 3052.641728][T17281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3052.647958][T17281] __se_sys_sendmsg+0x1c2/0x2b0 [ 3052.652852][T17281] ? __x64_sys_sendmsg+0x80/0x80 [ 3052.657986][T17281] ? lockdep_hardirqs_on+0x98/0x150 [ 3052.663239][T17281] do_syscall_64+0x55/0xa0 [ 3052.667710][T17281] ? clear_bhb_loop+0x40/0x90 [ 3052.672533][T17281] ? clear_bhb_loop+0x40/0x90 [ 3052.677269][T17281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3052.683216][T17281] RIP: 0033:0x7f8ccd59ce59 [ 3052.687685][T17281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3052.707347][T17281] RSP: 002b:00007f8cce3ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3052.715867][T17281] RAX: ffffffffffffffda RBX: 00007f8ccd815fa0 RCX: 00007f8ccd59ce59 [ 3052.723894][T17281] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3052.731915][T17281] RBP: 00007f8ccd632d6f R08: 0000000000000000 R09: 0000000000000000 [ 3052.740024][T17281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3052.748043][T17281] R13: 00007f8ccd816038 R14: 00007f8ccd815fa0 R15: 00007ffde7d925b8 [ 3052.756126][T17281] [ 3052.781572][T18786] Bluetooth: hci1: command 0x0406 tx timeout [ 3052.908870][T17286] netlink: 'syz.1.15380': attribute type 2 has an invalid length. [ 3052.946619][T17286] netlink: 'syz.1.15380': attribute type 8 has an invalid length. [ 3052.955483][T17286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15380'. [ 3052.966257][T17288] netlink: 'syz.1.15380': attribute type 11 has an invalid length. [ 3053.066017][T17293] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.15382'. [ 3053.408128][T17303] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15384'. [ 3053.570775][T17312] delete_channel: no stack [ 3053.585716][T17312] delete_channel: no stack [ 3053.767354][T17316] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 3054.238300][T17327] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.15396'. [ 3054.863986][T17346] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15405'. [ 3055.427657][T17361] netlink: 'syz.2.15411': attribute type 27 has an invalid length. [ 3055.449704][T17361] netlink: 'syz.2.15411': attribute type 4 has an invalid length. [ 3055.477738][T17361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15411'. [ 3055.628151][T17371] mac80211_hwsim hwsim133 wlan1: entered promiscuous mode [ 3055.921347][T17380] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15418'. [ 3056.112991][T14495] wlan1: Trigger new scan to find an IBSS to join [ 3056.176350][T17386] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15430'. [ 3056.632394][T17399] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15426'. [ 3056.752579][T17399] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3056.771411][T17399] CPU: 0 PID: 17399 Comm: syz.0.15426 Not tainted syzkaller #0 [ 3056.779082][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3056.789207][T17399] Call Trace: [ 3056.792550][T17399] [ 3056.795538][T17399] dump_stack_lvl+0x18c/0x250 [ 3056.800297][T17399] ? show_regs_print_info+0x20/0x20 [ 3056.805576][T17399] ? load_image+0x420/0x420 [ 3056.810173][T17399] sysfs_warn_dup+0x8e/0xa0 [ 3056.814742][T17399] sysfs_do_create_link_sd+0xc0/0x110 [ 3056.820188][T17399] device_add_class_symlinks+0x1cf/0x240 [ 3056.825909][T17399] device_add+0x507/0xc20 [ 3056.830385][T17399] wiphy_register+0x1dad/0x2ae0 [ 3056.835291][T17399] ? cfg80211_event_work+0x40/0x40 [ 3056.840446][T17399] ? minstrel_ht_alloc+0x88a/0x990 [ 3056.845616][T17399] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 3056.851735][T17399] ieee80211_register_hw+0x3464/0x4250 [ 3056.857262][T17399] ? ieee80211_tasklet_handler+0x20/0x20 [ 3056.862933][T17399] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3056.868874][T17399] ? __debug_object_init+0xec/0x450 [ 3056.874124][T17399] ? __asan_memset+0x22/0x40 [ 3056.878759][T17399] ? __hrtimer_init+0x186/0x270 [ 3056.883646][T17399] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3056.889468][T17399] ? mac80211_hwsim_free+0x220/0x220 [ 3056.894790][T17399] ? rcu_is_watching+0x15/0xb0 [ 3056.899614][T17399] ? kstrndup+0xbd/0x140 [ 3056.903937][T17399] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3056.909113][T17399] ? mark_lock+0x94/0x320 [ 3056.913502][T17399] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3056.919873][T17399] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3056.926074][T17399] ? lockdep_hardirqs_on+0x98/0x150 [ 3056.931332][T17399] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3056.937558][T17399] genl_family_rcv_msg_doit+0x211/0x310 [ 3056.943148][T17399] ? end_current_label_crit_section+0x170/0x170 [ 3056.949433][T17399] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3056.955400][T17399] ? bpf_lsm_capable+0x9/0x10 [ 3056.960138][T17399] ? security_capable+0x89/0xb0 [ 3056.965043][T17399] genl_rcv_msg+0x619/0x7a0 [ 3056.969608][T17399] ? genl_bind+0x360/0x360 [ 3056.974064][T17399] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3056.980524][T17399] ? perf_trace_preemptirq_template+0x269/0x330 [ 3056.986819][T17399] netlink_rcv_skb+0x241/0x4d0 [ 3056.991631][T17399] ? genl_bind+0x360/0x360 [ 3056.996082][T17399] ? netlink_ack+0x1180/0x1180 [ 3057.000908][T17399] ? __lock_acquire+0x7d40/0x7d40 [ 3057.005977][T17399] ? net_generic+0x1e/0x240 [ 3057.010527][T17399] ? down_read+0x1ac/0x2e0 [ 3057.015002][T17399] genl_rcv+0x28/0x40 [ 3057.019024][T17399] netlink_unicast+0x751/0x8d0 [ 3057.023842][T17399] netlink_sendmsg+0x8d0/0xbf0 [ 3057.028662][T17399] ? netlink_getsockopt+0x590/0x590 [ 3057.033923][T17399] ? aa_sock_msg_perm+0x94/0x150 [ 3057.038903][T17399] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3057.044226][T17399] ? security_socket_sendmsg+0x80/0xa0 [ 3057.049719][T17399] ? netlink_getsockopt+0x590/0x590 [ 3057.054961][T17399] ____sys_sendmsg+0x5ba/0x960 [ 3057.059774][T17399] ? __asan_memset+0x22/0x40 [ 3057.064411][T17399] ? __sys_sendmsg_sock+0x30/0x30 [ 3057.069466][T17399] ? __import_iovec+0x5f2/0x850 [ 3057.074792][T17399] ? import_iovec+0x73/0xa0 [ 3057.079338][T17399] ___sys_sendmsg+0x2a6/0x360 [ 3057.084071][T17399] ? __sys_sendmsg+0x2a0/0x2a0 [ 3057.088924][T17399] __se_sys_sendmsg+0x1c2/0x2b0 [ 3057.093972][T17399] ? __x64_sys_sendmsg+0x80/0x80 [ 3057.098973][T17399] do_syscall_64+0x55/0xa0 [ 3057.103422][T17399] ? clear_bhb_loop+0x40/0x90 [ 3057.108148][T17399] ? clear_bhb_loop+0x40/0x90 [ 3057.112873][T17399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3057.118811][T17399] RIP: 0033:0x7fab1439ce59 [ 3057.123266][T17399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3057.142909][T17399] RSP: 002b:00007fab151c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3057.151361][T17399] RAX: ffffffffffffffda RBX: 00007fab14615fa0 RCX: 00007fab1439ce59 [ 3057.159411][T17399] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3057.167423][T17399] RBP: 00007fab14432d6f R08: 0000000000000000 R09: 0000000000000000 [ 3057.175438][T17399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3057.183452][T17399] R13: 00007fab14616038 R14: 00007fab14615fa0 R15: 00007ffed3741878 [ 3057.191489][T17399] [ 3057.678148][T17419] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15435'. [ 3057.903043][T17421] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 3058.334153][T18786] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 3058.394124][T17432] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15440'. [ 3058.538340][T17432] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3058.547569][T17432] CPU: 1 PID: 17432 Comm: syz.2.15440 Not tainted syzkaller #0 [ 3058.555190][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3058.565313][T17432] Call Trace: [ 3058.568647][T17432] [ 3058.571638][T17432] dump_stack_lvl+0x18c/0x250 [ 3058.576401][T17432] ? show_regs_print_info+0x20/0x20 [ 3058.581773][T17432] ? load_image+0x420/0x420 [ 3058.586381][T17432] sysfs_warn_dup+0x8e/0xa0 [ 3058.590952][T17432] sysfs_do_create_link_sd+0xc0/0x110 [ 3058.596400][T17432] device_add_class_symlinks+0x1cf/0x240 [ 3058.602120][T17432] device_add+0x507/0xc20 [ 3058.606654][T17432] wiphy_register+0x1dad/0x2ae0 [ 3058.611621][T17432] ? cfg80211_event_work+0x40/0x40 [ 3058.616815][T17432] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3058.623067][T17432] ieee80211_register_hw+0x3464/0x4250 [ 3058.628637][T17432] ? ieee80211_tasklet_handler+0x20/0x20 [ 3058.634359][T17432] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3058.640340][T17432] ? __debug_object_init+0xec/0x450 [ 3058.645629][T17432] ? __asan_memset+0x22/0x40 [ 3058.650298][T17432] ? __hrtimer_init+0x186/0x270 [ 3058.655241][T17432] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3058.661066][T17432] ? mac80211_hwsim_free+0x220/0x220 [ 3058.666433][T17432] ? rcu_is_watching+0x15/0xb0 [ 3058.671289][T17432] ? kstrndup+0xbd/0x140 [ 3058.675626][T17432] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3058.680833][T17432] ? __nla_validate+0x50/0x50 [ 3058.685617][T17432] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3058.692043][T17432] ? __nla_parse+0x24/0x50 [ 3058.696714][T17432] ? __nla_parse+0x40/0x50 [ 3058.701207][T17432] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3058.707626][T17432] genl_family_rcv_msg_doit+0x211/0x310 [ 3058.713302][T17432] ? end_current_label_crit_section+0x170/0x170 [ 3058.719712][T17432] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3058.725692][T17432] ? bpf_lsm_capable+0x9/0x10 [ 3058.730445][T17432] ? security_capable+0x89/0xb0 [ 3058.735475][T17432] genl_rcv_msg+0x619/0x7a0 [ 3058.740062][T17432] ? genl_bind+0x360/0x360 [ 3058.744541][T17432] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3058.750935][T17432] ? perf_trace_lock+0x304/0x3b0 [ 3058.756048][T17432] netlink_rcv_skb+0x241/0x4d0 [ 3058.760900][T17432] ? genl_bind+0x360/0x360 [ 3058.765479][T17432] ? netlink_ack+0x1180/0x1180 [ 3058.770345][T17432] ? __lock_acquire+0x7d40/0x7d40 [ 3058.775450][T17432] ? net_generic+0x1e/0x240 [ 3058.780041][T17432] ? down_read+0x1ac/0x2e0 [ 3058.784525][T17432] genl_rcv+0x28/0x40 [ 3058.788583][T17432] netlink_unicast+0x751/0x8d0 [ 3058.793744][T17432] netlink_sendmsg+0x8d0/0xbf0 [ 3058.798641][T17432] ? netlink_getsockopt+0x590/0x590 [ 3058.803937][T17432] ? aa_sock_msg_perm+0x94/0x150 [ 3058.808959][T17432] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3058.814323][T17432] ? security_socket_sendmsg+0x80/0xa0 [ 3058.819846][T17432] ? netlink_getsockopt+0x590/0x590 [ 3058.825176][T17432] ____sys_sendmsg+0x5ba/0x960 [ 3058.830030][T17432] ? __sys_sendmsg_sock+0x30/0x30 [ 3058.835149][T17432] ___sys_sendmsg+0x2a6/0x360 [ 3058.839910][T17432] ? __sys_sendmsg+0x2a0/0x2a0 [ 3058.844805][T17432] __se_sys_sendmsg+0x1c2/0x2b0 [ 3058.849727][T17432] ? __x64_sys_sendmsg+0x80/0x80 [ 3058.854755][T17432] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3058.860720][T17432] do_syscall_64+0x55/0xa0 [ 3058.865200][T17432] ? clear_bhb_loop+0x40/0x90 [ 3058.870001][T17432] ? clear_bhb_loop+0x40/0x90 [ 3058.874747][T17432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3058.880711][T17432] RIP: 0033:0x7fbb5179ce59 [ 3058.885189][T17432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3058.904930][T17432] RSP: 002b:00007fbb526cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3058.913439][T17432] RAX: ffffffffffffffda RBX: 00007fbb51a15fa0 RCX: 00007fbb5179ce59 [ 3058.921471][T17432] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3058.929511][T17432] RBP: 00007fbb51832d6f R08: 0000000000000000 R09: 0000000000000000 [ 3058.937549][T17432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3058.945568][T17432] R13: 00007fbb51a16038 R14: 00007fbb51a15fa0 R15: 00007ffc27cd2908 [ 3058.953629][T17432] [ 3058.971282][T17439] netlink: 'syz.3.15441': attribute type 27 has an invalid length. [ 3058.980975][T17439] netlink: 'syz.3.15441': attribute type 4 has an invalid length. [ 3058.990918][T17439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15441'. [ 3059.249207][T17445] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15445'. [ 3059.405586][T17452] netlink: 'syz.0.15448': attribute type 2 has an invalid length. [ 3059.423054][T17452] netlink: 'syz.0.15448': attribute type 11 has an invalid length. [ 3059.431286][T17452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15448'. [ 3059.465663][T17455] netlink: 'syz.0.15448': attribute type 1 has an invalid length. [ 3059.480290][T17455] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.15448'. [ 3059.885383][T17467] mac80211_hwsim hwsim86 wlan1: entered promiscuous mode [ 3060.102997][T12294] wlan1: Trigger new scan to find an IBSS to join [ 3060.113042][T12294] wlan1: Trigger new scan to find an IBSS to join [ 3060.247833][T17471] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15454'. [ 3060.294089][T18786] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 3060.320558][T17471] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 3060.329684][T17471] CPU: 1 PID: 17471 Comm: syz.1.15454 Not tainted syzkaller #0 [ 3060.337323][T17471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3060.347443][T17471] Call Trace: [ 3060.350773][T17471] [ 3060.353777][T17471] dump_stack_lvl+0x18c/0x250 [ 3060.358535][T17471] ? show_regs_print_info+0x20/0x20 [ 3060.363826][T17471] ? load_image+0x420/0x420 [ 3060.368424][T17471] sysfs_warn_dup+0x8e/0xa0 [ 3060.372978][T17471] sysfs_do_create_link_sd+0xc0/0x110 [ 3060.378423][T17471] device_add_class_symlinks+0x1cf/0x240 [ 3060.384139][T17471] device_add+0x507/0xc20 [ 3060.388892][T17471] wiphy_register+0x1dad/0x2ae0 [ 3060.393814][T17471] ? lock_chain_count+0x20/0x20 [ 3060.398750][T17471] ? cfg80211_event_work+0x40/0x40 [ 3060.403944][T17471] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 3060.410086][T17471] ieee80211_register_hw+0x3464/0x4250 [ 3060.415630][T17471] ? ieee80211_tasklet_handler+0x20/0x20 [ 3060.421322][T17471] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3060.427295][T17471] ? __debug_object_init+0xec/0x450 [ 3060.432577][T17471] ? __asan_memset+0x22/0x40 [ 3060.437250][T17471] ? __hrtimer_init+0x186/0x270 [ 3060.442213][T17471] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 3060.448020][T17471] ? mac80211_hwsim_free+0x220/0x220 [ 3060.453370][T17471] ? rcu_is_watching+0x15/0xb0 [ 3060.458184][T17471] ? kstrndup+0xbd/0x140 [ 3060.462470][T17471] hwsim_new_radio_nl+0xdc9/0x1a90 [ 3060.467627][T17471] ? __nla_validate+0x50/0x50 [ 3060.472337][T17471] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3060.478377][T17471] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3060.484742][T17471] ? lockdep_hardirqs_on+0x98/0x150 [ 3060.490086][T17471] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3060.496315][T17471] ? __nla_parse+0x40/0x50 [ 3060.500789][T17471] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 3060.507264][T17471] genl_family_rcv_msg_doit+0x211/0x310 [ 3060.512872][T17471] ? end_current_label_crit_section+0x170/0x170 [ 3060.519170][T17471] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 3060.525122][T17471] ? bpf_lsm_capable+0x9/0x10 [ 3060.529845][T17471] ? security_capable+0x89/0xb0 [ 3060.534746][T17471] genl_rcv_msg+0x619/0x7a0 [ 3060.539316][T17471] ? genl_bind+0x360/0x360 [ 3060.543767][T17471] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 3060.550171][T17471] netlink_rcv_skb+0x241/0x4d0 [ 3060.555000][T17471] ? genl_bind+0x360/0x360 [ 3060.559558][T17471] ? netlink_ack+0x1180/0x1180 [ 3060.564393][T17471] ? __lock_acquire+0x7d40/0x7d40 [ 3060.569466][T17471] ? net_generic+0x1e/0x240 [ 3060.574034][T17471] ? down_read+0x1ac/0x2e0 [ 3060.578490][T17471] genl_rcv+0x28/0x40 [ 3060.582500][T17471] netlink_unicast+0x751/0x8d0 [ 3060.587333][T17471] netlink_sendmsg+0x8d0/0xbf0 [ 3060.592148][T17471] ? lockdep_hardirqs_on+0x98/0x150 [ 3060.597390][T17471] ? netlink_getsockopt+0x590/0x590 [ 3060.602637][T17471] ? aa_sock_msg_perm+0x94/0x150 [ 3060.607622][T17471] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3060.612948][T17471] ? security_socket_sendmsg+0x80/0xa0 [ 3060.618451][T17471] ? netlink_getsockopt+0x590/0x590 [ 3060.623694][T17471] ____sys_sendmsg+0x5ba/0x960 [ 3060.628503][T17471] ? __asan_memset+0x22/0x40 [ 3060.633132][T17471] ? __sys_sendmsg_sock+0x30/0x30 [ 3060.638193][T17471] ? __import_iovec+0x5f2/0x850 [ 3060.643085][T17471] ? import_iovec+0x73/0xa0 [ 3060.647648][T17471] ___sys_sendmsg+0x2a6/0x360 [ 3060.652380][T17471] ? __sys_sendmsg+0x2a0/0x2a0 [ 3060.657225][T17471] __se_sys_sendmsg+0x1c2/0x2b0 [ 3060.662183][T17471] ? __x64_sys_sendmsg+0x80/0x80 [ 3060.667173][T17471] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3060.673110][T17471] do_syscall_64+0x55/0xa0 [ 3060.677562][T17471] ? clear_bhb_loop+0x40/0x90 [ 3060.682278][T17471] ? clear_bhb_loop+0x40/0x90 [ 3060.687011][T17471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3060.692938][T17471] RIP: 0033:0x7f9698b9ce59 [ 3060.697387][T17471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3060.717033][T17471] RSP: 002b:00007f9699a44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3060.725492][T17471] RAX: ffffffffffffffda RBX: 00007f9698e15fa0 RCX: 00007f9698b9ce59 [ 3060.733496][T17471] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 3060.741497][T17471] RBP: 00007f9698c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 3060.749502][T17471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3060.757511][T17471] R13: 00007f9698e16038 R14: 00007f9698e15fa0 R15: 00007ffe6addcd38 [ 3060.765543][T17471] [ 3060.779466][T18786] Bluetooth: hci3: command 0x0406 tx timeout [ 3061.343328][ T42] wlan1: Creating new IBSS network, BSSID ff:ff:ff:ff:00:00 [ 3061.352453][ T42] ------------[ cut here ]------------ [ 3061.358398][ T42] WARNING: CPU: 1 PID: 42 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3d2/0x440 [ 3061.368206][ T42] Modules linked in: [ 3061.372167][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 3061.379711][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3061.390070][ T42] Workqueue: cfg80211 cfg80211_event_work [ 3061.396011][ T42] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 3061.402218][ T42] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 98 a0 f7 0f 0b eb bb e8 de 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 d0 98 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 3061.422664][ T42] RSP: 0018:ffffc90000b2fa20 EFLAGS: 00010293 [ 3061.429092][ T42] RAX: ffffffff89e68922 RBX: dffffc0000000000 RCX: ffff888018e98000 [ 3061.437433][ T42] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 3061.445720][ T42] RBP: ffffc90000b2faf8 R08: ffffffff911c656f R09: 1ffffffff2238cad [ 3061.454009][ T42] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff88805b4e4c90 [ 3061.462084][ T42] R13: 1ffff92000165f4c R14: ffff8880210735f8 R15: 000000000000001f [ 3061.470189][ T42] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3061.479242][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3061.485948][ T42] CR2: 00007f8ccd7e8158 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 3061.494117][ T42] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3061.502239][ T42] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3061.510328][ T42] Call Trace: [ 3061.513731][ T42] [ 3061.516716][ T42] ? mutex_lock_nested+0x20/0x20 [ 3061.521801][ T42] ? trace_rdev_return_void+0x1c0/0x1c0 [ 3061.527641][ T42] cfg80211_process_wdev_events+0x3bc/0x550 [ 3061.533834][ T42] cfg80211_process_rdev_events+0xa1/0x110 [ 3061.539702][ T42] cfg80211_event_work+0x2f/0x40 [ 3061.544769][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 3061.550553][ T42] process_scheduled_works+0xa5d/0x15d0 [ 3061.556334][ T42] ? worker_attach_to_pool+0x380/0x380 [ 3061.561875][ T42] ? assign_work+0x3d2/0x5d0 [ 3061.566594][ T42] worker_thread+0xa55/0xfc0 [ 3061.571264][ T42] kthread+0x2fa/0x390 [ 3061.575442][ T42] ? pr_cont_work+0x560/0x560 [ 3061.580183][ T42] ? kthread_blkcg+0xd0/0xd0 [ 3061.584869][ T42] ret_from_fork+0x48/0x80 [ 3061.589341][ T42] ? kthread_blkcg+0xd0/0xd0 [ 3061.594037][ T42] ret_from_fork_asm+0x11/0x20 [ 3061.598888][ T42] [ 3061.601942][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3061.609238][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 3061.616638][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3061.626739][ T42] Workqueue: cfg80211 cfg80211_event_work [ 3061.632856][ T42] Call Trace: [ 3061.636166][ T42] [ 3061.639153][ T42] dump_stack_lvl+0x18c/0x250 [ 3061.643886][ T42] ? show_regs_print_info+0x20/0x20 [ 3061.649139][ T42] ? load_image+0x420/0x420 [ 3061.653695][ T42] panic+0x2dc/0x730 [ 3061.657719][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 3061.662265][ T42] ? ret_from_fork_asm+0x11/0x20 [ 3061.667244][ T42] __warn+0x2e0/0x470 [ 3061.671259][ T42] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 3061.676840][ T42] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 3061.682412][ T42] report_bug+0x2be/0x4f0 [ 3061.686766][ T42] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 3061.692346][ T42] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 3061.697924][ T42] ? __cfg80211_ibss_joined+0x3d4/0x440 [ 3061.703585][ T42] handle_bug+0xcf/0x120 [ 3061.707864][ T42] exc_invalid_op+0x1a/0x50 [ 3061.712395][ T42] asm_exc_invalid_op+0x1a/0x20 [ 3061.717277][ T42] RIP: 0010:__cfg80211_ibss_joined+0x3d2/0x440 [ 3061.723637][ T42] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 5c 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e7 98 a0 f7 0f 0b eb bb e8 de 98 a0 f7 <0f> 0b 4c 8b 6c 24 18 eb ad e8 d0 98 a0 f7 0f 0b e9 e0 fd ff ff e8 [ 3061.743280][ T42] RSP: 0018:ffffc90000b2fa20 EFLAGS: 00010293 [ 3061.749371][ T42] RAX: ffffffff89e68922 RBX: dffffc0000000000 RCX: ffff888018e98000 [ 3061.757368][ T42] RDX: 0000000000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 3061.765378][ T42] RBP: ffffc90000b2faf8 R08: ffffffff911c656f R09: 1ffffffff2238cad [ 3061.773391][ T42] R10: dffffc0000000000 R11: fffffbfff2238cae R12: ffff88805b4e4c90 [ 3061.781409][ T42] R13: 1ffff92000165f4c R14: ffff8880210735f8 R15: 000000000000001f [ 3061.789418][ T42] ? __cfg80211_ibss_joined+0x3d2/0x440 [ 3061.795099][ T42] ? mutex_lock_nested+0x20/0x20 [ 3061.800066][ T42] ? trace_rdev_return_void+0x1c0/0x1c0 [ 3061.805653][ T42] cfg80211_process_wdev_events+0x3bc/0x550 [ 3061.811583][ T42] cfg80211_process_rdev_events+0xa1/0x110 [ 3061.817423][ T42] cfg80211_event_work+0x2f/0x40 [ 3061.822391][ T42] ? process_scheduled_works+0x96f/0x15d0 [ 3061.828145][ T42] process_scheduled_works+0xa5d/0x15d0 [ 3061.833745][ T42] ? worker_attach_to_pool+0x380/0x380 [ 3061.839241][ T42] ? assign_work+0x3d2/0x5d0 [ 3061.843869][ T42] worker_thread+0xa55/0xfc0 [ 3061.848509][ T42] kthread+0x2fa/0x390 [ 3061.852604][ T42] ? pr_cont_work+0x560/0x560 [ 3061.857316][ T42] ? kthread_blkcg+0xd0/0xd0 [ 3061.861934][ T42] ret_from_fork+0x48/0x80 [ 3061.866379][ T42] ? kthread_blkcg+0xd0/0xd0 [ 3061.871086][ T42] ret_from_fork_asm+0x11/0x20 [ 3061.875890][ T42] [ 3061.879509][ T42] Kernel Offset: disabled [ 3061.883949][ T42] Rebooting in 86400 seconds..