last executing test programs: 22.02799169s ago: executing program 0 (id=12115): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417", 0x69}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x63, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xb}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) close(r6) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.687570099s ago: executing program 0 (id=12118): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c008188040f80ec59acbc0413a1f8480e0000005e140602110000000e000400", 0x24}], 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 21.156379532s ago: executing program 0 (id=12120): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x20}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x101, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x6}, 0x14000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='.\x00\x00', @ANYRES32], 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f00000000c0)=0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 21.025375615s ago: executing program 0 (id=12122): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) 17.94735759s ago: executing program 0 (id=12152): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone(0x20021000, &(0x7f0000001180), 0x0, &(0x7f0000001040), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, r3, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) 16.299629461s ago: executing program 0 (id=12160): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 11.615405105s ago: executing program 3 (id=12179): socket$kcm(0x2, 0xa, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x29, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], 0x27) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) close(0xffffffffffffffff) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x6b, &(0x7f0000000000), 0x10) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x891c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 11.614422085s ago: executing program 2 (id=12188): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) close(r0) 11.568372226s ago: executing program 1 (id=12180): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone(0x20021000, &(0x7f0000001180), 0x0, &(0x7f0000001040), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, r3, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) 11.42391462s ago: executing program 3 (id=12181): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)='.', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}], 0x1}, 0x20) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) 11.42185604s ago: executing program 2 (id=12191): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) close(r0) 11.127681767s ago: executing program 3 (id=12182): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c008188040f80ec59acbc0413a1f8480e0000005e140602110000000e000400", 0x24}], 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 9.419405439s ago: executing program 2 (id=12183): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x37, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4009044) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) 9.38045337s ago: executing program 3 (id=12185): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000600), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x1}, @jmp={0x5, 0x1, 0x5, 0x2, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', r2, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xfac1, 0x6, 0x10001, 0x1, r1, 0x40, '\x00', r2, r0, 0x1, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r5, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x2}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x408000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000980)={'veth1\x00', @local}) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0xa1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @ldst={0x1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r9, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xf9, 0xf3, &(0x7f00000009c0)="a1bf6c851fdeedf21afe586c784d8df7970c7d91351466b14951625ad16b265e94348774e4eadf19d628175b8b9a910e78a513baeac062601b81133fe3c5f81ab0add4c143044147214671b57e9653c131eb50b0b24cd397e3ebe3d86b730c2a9736043b15c2d80f77e6e07149535fe93d9467a9fa2afc91759c3fe2d7a8a055b3f1005ac3052bb6047626eee14551e39e7b0028db85e18e71541e1b087ff472b1161a6e87772ef34e24143e251d648f78494b1c5ecb389dc7da00f2f0742c0f5501ea356c0594b3679e04a701fb2eade8e90bcf20bc5af7330025c6c94cc4c3c0d65e21e76555ab56b5a5745bb3aafa310c9a889fa5caee84", &(0x7f0000000ac0)=""/243, 0x4, 0x0, 0x1a, 0x3c, &(0x7f0000000bc0)="6ce47b1536edeb1070ee542d6446b5700a957d5b2e89101a66db", &(0x7f0000000c00)="9cc605090b492a98f1214ca5d933e581c774934d360e1b5e97d7a8f7114a8591d242687ace0763e16d65cc3e7b0f17477b7a9f8d45c4f0b1758f40f5", 0x6, 0x0, 0x9}, 0x50) 9.323127262s ago: executing program 1 (id=12186): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r10) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0) 9.195245355s ago: executing program 1 (id=12187): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c008188040f80ec59acbc0413a1f8480e0000005e140602110000000e000400", 0x24}], 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 8.956178341s ago: executing program 3 (id=12189): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417", 0x69}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x63, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xb}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) close(r6) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.954736881s ago: executing program 2 (id=12198): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone(0x20021000, &(0x7f0000001180), 0x0, &(0x7f0000001040), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x7, 0x2, 0x0, 0x0, 0x7fc}, r3, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63493630"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) 8.953602711s ago: executing program 1 (id=12190): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 476.214818ms ago: executing program 32 (id=12160): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 450.257889ms ago: executing program 2 (id=12193): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xffffffff00000000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000700600000000000009000000731117000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80001, 0x1ff}, 0x0, 0x9, 0x0, 0xc, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfdef) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x6, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x20, 0x20, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x7}, 0x0, 0xc8, 0x1000, 0x3, 0x0, 0x101, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 449.788669ms ago: executing program 3 (id=12194): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 448.854309ms ago: executing program 1 (id=12201): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x20}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x101, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x6}, 0x14000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='.\x00\x00', @ANYRES32], 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000400000008"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f00000000c0)=0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 39.864819ms ago: executing program 1 (id=12195): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000002c008188040f80ec59acbc0413a1f8480e0000005e140602110000000e000400", 0x24}], 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 0s ago: executing program 2 (id=12196): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) close(r0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.10708'. [ 2084.918496][ T3581] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10717'. [ 2085.305734][ T3584] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10718'. [ 2085.979315][ T3610] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10730'. [ 2086.287845][ T3613] netlink: 'syz.1.10731': attribute type 39 has an invalid length. [ 2086.417317][ T3617] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10740'. [ 2086.773392][ T3623] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10735'. [ 2087.691625][ T3645] netlink: 'syz.2.10743': attribute type 10 has an invalid length. [ 2087.730555][ T3645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10743'. [ 2087.806744][ T3650] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10744'. [ 2088.057242][ T3659] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10746'. [ 2088.993057][ T3685] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10757'. [ 2089.030332][ T3687] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10758'. [ 2089.348917][ T3697] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 2089.369979][ T3697] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 2089.414945][ T3700] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 2089.430335][ T3700] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 2090.253705][ T3719] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10769'. [ 2090.307590][ T3721] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10768'. [ 2090.828176][ T3733] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10775'. [ 2091.317983][ T3748] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10781'. [ 2091.506441][ T3749] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10780'. [ 2091.995012][ T3764] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10786'. [ 2092.138510][ T3768] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10787'. [ 2092.159145][ T3768] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10787'. [ 2092.185398][ T3771] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10787'. [ 2092.770679][ T3784] netlink: 'syz.3.10792': attribute type 39 has an invalid length. [ 2092.837270][ T3787] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10794'. [ 2093.057804][ T3789] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 2093.064911][ T3789] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 2093.103194][ T3790] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 2093.130416][ T3790] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 2093.914242][ T3806] netlink: 'syz.2.10800': attribute type 10 has an invalid length. [ 2094.904886][ T3829] netlink: 'syz.0.10810': attribute type 39 has an invalid length. [ 2095.532397][ T3843] netlink: 'syz.2.10814': attribute type 21 has an invalid length. [ 2095.570372][ T3843] __nla_validate_parse: 9 callbacks suppressed [ 2095.570390][ T3843] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10814'. [ 2095.650740][ T3843] netlink: 'syz.2.10814': attribute type 5 has an invalid length. [ 2095.658654][ T3843] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10814'. [ 2095.736737][ T3848] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10815'. [ 2095.914285][ T3852] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10817'. [ 2096.286679][ T3858] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10819'. [ 2096.542148][ T3860] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 2096.679591][ T3860] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 2096.892117][ T3868] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10821'. [ 2096.934605][ T3865] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 2096.952906][ T3865] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 2097.099887][ T3868] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10821'. [ 2097.130022][ T3870] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10821'. [ 2098.072241][ T3880] netlink: 'syz.3.10825': attribute type 39 has an invalid length. [ 2098.349647][ T3888] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10827'. [ 2098.702607][ T3894] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10829'. [ 2099.053274][ T3896] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 2099.081338][ T3896] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 2099.127733][ T3901] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 2099.135130][ T3901] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 2099.340584][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.346997][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.500853][ T3929] netlink: 'syz.3.10841': attribute type 21 has an invalid length. [ 2100.573487][ T3929] netlink: 'syz.3.10841': attribute type 5 has an invalid length. [ 2100.670239][ T3929] __nla_validate_parse: 8 callbacks suppressed [ 2100.670260][ T3929] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10841'. [ 2100.868447][ T3938] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10844'. [ 2100.999000][ T3942] netlink: 'syz.0.10842': attribute type 39 has an invalid length. [ 2101.246003][ T3945] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10845'. [ 2101.275349][ T3945] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10845'. [ 2101.301523][ T3946] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10845'. [ 2102.685232][ T3955] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10847'. [ 2103.195115][ T3958] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 2103.238939][ T3958] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 2103.339667][ T3963] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 2103.359964][ T3963] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 2104.028153][ T3972] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10853'. [ 2104.564240][ T3975] netlink: 'syz.3.10856': attribute type 39 has an invalid length. [ 2104.674963][ T3983] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10859'. [ 2105.070268][ T3987] netlink: 'syz.0.10858': attribute type 21 has an invalid length. [ 2105.091582][ T3987] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10858'. [ 2105.180334][ T3987] netlink: 'syz.0.10858': attribute type 5 has an invalid length. [ 2105.261516][ T3987] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10858'. [ 2106.401949][ T4004] netlink: 'syz.1.10865': attribute type 9 has an invalid length. [ 2106.413618][ T4004] __nla_validate_parse: 3 callbacks suppressed [ 2106.413761][ T4004] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10865'. [ 2107.681326][ T4016] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10869'. [ 2108.113279][ T4015] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 2108.158462][ T4026] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10872'. [ 2108.205924][ T4015] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 2108.349336][ T4019] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 2108.358603][ T4019] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 2108.404315][ T4021] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 2108.446281][ T4021] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 2108.490269][ T4023] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 2108.540520][ T4023] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 2108.581341][ T4026] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10872'. [ 2108.622043][ T4028] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10872'. [ 2110.353086][ T4044] netlink: 'syz.1.10876': attribute type 21 has an invalid length. [ 2110.389922][ T4044] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10876'. [ 2110.409505][ T4044] netlink: 'syz.1.10876': attribute type 5 has an invalid length. [ 2110.439853][ T4044] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10876'. [ 2110.606592][ T4039] netlink: 'syz.3.10884': attribute type 39 has an invalid length. [ 2112.993649][ T4070] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 2113.010289][ T4070] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 2113.184803][ T4072] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 2113.211318][ T4072] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 2114.597579][ T4082] netlink: 'syz.2.10888': attribute type 9 has an invalid length. [ 2114.679685][ T4082] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10888'. [ 2115.351264][ T4102] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10892'. [ 2116.252563][ T4107] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 2116.311526][ T4107] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 2116.391612][ T4115] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10898'. [ 2116.420808][ T4112] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 2116.449971][ T4112] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 2116.683584][ T4105] netlink: 'syz.3.10893': attribute type 39 has an invalid length. [ 2117.329007][ T4125] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 2117.351732][ T4125] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 2117.482062][ T4128] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 2117.489277][ T4128] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 2118.279651][ T4139] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10905'. [ 2118.782527][ T4148] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.10909'. [ 2119.055657][ T4152] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10911'. [ 2119.976002][ T4162] netlink: 'syz.3.10913': attribute type 9 has an invalid length. [ 2120.040158][ T4162] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10913'. [ 2120.388999][ T4175] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 2120.410713][ T4175] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 2120.554660][ T4181] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10918'. [ 2120.612028][ T4178] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 2120.629445][ T4178] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 2120.742830][ T4182] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10919'. [ 2120.864362][ T4185] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10920'. [ 2120.889677][ T4185] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10920'. [ 2120.913983][ T4187] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10920'. [ 2121.931118][ T4204] netlink: 'syz.0.10936': attribute type 9 has an invalid length. [ 2121.942795][ T4204] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10936'. [ 2122.531719][ T4208] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 2122.553348][ T4208] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 2122.601685][ T4211] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 2122.624138][ T4211] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 2122.934308][ T4216] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10930'. [ 2123.147894][ T4217] netlink: 'syz.0.10940': attribute type 39 has an invalid length. [ 2123.188872][ T4224] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10933'. [ 2124.239335][ T4233] netlink: 'syz.1.10946': attribute type 10 has an invalid length. [ 2124.247882][ T4233] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10946'. [ 2124.597454][ T4235] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 2124.670288][ T4235] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 2124.761733][ T4243] netlink: 'syz.1.10942': attribute type 9 has an invalid length. [ 2124.771223][ T4240] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 2124.771262][ T4240] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 2125.256587][ T4251] __nla_validate_parse: 1 callbacks suppressed [ 2125.256608][ T4251] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10944'. [ 2126.686376][ T4268] netlink: 'syz.0.10950': attribute type 39 has an invalid length. [ 2127.079555][ T4281] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10955'. [ 2127.888999][ T4285] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10956'. [ 2128.455152][ T4290] netlink: 'syz.3.10958': attribute type 9 has an invalid length. [ 2128.465676][ T4290] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10958'. [ 2129.894910][ T4298] netlink: 'syz.2.10969': attribute type 9 has an invalid length. [ 2129.906292][ T4298] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10969'. [ 2131.479631][ T4322] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10966'. [ 2131.696294][ T4325] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10970'. [ 2131.774577][ T4325] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2131.790130][ T4325] CPU: 1 PID: 4325 Comm: syz.3.10970 Not tainted syzkaller #0 [ 2131.797673][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2131.807780][ T4325] Call Trace: [ 2131.811102][ T4325] [ 2131.814081][ T4325] dump_stack_lvl+0x18c/0x250 [ 2131.818818][ T4325] ? show_regs_print_info+0x20/0x20 [ 2131.824090][ T4325] ? load_image+0x420/0x420 [ 2131.828992][ T4325] sysfs_warn_dup+0x8e/0xa0 [ 2131.833528][ T4325] sysfs_do_create_link_sd+0xc0/0x110 [ 2131.838936][ T4325] device_add_class_symlinks+0x1cf/0x240 [ 2131.844607][ T4325] device_add+0x4f9/0xc40 [ 2131.848967][ T4325] wiphy_register+0x1d99/0x2ac0 [ 2131.853863][ T4325] ? cfg80211_event_work+0x40/0x40 [ 2131.859033][ T4325] ? minstrel_ht_alloc+0x88a/0x990 [ 2131.864190][ T4325] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2131.870304][ T4325] ieee80211_register_hw+0x2dd8/0x3b30 [ 2131.875800][ T4325] ? ieee80211_register_hw+0xf51/0x3b30 [ 2131.881381][ T4325] ? ieee80211_tasklet_handler+0x20/0x20 [ 2131.887049][ T4325] ? kasan_check_range+0x12/0x290 [ 2131.892105][ T4325] ? __asan_memset+0x22/0x40 [ 2131.896736][ T4325] ? __hrtimer_init+0x189/0x270 [ 2131.901622][ T4325] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2131.907407][ T4325] ? mac80211_hwsim_free+0x220/0x220 [ 2131.912711][ T4325] ? rcu_is_watching+0x15/0xb0 [ 2131.917500][ T4325] ? kstrndup+0xbd/0x140 [ 2131.921776][ T4325] hwsim_new_radio_nl+0xdad/0x1a70 [ 2131.926908][ T4325] ? mark_lock+0x94/0x320 [ 2131.931260][ T4325] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2131.937277][ T4325] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2131.943636][ T4325] ? lockdep_hardirqs_on+0x98/0x150 [ 2131.948871][ T4325] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2131.955068][ T4325] ? genl_family_rcv_msg_attrs_parse+0x20e/0x290 [ 2131.961454][ T4325] genl_family_rcv_msg_doit+0x21a/0x310 [ 2131.967069][ T4325] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2131.972992][ T4325] ? bpf_lsm_capable+0x9/0x10 [ 2131.977711][ T4325] ? security_capable+0x89/0xb0 [ 2131.982604][ T4325] genl_rcv_msg+0x611/0x7a0 [ 2131.987161][ T4325] ? genl_bind+0x360/0x360 [ 2131.991599][ T4325] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2131.997963][ T4325] netlink_rcv_skb+0x235/0x4c0 [ 2132.002761][ T4325] ? genl_bind+0x360/0x360 [ 2132.007207][ T4325] ? netlink_ack+0x1160/0x1160 [ 2132.012014][ T4325] ? __lock_acquire+0x7d80/0x7d80 [ 2132.017089][ T4325] ? net_generic+0x1e/0x240 [ 2132.021649][ T4325] ? down_read+0x1ac/0x2e0 [ 2132.026112][ T4325] genl_rcv+0x28/0x40 [ 2132.030117][ T4325] netlink_unicast+0x7b1/0x930 [ 2132.034923][ T4325] netlink_sendmsg+0x8d0/0xbf0 [ 2132.039722][ T4325] ? netlink_getsockopt+0x590/0x590 [ 2132.044948][ T4325] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2132.050547][ T4325] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2132.055863][ T4325] ? security_socket_sendmsg+0x80/0xa0 [ 2132.061350][ T4325] ? netlink_getsockopt+0x590/0x590 [ 2132.066579][ T4325] ____sys_sendmsg+0x61b/0x980 [ 2132.071372][ T4325] ? __asan_memset+0x22/0x40 [ 2132.075995][ T4325] ? __sys_sendmsg_sock+0x30/0x30 [ 2132.081045][ T4325] ? __import_iovec+0x5f2/0x850 [ 2132.086021][ T4325] ? import_iovec+0x73/0xa0 [ 2132.090577][ T4325] ___sys_sendmsg+0x2a6/0x360 [ 2132.095285][ T4325] ? __sys_sendmsg+0x2b0/0x2b0 [ 2132.100115][ T4325] __se_sys_sendmsg+0x1d0/0x2c0 [ 2132.105013][ T4325] ? __x64_sys_sendmsg+0x80/0x80 [ 2132.110086][ T4325] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2132.116020][ T4325] do_syscall_64+0x55/0xb0 [ 2132.120480][ T4325] ? clear_bhb_loop+0x40/0x90 [ 2132.125187][ T4325] ? clear_bhb_loop+0x40/0x90 [ 2132.129896][ T4325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2132.135812][ T4325] RIP: 0033:0x7f3b8e99de99 [ 2132.140256][ T4325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2132.159933][ T4325] RSP: 002b:00007f3b8f867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2132.168376][ T4325] RAX: ffffffffffffffda RBX: 00007f3b8ec25fa0 RCX: 00007f3b8e99de99 [ 2132.176373][ T4325] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2132.184386][ T4325] RBP: 00007f3b8ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 2132.192399][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2132.200392][ T4325] R13: 00007f3b8ec26038 R14: 00007f3b8ec25fa0 R15: 00007ffdef041048 [ 2132.208407][ T4325] [ 2132.690342][ T4339] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10976'. [ 2132.938926][ T4332] netlink: 'syz.2.10973': attribute type 10 has an invalid length. [ 2132.967869][ T4332] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10973'. [ 2133.787298][ T4356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10981'. [ 2134.071916][ T4362] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10985'. [ 2134.274157][ T4360] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10982'. [ 2135.021162][ T4365] mac80211_hwsim hwsim53 wlan0: left promiscuous mode [ 2135.076559][ T4365] mac80211_hwsim hwsim53 wlan0: left allmulticast mode [ 2135.133467][ T4371] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 2135.151270][ T4371] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 2135.315994][ T4377] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10988'. [ 2135.330191][ T4377] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10988'. [ 2135.388070][ T4377] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10988'. [ 2135.533303][ T4381] netlink: 'syz.1.10990': attribute type 9 has an invalid length. [ 2136.668353][ T4409] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 2136.686621][ T4409] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 2136.736394][ T4412] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 2136.786514][ T4412] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 2137.275740][ T4421] __nla_validate_parse: 2 callbacks suppressed [ 2137.275779][ T4421] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11005'. [ 2137.363105][ T4419] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11004'. [ 2138.212200][ T4442] netlink: 'syz.0.11011': attribute type 10 has an invalid length. [ 2138.239138][ T4442] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11011'. [ 2138.459667][ T4449] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11016'. [ 2138.499626][ T4447] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 2138.507872][ T4447] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 2138.606047][ T4453] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 2138.634259][ T4453] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 2138.643556][ T4455] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11018'. [ 2138.921090][ T4451] netlink: 'syz.1.11017': attribute type 39 has an invalid length. [ 2140.249319][ T4480] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11027'. [ 2140.407697][ T4482] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11028'. [ 2140.418715][ T4484] netlink: 'syz.0.11029': attribute type 21 has an invalid length. [ 2140.449923][ T4484] IPv6: NLM_F_CREATE should be specified when creating new route [ 2140.458552][ T4484] IPv6: Can't replace route, no match found [ 2140.519684][ T4482] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2140.579104][ T4482] CPU: 1 PID: 4482 Comm: syz.2.11028 Not tainted syzkaller #0 [ 2140.586661][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2140.596800][ T4482] Call Trace: [ 2140.600136][ T4482] [ 2140.603110][ T4482] dump_stack_lvl+0x18c/0x250 [ 2140.607859][ T4482] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2140.614073][ T4482] ? show_regs_print_info+0x20/0x20 [ 2140.619331][ T4482] ? load_image+0x420/0x420 [ 2140.623922][ T4482] ? sysfs_warn_dup+0x65/0xa0 [ 2140.628667][ T4482] sysfs_warn_dup+0x8e/0xa0 [ 2140.633234][ T4482] sysfs_do_create_link_sd+0xc0/0x110 [ 2140.638665][ T4482] device_add_class_symlinks+0x1cf/0x240 [ 2140.644395][ T4482] device_add+0x4f9/0xc40 [ 2140.648784][ T4482] wiphy_register+0x1d99/0x2ac0 [ 2140.653721][ T4482] ? cfg80211_event_work+0x40/0x40 [ 2140.658895][ T4482] ? minstrel_ht_alloc+0x88a/0x990 [ 2140.664104][ T4482] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2140.670245][ T4482] ieee80211_register_hw+0x2dd8/0x3b30 [ 2140.675775][ T4482] ? ieee80211_register_hw+0xf51/0x3b30 [ 2140.681387][ T4482] ? ieee80211_tasklet_handler+0x20/0x20 [ 2140.687084][ T4482] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2140.693056][ T4482] ? __debug_object_init+0xec/0x450 [ 2140.698299][ T4482] ? __asan_memset+0x22/0x40 [ 2140.702928][ T4482] ? __hrtimer_init+0x189/0x270 [ 2140.707811][ T4482] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2140.713603][ T4482] ? mac80211_hwsim_free+0x220/0x220 [ 2140.718959][ T4482] ? rcu_is_watching+0x15/0xb0 [ 2140.723774][ T4482] ? kstrndup+0xbd/0x140 [ 2140.728068][ T4482] hwsim_new_radio_nl+0xdad/0x1a70 [ 2140.733223][ T4482] ? __nla_validate+0x50/0x50 [ 2140.737950][ T4482] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2140.744346][ T4482] ? __nla_parse+0x40/0x50 [ 2140.748810][ T4482] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2140.755177][ T4482] genl_family_rcv_msg_doit+0x21a/0x310 [ 2140.760772][ T4482] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2140.766705][ T4482] ? bpf_lsm_capable+0x9/0x10 [ 2140.771420][ T4482] ? security_capable+0x89/0xb0 [ 2140.776304][ T4482] genl_rcv_msg+0x611/0x7a0 [ 2140.780852][ T4482] ? genl_bind+0x360/0x360 [ 2140.785299][ T4482] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2140.791313][ T4482] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2140.797669][ T4482] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2140.803862][ T4482] netlink_rcv_skb+0x235/0x4c0 [ 2140.808667][ T4482] ? genl_bind+0x360/0x360 [ 2140.813114][ T4482] ? netlink_ack+0x1160/0x1160 [ 2140.817927][ T4482] ? __lock_acquire+0x7d80/0x7d80 [ 2140.822987][ T4482] ? down_read+0x1ac/0x2e0 [ 2140.827441][ T4482] genl_rcv+0x28/0x40 [ 2140.831450][ T4482] netlink_unicast+0x7b1/0x930 [ 2140.836291][ T4482] netlink_sendmsg+0x8d0/0xbf0 [ 2140.841262][ T4482] ? netlink_getsockopt+0x590/0x590 [ 2140.846507][ T4482] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2140.852106][ T4482] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2140.857421][ T4482] ? security_socket_sendmsg+0x80/0xa0 [ 2140.862914][ T4482] ? netlink_getsockopt+0x590/0x590 [ 2140.868135][ T4482] ____sys_sendmsg+0x61b/0x980 [ 2140.872948][ T4482] ? __asan_memset+0x22/0x40 [ 2140.877578][ T4482] ? __sys_sendmsg_sock+0x30/0x30 [ 2140.882642][ T4482] ? __import_iovec+0x5f2/0x850 [ 2140.887545][ T4482] ? import_iovec+0x73/0xa0 [ 2140.892197][ T4482] ___sys_sendmsg+0x2a6/0x360 [ 2140.896942][ T4482] ? __sys_sendmsg+0x2b0/0x2b0 [ 2140.901788][ T4482] __se_sys_sendmsg+0x1d0/0x2c0 [ 2140.906674][ T4482] ? __x64_sys_sendmsg+0x80/0x80 [ 2140.911680][ T4482] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2140.917630][ T4482] do_syscall_64+0x55/0xb0 [ 2140.922096][ T4482] ? clear_bhb_loop+0x40/0x90 [ 2140.926805][ T4482] ? clear_bhb_loop+0x40/0x90 [ 2140.931520][ T4482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2140.937448][ T4482] RIP: 0033:0x7f42ef79de99 [ 2140.941893][ T4482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2140.961532][ T4482] RSP: 002b:00007f42f05cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2140.969982][ T4482] RAX: ffffffffffffffda RBX: 00007f42efa25fa0 RCX: 00007f42ef79de99 [ 2140.977976][ T4482] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2140.985975][ T4482] RBP: 00007f42ef833eaf R08: 0000000000000000 R09: 0000000000000000 [ 2140.993971][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2141.001966][ T4482] R13: 00007f42efa26038 R14: 00007f42efa25fa0 R15: 00007ffcf7b00e88 [ 2141.009983][ T4482] [ 2141.170524][ T4484] netlink: 'syz.0.11029': attribute type 10 has an invalid length. [ 2142.238643][ T4508] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11038'. [ 2142.885639][ T4514] netlink: 'syz.2.11041': attribute type 39 has an invalid length. [ 2143.683759][ T4530] netlink: 'syz.1.11046': attribute type 10 has an invalid length. [ 2143.814712][ T4534] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11047'. [ 2143.850871][ T4533] netlink: 'syz.1.11046': attribute type 10 has an invalid length. [ 2144.698521][ T4553] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11054'. [ 2144.782981][ T4554] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11050'. [ 2145.674530][ T4559] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11056'. [ 2145.724271][ T4559] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2145.760031][ T4559] CPU: 1 PID: 4559 Comm: syz.0.11056 Not tainted syzkaller #0 [ 2145.767586][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2145.777703][ T4559] Call Trace: [ 2145.781022][ T4559] [ 2145.783991][ T4559] dump_stack_lvl+0x18c/0x250 [ 2145.788729][ T4559] ? show_regs_print_info+0x20/0x20 [ 2145.793970][ T4559] ? load_image+0x420/0x420 [ 2145.798532][ T4559] sysfs_warn_dup+0x8e/0xa0 [ 2145.803083][ T4559] sysfs_do_create_link_sd+0xc0/0x110 [ 2145.808515][ T4559] device_add_class_symlinks+0x1cf/0x240 [ 2145.814210][ T4559] device_add+0x4f9/0xc40 [ 2145.818603][ T4559] wiphy_register+0x1d99/0x2ac0 [ 2145.823529][ T4559] ? cfg80211_event_work+0x40/0x40 [ 2145.828711][ T4559] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2145.834948][ T4559] ? ieee80211_register_hw+0x2d37/0x3b30 [ 2145.840743][ T4559] ieee80211_register_hw+0x2dd8/0x3b30 [ 2145.846295][ T4559] ? ieee80211_register_hw+0xf51/0x3b30 [ 2145.851940][ T4559] ? ieee80211_tasklet_handler+0x20/0x20 [ 2145.857631][ T4559] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2145.863586][ T4559] ? __debug_object_init+0xec/0x450 [ 2145.868847][ T4559] ? __asan_memset+0x22/0x40 [ 2145.873509][ T4559] ? __hrtimer_init+0x189/0x270 [ 2145.878397][ T4559] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2145.884167][ T4559] ? mac80211_hwsim_free+0x220/0x220 [ 2145.889507][ T4559] ? rcu_is_watching+0x15/0xb0 [ 2145.894328][ T4559] ? kstrndup+0xbd/0x140 [ 2145.898637][ T4559] hwsim_new_radio_nl+0xdad/0x1a70 [ 2145.903799][ T4559] ? __nla_validate+0x50/0x50 [ 2145.908522][ T4559] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2145.914895][ T4559] ? __nla_parse+0x40/0x50 [ 2145.919343][ T4559] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2145.925715][ T4559] genl_family_rcv_msg_doit+0x21a/0x310 [ 2145.931304][ T4559] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2145.937246][ T4559] ? bpf_lsm_capable+0x9/0x10 [ 2145.941973][ T4559] ? security_capable+0x89/0xb0 [ 2145.946859][ T4559] genl_rcv_msg+0x611/0x7a0 [ 2145.951399][ T4559] ? genl_bind+0x360/0x360 [ 2145.955848][ T4559] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2145.962206][ T4559] ? irqentry_enter+0x37/0x50 [ 2145.966923][ T4559] netlink_rcv_skb+0x235/0x4c0 [ 2145.971737][ T4559] ? genl_bind+0x360/0x360 [ 2145.976181][ T4559] ? netlink_ack+0x1160/0x1160 [ 2145.980996][ T4559] ? __lock_acquire+0x7d80/0x7d80 [ 2145.986050][ T4559] ? check_preemption_disabled+0x37/0x110 [ 2145.991817][ T4559] ? down_read+0x1ac/0x2e0 [ 2145.996294][ T4559] genl_rcv+0x28/0x40 [ 2146.000386][ T4559] netlink_unicast+0x7b1/0x930 [ 2146.005220][ T4559] netlink_sendmsg+0x8d0/0xbf0 [ 2146.010019][ T4559] ? aa_sock_msg_perm+0x1d/0x150 [ 2146.014989][ T4559] ? netlink_getsockopt+0x590/0x590 [ 2146.020216][ T4559] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2146.025790][ T4559] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2146.031103][ T4559] ? security_socket_sendmsg+0x80/0xa0 [ 2146.036677][ T4559] ? netlink_getsockopt+0x590/0x590 [ 2146.041905][ T4559] ____sys_sendmsg+0x61b/0x980 [ 2146.046696][ T4559] ? lockdep_hardirqs_on+0x98/0x150 [ 2146.051933][ T4559] ? __asan_memset+0x22/0x40 [ 2146.056557][ T4559] ? __sys_sendmsg_sock+0x30/0x30 [ 2146.061609][ T4559] ? __import_iovec+0x5f2/0x850 [ 2146.066503][ T4559] ? import_iovec+0x73/0xa0 [ 2146.071045][ T4559] ___sys_sendmsg+0x2a6/0x360 [ 2146.075755][ T4559] ? __sys_sendmsg+0x2b0/0x2b0 [ 2146.080587][ T4559] __se_sys_sendmsg+0x1d0/0x2c0 [ 2146.085467][ T4559] ? __x64_sys_sendmsg+0x80/0x80 [ 2146.090457][ T4559] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2146.096391][ T4559] do_syscall_64+0x55/0xb0 [ 2146.100846][ T4559] ? clear_bhb_loop+0x40/0x90 [ 2146.105547][ T4559] ? clear_bhb_loop+0x40/0x90 [ 2146.110250][ T4559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2146.116169][ T4559] RIP: 0033:0x7f4a0f59de99 [ 2146.120611][ T4559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2146.140245][ T4559] RSP: 002b:00007f4a103f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2146.148690][ T4559] RAX: ffffffffffffffda RBX: 00007f4a0f825fa0 RCX: 00007f4a0f59de99 [ 2146.156694][ T4559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2146.164776][ T4559] RBP: 00007f4a0f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 2146.172771][ T4559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2146.180773][ T4559] R13: 00007f4a0f826038 R14: 00007f4a0f825fa0 R15: 00007fff572b8f78 [ 2146.188780][ T4559] [ 2146.261769][ T4566] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11057'. [ 2147.036597][ T4579] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11063'. [ 2147.070278][ T4582] veth1_to_bond: entered allmulticast mode [ 2147.126112][ T4575] netlink: 'syz.1.11061': attribute type 21 has an invalid length. [ 2147.153358][ T4575] IPv6: NLM_F_CREATE should be specified when creating new route [ 2147.270962][ T4575] IPv6: Can't replace route, no match found [ 2147.381325][ T4575] netlink: 'syz.1.11061': attribute type 10 has an invalid length. [ 2147.402490][ T4581] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11062'. [ 2148.267268][ T4593] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 2148.852612][ T4602] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11070'. [ 2149.022408][ T4602] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2149.075017][ T4602] CPU: 0 PID: 4602 Comm: syz.1.11070 Not tainted syzkaller #0 [ 2149.082585][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2149.092686][ T4602] Call Trace: [ 2149.096015][ T4602] [ 2149.098992][ T4602] dump_stack_lvl+0x18c/0x250 [ 2149.103726][ T4602] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2149.109964][ T4602] ? show_regs_print_info+0x20/0x20 [ 2149.115208][ T4602] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2149.121459][ T4602] sysfs_warn_dup+0x8e/0xa0 [ 2149.126020][ T4602] sysfs_do_create_link_sd+0xc0/0x110 [ 2149.131458][ T4602] device_add_class_symlinks+0x1cf/0x240 [ 2149.137144][ T4602] device_add+0x4f9/0xc40 [ 2149.141568][ T4602] wiphy_register+0x1d99/0x2ac0 [ 2149.146474][ T4602] ? __rtnl_unlock+0x18/0xe0 [ 2149.151214][ T4602] ? cfg80211_event_work+0x40/0x40 [ 2149.156370][ T4602] ? minstrel_ht_alloc+0x88a/0x990 [ 2149.161580][ T4602] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2149.167695][ T4602] ieee80211_register_hw+0x2dd8/0x3b30 [ 2149.173240][ T4602] ? ieee80211_register_hw+0xf51/0x3b30 [ 2149.178842][ T4602] ? ieee80211_tasklet_handler+0x20/0x20 [ 2149.184530][ T4602] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2149.190488][ T4602] ? __debug_object_init+0xec/0x450 [ 2149.195747][ T4602] ? __asan_memset+0x22/0x40 [ 2149.200427][ T4602] ? __hrtimer_init+0x189/0x270 [ 2149.205414][ T4602] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2149.211217][ T4602] ? mac80211_hwsim_free+0x220/0x220 [ 2149.216578][ T4602] ? rcu_is_watching+0x15/0xb0 [ 2149.221401][ T4602] ? kstrndup+0xbd/0x140 [ 2149.225720][ T4602] hwsim_new_radio_nl+0xdad/0x1a70 [ 2149.230900][ T4602] ? mark_lock+0x94/0x320 [ 2149.235285][ T4602] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2149.241345][ T4602] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2149.247725][ T4602] ? lockdep_hardirqs_on+0x98/0x150 [ 2149.253071][ T4602] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2149.259284][ T4602] ? genl_family_rcv_msg_attrs_parse+0x1d5/0x290 [ 2149.265666][ T4602] ? genl_family_rcv_msg_attrs_parse+0x205/0x290 [ 2149.272061][ T4602] genl_family_rcv_msg_doit+0x21a/0x310 [ 2149.277675][ T4602] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2149.283631][ T4602] ? bpf_lsm_capable+0x9/0x10 [ 2149.288382][ T4602] ? security_capable+0x89/0xb0 [ 2149.293292][ T4602] genl_rcv_msg+0x611/0x7a0 [ 2149.297877][ T4602] ? genl_bind+0x360/0x360 [ 2149.302337][ T4602] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2149.308717][ T4602] ? netlink_rcv_skb+0x214/0x4c0 [ 2149.313718][ T4602] netlink_rcv_skb+0x235/0x4c0 [ 2149.318563][ T4602] ? genl_bind+0x360/0x360 [ 2149.323043][ T4602] ? netlink_ack+0x1160/0x1160 [ 2149.327889][ T4602] ? __lock_acquire+0x7d80/0x7d80 [ 2149.332979][ T4602] ? net_generic+0x1e/0x240 [ 2149.337588][ T4602] ? down_read+0x1ac/0x2e0 [ 2149.342071][ T4602] genl_rcv+0x28/0x40 [ 2149.346103][ T4602] netlink_unicast+0x7b1/0x930 [ 2149.350939][ T4602] netlink_sendmsg+0x8d0/0xbf0 [ 2149.355762][ T4602] ? netlink_getsockopt+0x590/0x590 [ 2149.361013][ T4602] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2149.366613][ T4602] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2149.371960][ T4602] ? security_socket_sendmsg+0x80/0xa0 [ 2149.377462][ T4602] ? netlink_getsockopt+0x590/0x590 [ 2149.382714][ T4602] ____sys_sendmsg+0x61b/0x980 [ 2149.387548][ T4602] ? __asan_memset+0x22/0x40 [ 2149.392201][ T4602] ? __sys_sendmsg_sock+0x30/0x30 [ 2149.397279][ T4602] ? __import_iovec+0x5f2/0x850 [ 2149.402178][ T4602] ? import_iovec+0x73/0xa0 [ 2149.406738][ T4602] ___sys_sendmsg+0x2a6/0x360 [ 2149.411467][ T4602] ? __sys_sendmsg+0x2b0/0x2b0 [ 2149.416307][ T4602] ? trace_call_bpf+0xc3/0x6c0 [ 2149.421149][ T4602] __se_sys_sendmsg+0x1d0/0x2c0 [ 2149.426056][ T4602] ? perf_trace_preemptirq_template+0x269/0x330 [ 2149.432361][ T4602] ? __x64_sys_sendmsg+0x80/0x80 [ 2149.437396][ T4602] ? lockdep_hardirqs_on+0x98/0x150 [ 2149.442658][ T4602] do_syscall_64+0x55/0xb0 [ 2149.447127][ T4602] ? clear_bhb_loop+0x40/0x90 [ 2149.451837][ T4602] ? clear_bhb_loop+0x40/0x90 [ 2149.456562][ T4602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2149.462498][ T4602] RIP: 0033:0x7f3fa8b9de99 [ 2149.466964][ T4602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2149.486611][ T4602] RSP: 002b:00007f3fa99be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2149.495079][ T4602] RAX: ffffffffffffffda RBX: 00007f3fa8e25fa0 RCX: 00007f3fa8b9de99 [ 2149.503105][ T4602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2149.511149][ T4602] RBP: 00007f3fa8c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 2149.519156][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2149.527161][ T4602] R13: 00007f3fa8e26038 R14: 00007f3fa8e25fa0 R15: 00007ffd7cee7368 [ 2149.535206][ T4602] [ 2149.742114][ T4613] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11074'. [ 2150.157771][ T4618] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11077'. [ 2150.301129][ T4622] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11076'. [ 2150.319488][ T4620] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11079'. [ 2150.565112][ T4628] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11089'. [ 2150.818136][ T4635] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11083'. [ 2150.894737][ T4636] netlink: 'syz.2.11082': attribute type 10 has an invalid length. [ 2151.030650][ T4638] netlink: 'syz.2.11082': attribute type 10 has an invalid length. [ 2151.368589][ T4646] netlink: 'syz.2.11086': attribute type 21 has an invalid length. [ 2151.389578][ T4646] IPv6: NLM_F_CREATE should be specified when creating new route [ 2151.398148][ T4646] IPv6: Can't replace route, no match found [ 2151.470795][ T4646] netlink: 'syz.2.11086': attribute type 10 has an invalid length. [ 2151.566139][ T4648] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11088'. [ 2151.642316][ T4648] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2151.660005][ T4648] CPU: 0 PID: 4648 Comm: syz.0.11088 Not tainted syzkaller #0 [ 2151.667548][ T4648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2151.677671][ T4648] Call Trace: [ 2151.681017][ T4648] [ 2151.683997][ T4648] dump_stack_lvl+0x18c/0x250 [ 2151.688737][ T4648] ? show_regs_print_info+0x20/0x20 [ 2151.693988][ T4648] ? load_image+0x420/0x420 [ 2151.698588][ T4648] sysfs_warn_dup+0x8e/0xa0 [ 2151.703146][ T4648] sysfs_do_create_link_sd+0xc0/0x110 [ 2151.708569][ T4648] device_add_class_symlinks+0x1cf/0x240 [ 2151.714274][ T4648] device_add+0x4f9/0xc40 [ 2151.718653][ T4648] wiphy_register+0x1d99/0x2ac0 [ 2151.723572][ T4648] ? cfg80211_event_work+0x40/0x40 [ 2151.728742][ T4648] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2151.734990][ T4648] ieee80211_register_hw+0x2dd8/0x3b30 [ 2151.740528][ T4648] ? ieee80211_register_hw+0xf51/0x3b30 [ 2151.746156][ T4648] ? ieee80211_tasklet_handler+0x20/0x20 [ 2151.751873][ T4648] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2151.757856][ T4648] ? __debug_object_init+0xec/0x450 [ 2151.763163][ T4648] ? __asan_memset+0x22/0x40 [ 2151.767817][ T4648] ? __hrtimer_init+0x189/0x270 [ 2151.772733][ T4648] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2151.778542][ T4648] ? mac80211_hwsim_free+0x220/0x220 [ 2151.783893][ T4648] ? hwsim_new_radio_nl+0xc34/0x1a70 [ 2151.789359][ T4648] hwsim_new_radio_nl+0xdad/0x1a70 [ 2151.794546][ T4648] ? mark_lock+0x94/0x320 [ 2151.799056][ T4648] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2151.805458][ T4648] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2151.811678][ T4648] ? lockdep_hardirqs_on+0x98/0x150 [ 2151.816943][ T4648] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2151.823168][ T4648] genl_family_rcv_msg_doit+0x21a/0x310 [ 2151.828771][ T4648] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2151.834747][ T4648] ? bpf_lsm_capable+0x9/0x10 [ 2151.839521][ T4648] ? security_capable+0x89/0xb0 [ 2151.844447][ T4648] genl_rcv_msg+0x611/0x7a0 [ 2151.849025][ T4648] ? genl_bind+0x360/0x360 [ 2151.853500][ T4648] ? perf_trace_lock+0xfc/0x3b0 [ 2151.858428][ T4648] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2151.864822][ T4648] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2151.871052][ T4648] netlink_rcv_skb+0x235/0x4c0 [ 2151.875898][ T4648] ? genl_bind+0x360/0x360 [ 2151.880369][ T4648] ? netlink_ack+0x1160/0x1160 [ 2151.885224][ T4648] ? __lock_acquire+0x7d80/0x7d80 [ 2151.890331][ T4648] ? net_generic+0x1e/0x240 [ 2151.894923][ T4648] ? down_read+0x1ac/0x2e0 [ 2151.899410][ T4648] genl_rcv+0x28/0x40 [ 2151.903450][ T4648] netlink_unicast+0x7b1/0x930 [ 2151.908304][ T4648] netlink_sendmsg+0x8d0/0xbf0 [ 2151.913135][ T4648] ? aa_sock_msg_perm+0x94/0x150 [ 2151.918127][ T4648] ? netlink_getsockopt+0x590/0x590 [ 2151.923386][ T4648] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2151.928993][ T4648] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2151.934421][ T4648] ? security_socket_sendmsg+0x80/0xa0 [ 2151.939922][ T4648] ? netlink_getsockopt+0x590/0x590 [ 2151.945179][ T4648] ____sys_sendmsg+0x61b/0x980 [ 2151.950010][ T4648] ? __asan_memset+0x22/0x40 [ 2151.954683][ T4648] ? __sys_sendmsg_sock+0x30/0x30 [ 2151.959791][ T4648] ? __import_iovec+0x5f2/0x850 [ 2151.964718][ T4648] ? import_iovec+0x73/0xa0 [ 2151.969293][ T4648] ___sys_sendmsg+0x2a6/0x360 [ 2151.974044][ T4648] ? __sys_sendmsg+0x2b0/0x2b0 [ 2151.978902][ T4648] ? trace_call_bpf+0xc3/0x6c0 [ 2151.983791][ T4648] __se_sys_sendmsg+0x1d0/0x2c0 [ 2151.988790][ T4648] ? perf_trace_preemptirq_template+0x269/0x330 [ 2151.995096][ T4648] ? __x64_sys_sendmsg+0x80/0x80 [ 2152.000111][ T4648] ? lockdep_hardirqs_on+0x98/0x150 [ 2152.005385][ T4648] do_syscall_64+0x55/0xb0 [ 2152.009862][ T4648] ? clear_bhb_loop+0x40/0x90 [ 2152.014626][ T4648] ? clear_bhb_loop+0x40/0x90 [ 2152.019395][ T4648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2152.025360][ T4648] RIP: 0033:0x7f4a0f59de99 [ 2152.029834][ T4648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2152.049508][ T4648] RSP: 002b:00007f4a103f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2152.057976][ T4648] RAX: ffffffffffffffda RBX: 00007f4a0f825fa0 RCX: 00007f4a0f59de99 [ 2152.065998][ T4648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2152.074052][ T4648] RBP: 00007f4a0f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 2152.082078][ T4648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2152.090097][ T4648] R13: 00007f4a0f826038 R14: 00007f4a0f825fa0 R15: 00007fff572b8f78 [ 2152.098146][ T4648] [ 2152.182098][ T4652] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11090'. [ 2152.260106][ T4650] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11087'. [ 2152.911884][ T4668] netlink: 'syz.0.11098': attribute type 10 has an invalid length. [ 2152.951111][ T4668] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 2153.029452][ T4674] netlink: 'syz.0.11098': attribute type 10 has an invalid length. [ 2153.588232][ T4684] netlink: 'syz.1.11103': attribute type 4 has an invalid length. [ 2153.647734][ T4686] netlink: 'syz.3.11102': attribute type 21 has an invalid length. [ 2153.667902][ T4686] IPv6: NLM_F_CREATE should be specified when creating new route [ 2153.689016][ T4686] IPv6: Can't replace route, no match found [ 2153.769522][ T4692] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2153.782226][ T4692] CPU: 1 PID: 4692 Comm: syz.0.11107 Not tainted syzkaller #0 [ 2153.789758][ T4692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2153.799865][ T4692] Call Trace: [ 2153.803193][ T4692] [ 2153.806167][ T4692] dump_stack_lvl+0x18c/0x250 [ 2153.810915][ T4692] ? show_regs_print_info+0x20/0x20 [ 2153.816176][ T4692] ? load_image+0x420/0x420 [ 2153.820758][ T4692] sysfs_warn_dup+0x8e/0xa0 [ 2153.825352][ T4692] sysfs_do_create_link_sd+0xc0/0x110 [ 2153.830820][ T4692] device_add_class_symlinks+0x1cf/0x240 [ 2153.836550][ T4692] device_add+0x4f9/0xc40 [ 2153.840940][ T4692] wiphy_register+0x1d99/0x2ac0 [ 2153.845867][ T4692] ? cfg80211_event_work+0x40/0x40 [ 2153.851056][ T4692] ? minstrel_ht_alloc+0x88a/0x990 [ 2153.856324][ T4692] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2153.862463][ T4692] ieee80211_register_hw+0x2dd8/0x3b30 [ 2153.867991][ T4692] ? ieee80211_register_hw+0xf51/0x3b30 [ 2153.873608][ T4692] ? ieee80211_tasklet_handler+0x20/0x20 [ 2153.879294][ T4692] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2153.885298][ T4692] ? __debug_object_init+0xec/0x450 [ 2153.890574][ T4692] ? __asan_memset+0x22/0x40 [ 2153.895239][ T4692] ? __hrtimer_init+0x189/0x270 [ 2153.900160][ T4692] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2153.905981][ T4692] ? mac80211_hwsim_free+0x220/0x220 [ 2153.911313][ T4692] ? rcu_is_watching+0x15/0xb0 [ 2153.916131][ T4692] ? kstrndup+0xbd/0x140 [ 2153.920449][ T4692] hwsim_new_radio_nl+0xdad/0x1a70 [ 2153.925647][ T4692] ? __nla_validate+0x50/0x50 [ 2153.930395][ T4692] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2153.936794][ T4692] ? __nla_parse+0x40/0x50 [ 2153.941270][ T4692] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2153.947658][ T4692] genl_family_rcv_msg_doit+0x21a/0x310 [ 2153.953279][ T4692] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2153.959246][ T4692] ? bpf_lsm_capable+0x9/0x10 [ 2153.963985][ T4692] ? security_capable+0x89/0xb0 [ 2153.968901][ T4692] genl_rcv_msg+0x611/0x7a0 [ 2153.973472][ T4692] ? genl_bind+0x360/0x360 [ 2153.977940][ T4692] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2153.984338][ T4692] netlink_rcv_skb+0x235/0x4c0 [ 2153.989168][ T4692] ? genl_bind+0x360/0x360 [ 2153.993640][ T4692] ? netlink_ack+0x1160/0x1160 [ 2153.998479][ T4692] ? __lock_acquire+0x7d80/0x7d80 [ 2154.003551][ T4692] ? net_generic+0x1e/0x240 [ 2154.008121][ T4692] ? down_read+0x1ac/0x2e0 [ 2154.012606][ T4692] genl_rcv+0x28/0x40 [ 2154.016642][ T4692] netlink_unicast+0x7b1/0x930 [ 2154.021496][ T4692] netlink_sendmsg+0x8d0/0xbf0 [ 2154.026320][ T4692] ? netlink_getsockopt+0x590/0x590 [ 2154.031581][ T4692] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2154.037196][ T4692] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2154.042552][ T4692] ? security_socket_sendmsg+0x80/0xa0 [ 2154.048064][ T4692] ? netlink_getsockopt+0x590/0x590 [ 2154.053329][ T4692] ____sys_sendmsg+0x61b/0x980 [ 2154.058178][ T4692] ? __asan_memset+0x22/0x40 [ 2154.062937][ T4692] ? __sys_sendmsg_sock+0x30/0x30 [ 2154.068022][ T4692] ? __import_iovec+0x5f2/0x850 [ 2154.072957][ T4692] ? import_iovec+0x73/0xa0 [ 2154.077533][ T4692] ___sys_sendmsg+0x2a6/0x360 [ 2154.082280][ T4692] ? __sys_sendmsg+0x2b0/0x2b0 [ 2154.087140][ T4692] ? trace_call_bpf+0xc3/0x6c0 [ 2154.091990][ T4692] __se_sys_sendmsg+0x1d0/0x2c0 [ 2154.096898][ T4692] ? perf_trace_preemptirq_template+0x269/0x330 [ 2154.103213][ T4692] ? __x64_sys_sendmsg+0x80/0x80 [ 2154.108239][ T4692] ? lockdep_hardirqs_on+0x98/0x150 [ 2154.113516][ T4692] do_syscall_64+0x55/0xb0 [ 2154.117994][ T4692] ? clear_bhb_loop+0x40/0x90 [ 2154.122735][ T4692] ? clear_bhb_loop+0x40/0x90 [ 2154.127474][ T4692] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2154.133462][ T4692] RIP: 0033:0x7f4a0f59de99 [ 2154.137934][ T4692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2154.157603][ T4692] RSP: 002b:00007f4a103d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2154.166089][ T4692] RAX: ffffffffffffffda RBX: 00007f4a0f826090 RCX: 00007f4a0f59de99 [ 2154.174113][ T4692] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2154.182138][ T4692] RBP: 00007f4a0f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 2154.190166][ T4692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2154.198229][ T4692] R13: 00007f4a0f826128 R14: 00007f4a0f826090 R15: 00007fff572b8f78 [ 2154.206280][ T4692] [ 2154.238474][ T4686] netlink: 'syz.3.11102': attribute type 10 has an invalid length. [ 2154.587149][ T4705] __nla_validate_parse: 10 callbacks suppressed [ 2154.587191][ T4705] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11114'. [ 2154.634907][ T4704] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11113'. [ 2154.740440][ T4710] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11116'. [ 2155.178935][ T4722] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11120'. [ 2155.510282][ T4730] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11125'. [ 2155.590366][ T4730] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2155.630156][ T4730] CPU: 1 PID: 4730 Comm: syz.2.11125 Not tainted syzkaller #0 [ 2155.637715][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2155.647831][ T4730] Call Trace: [ 2155.651156][ T4730] [ 2155.654126][ T4730] dump_stack_lvl+0x18c/0x250 [ 2155.658870][ T4730] ? show_regs_print_info+0x20/0x20 [ 2155.664113][ T4730] ? load_image+0x420/0x420 [ 2155.668687][ T4730] sysfs_warn_dup+0x8e/0xa0 [ 2155.673246][ T4730] sysfs_do_create_link_sd+0xc0/0x110 [ 2155.678672][ T4730] device_add_class_symlinks+0x1cf/0x240 [ 2155.684371][ T4730] device_add+0x4f9/0xc40 [ 2155.688758][ T4730] wiphy_register+0x1d99/0x2ac0 [ 2155.693689][ T4730] ? cfg80211_event_work+0x40/0x40 [ 2155.698871][ T4730] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2155.705007][ T4730] ieee80211_register_hw+0x2dd8/0x3b30 [ 2155.710576][ T4730] ? ieee80211_register_hw+0xf51/0x3b30 [ 2155.716194][ T4730] ? ieee80211_tasklet_handler+0x20/0x20 [ 2155.721903][ T4730] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2155.727882][ T4730] ? __debug_object_init+0xec/0x450 [ 2155.733188][ T4730] ? __asan_memset+0x22/0x40 [ 2155.737850][ T4730] ? __hrtimer_init+0x189/0x270 [ 2155.742772][ T4730] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2155.748560][ T4730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2155.754803][ T4730] ? mac80211_hwsim_free+0x220/0x220 [ 2155.760140][ T4730] ? rcu_is_watching+0x15/0xb0 [ 2155.764969][ T4730] ? kstrndup+0xbd/0x140 [ 2155.769281][ T4730] hwsim_new_radio_nl+0xdad/0x1a70 [ 2155.774460][ T4730] ? __nla_validate+0x50/0x50 [ 2155.779220][ T4730] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2155.785653][ T4730] ? __nla_parse+0x40/0x50 [ 2155.790171][ T4730] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2155.796609][ T4730] genl_family_rcv_msg_doit+0x21a/0x310 [ 2155.802212][ T4730] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2155.808166][ T4730] ? bpf_lsm_capable+0x9/0x10 [ 2155.812907][ T4730] ? security_capable+0x89/0xb0 [ 2155.817833][ T4730] genl_rcv_msg+0x611/0x7a0 [ 2155.822464][ T4730] ? genl_bind+0x360/0x360 [ 2155.826940][ T4730] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2155.833347][ T4730] netlink_rcv_skb+0x235/0x4c0 [ 2155.838173][ T4730] ? genl_bind+0x360/0x360 [ 2155.842643][ T4730] ? netlink_ack+0x1160/0x1160 [ 2155.847484][ T4730] ? __lock_acquire+0x7d80/0x7d80 [ 2155.852584][ T4730] ? down_read+0x1ac/0x2e0 [ 2155.857161][ T4730] genl_rcv+0x28/0x40 [ 2155.861199][ T4730] netlink_unicast+0x7b1/0x930 [ 2155.866031][ T4730] netlink_sendmsg+0x8d0/0xbf0 [ 2155.870863][ T4730] ? netlink_getsockopt+0x590/0x590 [ 2155.876116][ T4730] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2155.881738][ T4730] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2155.887085][ T4730] ? security_socket_sendmsg+0x80/0xa0 [ 2155.892600][ T4730] ? netlink_getsockopt+0x590/0x590 [ 2155.897881][ T4730] ____sys_sendmsg+0x61b/0x980 [ 2155.902705][ T4730] ? __asan_memset+0x22/0x40 [ 2155.907343][ T4730] ? __sys_sendmsg_sock+0x30/0x30 [ 2155.912415][ T4730] ? __import_iovec+0x5f2/0x850 [ 2155.917370][ T4730] ? import_iovec+0x73/0xa0 [ 2155.921951][ T4730] ___sys_sendmsg+0x2a6/0x360 [ 2155.926731][ T4730] ? __sys_sendmsg+0x2b0/0x2b0 [ 2155.931621][ T4730] __se_sys_sendmsg+0x1d0/0x2c0 [ 2155.936551][ T4730] ? __x64_sys_sendmsg+0x80/0x80 [ 2155.941575][ T4730] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2155.947547][ T4730] do_syscall_64+0x55/0xb0 [ 2155.952027][ T4730] ? clear_bhb_loop+0x40/0x90 [ 2155.956776][ T4730] ? clear_bhb_loop+0x40/0x90 [ 2155.961514][ T4730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2155.967470][ T4730] RIP: 0033:0x7f42ef79de99 [ 2155.972027][ T4730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2155.991706][ T4730] RSP: 002b:00007f42f05cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2156.000186][ T4730] RAX: ffffffffffffffda RBX: 00007f42efa25fa0 RCX: 00007f42ef79de99 [ 2156.008219][ T4730] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2156.016247][ T4730] RBP: 00007f42ef833eaf R08: 0000000000000000 R09: 0000000000000000 [ 2156.024275][ T4730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2156.032302][ T4730] R13: 00007f42efa26038 R14: 00007f42efa25fa0 R15: 00007ffcf7b00e88 [ 2156.040341][ T4730] [ 2156.960591][ T4754] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11135'. [ 2157.718628][ T4764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11140'. [ 2157.785582][ T4764] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2157.810008][ T4764] CPU: 1 PID: 4764 Comm: syz.3.11140 Not tainted syzkaller #0 [ 2157.817571][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2157.827686][ T4764] Call Trace: [ 2157.831021][ T4764] [ 2157.834004][ T4764] dump_stack_lvl+0x18c/0x250 [ 2157.838752][ T4764] ? show_regs_print_info+0x20/0x20 [ 2157.844018][ T4764] ? load_image+0x420/0x420 [ 2157.848627][ T4764] sysfs_warn_dup+0x8e/0xa0 [ 2157.853213][ T4764] sysfs_do_create_link_sd+0xc0/0x110 [ 2157.858654][ T4764] device_add_class_symlinks+0x1cf/0x240 [ 2157.864357][ T4764] device_add+0x4f9/0xc40 [ 2157.868761][ T4764] wiphy_register+0x1d99/0x2ac0 [ 2157.873686][ T4764] ? cfg80211_event_work+0x40/0x40 [ 2157.878846][ T4764] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2157.884960][ T4764] ieee80211_register_hw+0x2dd8/0x3b30 [ 2157.890498][ T4764] ? ieee80211_register_hw+0xf51/0x3b30 [ 2157.896102][ T4764] ? ieee80211_tasklet_handler+0x20/0x20 [ 2157.901773][ T4764] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2157.907710][ T4764] ? __debug_object_init+0xec/0x450 [ 2157.912952][ T4764] ? __asan_memset+0x22/0x40 [ 2157.917578][ T4764] ? __hrtimer_init+0x189/0x270 [ 2157.922467][ T4764] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2157.928288][ T4764] ? mac80211_hwsim_free+0x220/0x220 [ 2157.933609][ T4764] ? rcu_is_watching+0x15/0xb0 [ 2157.938402][ T4764] ? kstrndup+0xbd/0x140 [ 2157.942699][ T4764] hwsim_new_radio_nl+0xdad/0x1a70 [ 2157.947851][ T4764] ? mark_lock+0x94/0x320 [ 2157.952227][ T4764] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2157.958597][ T4764] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2157.964806][ T4764] ? lockdep_hardirqs_on+0x98/0x150 [ 2157.970047][ T4764] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2157.976245][ T4764] genl_family_rcv_msg_doit+0x21a/0x310 [ 2157.981827][ T4764] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2157.987761][ T4764] ? bpf_lsm_capable+0x9/0x10 [ 2157.992492][ T4764] ? security_capable+0x89/0xb0 [ 2157.997399][ T4764] genl_rcv_msg+0x611/0x7a0 [ 2158.001951][ T4764] ? genl_bind+0x360/0x360 [ 2158.006435][ T4764] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2158.012802][ T4764] ? lockdep_hardirqs_on+0x98/0x150 [ 2158.018043][ T4764] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2158.024238][ T4764] netlink_rcv_skb+0x235/0x4c0 [ 2158.029060][ T4764] ? genl_bind+0x360/0x360 [ 2158.033508][ T4764] ? netlink_ack+0x1160/0x1160 [ 2158.038324][ T4764] ? __lock_acquire+0x7d80/0x7d80 [ 2158.043381][ T4764] ? net_generic+0x1e/0x240 [ 2158.047926][ T4764] ? down_read+0x1ac/0x2e0 [ 2158.052382][ T4764] genl_rcv+0x28/0x40 [ 2158.056393][ T4764] netlink_unicast+0x7b1/0x930 [ 2158.061224][ T4764] netlink_sendmsg+0x8d0/0xbf0 [ 2158.066011][ T4764] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2158.072227][ T4764] ? netlink_getsockopt+0x590/0x590 [ 2158.077463][ T4764] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2158.082782][ T4764] ? security_socket_sendmsg+0x80/0xa0 [ 2158.088269][ T4764] ? netlink_getsockopt+0x590/0x590 [ 2158.093499][ T4764] ____sys_sendmsg+0x61b/0x980 [ 2158.098325][ T4764] ? __asan_memset+0x22/0x40 [ 2158.102953][ T4764] ? __sys_sendmsg_sock+0x30/0x30 [ 2158.107997][ T4764] ? __import_iovec+0x5f2/0x850 [ 2158.112883][ T4764] ? import_iovec+0x73/0xa0 [ 2158.117428][ T4764] ___sys_sendmsg+0x2a6/0x360 [ 2158.122144][ T4764] ? __sys_sendmsg+0x2b0/0x2b0 [ 2158.126982][ T4764] __se_sys_sendmsg+0x1d0/0x2c0 [ 2158.131864][ T4764] ? __x64_sys_sendmsg+0x80/0x80 [ 2158.136873][ T4764] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2158.142827][ T4764] do_syscall_64+0x55/0xb0 [ 2158.147286][ T4764] ? clear_bhb_loop+0x40/0x90 [ 2158.151991][ T4764] ? clear_bhb_loop+0x40/0x90 [ 2158.156697][ T4764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2158.162619][ T4764] RIP: 0033:0x7f3b8e99de99 [ 2158.167072][ T4764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2158.186804][ T4764] RSP: 002b:00007f3b8f867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2158.195262][ T4764] RAX: ffffffffffffffda RBX: 00007f3b8ec25fa0 RCX: 00007f3b8e99de99 [ 2158.203265][ T4764] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2158.211265][ T4764] RBP: 00007f3b8ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 2158.219265][ T4764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2158.227263][ T4764] R13: 00007f3b8ec26038 R14: 00007f3b8ec25fa0 R15: 00007ffdef041048 [ 2158.235279][ T4764] [ 2158.684008][ T4778] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11144'. [ 2158.888050][ T4784] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11156'. [ 2159.022604][ T4789] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11148'. [ 2159.812449][ T4794] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11150'. [ 2160.348326][ T4810] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11158'. [ 2160.644020][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.650959][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.384013][ T4823] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11164'. [ 2161.501823][ T4819] netlink: 'syz.0.11161': attribute type 39 has an invalid length. [ 2161.603842][ T4832] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11165'. [ 2161.650946][ T4826] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11163'. [ 2162.212746][ T4842] netlink: 'syz.3.11169': attribute type 9 has an invalid length. [ 2162.230231][ T4840] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11168'. [ 2162.249825][ T4842] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.11169'. [ 2162.523103][ T4842] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.11169'. [ 2163.207041][ T4857] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11174'. [ 2163.668283][ T4861] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11176'. [ 2164.386499][ T4868] netlink: 'syz.0.11175': attribute type 9 has an invalid length. [ 2164.737176][ T4882] netlink: 'syz.2.11183': attribute type 3 has an invalid length. [ 2165.034781][ T4882] __nla_validate_parse: 4 callbacks suppressed [ 2165.034819][ T4882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11183'. [ 2165.113411][ T4884] netlink: 'syz.1.11184': attribute type 39 has an invalid length. [ 2165.339924][ T4885] netlink: 'syz.2.11183': attribute type 12 has an invalid length. [ 2165.358165][ T4885] netlink: 171408 bytes leftover after parsing attributes in process `syz.2.11183'. [ 2166.105272][ T4899] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11188'. [ 2166.304698][ T4903] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11189'. [ 2167.047126][ T4913] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11194'. [ 2167.864416][ T4918] netlink: 'syz.1.11195': attribute type 39 has an invalid length. [ 2168.707592][ T4933] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11199'. [ 2169.071967][ T4935] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11200'. [ 2169.446433][ T4941] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11202'. [ 2170.918262][ T4960] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11210'. [ 2170.978635][ T4957] netlink: 'syz.0.11208': attribute type 3 has an invalid length. [ 2171.038054][ T4957] netlink: 16795 bytes leftover after parsing attributes in process `syz.0.11208'. [ 2171.319431][ T4957] netlink: 'syz.0.11208': attribute type 12 has an invalid length. [ 2171.389634][ T4963] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11208'. [ 2171.440526][ T4957] netlink: 171408 bytes leftover after parsing attributes in process `syz.0.11208'. [ 2171.491728][ T4972] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11212'. [ 2172.197822][ T4979] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.11215'. [ 2172.332436][ T4977] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11213'. [ 2172.353689][ T4979] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11215'. [ 2173.196228][ T4992] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11220'. [ 2174.902776][ T5012] netlink: 'syz.3.11225': attribute type 39 has an invalid length. [ 2176.504281][ T5029] netlink: 'syz.2.11229': attribute type 9 has an invalid length. [ 2176.556565][ T5029] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11229'. [ 2176.567970][ T5027] sit0: entered promiscuous mode [ 2177.719919][ T5042] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11231'. [ 2178.980670][ T5057] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11236'. [ 2179.125406][ T5062] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11241'. [ 2179.136064][ T5062] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11241'. [ 2179.160835][ T5066] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11241'. [ 2180.214394][ T5089] netlink: 2220 bytes leftover after parsing attributes in process `syz.3.11250'. [ 2180.304554][ T5089] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11250'. [ 2180.344620][ T5094] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11251'. [ 2180.380253][ T5094] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11251'. [ 2182.895861][ T5135] __nla_validate_parse: 3 callbacks suppressed [ 2182.895905][ T5135] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11264'. [ 2182.925038][ T5132] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11263'. [ 2182.946003][ T5137] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11261'. [ 2183.032540][ T5137] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11261'. [ 2183.085249][ T5140] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11261'. [ 2183.423921][ T5144] sit0: entered promiscuous mode [ 2184.015224][ T5148] netlink: 'syz.2.11266': attribute type 39 has an invalid length. [ 2184.121210][ T5151] netlink: 'syz.1.11268': attribute type 28 has an invalid length. [ 2184.227634][ T5151] netlink: 'syz.1.11268': attribute type 29 has an invalid length. [ 2184.360440][ T5151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11268'. [ 2185.409385][ T5173] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11275'. [ 2185.509594][ T5175] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11276'. [ 2185.555618][ T5175] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11276'. [ 2185.587082][ T5171] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11273'. [ 2186.191774][ T5186] netlink: 'syz.0.11280': attribute type 9 has an invalid length. [ 2187.192475][ T5199] veth1_to_bond: entered allmulticast mode [ 2187.380040][ T5194] netlink: 'syz.1.11281': attribute type 17 has an invalid length. [ 2188.546404][ T5235] __nla_validate_parse: 10 callbacks suppressed [ 2188.546445][ T5235] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11295'. [ 2188.944092][ T5243] sit0: entered promiscuous mode [ 2189.074110][ T5247] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11298'. [ 2189.213141][ T5250] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11299'. [ 2189.223061][ T5247] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11298'. [ 2189.242430][ T5249] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11298'. [ 2190.057898][ T5261] netlink: 'syz.3.11305': attribute type 10 has an invalid length. [ 2190.264182][ T5257] netlink: 'syz.2.11303': attribute type 10 has an invalid length. [ 2190.291265][ T5257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11303'. [ 2190.496375][ T5261] netlink: 'syz.3.11305': attribute type 39 has an invalid length. [ 2191.673719][ T5276] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11310'. [ 2191.742033][ T5276] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11310'. [ 2191.841619][ T5282] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11310'. [ 2191.923402][ T5281] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11311'. [ 2192.910240][ T5301] sit0: entered promiscuous mode [ 2193.770992][ T5313] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11321'. [ 2193.836043][ T5313] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11321'. [ 2193.964126][ T5315] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11321'. [ 2194.250955][ T5317] netlink: 'syz.3.11322': attribute type 17 has an invalid length. [ 2194.847573][ T5321] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11323'. [ 2195.630055][ T5340] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11331'. [ 2195.655084][ T5340] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11331'. [ 2195.696781][ T5343] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11331'. [ 2196.037826][ T5346] netlink: 'syz.3.11333': attribute type 39 has an invalid length. [ 2196.859148][ T5355] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11336'. [ 2197.453719][ T5368] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11341'. [ 2197.482143][ T5368] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11341'. [ 2198.963696][ T5387] netlink: 'syz.2.11348': attribute type 39 has an invalid length. [ 2199.554241][ T5396] __nla_validate_parse: 3 callbacks suppressed [ 2199.554278][ T5396] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11349'. [ 2200.313681][ T5405] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11353'. [ 2200.360967][ T5405] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11353'. [ 2200.405563][ T5408] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11353'. [ 2200.971285][ T5410] netlink: 'syz.3.11355': attribute type 9 has an invalid length. [ 2201.040280][ T5410] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11355'. [ 2202.437192][ T5426] netlink: 'syz.3.11359': attribute type 10 has an invalid length. [ 2202.480240][ T5426] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11359'. [ 2202.612374][ T5425] netlink: 'syz.0.11361': attribute type 39 has an invalid length. [ 2204.991764][ T5459] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11365'. [ 2205.308024][ T5459] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11365'. [ 2205.561947][ T5461] netlink: 'syz.2.11368': attribute type 2 has an invalid length. [ 2205.774050][ T5458] netlink: 'syz.0.11367': attribute type 9 has an invalid length. [ 2205.820347][ T5458] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11367'. [ 2206.249317][ T5462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11368'. [ 2207.278672][ T5472] netlink: 'syz.0.11373': attribute type 17 has an invalid length. [ 2207.954205][ T5480] netlink: 'syz.2.11376': attribute type 39 has an invalid length. [ 2208.610788][ T5491] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11379'. [ 2210.273383][ T5516] netlink: 'syz.2.11384': attribute type 9 has an invalid length. [ 2210.282690][ T5516] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11384'. [ 2210.938779][ T5525] netlink: 'syz.1.11385': attribute type 2 has an invalid length. [ 2211.284685][ T5535] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11389'. [ 2211.998972][ T5531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11385'. [ 2212.146441][ T5539] netlink: 'syz.3.11393': attribute type 9 has an invalid length. [ 2212.200560][ T5539] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11393'. [ 2212.244122][ T5541] netlink: 'syz.0.11390': attribute type 10 has an invalid length. [ 2212.270329][ T5541] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11390'. [ 2213.359488][ T5555] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11398'. [ 2213.883837][ T5563] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11408'. [ 2214.364084][ T5567] netlink: 'syz.1.11400': attribute type 9 has an invalid length. [ 2214.390154][ T5567] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11400'. [ 2214.533845][ T5571] netlink: 'syz.3.11409': attribute type 2 has an invalid length. [ 2215.028028][ T5571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11409'. [ 2215.818677][ T5597] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11411'. [ 2216.356337][ T5602] netlink: 'syz.1.11407': attribute type 9 has an invalid length. [ 2216.372597][ T5602] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11407'. [ 2217.011899][ T5619] netlink: 'syz.2.11418': attribute type 9 has an invalid length. [ 2217.041725][ T5619] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11418'. [ 2217.945447][ T5629] netlink: 'syz.0.11419': attribute type 2 has an invalid length. [ 2218.088195][ T5634] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11422'. [ 2218.161670][ T5629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11419'. [ 2218.590203][ T5645] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11427'. [ 2218.624709][ T5645] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11427'. [ 2218.659281][ T5647] netlink: 'syz.2.11425': attribute type 39 has an invalid length. [ 2218.681296][ T5645] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11427'. [ 2218.749038][ T5643] netlink: 'syz.3.11426': attribute type 9 has an invalid length. [ 2218.758543][ T5643] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11426'. [ 2220.093983][ T5663] netlink: 'syz.0.11432': attribute type 9 has an invalid length. [ 2220.105560][ T5663] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11432'. [ 2221.942883][ T5688] netlink: 'syz.3.11440': attribute type 9 has an invalid length. [ 2221.952293][ T5688] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11440'. [ 2222.083156][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.099803][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.519933][ T5689] netlink: 'syz.2.11439': attribute type 2 has an invalid length. [ 2222.570377][ T5691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11439'. [ 2223.129401][ T5702] netlink: 'syz.1.11445': attribute type 9 has an invalid length. [ 2223.139036][ T5702] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11445'. [ 2223.874053][ T5703] delete_channel: no stack [ 2224.516970][ T5725] netlink: 'syz.2.11454': attribute type 39 has an invalid length. [ 2225.120778][ T5741] netlink: 'syz.3.11455': attribute type 2 has an invalid length. [ 2225.796817][ T5755] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.11460'. [ 2225.818796][ T5754] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.11460'. [ 2226.419261][ T5765] netlink: 'syz.3.11463': attribute type 9 has an invalid length. [ 2226.450421][ T5765] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11463'. [ 2227.889067][ T5787] delete_channel: no stack [ 2227.957658][ T5785] netlink: 'syz.3.11469': attribute type 39 has an invalid length. [ 2228.296503][ T5797] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11481'. [ 2228.314922][ T5797] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11481'. [ 2228.344681][ T5797] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11481'. [ 2228.362496][ T5799] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11472'. [ 2228.387237][ T5799] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11472'. [ 2228.401841][ T5799] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11472'. [ 2228.828568][ T5811] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.11474'. [ 2230.416813][ T5831] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11484'. [ 2230.430720][ T5831] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11484'. [ 2230.462286][ T5831] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11484'. [ 2230.783320][ T5833] delete_channel: no stack [ 2232.683432][ T5878] netlink: 'syz.2.11499': attribute type 39 has an invalid length. [ 2232.828657][ T5882] netlink: 'syz.3.11500': attribute type 6 has an invalid length. [ 2233.832437][ T5900] __nla_validate_parse: 7 callbacks suppressed [ 2233.832454][ T5900] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.11503'. [ 2233.885268][ T5893] netlink: 16390 bytes leftover after parsing attributes in process `syz.1.11503'. [ 2234.085635][ T5908] netlink: 'syz.2.11508': attribute type 29 has an invalid length. [ 2234.130412][ T5908] netlink: 'syz.2.11508': attribute type 29 has an invalid length. [ 2234.148947][ T5912] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.11507'. [ 2234.818532][ T5923] netlink: 'syz.1.11514': attribute type 9 has an invalid length. [ 2234.842075][ T5923] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11514'. [ 2235.776247][ T5951] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.11519'. [ 2235.847157][ T5950] netlink: 16390 bytes leftover after parsing attributes in process `syz.0.11519'. [ 2236.586819][ T5979] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.11527'. [ 2236.826368][ T5981] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11531'. [ 2236.837343][ T5981] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11531'. [ 2236.851434][ T5981] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11531'. [ 2237.691994][ T6003] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2238.214724][ T6016] netlink: 'syz.1.11544': attribute type 29 has an invalid length. [ 2238.251031][ T6016] netlink: 'syz.1.11544': attribute type 29 has an invalid length. [ 2239.351734][ T6046] delete_channel: no stack [ 2239.356392][ T6046] delete_channel: no stack [ 2239.379274][ T6044] __nla_validate_parse: 6 callbacks suppressed [ 2239.379317][ T6044] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11552'. [ 2239.415824][ T6044] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11552'. [ 2239.436202][ T6044] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11552'. [ 2240.370325][ T6055] netlink: 'syz.1.11555': attribute type 39 has an invalid length. [ 2240.896789][ T6072] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.11560'. [ 2241.299450][ T6078] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11562'. [ 2241.534186][ T6084] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11565'. [ 2241.579488][ T6084] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11565'. [ 2241.626713][ T6087] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11565'. [ 2242.015605][ T6097] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2242.532991][ T6105] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11572'. [ 2243.146095][ T6121] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11577'. [ 2243.496972][ T6128] netlink: 'syz.0.11579': attribute type 10 has an invalid length. [ 2244.855345][ T6153] __nla_validate_parse: 4 callbacks suppressed [ 2244.855391][ T6153] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11590'. [ 2244.900403][ T6153] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11590'. [ 2244.941224][ T6156] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11590'. [ 2245.166238][ T6159] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11600'. [ 2245.202858][ T6159] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11600'. [ 2245.253936][ T6165] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11600'. [ 2245.271462][ T6164] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 2245.324113][ T6162] netlink: 'syz.3.11593': attribute type 21 has an invalid length. [ 2246.859245][ T6188] netlink: 'syz.0.11602': attribute type 39 has an invalid length. [ 2247.382449][ T6202] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11604'. [ 2247.407567][ T6202] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11604'. [ 2247.453604][ T6202] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.11604'. [ 2248.223142][ T6214] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2249.187778][ T6236] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.11617'. [ 2250.159014][ T6247] netlink: 'syz.2.11621': attribute type 39 has an invalid length. [ 2250.395973][ T6263] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 2250.464252][ T6261] netlink: 'syz.3.11635': attribute type 10 has an invalid length. [ 2250.488880][ T6261] __nla_validate_parse: 5 callbacks suppressed [ 2250.488902][ T6261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11635'. [ 2254.344130][ T6282] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11633'. [ 2254.357650][ T6282] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11633'. [ 2254.374323][ T6282] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11633'. [ 2254.916436][ T6297] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11638'. [ 2254.943313][ T6297] netlink: 'syz.3.11638': attribute type 10 has an invalid length. [ 2254.961007][ T6297] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11638'. [ 2255.705741][ T6315] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11644'. [ 2255.734531][ T6315] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11644'. [ 2255.763666][ T6315] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11644'. [ 2256.016380][ T6322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11643'. [ 2258.207370][ T6348] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11653'. [ 2258.243120][ T6348] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11653'. [ 2258.288135][ T6351] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11653'. [ 2258.642696][ T6355] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2260.093598][ T6382] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11664'. [ 2260.140538][ T6382] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11664'. [ 2260.178128][ T6386] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11664'. [ 2260.792161][ T6396] netlink: 'syz.2.11667': attribute type 10 has an invalid length. [ 2260.806959][ T6396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11667'. [ 2260.952279][ T6400] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11677'. [ 2260.962817][ T6400] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11677'. [ 2260.976676][ T6400] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11677'. [ 2261.370352][ T6411] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11670'. [ 2261.401437][ T6411] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2261.608747][ T6417] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2261.841791][ T6420] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11674'. [ 2262.066482][ T6424] netlink: 'syz.2.11678': attribute type 21 has an invalid length. [ 2262.134822][ T6429] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11680'. [ 2264.068837][ T6450] netlink: 'syz.1.11683': attribute type 10 has an invalid length. [ 2264.090685][ T6450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11683'. [ 2264.129168][ T6448] netlink: 'syz.0.11691': attribute type 39 has an invalid length. [ 2266.601852][ T6457] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 2266.787339][ T6465] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11696'. [ 2266.947638][ T6470] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11689'. [ 2268.113161][ T6496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11699'. [ 2268.128983][ T6496] netlink: 'syz.1.11699': attribute type 10 has an invalid length. [ 2268.137823][ T6496] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11699'. [ 2269.313167][ T6506] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2269.338339][ T6505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11700'. [ 2269.475810][ T6512] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11704'. [ 2269.588841][ T6518] netlink: 184 bytes leftover after parsing attributes in process `syz.2.11706'. [ 2269.829442][ T6521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11707'. [ 2270.042036][ T6526] netlink: 'syz.0.11709': attribute type 39 has an invalid length. [ 2270.520352][ T6532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11712'. [ 2270.535888][ T6532] netlink: 'syz.2.11712': attribute type 10 has an invalid length. [ 2270.547445][ T6532] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11712'. [ 2271.642736][ T6544] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2272.360932][ T6553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11717'. [ 2273.424818][ T6551] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 2273.439423][ T6569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11715'. [ 2273.565682][ T6576] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11719'. [ 2273.910556][ T6580] netlink: 'syz.1.11722': attribute type 39 has an invalid length. [ 2277.546369][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11726'. [ 2277.560879][ T6603] netlink: 'syz.0.11726': attribute type 10 has an invalid length. [ 2277.571224][ T6603] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11726'. [ 2277.690269][ T6604] netlink: 'syz.2.11730': attribute type 10 has an invalid length. [ 2277.699663][ T6604] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11730'. [ 2280.009604][ T6609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11731'. [ 2280.262022][ T6624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11732'. [ 2280.689018][ T6628] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.11737'. [ 2280.699189][ T6628] bridge_slave_1: default FDB implementation only supports local addresses [ 2281.340962][ T6640] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11743'. [ 2281.542293][ T6645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11745'. [ 2281.559503][ T6645] netlink: 'syz.0.11745': attribute type 10 has an invalid length. [ 2281.568308][ T6645] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11745'. [ 2281.770074][ T6651] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.11748'. [ 2283.228793][ T6660] __nla_validate_parse: 1 callbacks suppressed [ 2283.228884][ T6660] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11751'. [ 2283.246759][ T6660] bridge_slave_1: default FDB implementation only supports local addresses [ 2283.623956][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.630544][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.781281][ T6674] netlink: 'syz.2.11756': attribute type 39 has an invalid length. [ 2284.281249][ T6686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11759'. [ 2285.624818][ T6710] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.11768'. [ 2285.634765][ T6710] bridge_slave_1: default FDB implementation only supports local addresses [ 2286.160545][ T6725] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11773'. [ 2286.224670][ T6721] netlink: 'syz.1.11771': attribute type 39 has an invalid length. [ 2286.951672][ T6741] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11779'. [ 2286.969836][ T6741] bridge_slave_1: default FDB implementation only supports local addresses [ 2287.646927][ T6744] netlink: 'syz.3.11780': attribute type 10 has an invalid length. [ 2287.664577][ T6744] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11780'. [ 2287.863738][ T6747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11788'. [ 2288.145751][ T6754] netlink: 'syz.0.11783': attribute type 10 has an invalid length. [ 2288.164357][ T6754] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11783'. [ 2288.574337][ T6765] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.11789'. [ 2288.605270][ T6765] bridge_slave_1: default FDB implementation only supports local addresses [ 2288.952061][ T6768] netlink: 'syz.1.11790': attribute type 39 has an invalid length. [ 2289.295679][ T6775] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.11791'. [ 2289.560243][ T6776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11799'. [ 2291.157971][ T6786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11793'. [ 2291.211665][ T6784] netlink: 'syz.0.11792': attribute type 10 has an invalid length. [ 2291.240005][ T6784] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11792'. [ 2292.538134][ T6802] netlink: 'syz.2.11797': attribute type 10 has an invalid length. [ 2292.546953][ T6802] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11797'. [ 2295.236676][ T6807] netlink: 'syz.0.11808': attribute type 10 has an invalid length. [ 2295.252327][ T6807] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11808'. [ 2295.808342][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11802'. [ 2295.968673][ T6819] netlink: 'syz.0.11804': attribute type 39 has an invalid length. [ 2295.995356][ T6833] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11805'. [ 2297.768204][ T6837] netlink: 'syz.1.11807': attribute type 10 has an invalid length. [ 2297.790111][ T6837] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11807'. [ 2297.997759][ T6846] netlink: 'syz.3.11811': attribute type 10 has an invalid length. [ 2298.608596][ T6854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11813'. [ 2298.951140][ T6857] netlink: 'syz.2.11814': attribute type 10 has an invalid length. [ 2298.959476][ T6857] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11814'. [ 2299.791855][ T6875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11815'. [ 2301.553011][ T6880] mac80211_hwsim hwsim126 wlan1: entered promiscuous mode [ 2301.564947][ T6881] netlink: 'syz.1.11819': attribute type 2 has an invalid length. [ 2301.571430][ T6880] mac80211_hwsim hwsim126 wlan1: entered allmulticast mode [ 2301.574443][ T6881] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11819'. [ 2301.775746][ T6883] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11818'. [ 2301.890404][ T6886] netlink: 'syz.3.11821': attribute type 10 has an invalid length. [ 2301.899552][ T6886] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11821'. [ 2302.099436][ T6894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11824'. [ 2302.415246][ T6900] netlink: 'syz.3.11826': attribute type 39 has an invalid length. [ 2302.893619][ T6909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11827'. [ 2307.425086][ T6939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11833'. [ 2307.476935][ T6939] netlink: 'syz.1.11833': attribute type 10 has an invalid length. [ 2307.492511][ T6939] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11833'. [ 2307.517393][ T6941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11834'. [ 2307.576466][ T6943] netlink: 'syz.3.11835': attribute type 10 has an invalid length. [ 2307.626561][ T6943] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11835'. [ 2307.871130][ T6947] netlink: 'syz.2.11837': attribute type 10 has an invalid length. [ 2307.879273][ T6947] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11837'. [ 2309.271397][ T6958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11838'. [ 2309.484844][ T6952] netlink: 'syz.2.11839': attribute type 39 has an invalid length. [ 2311.538297][ T6976] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11844'. [ 2311.569033][ T6976] netlink: 'syz.3.11844': attribute type 10 has an invalid length. [ 2311.577337][ T6976] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11844'. [ 2311.791272][ T6980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11845'. [ 2311.913382][ T6984] netlink: 'syz.3.11846': attribute type 10 has an invalid length. [ 2311.929891][ T6984] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11846'. [ 2312.055950][ T6987] netlink: 'syz.2.11847': attribute type 10 has an invalid length. [ 2312.332799][ T6993] netlink: 'syz.1.11850': attribute type 10 has an invalid length. [ 2312.635117][ T7000] __nla_validate_parse: 2 callbacks suppressed [ 2312.635141][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11852'. [ 2312.711539][ T6999] netlink: 'syz.1.11853': attribute type 39 has an invalid length. [ 2312.956759][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11854'. [ 2312.969308][ T7011] netlink: 'syz.2.11854': attribute type 10 has an invalid length. [ 2312.997825][ T7011] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11854'. [ 2314.234687][ T7015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11856'. [ 2314.609057][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11855'. [ 2314.703720][ T7034] netlink: 'syz.1.11857': attribute type 10 has an invalid length. [ 2314.733291][ T7034] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11857'. [ 2315.536134][ T7040] netlink: 'syz.0.11860': attribute type 10 has an invalid length. [ 2315.564739][ T7040] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11860'. [ 2315.935097][ T7045] netlink: 'syz.2.11862': attribute type 10 has an invalid length. [ 2315.950079][ T7045] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11862'. [ 2315.970088][ T7047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11863'. [ 2316.011018][ T7047] netlink: 'syz.3.11863': attribute type 10 has an invalid length. [ 2316.019230][ T7047] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11863'. [ 2317.499119][ T7055] netlink: 'syz.1.11865': attribute type 39 has an invalid length. [ 2319.365679][ T7069] netlink: 'syz.0.11869': attribute type 10 has an invalid length. [ 2319.375107][ T7069] __nla_validate_parse: 2 callbacks suppressed [ 2319.375145][ T7069] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11869'. [ 2319.566571][ T7076] netlink: 'syz.3.11872': attribute type 10 has an invalid length. [ 2319.580178][ T7076] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11872'. [ 2319.882788][ T7087] netlink: 'syz.0.11873': attribute type 10 has an invalid length. [ 2319.999484][ T7088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11871'. [ 2320.692730][ T7098] netlink: 'syz.3.11877': attribute type 2 has an invalid length. [ 2320.733281][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11876'. [ 2320.749903][ T7098] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11877'. [ 2320.910201][ T7097] netlink: 'syz.2.11878': attribute type 39 has an invalid length. [ 2321.336135][ T7108] netlink: 'syz.1.11881': attribute type 10 has an invalid length. [ 2321.376931][ T7108] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11881'. [ 2321.440258][ T7110] netlink: 'syz.3.11882': attribute type 10 has an invalid length. [ 2321.448875][ T7110] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11882'. [ 2322.204105][ T7127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11886'. [ 2322.252523][ T7129] netlink: 'syz.1.11888': attribute type 10 has an invalid length. [ 2324.063613][ T7136] netlink: 'syz.0.11889': attribute type 2 has an invalid length. [ 2324.077175][ T7136] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11889'. [ 2324.258174][ T7139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11891'. [ 2324.565218][ T7144] netlink: 'syz.3.11892': attribute type 10 has an invalid length. [ 2324.605517][ T7144] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11892'. [ 2324.647191][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11893'. [ 2324.678065][ T7149] netlink: 'syz.0.11893': attribute type 10 has an invalid length. [ 2324.696624][ T7149] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11893'. [ 2324.890596][ T7148] netlink: 'syz.1.11894': attribute type 39 has an invalid length. [ 2326.101687][ T7167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11899'. [ 2326.484426][ T7178] netlink: 'syz.2.11902': attribute type 2 has an invalid length. [ 2326.508475][ T7178] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11902'. [ 2326.540590][ T7177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11910'. [ 2327.087107][ T7186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11905'. [ 2327.146469][ T7194] netlink: 'syz.2.11905': attribute type 10 has an invalid length. [ 2327.174835][ T7194] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11905'. [ 2328.032189][ T7200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11909'. [ 2328.931346][ T7221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11913'. [ 2330.192898][ T7231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11917'. [ 2330.205194][ T7231] netlink: 'syz.3.11917': attribute type 10 has an invalid length. [ 2330.214012][ T7231] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11917'. [ 2330.460582][ T7229] netlink: 'syz.0.11916': attribute type 39 has an invalid length. [ 2331.321350][ T7249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11923'. [ 2331.354849][ T7249] netlink: 'syz.0.11923': attribute type 10 has an invalid length. [ 2331.374426][ T7249] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11923'. [ 2331.766044][ T7253] netlink: 'syz.0.11925': attribute type 2 has an invalid length. [ 2331.787227][ T7253] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11925'. [ 2331.813837][ T7258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11924'. [ 2333.354009][ T7266] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11928'. [ 2333.367579][ T7266] netlink: 'syz.1.11928': attribute type 10 has an invalid length. [ 2333.377625][ T7266] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11928'. [ 2333.817429][ T7281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11934'. [ 2333.829819][ T7279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11933'. [ 2333.843308][ T7281] netlink: 'syz.2.11934': attribute type 10 has an invalid length. [ 2333.862543][ T7279] netlink: 'syz.1.11933': attribute type 10 has an invalid length. [ 2334.021149][ T7285] netlink: 'syz.1.11936': attribute type 13 has an invalid length. [ 2334.442061][ T7292] netlink: 'syz.0.11939': attribute type 10 has an invalid length. [ 2334.503558][ T7299] netlink: 'syz.1.11937': attribute type 3 has an invalid length. [ 2335.558321][ T7307] netlink: 'syz.0.11942': attribute type 39 has an invalid length. [ 2336.630773][ T7317] __nla_validate_parse: 5 callbacks suppressed [ 2336.630814][ T7317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11945'. [ 2336.652393][ T7317] netlink: 'syz.0.11945': attribute type 10 has an invalid length. [ 2336.661707][ T7317] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11945'. [ 2336.863991][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11946'. [ 2336.878451][ T7319] netlink: 'syz.0.11946': attribute type 10 has an invalid length. [ 2336.887851][ T7319] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11946'. [ 2337.613706][ T7331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11951'. [ 2337.633110][ T7331] netlink: 'syz.1.11951': attribute type 10 has an invalid length. [ 2337.649932][ T7331] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11951'. [ 2337.970379][ T7339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11954'. [ 2337.992428][ T7339] netlink: 'syz.3.11954': attribute type 10 has an invalid length. [ 2338.002066][ T7339] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11954'. [ 2339.951769][ T7352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11966'. [ 2339.980497][ T7352] netlink: 'syz.0.11966': attribute type 10 has an invalid length. [ 2339.993952][ T7352] netlink: 55 bytes leftover after parsing attributes in process `syz.0.11966'. [ 2340.270470][ T7365] netlink: 'syz.0.11963': attribute type 10 has an invalid length. [ 2340.316196][ T7361] netlink: 'syz.2.11962': attribute type 39 has an invalid length. [ 2341.549825][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2341.559374][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 2341.569238][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2341.576693][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2341.586827][ T51] Workqueue: hci3 hci_rx_work [ 2341.591605][ T51] Call Trace: [ 2341.594954][ T51] [ 2341.597974][ T51] dump_stack_lvl+0x18c/0x250 [ 2341.602751][ T51] ? show_regs_print_info+0x20/0x20 [ 2341.608021][ T51] ? load_image+0x420/0x420 [ 2341.612665][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 2341.617865][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 2341.622984][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 2341.627763][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 2341.633061][ T51] kobject_add_internal+0x617/0xc90 [ 2341.638367][ T51] kobject_add+0x164/0x240 [ 2341.642889][ T51] ? kobject_init+0x1d0/0x1d0 [ 2341.647684][ T51] ? get_device_parent+0x366/0x390 [ 2341.652922][ T51] device_add+0x3fa/0xc40 [ 2341.657359][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 2341.662393][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 2341.667794][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 2341.674115][ T51] ? bt_info+0x180/0x180 [ 2341.678441][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2341.684170][ T51] ? mutex_unlock+0x10/0x10 [ 2341.688740][ T51] ? skb_pull_data+0xf0/0x1f0 [ 2341.693515][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 2341.699180][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 2341.705368][ T51] hci_event_packet+0x7b4/0x1280 [ 2341.710410][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 2341.715526][ T51] ? lock_chain_count+0x20/0x20 [ 2341.720470][ T51] ? bis_list+0x290/0x290 [ 2341.724915][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 2341.730225][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 2341.735545][ T51] hci_rx_work+0x43a/0xd60 [ 2341.740244][ T51] ? process_scheduled_works+0x975/0x1600 [ 2341.746063][ T51] process_scheduled_works+0xa60/0x1600 [ 2341.751822][ T51] ? worker_attach_to_pool+0x370/0x370 [ 2341.757394][ T51] ? assign_work+0x3cc/0x5d0 [ 2341.762108][ T51] worker_thread+0xa5e/0xfe0 [ 2341.766885][ T51] kthread+0x2fa/0x390 [ 2341.771033][ T51] ? pr_cont_work+0x550/0x550 [ 2341.775805][ T51] ? kthread_blkcg+0xd0/0xd0 [ 2341.780475][ T51] ret_from_fork+0x48/0x80 [ 2341.784975][ T51] ? kthread_blkcg+0xd0/0xd0 [ 2341.789647][ T51] ret_from_fork_asm+0x11/0x20 [ 2341.794554][ T51] [ 2341.799934][ T51] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2341.819764][ T51] Bluetooth: hci3: failed to register connection device [ 2343.617704][ T7392] __nla_validate_parse: 2 callbacks suppressed [ 2343.617742][ T7392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11974'. [ 2343.664814][ T7392] netlink: 'syz.1.11974': attribute type 10 has an invalid length. [ 2343.680153][ T7392] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11974'. [ 2343.817241][ T7401] netlink: 'syz.2.11976': attribute type 13 has an invalid length. [ 2344.062670][ T7404] netlink: 'syz.1.11977': attribute type 39 has an invalid length. [ 2344.408402][ T7413] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11981'. [ 2344.456996][ T7413] netlink: 'syz.3.11981': attribute type 10 has an invalid length. [ 2344.483561][ T7413] netlink: 55 bytes leftover after parsing attributes in process `syz.3.11981'. [ 2344.964537][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.972597][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.258666][ T7423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11982'. [ 2346.930804][ T7433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11986'. [ 2346.956822][ T7433] netlink: 'syz.1.11986': attribute type 10 has an invalid length. [ 2346.975872][ T7433] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11986'. [ 2347.193666][ T7441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11990'. [ 2347.212389][ T7441] netlink: 'syz.2.11990': attribute type 10 has an invalid length. [ 2347.229764][ T7441] netlink: 55 bytes leftover after parsing attributes in process `syz.2.11990'. [ 2347.245521][ T7444] netlink: 'syz.0.11991': attribute type 13 has an invalid length. [ 2347.502803][ T7445] netlink: 'syz.1.11992': attribute type 39 has an invalid length. [ 2348.313904][ T7462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11996'. [ 2348.814975][ T7470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12001'. [ 2348.842434][ T7470] netlink: 'syz.2.12001': attribute type 10 has an invalid length. [ 2348.861181][ T7470] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12001'. [ 2348.879404][ T7472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12002'. [ 2348.933150][ T7473] netlink: 'syz.0.12002': attribute type 10 has an invalid length. [ 2348.949809][ T7473] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12002'. [ 2349.816172][ T7478] netlink: 'syz.3.12003': attribute type 13 has an invalid length. [ 2349.864724][ T7475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12012'. [ 2349.891025][ T7475] netlink: 'syz.2.12012': attribute type 10 has an invalid length. [ 2349.920090][ T7475] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12012'. [ 2350.190051][ T7486] netlink: 'syz.2.12007': attribute type 10 has an invalid length. [ 2351.146670][ T7495] netlink: 'syz.1.12009': attribute type 39 has an invalid length. [ 2351.164980][ T7509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12010'. [ 2352.500931][ T7515] netlink: 'syz.3.12016': attribute type 13 has an invalid length. [ 2352.964774][ T7519] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12017'. [ 2352.992071][ T7519] netlink: 'syz.1.12017': attribute type 10 has an invalid length. [ 2353.020015][ T7519] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12017'. [ 2353.439721][ T7533] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12023'. [ 2354.033887][ T7541] netlink: 'syz.0.12025': attribute type 39 has an invalid length. [ 2354.885525][ T7556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12028'. [ 2354.982090][ T7552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12029'. [ 2355.032273][ T7552] netlink: 'syz.2.12029': attribute type 10 has an invalid length. [ 2355.060102][ T7552] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12029'. [ 2355.957641][ T7566] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12033'. [ 2355.999156][ T7566] netlink: 'syz.0.12033': attribute type 10 has an invalid length. [ 2356.020153][ T7566] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12033'. [ 2356.731767][ T7575] netlink: 'syz.1.12037': attribute type 21 has an invalid length. [ 2356.752654][ T7575] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12037'. [ 2356.905874][ T7582] sit0: left promiscuous mode [ 2357.074597][ T7575] sit0: entered promiscuous mode [ 2357.605020][ T7581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12038'. [ 2357.631127][ T7587] netlink: 'syz.3.12038': attribute type 10 has an invalid length. [ 2357.648450][ T7587] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12038'. [ 2357.672426][ T7588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12039'. [ 2358.218671][ T7603] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12044'. [ 2358.259213][ T7603] netlink: 'syz.0.12044': attribute type 10 has an invalid length. [ 2359.332824][ T7623] netlink: 'syz.0.12050': attribute type 10 has an invalid length. [ 2360.813757][ T7637] netlink: 'syz.0.12054': attribute type 39 has an invalid length. [ 2361.512835][ T7653] __nla_validate_parse: 5 callbacks suppressed [ 2361.512859][ T7653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12056'. [ 2361.817284][ T7656] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12058'. [ 2362.799364][ T7672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12070'. [ 2362.833057][ T7672] netlink: 'syz.1.12070': attribute type 10 has an invalid length. [ 2362.879293][ T7672] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12070'. [ 2363.296943][ T7678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12060'. [ 2364.333531][ T7696] netlink: 'syz.0.12069': attribute type 39 has an invalid length. [ 2364.490051][ T7705] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12071'. [ 2365.232859][ T7707] netlink: 'syz.0.12072': attribute type 21 has an invalid length. [ 2365.260614][ T7707] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12072'. [ 2365.456867][ T7711] netlink: 'syz.1.12073': attribute type 33 has an invalid length. [ 2365.469952][ T7711] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12073'. [ 2365.488541][ T7713] sit0: left promiscuous mode [ 2365.576530][ T7714] sit0: entered promiscuous mode [ 2366.860017][ T7748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12077'. [ 2367.256894][ T7753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12079'. [ 2367.423848][ T7760] netlink: 'syz.2.12082': attribute type 2 has an invalid length. [ 2367.528184][ T7760] netlink: 'syz.2.12082': attribute type 2 has an invalid length. [ 2367.592199][ T7758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12081'. [ 2367.887715][ T7766] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12085'. [ 2367.899383][ T7766] netlink: 'syz.2.12085': attribute type 10 has an invalid length. [ 2367.908535][ T7766] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12085'. [ 2368.091747][ T7772] netlink: 'syz.2.12088': attribute type 21 has an invalid length. [ 2368.105828][ T7772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12088'. [ 2368.193269][ T7771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12096'. [ 2368.207514][ T7773] sit0: left promiscuous mode [ 2368.313925][ T7772] sit0: entered promiscuous mode [ 2368.827452][ T7777] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2369.131725][ T7781] netlink: 'syz.1.12100': attribute type 39 has an invalid length. [ 2369.617539][ T7791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12091'. [ 2370.542514][ T7811] netlink: 'syz.1.12095': attribute type 2 has an invalid length. [ 2370.618069][ T7809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12097'. [ 2370.631032][ T7809] netlink: 'syz.2.12097': attribute type 10 has an invalid length. [ 2370.639427][ T7809] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12097'. [ 2370.703019][ T7811] netlink: 'syz.1.12095': attribute type 2 has an invalid length. [ 2370.844137][ T7814] netlink: 'syz.3.12099': attribute type 21 has an invalid length. [ 2370.998317][ T7820] sit0: left promiscuous mode [ 2371.141421][ T7814] sit0: entered promiscuous mode [ 2371.685658][ T7825] netlink: 'syz.2.12103': attribute type 33 has an invalid length. [ 2371.956697][ T7831] __nla_validate_parse: 2 callbacks suppressed [ 2371.956736][ T7831] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12106'. [ 2371.996805][ T7835] netlink: 'syz.1.12106': attribute type 10 has an invalid length. [ 2372.006465][ T7835] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12106'. [ 2372.058740][ T7834] mac80211_hwsim hwsim124 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2372.369512][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12110'. [ 2372.389327][ T7844] netlink: 'syz.3.12110': attribute type 10 has an invalid length. [ 2372.410098][ T7844] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12110'. [ 2372.743570][ T7853] netlink: 'syz.0.12114': attribute type 2 has an invalid length. [ 2372.875718][ T7853] netlink: 'syz.0.12114': attribute type 2 has an invalid length. [ 2373.325100][ T7865] netlink: 'syz.3.12116': attribute type 21 has an invalid length. [ 2373.333776][ T7865] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12116'. [ 2373.416032][ T7865] sit0: left promiscuous mode [ 2373.762498][ T7867] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12117'. [ 2373.781034][ T7867] bridge_slave_1: default FDB implementation only supports local addresses [ 2373.808232][ T7870] sit0: entered promiscuous mode [ 2373.855256][ T7869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12118'. [ 2373.866884][ T7873] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12118'. [ 2374.213250][ T7881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12121'. [ 2374.224425][ T7881] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12121'. [ 2374.971221][ T7903] sit0: left promiscuous mode [ 2375.074635][ T7904] sit0: entered promiscuous mode [ 2375.566554][ T7917] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 2375.589994][ T7917] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 2375.945329][ T7929] validate_nla: 8 callbacks suppressed [ 2375.945365][ T7929] netlink: 'syz.2.12139': attribute type 10 has an invalid length. [ 2375.988308][ T7930] netlink: 'syz.3.12140': attribute type 10 has an invalid length. [ 2376.114282][ T7934] netlink: 'syz.3.12142': attribute type 21 has an invalid length. [ 2376.152042][ T7934] sit0: left promiscuous mode [ 2376.228661][ T7936] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 2376.328310][ T7937] sit0: entered promiscuous mode [ 2376.456691][ T7935] delete_channel: no stack [ 2376.540124][ T7942] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 2376.593965][ T7940] netlink: 'syz.1.12144': attribute type 10 has an invalid length. [ 2376.944380][ T7946] @: port 1(netdevsim3) entered blocking state [ 2376.951076][ T7946] @: port 1(netdevsim3) entered disabled state [ 2376.957501][ T7946] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 2376.967003][ T7946] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 2377.115042][ T7953] __nla_validate_parse: 14 callbacks suppressed [ 2377.115081][ T7953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12149'. [ 2377.143184][ T7955] mac80211_hwsim hwsim123 wlan1: entered allmulticast mode [ 2377.163410][ T7958] netlink: 'syz.3.12149': attribute type 10 has an invalid length. [ 2377.176717][ T7958] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12149'. [ 2377.456248][ T7962] netlink: 'syz.3.12153': attribute type 39 has an invalid length. [ 2377.538196][ T7965] netlink: 'syz.2.12155': attribute type 21 has an invalid length. [ 2377.554655][ T7965] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12155'. [ 2378.398781][ T7974] sit0: left promiscuous mode [ 2378.471679][ T7978] sit0: entered promiscuous mode [ 2378.533120][ T7979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12152'. [ 2378.553316][ T7985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12156'. [ 2378.577482][ T7986] netlink: 'syz.1.12156': attribute type 10 has an invalid length. [ 2378.589814][ T7986] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12156'. [ 2378.938016][ T7999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12161'. [ 2378.948505][ T7999] netlink: 'syz.1.12161': attribute type 10 has an invalid length. [ 2378.956821][ T7999] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12161'. [ 2379.089118][ T8001] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12162'. [ 2379.101430][ T8001] netlink: 'syz.2.12162': attribute type 10 has an invalid length. [ 2379.109918][ T8001] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12162'. [ 2382.873750][ T8029] __nla_validate_parse: 3 callbacks suppressed [ 2382.873773][ T8029] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12172'. [ 2382.890565][ T8030] validate_nla: 2 callbacks suppressed [ 2382.890581][ T8030] netlink: 'syz.2.12172': attribute type 10 has an invalid length. [ 2382.904503][ T8030] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12172'. [ 2383.074531][ T8038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12175'. [ 2383.126933][ T8038] netlink: 'syz.3.12175': attribute type 10 has an invalid length. [ 2383.145904][ T8038] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12175'. [ 2383.284022][ T8045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12177'. [ 2383.294657][ T8045] netlink: 'syz.1.12177': attribute type 10 has an invalid length. [ 2383.303485][ T8045] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12177'. [ 2383.789065][ T8054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12180'. [ 2384.064840][ T8065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12182'. [ 2384.075138][ T8065] netlink: 'syz.3.12182': attribute type 10 has an invalid length. [ 2384.083576][ T8065] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12182'. [ 2385.808528][ T8067] netlink: 'syz.2.12183': attribute type 10 has an invalid length. [ 2386.029162][ T8074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12187'. [ 2386.040062][ T8074] netlink: 'syz.1.12187': attribute type 10 has an invalid length. [ 2386.247500][ T8080] netlink: 'syz.1.12190': attribute type 10 has an invalid length. [ 2395.197683][ T8091] __nla_validate_parse: 4 callbacks suppressed [ 2395.197718][ T8091] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12195'. [ 2395.223254][ T8091] netlink: 'syz.1.12195': attribute type 10 has an invalid length. [ 2395.231743][ T8091] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12195'. [ 2395.251030][T19435] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2395.265204][T19435] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2395.276100][T19435] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2395.295218][T19435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2395.306658][T19435] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2395.314291][T19435] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2395.554609][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 2395.623591][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 2395.630858][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 2395.638195][ T8094] bridge_slave_0: entered allmulticast mode [ 2395.645564][ T8094] bridge_slave_0: entered promiscuous mode [ 2395.654093][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 2395.661640][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 2395.668796][ T8094] bridge_slave_1: entered allmulticast mode [ 2395.675958][ T8094] bridge_slave_1: entered promiscuous mode [ 2395.705518][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2395.717428][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2395.750267][ T8094] team0: Port device team_slave_0 added [ 2395.759300][ T8094] team0: Port device team_slave_1 added [ 2395.784430][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2395.791595][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.818184][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2395.831040][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2395.838017][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2395.864173][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2395.906283][ T8094] hsr_slave_0: entered promiscuous mode [ 2395.912762][ T8094] hsr_slave_1: entered promiscuous mode [ 2396.056257][ T8094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2396.066277][ T8094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2396.076353][ T8094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2396.087577][ T8094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2396.114039][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.121190][ T8094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2396.128576][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.135803][ T8094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2396.195690][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2396.213408][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2396.222395][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2396.239225][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 2396.252348][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.259532][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2396.275130][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.282317][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2396.474736][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2396.694658][ T8094] veth0_vlan: entered promiscuous mode [ 2396.708581][ T8094] veth1_vlan: entered promiscuous mode [ 2396.742140][ T8094] veth0_macvtap: entered promiscuous mode [ 2396.752758][ T8094] veth1_macvtap: entered promiscuous mode [ 2396.772350][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2396.787583][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2396.801034][ T8094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.810126][ T8094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.818847][ T8094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.827752][ T8094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2396.923535][ T7976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2396.931647][ T7976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2396.986875][ T7976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2396.995177][ T7976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2397.341837][ T8124] netlink: 'syz.4.12199': attribute type 10 has an invalid length. [ 2397.357546][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state [ 2397.367084][ T8124] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.370532][T19435] Bluetooth: hci4: command tx timeout [ 2397.417548][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.426550][ T8124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2397.436347][ T8124] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.444697][ T8124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2397.487270][ T8124] team0: Port device bridge0 added [ 2397.495384][ T8121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12200'. [ 2397.515667][ T8126] netlink: 'syz.1.12200': attribute type 10 has an invalid length. [ 2397.524236][ T8126] netlink: 55 bytes leftover after parsing attributes in process `syz.1.12200'. [ 2397.786538][ T8130] netdevsim netdevsim4: Direct firmware load for @ failed with error -2 [ 2397.798579][ T8130] netdevsim netdevsim4: Falling back to sysfs fallback for: @ [ 2399.449812][T19435] Bluetooth: hci4: command tx timeout [ 2401.519820][T19435] Bluetooth: hci4: command tx timeout [ 2403.599734][T19435] Bluetooth: hci4: command tx timeout [ 2406.403905][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.410414][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.850233][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.856946][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2521.129690][ T7385] Bluetooth: hci4: command 0x0406 tx timeout [ 2529.284487][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.291233][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2536.319740][ T29] INFO: task syz.0.12160:7995 blocked for more than 143 seconds. [ 2536.327502][ T29] Not tainted syzkaller #0 [ 2536.332734][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2536.341481][ T29] task:syz.0.12160 state:D stack:24808 pid:7995 ppid:7604 flags:0x00004006 [ 2536.350871][ T29] Call Trace: [ 2536.354188][ T29] [ 2536.357164][ T29] __schedule+0x15ae/0x4660 [ 2536.362252][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 2536.367339][ T29] ? asan.module_dtor+0x20/0x20 [ 2536.372369][ T29] ? trace_contention_end+0x39/0xe0 [ 2536.377640][ T29] ? task_work_cancel+0xa5/0x220 [ 2536.382713][ T29] ? task_work_cancel_func+0x210/0x210 [ 2536.388257][ T29] schedule+0xbd/0x170 [ 2536.392542][ T29] ? _free_event+0x10d/0xfb0 [ 2536.397215][ T29] _free_event+0x176/0xfb0 [ 2536.401790][ T29] perf_event_release_kernel+0x7c8/0x850 [ 2536.407467][ T29] ? __might_sleep+0xe0/0xe0 [ 2536.412250][ T29] ? calc_timer_values+0x400/0x400 [ 2536.417413][ T29] ? perf_mmap+0x15e0/0x15e0 [ 2536.422989][ T29] perf_release+0x3b/0x40 [ 2536.427391][ T29] __fput+0x221/0x940 [ 2536.432664][ T29] task_work_run+0x1d4/0x260 [ 2536.437310][ T29] ? task_work_cancel+0x220/0x220 [ 2536.442657][ T29] do_exit+0x986/0x2530 [ 2536.446876][ T29] ? put_task_struct+0xc0/0xc0 [ 2536.452884][ T29] ? preempt_schedule_common+0x82/0xc0 [ 2536.458405][ T29] ? preempt_schedule+0xc0/0xd0 [ 2536.464064][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2536.469942][ T29] do_group_exit+0x22d/0x2f0 [ 2536.474591][ T29] get_signal+0x12a6/0x1390 [ 2536.479156][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 2536.484819][ T29] ? mutex_unlock+0x10/0x10 [ 2536.489357][ T29] ? get_sigframe_size+0x20/0x20 [ 2536.494472][ T29] ? ksys_write+0x201/0x260 [ 2536.499015][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2536.504593][ T29] exit_to_user_mode_loop+0x70/0x110 [ 2536.510016][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2536.515580][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2536.521879][ T29] do_syscall_64+0x61/0xb0 [ 2536.526339][ T29] ? clear_bhb_loop+0x40/0x90 [ 2536.531226][ T29] ? clear_bhb_loop+0x40/0x90 [ 2536.535972][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2536.541955][ T29] RIP: 0033:0x7f4a0f59de99 [ 2536.546413][ T29] RSP: 002b:00007f4a103f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2536.556103][ T29] RAX: 0000000000000012 RBX: 00007f4a0f825fa0 RCX: 00007f4a0f59de99 [ 2536.564253][ T29] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 000000000000000e [ 2536.572725][ T29] RBP: 00007f4a0f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 2536.581043][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2536.589039][ T29] R13: 00007f4a0f826038 R14: 00007f4a0f825fa0 R15: 00007fff572b8f78 [ 2536.597229][ T29] [ 2536.600341][ T29] [ 2536.600341][ T29] Showing all locks held in the system: [ 2536.608061][ T29] 1 lock held by khungtaskd/29: [ 2536.613079][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2536.623071][ T29] 2 locks held by getty/5532: [ 2536.627753][ T29] #0: ffff88802d6140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2536.637737][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2536.647941][ T29] [ 2536.650413][ T29] ============================================= [ 2536.650413][ T29] [ 2536.658845][ T29] NMI backtrace for cpu 1 [ 2536.663177][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2536.670389][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2536.680450][ T29] Call Trace: [ 2536.683819][ T29] [ 2536.686760][ T29] dump_stack_lvl+0x18c/0x250 [ 2536.691447][ T29] ? __wake_up_klogd+0xd9/0x100 [ 2536.696311][ T29] ? show_regs_print_info+0x20/0x20 [ 2536.701517][ T29] ? load_image+0x420/0x420 [ 2536.706058][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2536.711025][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2536.717242][ T29] ? load_image+0x420/0x420 [ 2536.721775][ T29] ? wq_watchdog_touch+0xef/0x170 [ 2536.726829][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2536.732947][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2536.738967][ T29] watchdog+0xf59/0xfa0 [ 2536.743238][ T29] ? watchdog+0x1e1/0xfa0 [ 2536.747639][ T29] kthread+0x2fa/0x390 [ 2536.751736][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2536.756795][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2536.761422][ T29] ret_from_fork+0x48/0x80 [ 2536.765869][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2536.770483][ T29] ret_from_fork_asm+0x11/0x20 [ 2536.775308][ T29] [ 2536.778959][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2536.784339][ C0] NMI backtrace for cpu 0 [ 2536.784350][ C0] CPU: 0 PID: 1099 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 2536.784366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2536.784377][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2536.784445][ C0] RIP: 0010:kasan_check_range+0x14/0x290 [ 2536.784469][ C0] Code: b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 <41> 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 f9 49 [ 2536.784483][ C0] RSP: 0018:ffffc9000468f500 EFLAGS: 00000002 [ 2536.784496][ C0] RAX: 0000000000000001 RBX: 000000000000002f RCX: ffffffff81688fca [ 2536.784507][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb500 [ 2536.784518][ C0] RBP: ffffc9000468f768 R08: dffffc0000000000 R09: 0000000000000001 [ 2536.784530][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 0000000000040000 [ 2536.784542][ C0] R13: ffff888023d6bc00 R14: 0000000000000000 R15: 0000000000000000 [ 2536.784553][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2536.784567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2536.784578][ C0] CR2: 0000555b0a1e3920 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2536.784592][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 2536.784602][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2536.784613][ C0] Call Trace: [ 2536.784619][ C0] [ 2536.784626][ C0] __lock_acquire+0x56a/0x7d80 [ 2536.784660][ C0] ? ret_from_fork_asm+0x11/0x20 [ 2536.784683][ C0] ? verify_lock_unused+0x140/0x140 [ 2536.784701][ C0] ? ret_from_fork_asm+0x11/0x20 [ 2536.784722][ C0] ? stack_trace_save+0x100/0x100 [ 2536.784743][ C0] ? arch_stack_walk+0x16e/0x190 [ 2536.784763][ C0] ? ret_from_fork_asm+0x11/0x20 [ 2536.784794][ C0] ? stack_trace_save+0xaa/0x100 [ 2536.784814][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2536.784836][ C0] lock_acquire+0x19e/0x420 [ 2536.784854][ C0] ? crng_make_state+0x142/0x700 [ 2536.784880][ C0] ? kmalloc_reserve+0x116/0x240 [ 2536.784899][ C0] ? __alloc_skb+0x138/0x2c0 [ 2536.784913][ C0] ? nsim_dev_trap_report_work+0x253/0xa90 [ 2536.784930][ C0] ? process_scheduled_works+0xa60/0x1600 [ 2536.784951][ C0] ? worker_thread+0xa5e/0xfe0 [ 2536.784971][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2536.784997][ C0] crng_make_state+0x15f/0x700 [ 2536.785019][ C0] ? crng_make_state+0x142/0x700 [ 2536.785042][ C0] ? crng_make_state+0x142/0x700 [ 2536.785064][ C0] ? urandom_read_iter+0x140/0x140 [ 2536.785093][ C0] _get_random_bytes+0x100/0x250 [ 2536.785115][ C0] ? get_random_bytes+0x20/0x20 [ 2536.785138][ C0] ? __kmalloc_node_track_caller+0xe2/0x230 [ 2536.785169][ C0] ? __alloc_skb+0x1b2/0x2c0 [ 2536.785183][ C0] ? skb_put+0x112/0x210 [ 2536.785202][ C0] nsim_dev_trap_report_work+0x2e9/0xa90 [ 2536.785226][ C0] ? process_scheduled_works+0x975/0x1600 [ 2536.785248][ C0] process_scheduled_works+0xa60/0x1600 [ 2536.785283][ C0] ? worker_attach_to_pool+0x370/0x370 [ 2536.785309][ C0] ? assign_work+0x3cc/0x5d0 [ 2536.785332][ C0] worker_thread+0xa5e/0xfe0 [ 2536.785365][ C0] kthread+0x2fa/0x390 [ 2536.785381][ C0] ? pr_cont_work+0x550/0x550 [ 2536.785402][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2536.785419][ C0] ret_from_fork+0x48/0x80 [ 2536.785439][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2536.785456][ C0] ret_from_fork_asm+0x11/0x20 [ 2536.785503][ C0] [ 2537.127668][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2537.134558][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2537.141794][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2537.151868][ T29] Call Trace: [ 2537.155179][ T29] [ 2537.158149][ T29] dump_stack_lvl+0x18c/0x250 [ 2537.162847][ T29] ? show_regs_print_info+0x20/0x20 [ 2537.168054][ T29] ? load_image+0x420/0x420 [ 2537.172586][ T29] panic+0x2ca/0x720 [ 2537.176509][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2537.181034][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2537.186599][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 2537.192004][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2537.198185][ T29] watchdog+0xf98/0xfa0 [ 2537.202385][ T29] ? watchdog+0x1e1/0xfa0 [ 2537.206743][ T29] kthread+0x2fa/0x390 [ 2537.210836][ T29] ? hungtask_pm_notify+0x50/0x50 [ 2537.215884][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2537.220495][ T29] ret_from_fork+0x48/0x80 [ 2537.224927][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2537.229539][ T29] ret_from_fork_asm+0x11/0x20 [ 2537.234349][ T29] [ 2537.238008][ T29] Kernel Offset: disabled [ 2537.242342][ T29] Rebooting in 86400 seconds..