last executing test programs: 2m35.551621786s ago: executing program 0 (id=10012): socketpair(0x1a, 0x800, 0x7, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0x200, 0x6, 0xe1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfd42, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40000040) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x80}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, &(0x7f0000000140), &(0x7f0000000240)=""/160}, 0x20) recvmsg$kcm(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 2m34.044511519s ago: executing program 0 (id=10022): unlink(&(0x7f0000000140)='./cgroup\x00') 2m33.744381s ago: executing program 0 (id=10027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0x0, 0x1, 0x1ff, 0x80, 0xffffffffffffffff, 0xc0000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000015c0)={r0, &(0x7f0000001500)="7be771c9e4bff97046092a3aeab3e7444a5c96a40986180d34f2cf521fcd1ce57c8ea63c16182bfb1da29fe0906d4a4b96b00c9509cb923fd54129", 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x4001100, &(0x7f0000000140)="9cbb6b2be137c3f2bfa0473bcc8bbf0963b4a02ea28c34d29a1680f70a93d05796cd844ee37e3738b48270ad866dfdf800dfcb0b96ab5edd4b330e62e403080c6a67f9b502fde939793088bb292a259f55bdb5d7242a93f7c8a3c7697b631beb3ac79617f8", 0x65, &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="0e585dfe78ed8c1bdc4ec95a083e86a9e51bee37bf1e5091f8a48d1dd5cd9f63b69698e8ee1a7f41b1a5ee5be371c78965c64c4d3b4a6fec600378aed1511a63cc181813515d1bfcda98a902de2e5d95ab6dcfd97a103519") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f00000016c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r5, 0x120) 2m32.728969795s ago: executing program 0 (id=10033): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000611936000000000095000000000000001c23b22286d931993d73439c911fb17006d7fb7771641e4389d3febfaa669a800f74"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000200)=r4, 0x4) write$cgroup_subtree(r2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x33, 0x0, 0x2ae8, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)}, 0x40) 2m31.722173591s ago: executing program 0 (id=10035): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r1, 0x10e, 0xa, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000000000ff7f09682ac67c73134b0000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000050000000300"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f00000002c0), 0x75f7, r3, 0x4}, 0x38) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xc, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100d, &(0x7f00000017c0)=""/4109, 0x41100}, 0x7b) 2m30.523161763s ago: executing program 0 (id=10044): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 2m15.373172641s ago: executing program 32 (id=10044): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) syz_clone(0x40019100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 3.974882221s ago: executing program 5 (id=11124): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 3.381821782s ago: executing program 2 (id=11132): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000300)="fa", 0x1}], 0x2}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24"], 0x10b8}, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8907, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 3.067119163s ago: executing program 5 (id=11135): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) sendmsg$tipc(r0, 0x0, 0x4000084) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x106) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1315}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.954843016s ago: executing program 1 (id=11136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 2.890199969s ago: executing program 5 (id=11137): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6", 0xcb}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) recvmsg(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 2.735411115s ago: executing program 1 (id=11138): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c738864"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd5}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0x82d7) recvmsg(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 2.197827473s ago: executing program 4 (id=11140): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x42, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe6}, 0x108461, 0xc78, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) 2.194709163s ago: executing program 2 (id=11150): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}]}, 0x2e) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001ffeffff7f000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.897204954s ago: executing program 1 (id=11141): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x6084, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20) 1.897064824s ago: executing program 3 (id=11142): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) 1.896958384s ago: executing program 4 (id=11143): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/222, 0xde}, 0x40000002) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffc0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 1.870274744s ago: executing program 5 (id=11152): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c738864"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd5}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00"], 0x82d7) recvmsg(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 1.869908435s ago: executing program 2 (id=11144): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x24000008) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b23, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) 1.618605773s ago: executing program 4 (id=11145): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 1.355130033s ago: executing program 3 (id=11146): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1100, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c) 1.310193314s ago: executing program 5 (id=11147): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.219975197s ago: executing program 1 (id=11148): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x37e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x9, 0x40, 0x7f, 0x5, 0x0, 0xab2, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x91c, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff7}, 0x108421, 0x0, 0x5, 0x7, 0x4, 0xffff2203, 0x7, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x1, r0, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.170224009s ago: executing program 5 (id=11149): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x82d7) recvmsg(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 1.169978459s ago: executing program 2 (id=11151): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, 0x0, &(0x7f0000000180), 0x4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000980)={0x0, 0x0}) close(r1) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f00000003c0), 0x0, &(0x7f00000016c0)="b34927d27661ffef91b6a13bb4ae3d61179e5b00b810a62206de5e28b97f267da08f307def8a1913c1ec458aa47784268f8d227e4987fe81858a12128bb7f4824f23140a7f6b5e81910d4dcee49701711fa67d06024e1c6e46aaff006f6c34842838a6d3d3b3424e7ad56040743a58ed84dec276f07382e4ad8145904039bde2b179ab09bfd7e63c613985c0", &(0x7f00000005c0)="20e384f28ae8f9e3256d1ff18c49a23bc59ce74fca75eb9c05442f6defd5b8afe2d1adcb377faca08765", 0x6, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.169882589s ago: executing program 3 (id=11153): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x42, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe6}, 0x108461, 0xc78, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FREEZING\x00', 0x9) 943.084957ms ago: executing program 1 (id=11154): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}]}, 0x2e) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001ffeffff7f000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 942.860167ms ago: executing program 2 (id=11155): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0xf0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x5, &(0x7f00000008c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x46, 0x15}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) close(0xffffffffffffffff) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 900.373429ms ago: executing program 3 (id=11156): perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='b '], 0x9) 562.67163ms ago: executing program 3 (id=11157): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/222, 0xde}, 0x40000002) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffc0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 562.479371ms ago: executing program 4 (id=11158): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) 561.26144ms ago: executing program 2 (id=11167): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x81}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 477.271123ms ago: executing program 1 (id=11159): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c738864"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40012100) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd5}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00"], 0x82d7) recvmsg(r3, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) 214.684512ms ago: executing program 3 (id=11160): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0xc353, 0x0, 0x9}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 214.491062ms ago: executing program 4 (id=11161): r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000400), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240), 0x20000840) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000018"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000380)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x73}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2ab9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9a}}, @call={0x85, 0x0, 0x0, 0x1f}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}], &(0x7f0000000000)='syzkaller\x00', 0xb7, 0x71, &(0x7f00000001c0)=""/113, 0x1f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r2, r2, r2, r2, 0xffffffffffffffff, r2, r2, r2, r2], &(0x7f0000000500)=[{0x1, 0x1, 0x4, 0x4}, {0x1, 0x3, 0x10, 0xc}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000600)={0xffffffffffffffff, r4}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) 0s ago: executing program 4 (id=11162): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) kernel console output (not intermixed with test programs): ink: 'syz.3.9352': attribute type 3 has an invalid length. [ 1395.531794][ T3271] netlink: 'syz.3.9352': attribute type 1 has an invalid length. [ 1395.795852][ T3278] netlink: 'syz.2.9354': attribute type 29 has an invalid length. [ 1397.056357][ T3302] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1397.223206][ T3302] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1397.823763][ T3322] __nla_validate_parse: 18 callbacks suppressed [ 1397.823805][ T3322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9369'. [ 1398.619444][ T3324] device syzkaller0 entered promiscuous mode [ 1399.574122][ T3356] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9380'. [ 1399.584677][ T3356] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1399.593848][ T3356] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1399.666632][ T3362] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.9382'. [ 1399.736946][ T3365] device syzkaller0 entered promiscuous mode [ 1399.756730][ T3362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9382'. [ 1399.763577][ T3364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9381'. [ 1399.789916][T26488] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1399.888192][ T3368] validate_nla: 19 callbacks suppressed [ 1399.894565][ T3368] netlink: 'syz.0.9384': attribute type 27 has an invalid length. [ 1399.903818][ T3368] netlink: 'syz.0.9384': attribute type 3 has an invalid length. [ 1399.918733][ T3368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1400.646694][ T3383] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.9391'. [ 1400.810382][ T3389] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9402'. [ 1400.936100][ T3392] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1401.017650][ T3392] device syzkaller0 entered promiscuous mode [ 1401.040065][ T3395] netlink: 'syz.0.9394': attribute type 10 has an invalid length. [ 1401.121353][ T3402] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.9397'. [ 1401.235963][ T3402] netlink: 'syz.4.9397': attribute type 27 has an invalid length. [ 1401.245060][ T3402] netlink: 'syz.4.9397': attribute type 3 has an invalid length. [ 1401.253967][ T3402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9397'. [ 1401.410983][ T3407] netlink: 'syz.0.9399': attribute type 27 has an invalid length. [ 1401.454866][ T3407] netlink: 'syz.0.9399': attribute type 3 has an invalid length. [ 1402.514748][ T3437] netlink: 'syz.2.9409': attribute type 10 has an invalid length. [ 1402.768338][ T3442] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1402.817005][ T3451] netlink: 'syz.2.9413': attribute type 27 has an invalid length. [ 1402.835809][ T3442] device syzkaller0 entered promiscuous mode [ 1402.842483][ T3451] netlink: 'syz.2.9413': attribute type 3 has an invalid length. [ 1402.863766][ T3451] __nla_validate_parse: 4 callbacks suppressed [ 1402.863804][ T3451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9413'. [ 1403.156683][ T3471] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9418'. [ 1403.175560][ T3464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9416'. [ 1403.303384][ T3474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9418'. [ 1403.793732][ T3495] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.9425'. [ 1404.028071][ T3509] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.9428'. [ 1404.114464][ T3515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9428'. [ 1404.291019][ T3520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1404.324848][ T3513] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1404.373115][ T3513] device syzkaller0 entered promiscuous mode [ 1404.472509][ T3528] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9433'. [ 1404.633221][ T3528] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9433'. [ 1405.456986][ T3562] validate_nla: 11 callbacks suppressed [ 1405.457017][ T3562] netlink: 'syz.0.9445': attribute type 27 has an invalid length. [ 1405.471699][ T3562] netlink: 'syz.0.9445': attribute type 3 has an invalid length. [ 1405.913858][ T3570] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1405.944467][ T3570] device syzkaller0 entered promiscuous mode [ 1406.169223][ T3585] netlink: 'syz.2.9451': attribute type 27 has an invalid length. [ 1406.177095][ T3585] netlink: 'syz.2.9451': attribute type 3 has an invalid length. [ 1406.624145][ T3597] netlink: 'syz.1.9456': attribute type 27 has an invalid length. [ 1406.633452][ T3597] netlink: 'syz.1.9456': attribute type 3 has an invalid length. [ 1407.110550][ T3612] netlink: 'syz.3.9458': attribute type 27 has an invalid length. [ 1407.119789][ T3612] netlink: 'syz.3.9458': attribute type 3 has an invalid length. [ 1408.100054][ T3639] __nla_validate_parse: 10 callbacks suppressed [ 1408.100077][ T3639] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9470'. [ 1408.323190][ T3639] netlink: 'syz.1.9470': attribute type 27 has an invalid length. [ 1408.334330][ T3644] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1408.372228][ T3639] netlink: 'syz.1.9470': attribute type 3 has an invalid length. [ 1408.403992][ T3639] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9470'. [ 1408.451795][ T3647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1408.696910][ T3651] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1408.902628][ T3651] device syzkaller0 entered promiscuous mode [ 1409.240565][ T3666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9477'. [ 1409.499925][ T3675] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9479'. [ 1410.565520][ T3699] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1410.655156][ T3703] validate_nla: 4 callbacks suppressed [ 1410.655177][ T3703] netlink: 'syz.0.9488': attribute type 3 has an invalid length. [ 1410.739364][ T3703] netlink: 'syz.0.9488': attribute type 1 has an invalid length. [ 1410.815361][ T3704] netlink: 'syz.1.9487': attribute type 27 has an invalid length. [ 1410.837896][ T3704] netlink: 'syz.1.9487': attribute type 3 has an invalid length. [ 1410.840564][ T3703] netlink: 'syz.0.9488': attribute type 27 has an invalid length. [ 1410.846219][ T3704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1410.968354][ T3703] netlink: 'syz.0.9488': attribute type 3 has an invalid length. [ 1411.023153][ T3703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9488'. [ 1411.159586][ T3714] netlink: 'syz.2.9491': attribute type 27 has an invalid length. [ 1411.205302][ T3714] netlink: 'syz.2.9491': attribute type 3 has an invalid length. [ 1411.244455][ T3714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9491'. [ 1411.586721][ T3722] netlink: 'syz.4.9495': attribute type 27 has an invalid length. [ 1411.608703][ T3722] netlink: 'syz.4.9495': attribute type 3 has an invalid length. [ 1413.381238][ T3754] __nla_validate_parse: 3 callbacks suppressed [ 1413.381261][ T3754] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.9506'. [ 1413.384253][ T3755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9504'. [ 1413.583095][ T3763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9507'. [ 1413.726633][ T3766] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9508'. [ 1413.761495][ T3759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9506'. [ 1413.849828][ T3770] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.9509'. [ 1414.072891][ T3770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9509'. [ 1414.392376][ T3778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1415.356122][ T3806] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1415.545432][ T3809] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1416.496699][ T3824] validate_nla: 16 callbacks suppressed [ 1416.496735][ T3824] netlink: 'syz.0.9524': attribute type 27 has an invalid length. [ 1416.523576][ T3824] netlink: 'syz.0.9524': attribute type 3 has an invalid length. [ 1416.897772][ T3840] netlink: 'syz.0.9527': attribute type 10 has an invalid length. [ 1416.953742][ T3840] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1417.085335][ T3856] netlink: 'syz.4.9530': attribute type 3 has an invalid length. [ 1417.141105][ T3856] netlink: 'syz.4.9530': attribute type 1 has an invalid length. [ 1417.409662][ T3863] netlink: 'syz.4.9530': attribute type 27 has an invalid length. [ 1417.499028][ T3863] netlink: 'syz.4.9530': attribute type 3 has an invalid length. [ 1417.544118][ T3870] netlink: 'syz.1.9536': attribute type 27 has an invalid length. [ 1417.638776][ T3870] netlink: 'syz.1.9536': attribute type 3 has an invalid length. [ 1417.972943][ T3882] netlink: 'syz.0.9540': attribute type 27 has an invalid length. [ 1419.200335][ T3900] __nla_validate_parse: 10 callbacks suppressed [ 1419.200357][ T3900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9546'. [ 1419.446510][ T3914] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9551'. [ 1419.545782][ T3919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9551'. [ 1419.589785][ T3920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9549'. [ 1419.641929][ T3924] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.9552'. [ 1419.723638][ T3928] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9553'. [ 1419.840745][ T3929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9552'. [ 1419.974328][ T3928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9553'. [ 1421.259863][ T3970] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9564'. [ 1421.395664][ T3970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9564'. [ 1422.055140][ T3985] validate_nla: 11 callbacks suppressed [ 1422.055181][ T3985] netlink: 'syz.3.9569': attribute type 27 has an invalid length. [ 1422.092008][ T3985] netlink: 'syz.3.9569': attribute type 3 has an invalid length. [ 1422.159246][ T3984] netlink: 'syz.1.9568': attribute type 27 has an invalid length. [ 1422.183423][ T3984] netlink: 'syz.1.9568': attribute type 3 has an invalid length. [ 1423.105454][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.112498][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.120514][ T4006] netlink: 'syz.0.9582': attribute type 27 has an invalid length. [ 1423.165651][ T4013] netlink: 'syz.2.9577': attribute type 9 has an invalid length. [ 1423.303172][ T4006] netlink: 'syz.0.9582': attribute type 3 has an invalid length. [ 1423.687898][ T4030] netlink: 'syz.1.9581': attribute type 3 has an invalid length. [ 1423.690055][ T4019] netlink: 'syz.2.9577': attribute type 9 has an invalid length. [ 1423.768458][ T4030] netlink: 'syz.1.9581': attribute type 1 has an invalid length. [ 1424.321311][ T4038] __nla_validate_parse: 9 callbacks suppressed [ 1424.321543][ T4038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9593'. [ 1424.454226][ T4044] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1425.090025][ T4049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9586'. [ 1426.101020][ T4077] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9595'. [ 1426.900074][ T4088] delete_channel: no stack [ 1426.938354][ T4079] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9595'. [ 1427.071636][ T4090] validate_nla: 8 callbacks suppressed [ 1427.071683][ T4090] netlink: 'syz.3.9598': attribute type 27 has an invalid length. [ 1427.091279][ T4090] netlink: 'syz.3.9598': attribute type 3 has an invalid length. [ 1427.108285][ T4090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9598'. [ 1427.156253][ T4096] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.9600'. [ 1427.314856][ T4100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9602'. [ 1427.345781][ T4100] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9602'. [ 1427.715827][ T4102] netlink: 'syz.1.9603': attribute type 27 has an invalid length. [ 1427.755151][ T4102] netlink: 'syz.1.9603': attribute type 3 has an invalid length. [ 1427.765445][ T4107] netlink: 'syz.0.9600': attribute type 27 has an invalid length. [ 1427.807665][ T4102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9603'. [ 1427.825347][ T4107] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 1429.407068][ T4142] netlink: 'syz.3.9613': attribute type 9 has an invalid length. [ 1429.467874][ T4142] __nla_validate_parse: 1 callbacks suppressed [ 1429.467911][ T4142] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1429.509099][ T4135] netlink: 'syz.4.9611': attribute type 8 has an invalid length. [ 1429.517124][ T4135] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.9611'. [ 1429.524578][ T4145] netlink: 'syz.0.9614': attribute type 3 has an invalid length. [ 1429.641265][ T4145] netlink: 'syz.0.9614': attribute type 1 has an invalid length. [ 1429.786584][ T4145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9614'. [ 1430.127387][ T4147] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1430.480660][ T4162] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9616'. [ 1430.799655][ T4166] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1430.889752][ T4175] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.9621'. [ 1431.032625][ T4187] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1431.054730][ T4190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9621'. [ 1431.100781][ T4193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9620'. [ 1431.961038][ T4225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1431.968491][ T4225] IPv6: NLM_F_CREATE should be set when creating new route [ 1432.258027][ T4227] validate_nla: 9 callbacks suppressed [ 1432.258048][ T4227] netlink: 'syz.4.9629': attribute type 9 has an invalid length. [ 1432.614866][ T4224] netlink: 'syz.4.9629': attribute type 9 has an invalid length. [ 1432.702340][ T4241] netlink: 'syz.3.9636': attribute type 3 has an invalid length. [ 1432.742981][ T4241] netlink: 'syz.3.9636': attribute type 1 has an invalid length. [ 1433.045946][ T4243] netlink: 'syz.3.9636': attribute type 27 has an invalid length. [ 1433.088406][ T4243] netlink: 'syz.3.9636': attribute type 3 has an invalid length. [ 1433.579036][ T4259] netlink: 'syz.2.9639': attribute type 27 has an invalid length. [ 1433.670939][ T4259] netlink: 'syz.2.9639': attribute type 3 has an invalid length. [ 1433.776292][ T4265] netlink: 'syz.0.9640': attribute type 27 has an invalid length. [ 1433.858434][ T4265] netlink: 'syz.0.9640': attribute type 3 has an invalid length. [ 1434.282213][ T4286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1434.576258][ T4293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.790326][ T4305] __nla_validate_parse: 13 callbacks suppressed [ 1434.790347][ T4305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1434.846927][ T4298] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9651'. [ 1434.870232][ T4308] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9654'. [ 1435.012437][ T4308] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9654'. [ 1435.244412][ T4321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9656'. [ 1435.347369][ T4321] device team0 entered promiscuous mode [ 1435.355884][ T4321] device team_slave_0 entered promiscuous mode [ 1435.363060][ T4321] device team_slave_1 entered promiscuous mode [ 1435.378663][ T4321] device geneve1 entered promiscuous mode [ 1435.379538][ T4318] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9653'. [ 1435.386754][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.407668][ T4321] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1435.560730][ T4324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9658'. [ 1435.702747][ T4325] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9653'. [ 1435.872520][ T4334] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9663'. [ 1436.066135][ T4332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1436.076136][ T4336] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9662'. [ 1437.657082][ T4383] validate_nla: 20 callbacks suppressed [ 1437.657105][ T4383] netlink: 'syz.0.9688': attribute type 3 has an invalid length. [ 1437.717899][ T4383] netlink: 'syz.0.9688': attribute type 1 has an invalid length. [ 1437.872126][ T4386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1437.880851][ T4386] IPv6: NLM_F_CREATE should be set when creating new route [ 1437.890616][ T4386] IPv6: NLM_F_CREATE should be set when creating new route [ 1437.899826][ T4386] IPv6: NLM_F_CREATE should be set when creating new route [ 1437.999943][ T4383] netlink: 'syz.0.9688': attribute type 27 has an invalid length. [ 1438.081507][ T4383] netlink: 'syz.0.9688': attribute type 3 has an invalid length. [ 1438.307331][ T4409] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1438.538089][ T4420] netlink: 'syz.4.9693': attribute type 29 has an invalid length. [ 1438.545727][ T4411] netlink: 'syz.0.9689': attribute type 27 has an invalid length. [ 1438.603657][ T4411] netlink: 'syz.0.9689': attribute type 3 has an invalid length. [ 1438.624634][ T4420] netlink: 'syz.4.9693': attribute type 29 has an invalid length. [ 1438.643886][ T4427] netlink: 'syz.4.9693': attribute type 29 has an invalid length. [ 1438.661527][ T4420] netlink: 'syz.4.9693': attribute type 4 has an invalid length. [ 1439.389102][ T4448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1440.124896][ T4459] netlink: set zone limit has 8 unknown bytes [ 1440.182948][ T4460] __nla_validate_parse: 17 callbacks suppressed [ 1440.183742][ T4460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9703'. [ 1440.502844][ T4476] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.9707'. [ 1440.529127][ T4472] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9706'. [ 1440.963961][ T4487] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.9712'. [ 1441.304876][ T4487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9712'. [ 1441.617238][ T4500] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9714'. [ 1442.538572][ T4522] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1443.017815][ T4529] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1443.146518][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9722'. [ 1443.209646][ T4531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.395562][ T4549] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9730'. [ 1443.623412][ T4561] validate_nla: 13 callbacks suppressed [ 1443.623435][ T4561] netlink: 'syz.0.9733': attribute type 3 has an invalid length. [ 1443.653800][ T4561] netlink: 'syz.0.9733': attribute type 1 has an invalid length. [ 1443.658097][ T4549] netlink: 'syz.3.9730': attribute type 27 has an invalid length. [ 1443.738067][ T4549] netlink: 'syz.3.9730': attribute type 3 has an invalid length. [ 1443.747199][ T4549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9730'. [ 1443.814883][ T4564] netlink: 'syz.0.9733': attribute type 27 has an invalid length. [ 1443.836557][ T4564] netlink: 'syz.0.9733': attribute type 3 has an invalid length. [ 1444.852625][ T4588] netlink: set zone limit has 8 unknown bytes [ 1445.389488][ T4580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.509148][ T4586] device syzkaller0 entered promiscuous mode [ 1445.785266][ T4609] __nla_validate_parse: 2 callbacks suppressed [ 1445.785286][ T4609] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9746'. [ 1445.823779][ T4614] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.9747'. [ 1445.835529][ T4615] netlink: 'syz.4.9748': attribute type 3 has an invalid length. [ 1445.864238][ T4615] netlink: 'syz.4.9748': attribute type 1 has an invalid length. [ 1445.888749][ T4607] netlink: 'syz.3.9745': attribute type 39 has an invalid length. [ 1446.038956][ T4609] netlink: 'syz.2.9746': attribute type 27 has an invalid length. [ 1446.088647][ T4609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9746'. [ 1446.159919][ T4622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9748'. [ 1446.175823][ T4624] netlink: 205320 bytes leftover after parsing attributes in process `syz.0.9750'. [ 1446.413372][ T4628] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9751'. [ 1446.629842][ T4632] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9753'. [ 1446.684884][ T4626] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9752'. [ 1447.081686][ T4643] netlink: 184 bytes leftover after parsing attributes in process `syz.4.9756'. [ 1447.141453][ T4650] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1448.130824][ T4678] netlink: set zone limit has 8 unknown bytes [ 1448.461156][ T4677] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1448.965542][ T4705] validate_nla: 18 callbacks suppressed [ 1448.965580][ T4705] netlink: 'syz.4.9780': attribute type 39 has an invalid length. [ 1449.729790][ T4726] netlink: 'syz.0.9786': attribute type 27 has an invalid length. [ 1449.734758][ T4728] netlink: 'syz.3.9787': attribute type 3 has an invalid length. [ 1449.740169][ T4726] netlink: 'syz.0.9786': attribute type 3 has an invalid length. [ 1449.757962][ T4723] netlink: 'syz.4.9785': attribute type 27 has an invalid length. [ 1449.841918][ T4723] netlink: 'syz.4.9785': attribute type 3 has an invalid length. [ 1449.851108][ T4728] netlink: 'syz.3.9787': attribute type 1 has an invalid length. [ 1449.962984][ T4728] netlink: 'syz.3.9787': attribute type 27 has an invalid length. [ 1450.078341][ T4728] netlink: 'syz.3.9787': attribute type 3 has an invalid length. [ 1450.860890][ T4753] __nla_validate_parse: 13 callbacks suppressed [ 1450.860913][ T4753] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9794'. [ 1450.864256][ T4740] netlink: 'syz.4.9791': attribute type 4 has an invalid length. [ 1450.939635][ T4740] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9791'. [ 1451.228599][ T4740] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1451.559633][ T4765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9797'. [ 1451.700739][ T4770] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9800'. [ 1451.889971][ T4772] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9802'. [ 1452.074653][ T4778] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.9804'. [ 1452.120739][ T4772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9802'. [ 1452.270340][ T4785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9804'. [ 1452.575101][ T4791] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9808'. [ 1452.885548][ T4793] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1452.996321][ T4804] ip6gretap0: refused to change device tx_queue_len [ 1453.044019][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9810'. [ 1454.221191][ T4842] validate_nla: 12 callbacks suppressed [ 1454.221327][ T4842] netlink: 'syz.2.9821': attribute type 27 has an invalid length. [ 1454.258146][ T4842] netlink: 'syz.2.9821': attribute type 3 has an invalid length. [ 1454.334929][ T4846] netlink: 'syz.4.9826': attribute type 39 has an invalid length. [ 1454.556930][ T4853] netlink: 'syz.3.9829': attribute type 10 has an invalid length. [ 1454.766852][ T4859] netlink: 'syz.4.9831': attribute type 4 has an invalid length. [ 1455.127564][ T4871] netlink: 'syz.0.9835': attribute type 27 has an invalid length. [ 1455.181690][ T4871] netlink: 'syz.0.9835': attribute type 3 has an invalid length. [ 1455.271729][ T4874] netlink: 'syz.3.9836': attribute type 3 has an invalid length. [ 1455.321996][ T4874] netlink: 'syz.3.9836': attribute type 1 has an invalid length. [ 1455.564040][ T4880] netlink: 'syz.3.9836': attribute type 27 has an invalid length. [ 1456.323637][ T4903] __nla_validate_parse: 12 callbacks suppressed [ 1456.323660][ T4903] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9845'. [ 1456.390011][ T4904] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9843'. [ 1456.466425][ T4907] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.9846'. [ 1456.706211][ T4912] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9846'. [ 1456.801445][ T4917] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9858'. [ 1457.144801][ T4910] tap0: tun_chr_ioctl cmd 1074025677 [ 1457.196058][ T4910] tap0: linktype set to 785 [ 1458.280929][ T4952] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9856'. [ 1458.585865][ T4961] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.9860'. [ 1458.840232][ T4968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9860'. [ 1458.843498][ T4969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9871'. [ 1459.381134][ T4975] validate_nla: 16 callbacks suppressed [ 1459.381154][ T4975] netlink: 'syz.3.9862': attribute type 10 has an invalid length. [ 1459.401926][ T4977] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9863'. [ 1460.056339][ T4992] netlink: 'syz.1.9867': attribute type 27 has an invalid length. [ 1460.102769][ T4992] netlink: 'syz.1.9867': attribute type 3 has an invalid length. [ 1460.678731][ T5004] IPv6: Can't replace route, no match found [ 1460.987293][ T5015] netlink: 'syz.0.9878': attribute type 3 has an invalid length. [ 1461.009754][ T5015] netlink: 'syz.0.9878': attribute type 1 has an invalid length. [ 1461.060309][ T5004] netlink: 'syz.4.9873': attribute type 4 has an invalid length. [ 1461.156191][ T5021] netlink: 'syz.0.9878': attribute type 27 has an invalid length. [ 1461.184632][ T5021] netlink: 'syz.0.9878': attribute type 3 has an invalid length. [ 1461.931338][ T5034] netlink: 'syz.3.9882': attribute type 7 has an invalid length. [ 1462.110142][ T5034] __nla_validate_parse: 3 callbacks suppressed [ 1462.110171][ T5034] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9882'. [ 1462.136156][ T5041] netlink: 'syz.2.9885': attribute type 10 has an invalid length. [ 1462.684445][ T5046] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9887'. [ 1462.835702][ T5045] tap0: tun_chr_ioctl cmd 1074025677 [ 1462.845015][ T5045] tap0: linktype set to 785 [ 1463.229411][ T5060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9901'. [ 1463.757398][ T5079] ip6gretap0: refused to change device tx_queue_len [ 1464.510245][ T5102] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.9914'. [ 1464.858921][ T5111] tap0: tun_chr_ioctl cmd 1074025677 [ 1464.864555][ T5111] tap0: linktype set to 785 [ 1464.903410][ T5112] validate_nla: 2 callbacks suppressed [ 1464.903432][ T5112] netlink: 'syz.1.9904': attribute type 10 has an invalid length. [ 1465.069154][ T5112] team0: Device hsr_slave_0 failed to register rx_handler [ 1465.505841][ T5124] netlink: 'syz.2.9910': attribute type 27 has an invalid length. [ 1465.536163][ T5124] netlink: 'syz.2.9910': attribute type 3 has an invalid length. [ 1465.561976][ T5124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9910'. [ 1466.134243][ T5140] netlink: 'syz.4.9915': attribute type 8 has an invalid length. [ 1466.239842][ T5140] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9915'. [ 1466.417041][ T5148] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.9919'. [ 1466.569941][ T5153] netlink: 'syz.4.9919': attribute type 27 has an invalid length. [ 1466.595192][ T5153] netlink: 'syz.4.9919': attribute type 3 has an invalid length. [ 1466.619536][ T5153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9919'. [ 1466.844508][ T5158] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9921'. [ 1467.031263][ T5167] netlink: 'syz.2.9924': attribute type 4 has an invalid length. [ 1467.068864][ T5167] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9924'. [ 1467.329551][ T5173] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1467.358861][ T5171] netlink: 'syz.1.9935': attribute type 3 has an invalid length. [ 1467.367137][ T5171] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9935'. [ 1467.479651][ T5178] netlink: 'syz.4.9925': attribute type 10 has an invalid length. [ 1467.552625][ T5179] netlink: 'syz.2.9936': attribute type 27 has an invalid length. [ 1467.563231][ T5179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1467.617276][ T5178] device hsr_slave_0 entered promiscuous mode [ 1467.624972][ T5178] team0: Port device hsr_slave_0 added [ 1468.364832][ T5195] sctp: [Deprecated]: syz.2.9929 (pid 5195) Use of int in maxseg socket option. [ 1468.364832][ T5195] Use struct sctp_assoc_value instead [ 1468.432109][ T5191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9927'. [ 1468.509939][ T5200] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1468.819699][ T5208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9932'. [ 1469.616743][ T5222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9948'. [ 1470.012169][ T5229] tap0: tun_chr_ioctl cmd 1074025677 [ 1470.037777][ T5229] tap0: linktype set to 785 [ 1470.523192][ T5245] validate_nla: 9 callbacks suppressed [ 1470.523213][ T5245] netlink: 'syz.0.9942': attribute type 10 has an invalid length. [ 1470.837617][ T5252] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.9944'. [ 1471.403775][ T5260] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1471.429553][ T5260] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 1471.531653][ T5265] netlink: 'syz.3.9949': attribute type 27 has an invalid length. [ 1471.609097][ T5265] netlink: 'syz.3.9949': attribute type 3 has an invalid length. [ 1471.617426][ T5265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9949'. [ 1471.749973][ T5277] netlink: 'syz.1.9956': attribute type 3 has an invalid length. [ 1471.790764][ T5277] netlink: 'syz.1.9956': attribute type 1 has an invalid length. [ 1471.866682][ T5275] tap0: tun_chr_ioctl cmd 1074025677 [ 1471.899800][ T5275] tap0: linktype set to 785 [ 1472.186722][ T5285] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.9968'. [ 1472.218029][ T5279] netlink: 'syz.1.9956': attribute type 27 has an invalid length. [ 1472.403641][ T5285] netlink: 'syz.2.9968': attribute type 27 has an invalid length. [ 1472.428584][ T5279] netlink: 'syz.1.9956': attribute type 3 has an invalid length. [ 1472.436792][ T5279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9956'. [ 1472.438984][ T5285] netlink: 'syz.2.9968': attribute type 3 has an invalid length. [ 1472.486578][ T5285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9968'. [ 1472.858076][ T5297] netlink: 'syz.0.9971': attribute type 3 has an invalid length. [ 1472.881751][ T5299] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.9961'. [ 1473.133397][ T5303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1473.285830][ T5312] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.9965'. [ 1473.353006][ T5306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1473.453574][ T5306] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1473.599716][ T5318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9967'. [ 1473.725647][ T5324] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1473.871048][ T5326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9972'. [ 1474.133757][ T5337] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.9974'. [ 1474.884542][ T5355] tap0: tun_chr_ioctl cmd 1074025677 [ 1474.921545][ T5355] tap0: linktype set to 785 [ 1475.691847][ T5376] validate_nla: 13 callbacks suppressed [ 1475.691943][ T5376] netlink: 'syz.1.9989': attribute type 27 has an invalid length. [ 1475.738806][ T5376] netlink: 'syz.1.9989': attribute type 3 has an invalid length. [ 1476.247488][ T5385] netlink: 'syz.2.9993': attribute type 9 has an invalid length. [ 1477.065847][ T5399] tap0: tun_chr_ioctl cmd 1074025677 [ 1477.100963][ T5399] tap0: linktype set to 785 [ 1477.466755][ T5415] __nla_validate_parse: 12 callbacks suppressed [ 1477.466779][ T5415] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10011'. [ 1477.574792][ T5417] netlink: 'syz.4.10002': attribute type 27 has an invalid length. [ 1477.607957][ T5417] netlink: 'syz.4.10002': attribute type 3 has an invalid length. [ 1477.658835][ T5417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10002'. [ 1477.743662][ T5426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10003'. [ 1477.744106][ T5423] netlink: 'syz.2.10004': attribute type 27 has an invalid length. [ 1477.768522][ T5423] netlink: 'syz.2.10004': attribute type 3 has an invalid length. [ 1477.796145][ T5423] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10004'. [ 1477.818478][ T5429] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10005'. [ 1477.957418][ T5433] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.10007'. [ 1478.088600][ T5436] delete_channel: no stack [ 1478.113363][ T5440] netlink: 'syz.1.10007': attribute type 27 has an invalid length. [ 1478.159188][ T5440] netlink: 'syz.1.10007': attribute type 3 has an invalid length. [ 1478.169204][ T5440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10007'. [ 1478.606195][ T5449] netlink: 'syz.3.10014': attribute type 9 has an invalid length. [ 1478.639389][ T5458] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10016'. [ 1478.660237][ T5449] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10014'. [ 1478.743014][ T5461] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.10017'. [ 1479.777135][ T5472] delete_channel: no stack [ 1481.263414][ T5512] validate_nla: 7 callbacks suppressed [ 1481.263503][ T5512] netlink: 'syz.1.10032': attribute type 9 has an invalid length. [ 1482.114919][ T5523] netlink: 'syz.2.10036': attribute type 27 has an invalid length. [ 1482.158618][ T5523] netlink: 'syz.2.10036': attribute type 3 has an invalid length. [ 1482.490674][ T5541] __nla_validate_parse: 8 callbacks suppressed [ 1482.490695][ T5541] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10041'. [ 1482.807928][ T5525] delete_channel: no stack [ 1482.935516][ T5550] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.10042'. [ 1483.145680][ T5544] device syzkaller0 entered promiscuous mode [ 1483.197526][ T5555] netlink: 'syz.2.10042': attribute type 27 has an invalid length. [ 1483.273128][ T5555] netlink: 'syz.2.10042': attribute type 3 has an invalid length. [ 1483.334281][ T5555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10042'. [ 1484.511042][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.517394][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.880612][ T5578] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1485.135971][ T5581] netlink: 'syz.2.10049': attribute type 27 has an invalid length. [ 1485.208699][ T5581] netlink: 'syz.2.10049': attribute type 3 has an invalid length. [ 1485.227815][ T5581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10049'. [ 1485.638458][ T5587] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10052'. [ 1485.740874][ T5584] netlink: 'syz.3.10051': attribute type 27 has an invalid length. [ 1485.799256][ T5584] netlink: 'syz.3.10051': attribute type 3 has an invalid length. [ 1485.809510][ T5589] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10063'. [ 1485.838392][ T5584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1486.009476][ T5596] delete_channel: no stack [ 1486.223975][ T5603] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10057'. [ 1486.305040][ T5592] netlink: 'syz.4.10053': attribute type 9 has an invalid length. [ 1486.347293][ T5592] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.10053'. [ 1486.550154][ T5606] netlink: 'syz.3.10057': attribute type 27 has an invalid length. [ 1486.658273][ T5606] netlink: 'syz.3.10057': attribute type 3 has an invalid length. [ 1487.221521][ T5618] netlink: 'syz.1.10060': attribute type 41 has an invalid length. [ 1487.290217][ T5618] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1487.906742][ T5629] __nla_validate_parse: 2 callbacks suppressed [ 1487.906765][ T5629] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.10065'. [ 1488.543555][ T5640] netlink: 'syz.4.10069': attribute type 39 has an invalid length. [ 1488.673721][ T5634] netlink: 'syz.1.10066': attribute type 21 has an invalid length. [ 1488.682570][ T5642] netlink: 'syz.2.10068': attribute type 27 has an invalid length. [ 1488.702847][ T5642] netlink: 'syz.2.10068': attribute type 3 has an invalid length. [ 1488.798129][ T5642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10068'. [ 1489.769272][ T5665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10076'. [ 1490.011799][ T5673] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10078'. [ 1490.070318][ T5677] netlink: 'syz.1.10079': attribute type 10 has an invalid length. [ 1490.110316][ T5677] team0: Device wg1 is of different type [ 1490.124582][ T5674] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10077'. [ 1490.336293][ T5674] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1490.354682][ T5674] CPU: 1 PID: 5674 Comm: syz.3.10077 Not tainted syzkaller #0 [ 1490.362362][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1490.372593][ T5674] Call Trace: [ 1490.375909][ T5674] [ 1490.379021][ T5674] dump_stack_lvl+0x188/0x250 [ 1490.383738][ T5674] ? show_regs_print_info+0x20/0x20 [ 1490.388976][ T5674] ? load_image+0x400/0x400 [ 1490.393528][ T5674] sysfs_warn_dup+0x8a/0xa0 [ 1490.398220][ T5674] sysfs_do_create_link_sd+0xc0/0x110 [ 1490.403643][ T5674] device_add+0x7ed/0xfb0 [ 1490.408036][ T5674] wiphy_register+0x1e81/0x2c30 [ 1490.413066][ T5674] ? cfg80211_event_work+0x40/0x40 [ 1490.418315][ T5674] ? minstrel_ht_alloc+0x808/0x980 [ 1490.423606][ T5674] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1490.429893][ T5674] ieee80211_register_hw+0x2aa1/0x3af0 [ 1490.435489][ T5674] ? lockdep_hardirqs_on+0x94/0x140 [ 1490.440751][ T5674] ? ieee80211_tasklet_handler+0x20/0x20 [ 1490.446685][ T5674] ? rcu_is_watching+0x11/0xa0 [ 1490.451688][ T5674] ? memset+0x1e/0x40 [ 1490.455717][ T5674] ? hrtimer_init+0x10c/0x220 [ 1490.460456][ T5674] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1490.466236][ T5674] hwsim_new_radio_nl+0xa6f/0xc40 [ 1490.471499][ T5674] genl_rcv_msg+0xcea/0xf90 [ 1490.476050][ T5674] ? genl_bind+0x380/0x380 [ 1490.480521][ T5674] ? vmacache_find+0x238/0x590 [ 1490.485384][ T5674] ? verify_lock_unused+0x140/0x140 [ 1490.490630][ T5674] ? verify_lock_unused+0x140/0x140 [ 1490.495879][ T5674] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1490.502173][ T5674] ? lock_chain_count+0x20/0x20 [ 1490.507174][ T5674] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1490.513760][ T5674] netlink_rcv_skb+0x1f5/0x440 [ 1490.518568][ T5674] ? genl_bind+0x380/0x380 [ 1490.523129][ T5674] ? netlink_ack+0xb50/0xb50 [ 1490.527751][ T5674] ? __lock_acquire+0x7d10/0x7d10 [ 1490.532909][ T5674] ? down_read+0x1aa/0x2e0 [ 1490.537547][ T5674] genl_rcv+0x24/0x40 [ 1490.541571][ T5674] netlink_unicast+0x774/0x920 [ 1490.546487][ T5674] netlink_sendmsg+0x8ba/0xbe0 [ 1490.551296][ T5674] ? netlink_getsockopt+0x570/0x570 [ 1490.556640][ T5674] ? aa_sock_msg_perm+0x94/0x150 [ 1490.561627][ T5674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1490.566957][ T5674] ? security_socket_sendmsg+0x7c/0xa0 [ 1490.572544][ T5674] ? netlink_getsockopt+0x570/0x570 [ 1490.577801][ T5674] ____sys_sendmsg+0x5b7/0x8f0 [ 1490.582715][ T5674] ? __sys_sendmsg_sock+0x30/0x30 [ 1490.587807][ T5674] ? import_iovec+0x6f/0xa0 [ 1490.592353][ T5674] ___sys_sendmsg+0x236/0x2e0 [ 1490.597082][ T5674] ? __sys_sendmsg+0x2a0/0x2a0 [ 1490.601987][ T5674] ? percpu_counter_add_batch+0x13b/0x160 [ 1490.607875][ T5674] __se_sys_sendmsg+0x1af/0x290 [ 1490.612773][ T5674] ? __x64_sys_sendmsg+0x80/0x80 [ 1490.617930][ T5674] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1490.623978][ T5674] ? lockdep_hardirqs_on+0x94/0x140 [ 1490.629584][ T5674] do_syscall_64+0x4c/0xa0 [ 1490.634158][ T5674] ? clear_bhb_loop+0x30/0x80 [ 1490.638916][ T5674] ? clear_bhb_loop+0x30/0x80 [ 1490.643690][ T5674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1490.649725][ T5674] RIP: 0033:0x7f96e25e9819 [ 1490.654191][ T5674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.674309][ T5674] RSP: 002b:00007f96e0822028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1490.682865][ T5674] RAX: ffffffffffffffda RBX: 00007f96e2863090 RCX: 00007f96e25e9819 [ 1490.690971][ T5674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1490.699124][ T5674] RBP: 00007f96e267fc91 R08: 0000000000000000 R09: 0000000000000000 [ 1490.707136][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.715235][ T5674] R13: 00007f96e2863128 R14: 00007f96e2863090 R15: 00007ffc507578d8 [ 1490.723454][ T5674] [ 1498.373575][ T5691] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1498.593537][ T5693] netlink: 'syz.2.10082': attribute type 27 has an invalid length. [ 1498.621814][ T5693] netlink: 'syz.2.10082': attribute type 3 has an invalid length. [ 1498.644749][ T5693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1498.711049][ T5690] netlink: 'syz.3.10091': attribute type 4 has an invalid length. [ 1498.734135][ T5690] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10091'. [ 1499.010674][ T5709] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10085'. [ 1499.051952][ T5712] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10095'. [ 1499.110983][ T5710] netlink: 'syz.2.10084': attribute type 21 has an invalid length. [ 1499.166606][ T5711] netlink: 'syz.4.10085': attribute type 27 has an invalid length. [ 1499.175489][ T5711] netlink: 'syz.4.10085': attribute type 3 has an invalid length. [ 1499.249754][ T5711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10085'. [ 1499.483945][ T5701] chnl_net:caif_netlink_parms(): no params data found [ 1499.575245][ T5719] Q'Y]cÊRݘOC‰ÿ: renamed from lo [ 1500.129384][T26488] tipc: Left network mode [ 1500.156708][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.207476][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.234177][ T5701] device bridge_slave_0 entered promiscuous mode [ 1500.387056][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.404827][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.446926][ T5701] device bridge_slave_1 entered promiscuous mode [ 1500.872155][ T5701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.918658][ T856] Bluetooth: hci1: command 0x0409 tx timeout [ 1501.050194][ T5701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.200859][ T5770] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.10099'. [ 1501.314681][ T5701] team0: Port device team_slave_0 added [ 1501.365230][ T5701] team0: Port device team_slave_1 added [ 1501.394256][ T5775] netlink: 'syz.2.10099': attribute type 27 has an invalid length. [ 1501.455663][ T5775] netlink: 'syz.2.10099': attribute type 3 has an invalid length. [ 1501.508618][ T5775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10099'. [ 1501.763036][ T5776] device syzkaller0 entered promiscuous mode [ 1501.859561][ T5788] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10103'. [ 1501.906042][T26488] device gretap0 left promiscuous mode [ 1501.932635][T26488] Ÿë: port 1(gretap0) entered disabled state [ 1501.984274][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.993081][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.122362][ T5790] netlink: 'syz.1.10103': attribute type 27 has an invalid length. [ 1502.125253][ T5701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.141429][ T5790] netlink: 'syz.1.10103': attribute type 3 has an invalid length. [ 1502.164688][ T5790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10103'. [ 1502.165288][ T5701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.185836][ T5701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.214809][ T5701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.402578][ T5701] device hsr_slave_0 entered promiscuous mode [ 1502.433917][ T5701] device hsr_slave_1 entered promiscuous mode [ 1502.452248][ T5701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1502.468422][ T5701] Cannot create hsr debugfs directory [ 1502.966282][ T5701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1503.000366][T11863] Bluetooth: hci1: command 0x041b tx timeout [ 1503.035652][ T5701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1503.289633][ T5701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1503.364200][ T5701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1503.616832][ T5832] validate_nla: 2 callbacks suppressed [ 1503.616854][ T5832] netlink: 'syz.1.10108': attribute type 27 has an invalid length. [ 1503.678983][ T5832] netlink: 'syz.1.10108': attribute type 3 has an invalid length. [ 1503.697559][ T5832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10108'. [ 1503.800804][ T5701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.890630][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1503.911249][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1503.935179][ T5701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.990478][ T5847] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10111'. [ 1503.991072][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1504.030562][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1504.068958][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.076079][ T6712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.196865][ T5842] netlink: 'syz.3.10109': attribute type 10 has an invalid length. [ 1504.261396][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1504.279453][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1504.291407][ T5847] netlink: 'syz.4.10111': attribute type 27 has an invalid length. [ 1504.360331][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1504.368758][ T5847] netlink: 'syz.4.10111': attribute type 3 has an invalid length. [ 1504.376892][ T5847] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10111'. [ 1504.397404][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.404621][ T6712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.450979][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1504.549052][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1504.585125][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1504.615766][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1504.634816][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1504.729394][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1504.756188][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1504.775837][ T5871] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10124'. [ 1504.796491][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1504.904327][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1504.977700][ T5701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.057248][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1505.069012][ T856] Bluetooth: hci1: command 0x040f tx timeout [ 1505.071638][ T5876] netlink: 'syz.3.10124': attribute type 27 has an invalid length. [ 1505.126125][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1505.174072][ T6712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1505.202685][ T5876] netlink: 'syz.3.10124': attribute type 3 has an invalid length. [ 1505.228690][ T5876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10124'. [ 1506.254874][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1506.277291][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1506.310314][ T5701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.702453][T26488] device veth1_vlan left promiscuous mode [ 1506.715837][T26488] device veth0_vlan left promiscuous mode [ 1507.158712][T11863] Bluetooth: hci1: command 0x0419 tx timeout [ 1507.173446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1507.183749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1507.223551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1507.232811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1507.245410][ T5701] device veth0_vlan entered promiscuous mode [ 1507.256287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1507.280665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1507.293807][ T5701] device veth1_vlan entered promiscuous mode [ 1507.321712][ T5701] device veth0_macvtap entered promiscuous mode [ 1507.330292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1507.349009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1507.363185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1507.372535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1507.382252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1507.397514][ T5701] device veth1_macvtap entered promiscuous mode [ 1507.416158][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.423934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1507.433374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1507.442668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1507.461427][ T5701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.479298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1507.499771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1507.521726][ T5701] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.538273][ T5701] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.547022][ T5701] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.578640][ T5701] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.708795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.716925][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.747163][ T6714] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1507.797017][ T6714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.818311][ T6714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.826698][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1507.979562][ T5943] netlink: 'syz.1.10129': attribute type 3 has an invalid length. [ 1508.049395][ T5943] netlink: 'syz.1.10129': attribute type 1 has an invalid length. [ 1508.085950][ T5954] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1508.896080][ T5965] netlink: 'syz.5.10117': attribute type 21 has an invalid length. [ 1509.435349][ T5978] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1509.896244][ T6000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10125'. [ 1510.247480][ T6008] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.10128'. [ 1510.890564][ T6020] netlink: 'syz.3.10136': attribute type 6 has an invalid length. [ 1510.957803][ T6024] netlink: 'syz.5.10135': attribute type 4 has an invalid length. [ 1511.090936][ T6024] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10135'. [ 1511.751880][ T9] tipc: Subscription rejected, illegal request [ 1511.899044][ T6053] sock: sock_set_timeout: `syz.3.10142' (pid 6053) tries to set negative timeout [ 1513.837812][ T6079] netlink: 'syz.4.10147': attribute type 39 has an invalid length. [ 1514.164847][ T6096] netlink: 'syz.5.10150': attribute type 21 has an invalid length. [ 1514.283797][ T6096] netlink: 'syz.5.10150': attribute type 6 has an invalid length. [ 1514.308787][ T6096] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10150'. [ 1514.637180][ T6126] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10157'. [ 1514.986082][ T6138] netlink: 'syz.1.10157': attribute type 27 has an invalid length. [ 1515.192987][ T6138] netlink: 'syz.1.10157': attribute type 3 has an invalid length. [ 1515.238292][ T6138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10157'. [ 1515.554123][ T6144] netlink: 399 bytes leftover after parsing attributes in process `syz.3.10161'. [ 1516.459834][ T6143] delete_channel: no stack [ 1516.932759][ T6173] netlink: 'syz.3.10166': attribute type 39 has an invalid length. [ 1517.650779][ T6195] netlink: 'syz.1.10170': attribute type 6 has an invalid length. [ 1517.776697][ T6197] netlink: 'syz.2.10169': attribute type 3 has an invalid length. [ 1517.888439][ T6197] netlink: 'syz.2.10169': attribute type 1 has an invalid length. [ 1518.063441][ T6206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10174'. [ 1519.042113][ T6223] netlink: 'syz.3.10177': attribute type 9 has an invalid length. [ 1519.196012][ T6223] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.10177'. [ 1519.388293][ T6229] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10188'. [ 1519.403566][ T6231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10179'. [ 1519.542095][ T6233] netlink: 'syz.5.10188': attribute type 27 has an invalid length. [ 1519.591498][ T6233] netlink: 'syz.5.10188': attribute type 3 has an invalid length. [ 1519.659300][ T6233] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10188'. [ 1519.759192][ T6242] netlink: 'syz.1.10181': attribute type 39 has an invalid length. [ 1521.211866][ T6256] netlink: 'syz.5.10184': attribute type 6 has an invalid length. [ 1521.442813][ T6275] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10189'. [ 1521.496416][ T6277] sctp: [Deprecated]: syz.1.10187 (pid 6277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1521.496416][ T6277] Use struct sctp_sack_info instead [ 1521.657756][ T6281] netlink: 'syz.2.10190': attribute type 3 has an invalid length. [ 1521.758528][ T6281] netlink: 'syz.2.10190': attribute type 1 has an invalid length. [ 1521.925159][ T6293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10192'. [ 1522.042188][ T6298] netlink: 'syz.1.10193': attribute type 10 has an invalid length. [ 1522.379260][ T6304] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10195'. [ 1522.603194][ T6313] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10196'. [ 1522.791093][ T6309] netlink: 'syz.5.10194': attribute type 39 has an invalid length. [ 1524.439764][ T6343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10201'. [ 1524.892716][ T6360] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.10204'. [ 1524.963679][ T6366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10205'. [ 1524.967855][ T6369] netlink: 'syz.3.10207': attribute type 3 has an invalid length. [ 1524.998348][ T6369] netlink: 'syz.3.10207': attribute type 1 has an invalid length. [ 1525.171408][ T6379] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10209'. [ 1525.427687][ T6387] netlink: 'syz.5.10209': attribute type 27 has an invalid length. [ 1525.509858][ T6387] netlink: 'syz.5.10209': attribute type 3 has an invalid length. [ 1525.556386][ T6387] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10209'. [ 1525.647489][ T6386] netlink: 'syz.4.10210': attribute type 27 has an invalid length. [ 1525.821717][ T6386] netlink: 'syz.4.10210': attribute type 3 has an invalid length. [ 1525.958454][ T6386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10210'. [ 1526.280176][ T6401] netlink: 'syz.1.10222': attribute type 3 has an invalid length. [ 1526.336846][ T6401] netlink: 'syz.1.10222': attribute type 1 has an invalid length. [ 1526.385145][ T6402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1527.026883][ T6419] sctp: [Deprecated]: syz.5.10216 (pid 6419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1527.026883][ T6419] Use struct sctp_sack_info instead [ 1528.193061][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10220'. [ 1528.205458][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10218'. [ 1528.391603][ T6450] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10221'. [ 1528.568022][ T6455] netlink: 'syz.5.10221': attribute type 27 has an invalid length. [ 1528.590935][ T6455] netlink: 'syz.5.10221': attribute type 3 has an invalid length. [ 1528.609523][ T6455] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10221'. [ 1529.684466][ T6480] device hsr0 left promiscuous mode [ 1529.787598][ T6480] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1529.929038][ T6485] __nla_validate_parse: 3 callbacks suppressed [ 1529.929056][ T6485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10227'. [ 1530.022996][T26488] tipc: Subscription rejected, illegal request [ 1530.031686][ T6484] validate_nla: 5 callbacks suppressed [ 1530.031730][ T6484] netlink: 'syz.2.10225': attribute type 39 has an invalid length. [ 1530.403573][ T2377] tipc: Subscription rejected, illegal request [ 1530.468503][ T6512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10234'. [ 1530.664493][ T6517] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10235'. [ 1530.773388][ T6524] netlink: 'syz.3.10236': attribute type 2 has an invalid length. [ 1530.818049][ T6522] netlink: 399 bytes leftover after parsing attributes in process `syz.1.10238'. [ 1530.819123][ T6524] netlink: 'syz.3.10236': attribute type 8 has an invalid length. [ 1530.945944][ T6524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10236'. [ 1531.472364][ T6545] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10241'. [ 1531.521695][ T6548] netlink: 'syz.3.10243': attribute type 3 has an invalid length. [ 1531.560414][ T6548] netlink: 'syz.3.10243': attribute type 1 has an invalid length. [ 1531.623516][ T6555] netlink: 'syz.5.10242': attribute type 27 has an invalid length. [ 1531.648315][ T6555] netlink: 'syz.5.10242': attribute type 3 has an invalid length. [ 1531.699038][ T6555] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10242'. [ 1531.908170][ T6520] delete_channel: no stack [ 1532.099727][ T6575] netlink: 'syz.5.10256': attribute type 3 has an invalid length. [ 1532.107746][ T6575] netlink: 'syz.5.10256': attribute type 1 has an invalid length. [ 1532.237105][ T6565] netlink: 'syz.2.10244': attribute type 39 has an invalid length. [ 1532.300283][ T6577] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10244'. [ 1532.387948][ T6572] tap0: tun_chr_ioctl cmd 21731 [ 1532.500063][T26488] tipc: Subscription rejected, illegal request [ 1533.147196][ T6606] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10252'. [ 1533.326013][ T6616] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10252'. [ 1533.494568][ T6618] Ÿë: port 1(ip6gretap0) entered blocking state [ 1533.510082][ T6618] Ÿë: port 1(ip6gretap0) entered disabled state [ 1533.583495][ T6618] device ip6gretap0 entered promiscuous mode [ 1535.899306][ T6689] __nla_validate_parse: 2 callbacks suppressed [ 1535.899326][ T6689] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1535.966072][ T6692] device sit0 left promiscuous mode [ 1536.173893][ T6689] validate_nla: 7 callbacks suppressed [ 1536.173934][ T6689] netlink: 'syz.2.10267': attribute type 27 has an invalid length. [ 1536.237856][ T6689] netlink: 'syz.2.10267': attribute type 3 has an invalid length. [ 1536.349179][ T6689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10267'. [ 1536.433725][ T6694] netlink: 'syz.4.10270': attribute type 6 has an invalid length. [ 1536.940146][ T6709] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10272'. [ 1537.165664][ T6715] netlink: 'syz.4.10273': attribute type 27 has an invalid length. [ 1537.270150][ T6715] netlink: 'syz.4.10273': attribute type 3 has an invalid length. [ 1537.280120][ T6730] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10276'. [ 1537.338966][ T6715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10273'. [ 1537.342741][ T6731] netlink: 'syz.3.10278': attribute type 4 has an invalid length. [ 1537.386074][ T6727] netlink: 'syz.2.10277': attribute type 39 has an invalid length. [ 1537.397306][ T6731] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1537.501826][ T6727] netlink: 'syz.2.10277': attribute type 10 has an invalid length. [ 1537.521512][ T6727] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10277'. [ 1537.550966][ T6735] netlink: 'syz.1.10279': attribute type 3 has an invalid length. [ 1537.586314][ T6735] netlink: 'syz.1.10279': attribute type 1 has an invalid length. [ 1537.700307][ T6738] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.10280'. [ 1537.776523][ T6738] bridge_slave_1: default FDB implementation only supports local addresses [ 1538.038012][ T6749] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.10284'. [ 1538.279648][ T6757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1538.287120][ T6757] IPv6: NLM_F_CREATE should be set when creating new route [ 1538.294709][ T6757] IPv6: NLM_F_CREATE should be set when creating new route [ 1538.302232][ T6757] IPv6: NLM_F_CREATE should be set when creating new route [ 1538.314026][ T6756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10284'. [ 1539.413942][ T6778] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1539.423182][ T6778] CPU: 1 PID: 6778 Comm: syz.1.10291 Not tainted syzkaller #0 [ 1539.430692][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1539.440803][ T6778] Call Trace: [ 1539.444111][ T6778] [ 1539.447067][ T6778] dump_stack_lvl+0x188/0x250 [ 1539.451783][ T6778] ? show_regs_print_info+0x20/0x20 [ 1539.457015][ T6778] ? load_image+0x400/0x400 [ 1539.461782][ T6778] sysfs_warn_dup+0x8a/0xa0 [ 1539.466324][ T6778] sysfs_do_create_link_sd+0xc0/0x110 [ 1539.471729][ T6778] device_add+0x7ed/0xfb0 [ 1539.476121][ T6778] wiphy_register+0x1e81/0x2c30 [ 1539.481208][ T6778] ? cfg80211_event_work+0x40/0x40 [ 1539.486353][ T6778] ? minstrel_ht_alloc+0x808/0x980 [ 1539.491506][ T6778] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1539.497613][ T6778] ieee80211_register_hw+0x2aa1/0x3af0 [ 1539.503128][ T6778] ? ieee80211_tasklet_handler+0x20/0x20 [ 1539.508806][ T6778] ? rcu_is_watching+0x11/0xa0 [ 1539.513687][ T6778] ? memset+0x1e/0x40 [ 1539.517710][ T6778] ? hrtimer_init+0x10c/0x220 [ 1539.522447][ T6778] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1539.528220][ T6778] hwsim_new_radio_nl+0xa6f/0xc40 [ 1539.533396][ T6778] genl_rcv_msg+0xcea/0xf90 [ 1539.537953][ T6778] ? genl_bind+0x380/0x380 [ 1539.542492][ T6778] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1539.548508][ T6778] ? lock_chain_count+0x20/0x20 [ 1539.553393][ T6778] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1539.559920][ T6778] ? lockdep_hardirqs_on+0x94/0x140 [ 1539.565271][ T6778] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1539.571555][ T6778] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1539.578278][ T6778] ? lock_acquire+0x208/0x400 [ 1539.583000][ T6778] netlink_rcv_skb+0x1f5/0x440 [ 1539.587803][ T6778] ? genl_bind+0x380/0x380 [ 1539.592268][ T6778] ? netlink_ack+0xb50/0xb50 [ 1539.596980][ T6778] ? __lock_acquire+0x7d10/0x7d10 [ 1539.602133][ T6778] ? down_read+0x1aa/0x2e0 [ 1539.606583][ T6778] genl_rcv+0x24/0x40 [ 1539.610592][ T6778] netlink_unicast+0x774/0x920 [ 1539.615483][ T6778] netlink_sendmsg+0x8ba/0xbe0 [ 1539.620381][ T6778] ? netlink_getsockopt+0x570/0x570 [ 1539.626008][ T6778] ? aa_sock_msg_perm+0x94/0x150 [ 1539.631076][ T6778] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1539.636404][ T6778] ? security_socket_sendmsg+0x7c/0xa0 [ 1539.642003][ T6778] ? netlink_getsockopt+0x570/0x570 [ 1539.647336][ T6778] ____sys_sendmsg+0x5b7/0x8f0 [ 1539.652154][ T6778] ? __sys_sendmsg_sock+0x30/0x30 [ 1539.657224][ T6778] ? import_iovec+0x6f/0xa0 [ 1539.661773][ T6778] ___sys_sendmsg+0x236/0x2e0 [ 1539.666606][ T6778] ? __sys_sendmsg+0x2a0/0x2a0 [ 1539.671430][ T6778] ? ktime_get_real_ts64+0x440/0x440 [ 1539.676928][ T6778] __se_sys_sendmsg+0x1af/0x290 [ 1539.682455][ T6778] ? __x64_sys_sendmsg+0x80/0x80 [ 1539.687603][ T6778] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1539.693550][ T6778] do_syscall_64+0x4c/0xa0 [ 1539.698229][ T6778] ? clear_bhb_loop+0x30/0x80 [ 1539.703034][ T6778] ? clear_bhb_loop+0x30/0x80 [ 1539.707859][ T6778] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1539.713916][ T6778] RIP: 0033:0x7f3413d22819 [ 1539.718492][ T6778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.738239][ T6778] RSP: 002b:00007f3411f7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1539.746799][ T6778] RAX: ffffffffffffffda RBX: 00007f3413f9bfa0 RCX: 00007f3413d22819 [ 1539.754809][ T6778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1539.762896][ T6778] RBP: 00007f3413db8c91 R08: 0000000000000000 R09: 0000000000000000 [ 1539.770897][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.778897][ T6778] R13: 00007f3413f9c038 R14: 00007f3413f9bfa0 R15: 00007ffcfe264308 [ 1539.787159][ T6778] [ 1541.116285][ T6801] Ÿë: port 1(ip6gretap0) entered blocking state [ 1541.151644][ T6801] Ÿë: port 1(ip6gretap0) entered disabled state [ 1541.294588][ T6801] device ip6gretap0 entered promiscuous mode [ 1541.951735][ T6825] __nla_validate_parse: 5 callbacks suppressed [ 1541.951754][ T6825] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.10313'. [ 1542.038745][ T6827] validate_nla: 9 callbacks suppressed [ 1542.038786][ T6827] netlink: 'syz.4.10303': attribute type 39 has an invalid length. [ 1542.191010][ T6828] netlink: 'syz.5.10302': attribute type 8 has an invalid length. [ 1542.212092][ T6827] netlink: 'syz.4.10303': attribute type 10 has an invalid length. [ 1542.226796][ T6825] netlink: 'syz.2.10313': attribute type 27 has an invalid length. [ 1542.237151][ T6827] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10303'. [ 1542.304773][ T6828] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.10302'. [ 1542.347685][ T6832] netlink: 'syz.3.10304': attribute type 10 has an invalid length. [ 1542.348849][ T6825] netlink: 'syz.2.10313': attribute type 3 has an invalid length. [ 1542.471484][ T6825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10313'. [ 1542.797225][ T6839] netlink: 'syz.3.10306': attribute type 21 has an invalid length. [ 1542.846913][ T6845] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10307'. [ 1543.221548][ T6855] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10310'. [ 1543.320558][ T6851] delete_channel: no stack [ 1543.965192][ T6875] netlink: 'syz.1.10317': attribute type 4 has an invalid length. [ 1544.012723][ T6875] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10317'. [ 1544.034912][ T6869] netlink: 'syz.2.10315': attribute type 10 has an invalid length. [ 1544.141478][ T6877] netlink: 'syz.4.10316': attribute type 3 has an invalid length. [ 1544.237896][ T6869] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10315'. [ 1544.252847][ T6877] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.10316'. [ 1544.622555][ T6893] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1545.989033][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.995427][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.019681][ T6923] delete_channel: no stack [ 1546.202046][ T6928] Ÿë: port 1(ip6gretap0) entered blocking state [ 1546.318911][ T6928] Ÿë: port 1(ip6gretap0) entered disabled state [ 1546.380522][ T6928] device ip6gretap0 entered promiscuous mode [ 1546.459862][ T6942] device veth0_macvtap left promiscuous mode [ 1547.094535][ T6950] validate_nla: 3 callbacks suppressed [ 1547.094558][ T6950] netlink: 'syz.3.10335': attribute type 3 has an invalid length. [ 1547.128367][ T6950] __nla_validate_parse: 4 callbacks suppressed [ 1547.128390][ T6950] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10335'. [ 1547.258691][ T6954] netlink: 'syz.5.10347': attribute type 10 has an invalid length. [ 1547.317026][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1547.351855][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.428309][ T6954] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1547.486918][ T6959] netlink: 'syz.1.10346': attribute type 10 has an invalid length. [ 1547.508981][ T6957] netlink: 10 bytes leftover after parsing attributes in process `syz.5.10347'. [ 1547.694829][ T6966] netlink: 'syz.3.10337': attribute type 8 has an invalid length. [ 1547.734926][ T6966] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10337'. [ 1547.900166][ T6982] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10343'. [ 1548.096683][ T6986] netlink: 399 bytes leftover after parsing attributes in process `syz.3.10344'. [ 1548.532545][ T6992] tap0: tun_chr_ioctl cmd 21731 [ 1549.385582][ T7005] netlink: 'syz.3.10349': attribute type 3 has an invalid length. [ 1549.418399][ T7005] netlink: 'syz.3.10349': attribute type 1 has an invalid length. [ 1549.470203][ T7010] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10351'. [ 1549.701303][ T7014] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10352'. [ 1549.709045][ T7012] netlink: 'syz.5.10351': attribute type 27 has an invalid length. [ 1549.731357][ T7012] netlink: 'syz.5.10351': attribute type 3 has an invalid length. [ 1549.746791][ T7012] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10351'. [ 1549.985382][ T7009] netlink: 'syz.2.10350': attribute type 10 has an invalid length. [ 1550.112012][ T7020] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10363'. [ 1550.255522][ T7024] netlink: 'syz.1.10355': attribute type 6 has an invalid length. [ 1550.852407][ T7041] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.10358'. [ 1551.833118][ T7056] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1551.853361][ T7056] CPU: 0 PID: 7056 Comm: syz.3.10364 Not tainted syzkaller #0 [ 1551.860883][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1551.870957][ T7056] Call Trace: [ 1551.874251][ T7056] [ 1551.877199][ T7056] dump_stack_lvl+0x188/0x250 [ 1551.881901][ T7056] ? show_regs_print_info+0x20/0x20 [ 1551.887216][ T7056] ? load_image+0x400/0x400 [ 1551.891765][ T7056] sysfs_warn_dup+0x8a/0xa0 [ 1551.896287][ T7056] sysfs_do_create_link_sd+0xc0/0x110 [ 1551.901684][ T7056] device_add+0x7ed/0xfb0 [ 1551.906150][ T7056] wiphy_register+0x1e81/0x2c30 [ 1551.911045][ T7056] ? cfg80211_event_work+0x40/0x40 [ 1551.916201][ T7056] ? minstrel_ht_alloc+0x808/0x980 [ 1551.921425][ T7056] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1551.927517][ T7056] ieee80211_register_hw+0x2aa1/0x3af0 [ 1551.932992][ T7056] ? lockdep_hardirqs_on+0x94/0x140 [ 1551.938318][ T7056] ? ieee80211_tasklet_handler+0x20/0x20 [ 1551.944016][ T7056] ? rcu_is_watching+0x11/0xa0 [ 1551.948798][ T7056] ? memset+0x1e/0x40 [ 1551.952807][ T7056] ? hrtimer_init+0x10c/0x220 [ 1551.957506][ T7056] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1551.963274][ T7056] hwsim_new_radio_nl+0xa6f/0xc40 [ 1551.968451][ T7056] genl_rcv_msg+0xcea/0xf90 [ 1551.973003][ T7056] ? genl_bind+0x380/0x380 [ 1551.977441][ T7056] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1551.983014][ T7056] ? verify_lock_unused+0x140/0x140 [ 1551.988448][ T7056] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1551.994034][ T7056] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1552.000641][ T7056] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1552.007422][ T7056] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1552.013973][ T7056] netlink_rcv_skb+0x1f5/0x440 [ 1552.018764][ T7056] ? genl_bind+0x380/0x380 [ 1552.023207][ T7056] ? netlink_ack+0xb50/0xb50 [ 1552.027822][ T7056] ? __lock_acquire+0x7d10/0x7d10 [ 1552.032989][ T7056] ? down_read+0x1aa/0x2e0 [ 1552.037426][ T7056] genl_rcv+0x24/0x40 [ 1552.041426][ T7056] netlink_unicast+0x774/0x920 [ 1552.046221][ T7056] netlink_sendmsg+0x8ba/0xbe0 [ 1552.051022][ T7056] ? netlink_getsockopt+0x570/0x570 [ 1552.056238][ T7056] ? aa_sock_msg_perm+0x94/0x150 [ 1552.061194][ T7056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1552.066585][ T7056] ? security_socket_sendmsg+0x7c/0xa0 [ 1552.072069][ T7056] ? netlink_getsockopt+0x570/0x570 [ 1552.077373][ T7056] ____sys_sendmsg+0x5b7/0x8f0 [ 1552.082183][ T7056] ? __sys_sendmsg_sock+0x30/0x30 [ 1552.087238][ T7056] ? import_iovec+0x6f/0xa0 [ 1552.091817][ T7056] ___sys_sendmsg+0x236/0x2e0 [ 1552.096629][ T7056] ? __sys_sendmsg+0x2a0/0x2a0 [ 1552.101505][ T7056] __se_sys_sendmsg+0x1af/0x290 [ 1552.106381][ T7056] ? __x64_sys_sendmsg+0x80/0x80 [ 1552.111331][ T7056] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1552.117351][ T7056] ? lockdep_hardirqs_on+0x94/0x140 [ 1552.122574][ T7056] do_syscall_64+0x4c/0xa0 [ 1552.127003][ T7056] ? clear_bhb_loop+0x30/0x80 [ 1552.131693][ T7056] ? clear_bhb_loop+0x30/0x80 [ 1552.136390][ T7056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1552.142294][ T7056] RIP: 0033:0x7f96e25e9819 [ 1552.146729][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.166347][ T7056] RSP: 002b:00007f96e0822028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1552.174871][ T7056] RAX: ffffffffffffffda RBX: 00007f96e2863090 RCX: 00007f96e25e9819 [ 1552.182855][ T7056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1552.190844][ T7056] RBP: 00007f96e267fc91 R08: 0000000000000000 R09: 0000000000000000 [ 1552.198824][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1552.206804][ T7056] R13: 00007f96e2863128 R14: 00007f96e2863090 R15: 00007ffc507578d8 [ 1552.214811][ T7056] [ 1553.637828][ T7087] __nla_validate_parse: 1 callbacks suppressed [ 1553.637849][ T7087] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10372'. [ 1553.655849][ T7073] validate_nla: 1 callbacks suppressed [ 1553.655868][ T7073] netlink: 'syz.3.10367': attribute type 3 has an invalid length. [ 1553.728874][ T7073] netlink: 'syz.3.10367': attribute type 1 has an invalid length. [ 1554.154465][ T7088] netlink: 'syz.1.10370': attribute type 3 has an invalid length. [ 1554.306172][ T7088] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10370'. [ 1554.788882][ T7098] netlink: 'syz.4.10373': attribute type 10 has an invalid length. [ 1554.823648][ T7098] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10373'. [ 1555.079626][ T7111] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.10376'. [ 1558.167725][ T7108] device syzkaller0 entered promiscuous mode [ 1558.213852][ T7116] netlink: 'syz.4.10377': attribute type 10 has an invalid length. [ 1558.547163][ T7127] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10380'. [ 1558.967151][ T7127] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1558.998878][ T7127] CPU: 0 PID: 7127 Comm: syz.4.10380 Not tainted syzkaller #0 [ 1559.006409][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1559.016535][ T7127] Call Trace: [ 1559.019868][ T7127] [ 1559.022825][ T7127] dump_stack_lvl+0x188/0x250 [ 1559.027537][ T7127] ? show_regs_print_info+0x20/0x20 [ 1559.032772][ T7127] ? load_image+0x400/0x400 [ 1559.037393][ T7127] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1559.043496][ T7127] sysfs_warn_dup+0x8a/0xa0 [ 1559.048025][ T7127] sysfs_do_create_link_sd+0xc0/0x110 [ 1559.053505][ T7127] device_add+0x7ed/0xfb0 [ 1559.058047][ T7127] wiphy_register+0x1e81/0x2c30 [ 1559.063040][ T7127] ? cfg80211_event_work+0x40/0x40 [ 1559.068285][ T7127] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1559.074471][ T7127] ieee80211_register_hw+0x2aa1/0x3af0 [ 1559.080066][ T7127] ? ieee80211_tasklet_handler+0x20/0x20 [ 1559.085719][ T7127] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.091038][ T7127] ? rcu_is_watching+0x11/0xa0 [ 1559.095908][ T7127] ? memset+0x1e/0x40 [ 1559.099914][ T7127] ? hrtimer_init+0x10c/0x220 [ 1559.104615][ T7127] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1559.110383][ T7127] hwsim_new_radio_nl+0xa6f/0xc40 [ 1559.115455][ T7127] genl_rcv_msg+0xcea/0xf90 [ 1559.120009][ T7127] ? genl_bind+0x380/0x380 [ 1559.124453][ T7127] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1559.130454][ T7127] ? strlen+0x2a/0x60 [ 1559.134458][ T7127] ? lock_chain_count+0x20/0x20 [ 1559.139339][ T7127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1559.145567][ T7127] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.150890][ T7127] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1559.157240][ T7127] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1559.163863][ T7127] ? kasan_check_range+0x3d/0x290 [ 1559.169008][ T7127] netlink_rcv_skb+0x1f5/0x440 [ 1559.173800][ T7127] ? genl_bind+0x380/0x380 [ 1559.178324][ T7127] ? netlink_ack+0xb50/0xb50 [ 1559.182934][ T7127] ? __lock_acquire+0x7d10/0x7d10 [ 1559.187991][ T7127] ? down_read+0x1aa/0x2e0 [ 1559.192466][ T7127] genl_rcv+0x24/0x40 [ 1559.196480][ T7127] netlink_unicast+0x774/0x920 [ 1559.201323][ T7127] netlink_sendmsg+0x8ba/0xbe0 [ 1559.206374][ T7127] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.211631][ T7127] ? netlink_getsockopt+0x570/0x570 [ 1559.216951][ T7127] ? security_socket_sendmsg+0x70/0xa0 [ 1559.222526][ T7127] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1559.227920][ T7127] ? security_socket_sendmsg+0x7c/0xa0 [ 1559.233415][ T7127] ? netlink_getsockopt+0x570/0x570 [ 1559.238638][ T7127] ____sys_sendmsg+0x5b7/0x8f0 [ 1559.243436][ T7127] ? __sys_sendmsg_sock+0x30/0x30 [ 1559.248497][ T7127] ? import_iovec+0x6f/0xa0 [ 1559.253054][ T7127] ___sys_sendmsg+0x236/0x2e0 [ 1559.257853][ T7127] ? __sys_sendmsg+0x2a0/0x2a0 [ 1559.262878][ T7127] __se_sys_sendmsg+0x1af/0x290 [ 1559.267774][ T7127] ? __x64_sys_sendmsg+0x80/0x80 [ 1559.272773][ T7127] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1559.278779][ T7127] do_syscall_64+0x4c/0xa0 [ 1559.283218][ T7127] ? clear_bhb_loop+0x30/0x80 [ 1559.288091][ T7127] ? clear_bhb_loop+0x30/0x80 [ 1559.292891][ T7127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1559.298806][ T7127] RIP: 0033:0x7fa3fe867819 [ 1559.303238][ T7127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.322861][ T7127] RSP: 002b:00007fa3fcac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.331382][ T7127] RAX: ffffffffffffffda RBX: 00007fa3feae0fa0 RCX: 00007fa3fe867819 [ 1559.339454][ T7127] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1559.347435][ T7127] RBP: 00007fa3fe8fdc91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.355422][ T7127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.363678][ T7127] R13: 00007fa3feae1038 R14: 00007fa3feae0fa0 R15: 00007ffca10a01c8 [ 1559.371782][ T7127] [ 1559.459531][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.469616][ T7133] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10379'. [ 1559.470204][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.586351][ T7133] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1559.605015][ T7133] CPU: 1 PID: 7133 Comm: syz.3.10379 Not tainted syzkaller #0 [ 1559.612633][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1559.622719][ T7133] Call Trace: [ 1559.626117][ T7133] [ 1559.629248][ T7133] dump_stack_lvl+0x188/0x250 [ 1559.633968][ T7133] ? show_regs_print_info+0x20/0x20 [ 1559.639183][ T7133] ? load_image+0x400/0x400 [ 1559.643966][ T7133] sysfs_warn_dup+0x8a/0xa0 [ 1559.648483][ T7133] sysfs_do_create_link_sd+0xc0/0x110 [ 1559.654132][ T7133] device_add+0x7ed/0xfb0 [ 1559.658496][ T7133] wiphy_register+0x1e81/0x2c30 [ 1559.663380][ T7133] ? cfg80211_event_work+0x40/0x40 [ 1559.668520][ T7133] ? minstrel_ht_alloc+0x808/0x980 [ 1559.673659][ T7133] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1559.679865][ T7133] ieee80211_register_hw+0x2aa1/0x3af0 [ 1559.685559][ T7133] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.690942][ T7133] ? ieee80211_tasklet_handler+0x20/0x20 [ 1559.696646][ T7133] ? rcu_is_watching+0x11/0xa0 [ 1559.701436][ T7133] ? memset+0x1e/0x40 [ 1559.705437][ T7133] ? hrtimer_init+0x10c/0x220 [ 1559.710130][ T7133] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1559.715887][ T7133] hwsim_new_radio_nl+0xa6f/0xc40 [ 1559.720936][ T7133] genl_rcv_msg+0xcea/0xf90 [ 1559.725458][ T7133] ? genl_bind+0x380/0x380 [ 1559.729892][ T7133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1559.735968][ T7133] ? lock_chain_count+0x20/0x20 [ 1559.740829][ T7133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1559.746985][ T7133] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.752190][ T7133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1559.758376][ T7133] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1559.764897][ T7133] ? lock_acquire+0x208/0x400 [ 1559.769658][ T7133] netlink_rcv_skb+0x1f5/0x440 [ 1559.774613][ T7133] ? genl_bind+0x380/0x380 [ 1559.779033][ T7133] ? netlink_ack+0xb50/0xb50 [ 1559.783629][ T7133] ? __lock_acquire+0x7d10/0x7d10 [ 1559.788663][ T7133] ? down_read+0x1aa/0x2e0 [ 1559.793084][ T7133] genl_rcv+0x24/0x40 [ 1559.797072][ T7133] netlink_unicast+0x774/0x920 [ 1559.801849][ T7133] netlink_sendmsg+0x8ba/0xbe0 [ 1559.806725][ T7133] ? netlink_getsockopt+0x570/0x570 [ 1559.811964][ T7133] ? aa_sock_msg_perm+0x94/0x150 [ 1559.816904][ T7133] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1559.822190][ T7133] ? security_socket_sendmsg+0x7c/0xa0 [ 1559.827654][ T7133] ? netlink_getsockopt+0x570/0x570 [ 1559.832856][ T7133] ____sys_sendmsg+0x5b7/0x8f0 [ 1559.837984][ T7133] ? __sys_sendmsg_sock+0x30/0x30 [ 1559.843025][ T7133] ? import_iovec+0x6f/0xa0 [ 1559.847536][ T7133] ___sys_sendmsg+0x236/0x2e0 [ 1559.852329][ T7133] ? __sys_sendmsg+0x2a0/0x2a0 [ 1559.857111][ T7133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1559.863475][ T7133] __se_sys_sendmsg+0x1af/0x290 [ 1559.868533][ T7133] ? __x64_sys_sendmsg+0x80/0x80 [ 1559.873565][ T7133] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1559.879564][ T7133] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.884771][ T7133] do_syscall_64+0x4c/0xa0 [ 1559.889193][ T7133] ? clear_bhb_loop+0x30/0x80 [ 1559.894264][ T7133] ? clear_bhb_loop+0x30/0x80 [ 1559.898952][ T7133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1559.904869][ T7133] RIP: 0033:0x7f96e25e9819 [ 1559.909290][ T7133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.928906][ T7133] RSP: 002b:00007f96e0822028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.937439][ T7133] RAX: ffffffffffffffda RBX: 00007f96e2863090 RCX: 00007f96e25e9819 [ 1559.945622][ T7133] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1559.953625][ T7133] RBP: 00007f96e267fc91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.961778][ T7133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.969841][ T7133] R13: 00007f96e2863128 R14: 00007f96e2863090 R15: 00007ffc507578d8 [ 1559.977923][ T7133] [ 1559.984070][ T7149] device bridge_slave_1 left promiscuous mode [ 1559.993865][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.004602][ T7149] device bridge_slave_0 left promiscuous mode [ 1560.011156][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.117057][ T7151] netlink: 'syz.4.10387': attribute type 10 has an invalid length. [ 1560.422000][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10391'. [ 1560.481727][ T7162] netlink: 'syz.5.10390': attribute type 29 has an invalid length. [ 1560.512770][ T7171] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.10393'. [ 1560.516390][ T7162] netlink: 'syz.5.10390': attribute type 29 has an invalid length. [ 1560.645758][ T7169] Ÿë: port 2(gretap0) entered blocking state [ 1560.756548][ T7169] Ÿë: port 2(gretap0) entered disabled state [ 1560.810404][ T7169] device gretap0 entered promiscuous mode [ 1561.452676][ T7182] netlink: 'syz.5.10394': attribute type 10 has an invalid length. [ 1561.491207][ T7182] device hsr0 entered promiscuous mode [ 1561.510324][ T7182] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1561.523560][ T7182] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1561.539972][ T7182] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1561.553513][ T7182] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1561.565110][ T7190] netlink: 'syz.4.10398': attribute type 39 has an invalid length. [ 1561.943258][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10406'. [ 1562.050044][ T7216] netlink: 'syz.3.10405': attribute type 29 has an invalid length. [ 1562.099604][ T7220] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.10407'. [ 1562.120198][ T7216] netlink: 'syz.3.10405': attribute type 29 has an invalid length. [ 1562.999514][ T7235] netlink: 'syz.3.10412': attribute type 39 has an invalid length. [ 1563.008032][ T7231] netlink: 'syz.1.10411': attribute type 10 has an invalid length. [ 1563.022465][ T7231] device hsr0 entered promiscuous mode [ 1563.952481][ T7271] netlink: 'syz.2.10423': attribute type 29 has an invalid length. [ 1564.181618][ T7275] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10425'. [ 1564.485795][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10426'. [ 1564.506132][ T7281] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10424'. [ 1564.631435][ T7281] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1564.701700][ T7281] CPU: 1 PID: 7281 Comm: syz.2.10424 Not tainted syzkaller #0 [ 1564.709335][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1564.719516][ T7281] Call Trace: [ 1564.722837][ T7281] [ 1564.725789][ T7281] dump_stack_lvl+0x188/0x250 [ 1564.730677][ T7281] ? show_regs_print_info+0x20/0x20 [ 1564.735918][ T7281] ? load_image+0x400/0x400 [ 1564.740475][ T7281] sysfs_warn_dup+0x8a/0xa0 [ 1564.745008][ T7281] sysfs_do_create_link_sd+0xc0/0x110 [ 1564.750701][ T7281] device_add+0x7ed/0xfb0 [ 1564.755084][ T7281] wiphy_register+0x1e81/0x2c30 [ 1564.760151][ T7281] ? cfg80211_event_work+0x40/0x40 [ 1564.765399][ T7281] ? minstrel_ht_alloc+0x808/0x980 [ 1564.770644][ T7281] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1564.776752][ T7281] ieee80211_register_hw+0x2aa1/0x3af0 [ 1564.782243][ T7281] ? lockdep_hardirqs_on+0x94/0x140 [ 1564.787486][ T7281] ? ieee80211_tasklet_handler+0x20/0x20 [ 1564.793174][ T7281] ? rcu_is_watching+0x11/0xa0 [ 1564.797985][ T7281] ? memset+0x1e/0x40 [ 1564.802103][ T7281] ? hrtimer_init+0x10c/0x220 [ 1564.806812][ T7281] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1564.812672][ T7281] hwsim_new_radio_nl+0xa6f/0xc40 [ 1564.817753][ T7281] genl_rcv_msg+0xcea/0xf90 [ 1564.822294][ T7281] ? genl_bind+0x380/0x380 [ 1564.826849][ T7281] ? rcu_nmi_exit+0x6f/0xf0 [ 1564.831376][ T7281] ? verify_lock_unused+0x140/0x140 [ 1564.836597][ T7281] ? verify_lock_unused+0x140/0x140 [ 1564.841813][ T7281] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1564.847833][ T7281] ? lock_chain_count+0x20/0x20 [ 1564.852732][ T7281] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1564.859296][ T7281] netlink_rcv_skb+0x1f5/0x440 [ 1564.864199][ T7281] ? genl_bind+0x380/0x380 [ 1564.868780][ T7281] ? netlink_ack+0xb50/0xb50 [ 1564.873406][ T7281] ? __lock_acquire+0x7d10/0x7d10 [ 1564.878476][ T7281] ? down_read+0x1aa/0x2e0 [ 1564.882926][ T7281] genl_rcv+0x24/0x40 [ 1564.886945][ T7281] netlink_unicast+0x774/0x920 [ 1564.891747][ T7281] netlink_sendmsg+0x8ba/0xbe0 [ 1564.896552][ T7281] ? netlink_getsockopt+0x570/0x570 [ 1564.901784][ T7281] ? aa_sock_msg_perm+0x94/0x150 [ 1564.906749][ T7281] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1564.912058][ T7281] ? security_socket_sendmsg+0x7c/0xa0 [ 1564.917562][ T7281] ? netlink_getsockopt+0x570/0x570 [ 1564.923242][ T7281] ____sys_sendmsg+0x5b7/0x8f0 [ 1564.928364][ T7281] ? __sys_sendmsg_sock+0x30/0x30 [ 1564.933650][ T7281] ? import_iovec+0x6f/0xa0 [ 1564.938207][ T7281] ___sys_sendmsg+0x236/0x2e0 [ 1564.942927][ T7281] ? __sys_sendmsg+0x2a0/0x2a0 [ 1564.947774][ T7281] __se_sys_sendmsg+0x1af/0x290 [ 1564.952655][ T7281] ? __x64_sys_sendmsg+0x80/0x80 [ 1564.957617][ T7281] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1564.963659][ T7281] ? lockdep_hardirqs_on+0x94/0x140 [ 1564.968923][ T7281] do_syscall_64+0x4c/0xa0 [ 1564.973472][ T7281] ? clear_bhb_loop+0x30/0x80 [ 1564.978269][ T7281] ? clear_bhb_loop+0x30/0x80 [ 1564.983071][ T7281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1564.989085][ T7281] RIP: 0033:0x7fba81560819 [ 1564.993534][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.013430][ T7281] RSP: 002b:00007fba7f799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1565.022151][ T7281] RAX: ffffffffffffffda RBX: 00007fba817da090 RCX: 00007fba81560819 [ 1565.030248][ T7281] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1565.038254][ T7281] RBP: 00007fba815f6c91 R08: 0000000000000000 R09: 0000000000000000 [ 1565.046253][ T7281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.054252][ T7281] R13: 00007fba817da128 R14: 00007fba817da090 R15: 00007ffd43e127e8 [ 1565.062265][ T7281] [ 1565.391294][ T7293] validate_nla: 1 callbacks suppressed [ 1565.391313][ T7293] netlink: 'syz.5.10428': attribute type 39 has an invalid length. [ 1565.470735][ T7301] netlink: 'syz.3.10430': attribute type 10 has an invalid length. [ 1565.796143][ T7316] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10442'. [ 1565.870216][ T7321] netlink: 'syz.2.10439': attribute type 2 has an invalid length. [ 1565.871550][ T7312] netlink: 'syz.1.10437': attribute type 29 has an invalid length. [ 1565.960772][ T7321] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1565.971331][ T7312] netlink: 'syz.1.10437': attribute type 29 has an invalid length. [ 1566.949968][ T7340] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.10446'. [ 1566.981579][ T7336] netlink: 'syz.3.10447': attribute type 10 has an invalid length. [ 1567.150571][ T7345] netlink: 'syz.4.10449': attribute type 27 has an invalid length. [ 1567.180845][ T7347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10448'. [ 1567.184953][ T7345] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1567.418014][ T7354] netlink: 'syz.4.10451': attribute type 3 has an invalid length. [ 1567.448577][ T7354] netlink: 'syz.4.10451': attribute type 1 has an invalid length. [ 1568.069436][ T7359] netlink: 'syz.2.10452': attribute type 39 has an invalid length. [ 1568.876543][ T7392] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10462'. [ 1568.886562][ T7392] bridge_slave_1: default FDB implementation only supports local addresses [ 1570.551424][ T7423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10469'. [ 1570.590160][ T7424] validate_nla: 5 callbacks suppressed [ 1570.590179][ T7424] netlink: 'syz.1.10470': attribute type 39 has an invalid length. [ 1570.842280][ T7432] netlink: 'syz.4.10475': attribute type 3 has an invalid length. [ 1570.892196][ T7432] netlink: 'syz.4.10475': attribute type 1 has an invalid length. [ 1571.713309][ T7447] netlink: 'syz.5.10482': attribute type 10 has an invalid length. [ 1571.831198][ T7447] bond0: (slave bond_slave_0): Releasing backup interface [ 1572.022172][ T7453] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.10485'. [ 1572.114157][ T7453] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1572.153205][ T7453] CPU: 0 PID: 7453 Comm: syz.4.10485 Not tainted syzkaller #0 [ 1572.160738][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1572.170872][ T7453] Call Trace: [ 1572.174208][ T7453] [ 1572.177173][ T7453] dump_stack_lvl+0x188/0x250 [ 1572.181891][ T7453] ? show_regs_print_info+0x20/0x20 [ 1572.187233][ T7453] ? load_image+0x400/0x400 [ 1572.191913][ T7453] sysfs_warn_dup+0x8a/0xa0 [ 1572.196539][ T7453] sysfs_do_create_link_sd+0xc0/0x110 [ 1572.201958][ T7453] device_add+0x7ed/0xfb0 [ 1572.206340][ T7453] wiphy_register+0x1e81/0x2c30 [ 1572.211248][ T7453] ? cfg80211_event_work+0x40/0x40 [ 1572.216412][ T7453] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1572.222519][ T7453] ieee80211_register_hw+0x2aa1/0x3af0 [ 1572.228040][ T7453] ? ieee80211_tasklet_handler+0x20/0x20 [ 1572.233731][ T7453] ? rcu_is_watching+0x11/0xa0 [ 1572.238531][ T7453] ? memset+0x1e/0x40 [ 1572.242551][ T7453] ? hrtimer_init+0x10c/0x220 [ 1572.247276][ T7453] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1572.253057][ T7453] hwsim_new_radio_nl+0xa6f/0xc40 [ 1572.258244][ T7453] genl_rcv_msg+0xcea/0xf90 [ 1572.262802][ T7453] ? genl_bind+0x380/0x380 [ 1572.267268][ T7453] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1572.273291][ T7453] ? verify_lock_unused+0x140/0x140 [ 1572.278527][ T7453] ? verify_lock_unused+0x140/0x140 [ 1572.283773][ T7453] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1572.289966][ T7453] ? lockdep_hardirqs_on+0x94/0x140 [ 1572.295194][ T7453] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1572.301587][ T7453] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1572.308130][ T7453] netlink_rcv_skb+0x1f5/0x440 [ 1572.313002][ T7453] ? genl_bind+0x380/0x380 [ 1572.317607][ T7453] ? netlink_ack+0xb50/0xb50 [ 1572.322209][ T7453] ? __lock_acquire+0x7d10/0x7d10 [ 1572.327255][ T7453] ? down_read+0x1aa/0x2e0 [ 1572.331784][ T7453] genl_rcv+0x24/0x40 [ 1572.335976][ T7453] netlink_unicast+0x774/0x920 [ 1572.340775][ T7453] netlink_sendmsg+0x8ba/0xbe0 [ 1572.345736][ T7453] ? netlink_getsockopt+0x570/0x570 [ 1572.350941][ T7453] ? aa_sock_msg_perm+0x94/0x150 [ 1572.355884][ T7453] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1572.361170][ T7453] ? security_socket_sendmsg+0x7c/0xa0 [ 1572.366631][ T7453] ? netlink_getsockopt+0x570/0x570 [ 1572.371838][ T7453] ____sys_sendmsg+0x5b7/0x8f0 [ 1572.376617][ T7453] ? __sys_sendmsg_sock+0x30/0x30 [ 1572.381659][ T7453] ? import_iovec+0x6f/0xa0 [ 1572.386180][ T7453] ___sys_sendmsg+0x236/0x2e0 [ 1572.390877][ T7453] ? __sys_sendmsg+0x2a0/0x2a0 [ 1572.395654][ T7453] ? ktime_get_real_ts64+0x440/0x440 [ 1572.400969][ T7453] __se_sys_sendmsg+0x1af/0x290 [ 1572.405845][ T7453] ? __x64_sys_sendmsg+0x80/0x80 [ 1572.410790][ T7453] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1572.416805][ T7453] ? lockdep_hardirqs_on+0x94/0x140 [ 1572.422013][ T7453] do_syscall_64+0x4c/0xa0 [ 1572.426441][ T7453] ? clear_bhb_loop+0x30/0x80 [ 1572.431132][ T7453] ? clear_bhb_loop+0x30/0x80 [ 1572.435816][ T7453] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1572.441732][ T7453] RIP: 0033:0x7fa3fe867819 [ 1572.446187][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.465831][ T7453] RSP: 002b:00007fa3fcac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.474308][ T7453] RAX: ffffffffffffffda RBX: 00007fa3feae0fa0 RCX: 00007fa3fe867819 [ 1572.482289][ T7453] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1572.490265][ T7453] RBP: 00007fa3fe8fdc91 R08: 0000000000000000 R09: 0000000000000000 [ 1572.498248][ T7453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1572.506241][ T7453] R13: 00007fa3feae1038 R14: 00007fa3feae0fa0 R15: 00007ffca10a01c8 [ 1572.514241][ T7453] [ 1572.832199][ T7474] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10492'. [ 1573.104635][ T7482] netlink: 'syz.3.10495': attribute type 3 has an invalid length. [ 1573.140875][ T7482] netlink: 'syz.3.10495': attribute type 1 has an invalid length. [ 1573.290957][ T7486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10496'. [ 1574.070572][ T7505] netlink: 'syz.5.10503': attribute type 10 has an invalid length. [ 1574.313423][ T7519] netlink: 'syz.5.10506': attribute type 10 has an invalid length. [ 1574.380602][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10506'. [ 1574.440596][ T7519] device dummy0 entered promiscuous mode [ 1574.447324][ T7519] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1574.539749][ T7525] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.10507'. [ 1574.637852][ T7530] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10510'. [ 1575.042225][ T7541] netlink: 'syz.1.10512': attribute type 3 has an invalid length. [ 1575.198597][ T7541] netlink: 'syz.1.10512': attribute type 1 has an invalid length. [ 1575.599785][ T7549] netlink: 'syz.2.10514': attribute type 2 has an invalid length. [ 1575.656228][ T7549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10514'. [ 1575.840203][ T7559] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10521'. [ 1576.007515][ T7566] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.10523'. [ 1576.163755][ T7571] netlink: 'syz.3.10524': attribute type 17 has an invalid length. [ 1576.238428][ T7571] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10524'. [ 1576.301673][ T7571] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check. [ 1576.357126][ T7580] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.10529'. [ 1576.441213][ T7583] netlink: 156 bytes leftover after parsing attributes in process `syz.5.10530'. [ 1576.891672][ T7597] netlink: 1010 bytes leftover after parsing attributes in process `syz.5.10537'. [ 1576.941848][ T7599] netlink: 'syz.1.10536': attribute type 3 has an invalid length. [ 1577.010618][ T7599] netlink: 'syz.1.10536': attribute type 1 has an invalid length. [ 1577.175699][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10541'. [ 1577.191322][ T7610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10540'. [ 1577.449453][ T7619] netlink: 'syz.2.10544': attribute type 17 has an invalid length. [ 1577.519399][ T7619] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10544'. [ 1578.721582][ T7644] device syzkaller0 entered promiscuous mode [ 1579.027944][ T7667] netlink: 'syz.2.10562': attribute type 3 has an invalid length. [ 1579.073946][ T7667] netlink: 'syz.2.10562': attribute type 1 has an invalid length. [ 1580.302779][ T7694] netlink: 'syz.2.10581': attribute type 3 has an invalid length. [ 1580.332530][ T7694] netlink: 'syz.2.10581': attribute type 1 has an invalid length. [ 1580.418704][ T7700] netlink: 'syz.3.10573': attribute type 2 has an invalid length. [ 1580.772867][ T7708] netlink: 'syz.3.10576': attribute type 3 has an invalid length. [ 1580.873038][ T7708] __nla_validate_parse: 4 callbacks suppressed [ 1580.873061][ T7708] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.10576'. [ 1582.005900][ T7732] netlink: 'syz.1.10596': attribute type 1 has an invalid length. [ 1582.105540][ T7732] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.10596'. [ 1582.711904][ T7754] netlink: 'syz.2.10594': attribute type 3 has an invalid length. [ 1582.737645][ T7752] netlink: 'syz.3.10595': attribute type 3 has an invalid length. [ 1582.745957][ T7754] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.10594'. [ 1582.776783][ T7752] netlink: 'syz.3.10595': attribute type 1 has an invalid length. [ 1584.495185][ T7791] netlink: 'syz.3.10621': attribute type 3 has an invalid length. [ 1584.620322][ T7794] netlink: 'syz.4.10611': attribute type 3 has an invalid length. [ 1584.658229][ T7791] netlink: 'syz.3.10621': attribute type 1 has an invalid length. [ 1584.782072][ T7794] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.10611'. [ 1585.614022][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10620'. [ 1585.664821][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10620'. [ 1585.694256][ T7819] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10620'. [ 1586.109587][ T7837] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1586.939491][ T7847] netlink: 'syz.3.10630': attribute type 3 has an invalid length. [ 1586.989001][ T7847] netlink: 'syz.3.10630': attribute type 1 has an invalid length. [ 1587.808488][ T7864] netlink: 'syz.4.10637': attribute type 10 has an invalid length. [ 1589.772203][ T7892] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.10649'. [ 1589.856849][ T7896] netlink: 'syz.2.10651': attribute type 3 has an invalid length. [ 1589.895664][ T7896] netlink: 'syz.2.10651': attribute type 1 has an invalid length. [ 1590.269007][ T7907] netlink: 'syz.3.10655': attribute type 10 has an invalid length. [ 1591.284568][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1591.348953][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1591.402402][ T7935] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.10664'. [ 1591.409541][ T7934] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1591.508733][ T7936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10662'. [ 1592.260109][ T7946] netlink: 'syz.4.10669': attribute type 2 has an invalid length. [ 1592.345488][ T7946] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.10669'. [ 1592.677320][ T7958] netlink: 'syz.1.10672': attribute type 3 has an invalid length. [ 1592.939615][ T7958] netlink: 'syz.1.10672': attribute type 1 has an invalid length. [ 1593.002899][ T7973] netlink: 'syz.2.10680': attribute type 10 has an invalid length. [ 1593.453119][ T7977] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10682'. [ 1593.468504][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10683'. [ 1593.548658][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10683'. [ 1593.610550][ T7983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10683'. [ 1593.821961][ T7992] netlink: 'syz.2.10686': attribute type 10 has an invalid length. [ 1594.415201][ T8002] tap0: tun_chr_ioctl cmd 1074025677 [ 1594.431183][ T8002] tap0: linktype set to 785 [ 1594.907178][ T8010] netlink: 'syz.4.10696': attribute type 3 has an invalid length. [ 1596.525942][ T8066] __nla_validate_parse: 15 callbacks suppressed [ 1596.525962][ T8066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1596.640617][ T8066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1596.719892][ T8067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1596.749459][ T8069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10717'. [ 1596.834324][ T8073] netlink: 'syz.2.10721': attribute type 4 has an invalid length. [ 1596.870651][ T8073] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10721'. [ 1596.900565][ T8077] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10723'. [ 1597.245719][ T8090] netlink: 'syz.3.10728': attribute type 21 has an invalid length. [ 1597.394683][ T8090] netlink: 'syz.3.10728': attribute type 1 has an invalid length. [ 1597.465095][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10728'. [ 1598.537649][ T8139] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10747'. [ 1598.772693][ T8150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10750'. [ 1598.893306][ T8150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10750'. [ 1599.365215][ T8168] netlink: 'syz.5.10757': attribute type 3 has an invalid length. [ 1599.597978][ T8177] netlink: 'syz.3.10762': attribute type 3 has an invalid length. [ 1599.615712][ T8177] netlink: 'syz.3.10762': attribute type 1 has an invalid length. [ 1599.924907][ T8194] netlink: 'syz.2.10769': attribute type 21 has an invalid length. [ 1600.661229][ T8212] netlink: 'syz.3.10776': attribute type 10 has an invalid length. [ 1600.722849][ T8212] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1601.263185][ T8237] netlink: 'syz.2.10786': attribute type 3 has an invalid length. [ 1601.284470][ T8237] netlink: 'syz.2.10786': attribute type 1 has an invalid length. [ 1602.630955][ T8280] netlink: 'syz.1.10802': attribute type 3 has an invalid length. [ 1602.659236][ T8280] __nla_validate_parse: 4 callbacks suppressed [ 1602.659255][ T8280] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.10802'. [ 1602.763570][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10815'. [ 1602.775592][ T8287] netlink: 'syz.2.10805': attribute type 3 has an invalid length. [ 1602.794205][ T8287] netlink: 'syz.2.10805': attribute type 1 has an invalid length. [ 1602.800044][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10815'. [ 1602.852747][ T8290] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10815'. [ 1602.887015][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10815'. [ 1603.324670][ T8316] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10818'. [ 1604.185829][ T8351] netlink: 'syz.1.10831': attribute type 3 has an invalid length. [ 1604.211841][ T8351] netlink: 'syz.1.10831': attribute type 1 has an invalid length. [ 1604.312637][ T8361] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10838'. [ 1605.050148][ T8400] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.10854'. [ 1605.796320][ T8435] netlink: 'syz.2.10866': attribute type 3 has an invalid length. [ 1605.804420][ T8435] netlink: 'syz.2.10866': attribute type 1 has an invalid length. [ 1606.059557][ T8441] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10870'. [ 1606.764509][ T8461] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.10877'. [ 1606.839819][ T8463] netlink: 'syz.3.10879': attribute type 4 has an invalid length. [ 1606.909273][ T8463] netlink: 'syz.3.10879': attribute type 1 has an invalid length. [ 1607.401081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.407452][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.706858][ T8491] netlink: 'syz.4.10888': attribute type 3 has an invalid length. [ 1607.758958][ T8491] netlink: 'syz.4.10888': attribute type 1 has an invalid length. [ 1607.895156][ T8498] __nla_validate_parse: 1 callbacks suppressed [ 1607.895176][ T8498] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.10891'. [ 1608.702377][ T8518] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.10898'. [ 1608.708400][ T8512] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.10894'. [ 1609.062070][ T8530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10902'. [ 1609.299656][ T8541] netlink: 'syz.4.10907': attribute type 3 has an invalid length. [ 1609.307708][ T8541] netlink: 'syz.4.10907': attribute type 1 has an invalid length. [ 1609.375193][ T8548] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10908'. [ 1610.273258][ T8577] netlink: set zone limit has 8 unknown bytes [ 1610.362563][ T8582] syz.5.10922[8582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1610.362671][ T8582] syz.5.10922[8582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1610.413000][ T8580] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.10921'. [ 1611.026279][ T8603] netlink: 'syz.2.10929': attribute type 3 has an invalid length. [ 1611.034683][ T8603] netlink: 'syz.2.10929': attribute type 1 has an invalid length. [ 1611.520435][ T8613] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10931'. [ 1611.744166][ T8618] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.10934'. [ 1611.911451][ T8623] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.10937'. [ 1612.129053][ T8635] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.10951'. [ 1612.348506][ T8640] device syzkaller0 entered promiscuous mode [ 1612.458955][ T7] syzkaller0: tun_net_xmit 48 [ 1612.472987][ T8652] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1612.502881][ T8652] syzkaller0: Linktype set failed because interface is up [ 1612.950647][ T8667] netlink: 'syz.4.10949': attribute type 3 has an invalid length. [ 1613.000390][ T8667] netlink: 'syz.4.10949': attribute type 1 has an invalid length. [ 1613.075928][ T8670] __nla_validate_parse: 1 callbacks suppressed [ 1613.075975][ T8670] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.10952'. [ 1613.409896][ T8680] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10954'. [ 1613.643351][ T8685] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.10956'. [ 1613.701196][ T8689] netlink: 'syz.1.10968': attribute type 3 has an invalid length. [ 1613.748237][ T8689] netlink: 'syz.1.10968': attribute type 1 has an invalid length. [ 1614.154532][ T8697] device syzkaller0 entered promiscuous mode [ 1614.188707][ T8709] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.10963'. [ 1614.243209][ T8705] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1614.311004][ T8705] syzkaller0: Linktype set failed because interface is up [ 1614.415691][ T856] syzkaller0: tun_net_xmit 48 [ 1615.394699][ T8720] device syzkaller0 entered promiscuous mode [ 1615.412946][ T8724] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1615.563795][ T8734] netlink: 'syz.4.10973': attribute type 1 has an invalid length. [ 1615.582079][ T8734] netlink: 'syz.4.10973': attribute type 4 has an invalid length. [ 1615.596841][ T8734] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.10973'. [ 1615.778449][ T8747] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.10978'. [ 1615.826821][ T8750] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1615.883763][ T8749] device syzkaller0 entered promiscuous mode [ 1615.949548][T11862] syzkaller0: tun_net_xmit 48 [ 1616.900999][ T8777] netlink: 'syz.4.10991': attribute type 3 has an invalid length. [ 1616.915394][ T8777] netlink: 'syz.4.10991': attribute type 1 has an invalid length. [ 1617.410589][ T8794] netlink: 'syz.5.10995': attribute type 27 has an invalid length. [ 1617.647708][ T8805] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11000'. [ 1618.046530][ T8822] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1618.461432][ T8842] netlink: 'syz.3.11016': attribute type 21 has an invalid length. [ 1618.501402][ T8842] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11016'. [ 1618.741117][ T8856] device syzkaller0 entered promiscuous mode [ 1618.761064][ T8862] netlink: 'syz.1.11024': attribute type 10 has an invalid length. [ 1618.813244][ T8862] device team_slave_0 left promiscuous mode [ 1618.823654][ T8862] team0 (unregistering): Port device team_slave_0 removed [ 1618.832155][ T8862] device team_slave_1 left promiscuous mode [ 1618.861935][ T8862] team0 (unregistering): Port device team_slave_1 removed [ 1618.888130][ T8862] device geneve1 left promiscuous mode [ 1618.904504][ T8862] team0 (unregistering): Port device geneve1 removed [ 1618.935440][ T8862] team0 (unregistering): Port device wlan1 removed [ 1619.174807][ T8875] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.11027'. [ 1619.185819][ T8875] netlink: get zone limit has 8 unknown bytes [ 1619.248663][ T8879] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11031'. [ 1619.462019][ T8887] netlink: 'syz.3.11031': attribute type 27 has an invalid length. [ 1619.474568][ T8887] netlink: 'syz.3.11031': attribute type 3 has an invalid length. [ 1619.496678][ T8887] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11031'. [ 1619.576310][ T8898] netlink: 'syz.1.11035': attribute type 27 has an invalid length. [ 1619.918927][ T8905] device syzkaller0 entered promiscuous mode [ 1620.101727][ T8908] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1620.112119][ T8908] device syzkaller0 entered promiscuous mode [ 1622.038341][ T8929] netlink: 'syz.2.11049': attribute type 27 has an invalid length. [ 1622.263306][ T8936] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11052'. [ 1622.473890][ T8937] netlink: 'syz.2.11052': attribute type 27 has an invalid length. [ 1622.487326][ T8937] netlink: 'syz.2.11052': attribute type 3 has an invalid length. [ 1622.499238][ T8937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11052'. [ 1623.235509][ T8963] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.11062'. [ 1623.279816][ T8963] netlink: get zone limit has 8 unknown bytes [ 1623.310638][ T8965] netlink: 'syz.4.11063': attribute type 3 has an invalid length. [ 1623.380437][ T8965] netlink: 'syz.4.11063': attribute type 1 has an invalid length. [ 1623.756689][ T8984] device lo entered promiscuous mode [ 1624.132211][ T8988] netlink: 'syz.5.11080': attribute type 3 has an invalid length. [ 1624.148842][ T8988] netlink: 'syz.5.11080': attribute type 1 has an invalid length. [ 1624.182210][ T8990] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11072'. [ 1624.250199][ T8995] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.11072'. [ 1624.320432][ T8990] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1624.485302][ T8990] CPU: 0 PID: 8990 Comm: syz.3.11072 Not tainted syzkaller #0 [ 1624.492934][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1624.503360][ T8990] Call Trace: [ 1624.506701][ T8990] [ 1624.509680][ T8990] dump_stack_lvl+0x188/0x250 [ 1624.514615][ T8990] ? show_regs_print_info+0x20/0x20 [ 1624.519971][ T8990] ? load_image+0x400/0x400 [ 1624.524598][ T8990] sysfs_warn_dup+0x8a/0xa0 [ 1624.529164][ T8990] sysfs_do_create_link_sd+0xc0/0x110 [ 1624.534607][ T8990] device_add+0x7ed/0xfb0 [ 1624.539047][ T8990] wiphy_register+0x1e81/0x2c30 [ 1624.544028][ T8990] ? cfg80211_event_work+0x40/0x40 [ 1624.549370][ T8990] ? minstrel_ht_alloc+0x808/0x980 [ 1624.554631][ T8990] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1624.560782][ T8990] ieee80211_register_hw+0x2aa1/0x3af0 [ 1624.566369][ T8990] ? ieee80211_tasklet_handler+0x20/0x20 [ 1624.572068][ T8990] ? rcu_is_watching+0x11/0xa0 [ 1624.576883][ T8990] ? memset+0x1e/0x40 [ 1624.580928][ T8990] ? hrtimer_init+0x10c/0x220 [ 1624.585672][ T8990] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1624.591515][ T8990] hwsim_new_radio_nl+0xa6f/0xc40 [ 1624.596661][ T8990] genl_rcv_msg+0xcea/0xf90 [ 1624.601264][ T8990] ? genl_bind+0x380/0x380 [ 1624.605755][ T8990] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1624.611728][ T8990] ? verify_lock_unused+0x140/0x140 [ 1624.617268][ T8990] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1624.623241][ T8990] ? perf_trace_lock+0x301/0x390 [ 1624.628266][ T8990] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1624.634986][ T8990] netlink_rcv_skb+0x1f5/0x440 [ 1624.639803][ T8990] ? genl_bind+0x380/0x380 [ 1624.644278][ T8990] ? netlink_ack+0xb50/0xb50 [ 1624.648935][ T8990] ? __lock_acquire+0x7d10/0x7d10 [ 1624.654386][ T8990] ? down_read+0x1aa/0x2e0 [ 1624.658908][ T8990] genl_rcv+0x24/0x40 [ 1624.662949][ T8990] netlink_unicast+0x774/0x920 [ 1624.667800][ T8990] netlink_sendmsg+0x8ba/0xbe0 [ 1624.672751][ T8990] ? netlink_getsockopt+0x570/0x570 [ 1624.678023][ T8990] ? aa_sock_msg_perm+0x94/0x150 [ 1624.683054][ T8990] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1624.688402][ T8990] ? security_socket_sendmsg+0x7c/0xa0 [ 1624.693925][ T8990] ? netlink_getsockopt+0x570/0x570 [ 1624.699184][ T8990] ____sys_sendmsg+0x5b7/0x8f0 [ 1624.704067][ T8990] ? __sys_sendmsg_sock+0x30/0x30 [ 1624.709276][ T8990] ? import_iovec+0x6f/0xa0 [ 1624.713877][ T8990] ___sys_sendmsg+0x236/0x2e0 [ 1624.718676][ T8990] ? __sys_sendmsg+0x2a0/0x2a0 [ 1624.723659][ T8990] ? trace_event_raw_event_lock+0x270/0x270 [ 1624.729802][ T8990] __se_sys_sendmsg+0x1af/0x290 [ 1624.734728][ T8990] ? __x64_sys_sendmsg+0x80/0x80 [ 1624.739717][ T8990] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1624.745807][ T8990] ? lockdep_hardirqs_on+0x94/0x140 [ 1624.751109][ T8990] do_syscall_64+0x4c/0xa0 [ 1624.755576][ T8990] ? clear_bhb_loop+0x30/0x80 [ 1624.760291][ T8990] ? clear_bhb_loop+0x30/0x80 [ 1624.765020][ T8990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1624.770954][ T8990] RIP: 0033:0x7f96e25e9819 [ 1624.775427][ T8990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.795227][ T8990] RSP: 002b:00007f96e0843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.803715][ T8990] RAX: ffffffffffffffda RBX: 00007f96e2862fa0 RCX: 00007f96e25e9819 [ 1624.811822][ T8990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1624.819840][ T8990] RBP: 00007f96e267fc91 R08: 0000000000000000 R09: 0000000000000000 [ 1624.827875][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.836025][ T8990] R13: 00007f96e2863038 R14: 00007f96e2862fa0 R15: 00007ffc507578d8 [ 1624.844105][ T8990] [ 1624.851264][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 1625.011380][ T9005] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.11076'. [ 1625.041542][ T9010] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.11075'. [ 1625.079223][ T9010] netlink: get zone limit has 8 unknown bytes [ 1625.229639][ T9012] netlink: 'syz.5.11076': attribute type 27 has an invalid length. [ 1625.238109][ T9012] netlink: 'syz.5.11076': attribute type 3 has an invalid length. [ 1625.271594][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11076'. [ 1625.456680][ T9028] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.11083'. [ 1626.162931][ T9038] netlink: 'syz.2.11087': attribute type 3 has an invalid length. [ 1626.201449][ T9038] netlink: 'syz.2.11087': attribute type 1 has an invalid length. [ 1626.914788][ T9053] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.11091'. [ 1626.940861][ T9053] netlink: get zone limit has 8 unknown bytes [ 1627.055769][ T9057] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.11093'. [ 1627.414381][ T9076] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1627.447603][ T9079] netlink: 'syz.4.11102': attribute type 3 has an invalid length. [ 1627.509875][ T9079] netlink: 'syz.4.11102': attribute type 1 has an invalid length. [ 1627.622671][ T9083] netlink: 'syz.5.11101': attribute type 27 has an invalid length. [ 1627.663744][ T9085] netlink: 'syz.2.11104': attribute type 10 has an invalid length. [ 1627.672261][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1628.148627][ T9097] netlink: get zone limit has 8 unknown bytes [ 1629.761599][ T9145] validate_nla: 3 callbacks suppressed [ 1629.761619][ T9145] netlink: 'syz.5.11124': attribute type 3 has an invalid length. [ 1629.813044][ T9145] netlink: 'syz.5.11124': attribute type 1 has an invalid length. [ 1630.208381][ T9158] __nla_validate_parse: 4 callbacks suppressed [ 1630.208402][ T9158] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1630.313711][ T9160] netlink: 'syz.4.11131': attribute type 11 has an invalid length. [ 1630.349245][ T9160] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.11131'. [ 1630.576808][ T9168] netlink: 'syz.3.11129': attribute type 27 has an invalid length. [ 1630.755256][ T9168] netlink: 'syz.3.11129': attribute type 3 has an invalid length. [ 1630.821996][ T9173] netlink: 16222 bytes leftover after parsing attributes in process `syz.5.11137'. [ 1630.848231][ T9168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11129'. [ 1631.569827][ T9190] netlink: 'syz.2.11150': attribute type 7 has an invalid length. [ 1631.598977][ T9190] netlink: 'syz.2.11150': attribute type 1 has an invalid length. [ 1631.608520][ T9190] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11150'. [ 1631.650662][ T9189] netlink: 'syz.2.11150': attribute type 10 has an invalid length. [ 1631.708476][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11150'. [ 1632.237331][ T9208] netlink: 'syz.4.11145': attribute type 3 has an invalid length. [ 1632.339281][ T9208] netlink: 'syz.4.11145': attribute type 1 has an invalid length. [ 1632.549706][ T9219] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.11149'. [ 1632.759718][ T9223] netlink: 'syz.5.11149': attribute type 27 has an invalid length. [ 1632.787010][ T9223] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11149'. [ 1632.857289][ T9228] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11154'. [ 1633.629033][ T27] INFO: task syz.0.10044:5557 blocked for more than 143 seconds. [ 1633.657335][ T27] Not tainted syzkaller #0 [ 1633.713489][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1633.743056][ T27] task:syz.0.10044 state:D stack:26800 pid: 5557 ppid: 4185 flags:0x00004002 [ 1633.776324][ T27] Call Trace: [ 1633.786603][ T27] [ 1633.787683][ T9254] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11162'. [ 1633.803782][ T27] __schedule+0x11ef/0x43c0 [ 1633.815916][ T27] ? __mutex_trylock_common+0x155/0x260 [ 1633.834443][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1633.856325][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 1633.867140][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1633.895488][ T27] ? perf_mmap+0x13e0/0x13e0 [ 1633.903872][ T27] schedule+0x11b/0x1e0 [ 1633.914761][ T27] perf_pending_task_sync+0x13c/0x1c0 [ 1633.924996][ T27] ? perf_mmap+0x13e0/0x13e0 [ 1633.935940][ T27] _free_event+0x34/0xe60 [ 1633.943894][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1633.952992][ T27] ? perf_mmap+0x13e0/0x13e0 [ 1633.961157][ T27] perf_event_release_kernel+0x83e/0x8d0 [ 1633.969226][ T27] ? __might_sleep+0xf0/0xf0 [ 1633.976274][ T27] ? calc_timer_values+0x410/0x410 [ 1633.985096][ T27] ? perf_mmap+0x13e0/0x13e0 [ 1633.992132][ T27] perf_release+0x37/0x40 [ 1633.999741][ T27] __fput+0x234/0x930 [ 1634.006740][ T27] task_work_run+0x125/0x1a0 [ 1634.016147][ T27] do_exit+0x626/0x20c0 [ 1634.024675][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 1634.029625][ T27] ? put_task_struct+0x80/0x80 [ 1634.034563][ T27] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1634.042342][ T27] ? lock_chain_count+0x20/0x20 [ 1634.047375][ T27] do_group_exit+0x12e/0x300 [ 1634.052445][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1634.057994][ T27] get_signal+0x6ca/0x12c0 [ 1634.064199][ T27] arch_do_signal_or_restart+0xe7/0x12c0 [ 1634.070236][ T27] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1634.076367][ T27] ? fd_install+0x2b1/0x4c0 [ 1634.082800][ T27] ? __se_sys_perf_event_open+0x19f9/0x1bb0 [ 1634.089219][ T27] ? get_sigframe_size+0x10/0x10 [ 1634.094509][ T27] ? rcu_nmi_exit+0x6f/0xf0 [ 1634.100812][ T27] ? exit_to_user_mode_loop+0x3b/0x130 [ 1634.106627][ T27] exit_to_user_mode_loop+0x9e/0x130 [ 1634.120631][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 1634.134323][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 1634.147800][ T27] do_syscall_64+0x58/0xa0 [ 1634.163757][ T27] ? clear_bhb_loop+0x30/0x80 [ 1634.168553][ T27] ? clear_bhb_loop+0x30/0x80 [ 1634.173260][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1634.198184][ T27] RIP: 0033:0x7fbc9fd34819 [ 1634.202731][ T27] RSP: 002b:00007fbc9df8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1634.224324][ T27] RAX: 0000000000000004 RBX: 00007fbc9ffadfa0 RCX: 00007fbc9fd34819 [ 1634.234438][ T27] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 1634.254686][ T27] RBP: 00007fbc9fdcac91 R08: 0000000000000000 R09: 0000000000000000 [ 1634.262832][ T27] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1634.271141][ T27] R13: 00007fbc9ffae038 R14: 00007fbc9ffadfa0 R15: 00007ffd1cc06c78 [ 1634.279298][ T27] [ 1634.282520][ T27] [ 1634.282520][ T27] Showing all locks held in the system: [ 1634.325928][ T27] 1 lock held by khungtaskd/27: [ 1634.331772][ T27] #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1634.349889][ T27] 2 locks held by getty/3946: [ 1634.354621][ T27] #0: ffff88802c4fd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1634.364623][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 1634.391525][ T27] 1 lock held by syz.3.11077/9014: [ 1634.396776][ T27] [ 1634.399188][ T27] ============================================= [ 1634.399188][ T27] [ 1634.407965][ T27] NMI backtrace for cpu 0 [ 1634.412312][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1634.419641][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1634.429712][ T27] Call Trace: [ 1634.433011][ T27] [ 1634.435953][ T27] dump_stack_lvl+0x188/0x250 [ 1634.440654][ T27] ? show_regs_print_info+0x20/0x20 [ 1634.445887][ T27] ? load_image+0x400/0x400 [ 1634.450446][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 1634.455849][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 1634.460991][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1634.465973][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1634.472160][ T27] ? _printk+0xda/0x130 [ 1634.476556][ T27] ? load_image+0x400/0x400 [ 1634.481105][ T27] ? load_image+0x400/0x400 [ 1634.485642][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1634.491977][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1634.497997][ T27] watchdog+0xe0f/0xe50 [ 1634.502188][ T27] kthread+0x436/0x520 [ 1634.506301][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1634.511393][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1634.515985][ T27] ret_from_fork+0x1f/0x30 [ 1634.520411][ T27] [ 1634.523771][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1634.529436][ C1] NMI backtrace for cpu 1 [ 1634.529449][ C1] CPU: 1 PID: 3853 Comm: dhcpcd Not tainted syzkaller #0 [ 1634.529467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1634.529476][ C1] RIP: 0010:fs_reclaim_acquire+0x1/0x100 [ 1634.529500][ C1] Code: 31 c9 50 e8 21 c1 a8 ff 48 83 c4 08 c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 fe 48 c7 c7 c0 e9 3d 8c e9 51 43 a9 ff 90 55 <53> 65 48 8b 1d e6 30 4e 7e 48 83 c3 2c 48 89 d8 48 c1 e8 03 48 b9 [ 1634.529513][ C1] RSP: 0018:ffffc9000358f868 EFLAGS: 00000206 [ 1634.529528][ C1] RAX: 5b711833cbbf5d00 RBX: ffffc9000358f8a8 RCX: 0000000000000cc0 [ 1634.529540][ C1] RDX: 0000000000000001 RSI: ffffc9000358f8a8 RDI: 0000000000000cc0 [ 1634.529551][ C1] RBP: 0000000000000cc0 R08: ffff88802499044f R09: 1ffff11004932089 [ 1634.529561][ C1] R10: dffffc0000000000 R11: ffffed100493208a R12: 1ffff1100fbdae53 [ 1634.529573][ C1] R13: ffff88801f76b088 R14: ffff888140007000 R15: 0000000000000001 [ 1634.529583][ C1] FS: 00007f5b4926e740(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1634.529606][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1634.529617][ C1] CR2: 00007f96e2834158 CR3: 0000000024e21000 CR4: 00000000003506e0 [ 1634.529633][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1634.529643][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1634.529653][ C1] Call Trace: [ 1634.529659][ C1] [ 1634.529664][ C1] slab_pre_alloc_hook+0x20/0xc0 [ 1634.529681][ C1] ? anon_vma_fork+0xe3/0x500 [ 1634.529695][ C1] kmem_cache_alloc+0x3d/0x290 [ 1634.529711][ C1] anon_vma_fork+0xe3/0x500 [ 1634.529727][ C1] copy_mm+0xa06/0x13f0 [ 1634.529749][ C1] ? copy_signal+0x640/0x640 [ 1634.529764][ C1] ? __init_rwsem+0x11e/0x160 [ 1634.529781][ C1] ? copy_signal+0x537/0x640 [ 1634.529797][ C1] copy_process+0x17eb/0x3e20 [ 1634.529823][ C1] ? __pidfd_prepare+0x140/0x140 [ 1634.529843][ C1] kernel_clone+0x23f/0x990 [ 1634.529860][ C1] ? create_io_thread+0x180/0x180 [ 1634.529883][ C1] __x64_sys_clone+0x19a/0x210 [ 1634.529898][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 1634.529920][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1634.529939][ C1] do_syscall_64+0x4c/0xa0 [ 1634.529953][ C1] ? clear_bhb_loop+0x30/0x80 [ 1634.529967][ C1] ? clear_bhb_loop+0x30/0x80 [ 1634.529983][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1634.529997][ C1] RIP: 0033:0x7f5b49342636 [ 1634.530011][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1634.530023][ C1] RSP: 002b:00007ffd19da1a90 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1634.530038][ C1] RAX: ffffffffffffffda RBX: 00007ffd19da1a98 RCX: 00007f5b49342636 [ 1634.530049][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1634.530059][ C1] RBP: 00007ffd19dc1fe0 R08: 0000000000000000 R09: 0000000000000001 [ 1634.530069][ C1] R10: 00007f5b4926ea10 R11: 0000000000000246 R12: 00007ffd19da1bd0 [ 1634.530079][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 000055e722f25ac0 [ 1634.530095][ C1] [ 1634.531835][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1634.845864][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1634.853053][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1634.863101][ T27] Call Trace: [ 1634.866376][ T27] [ 1634.869303][ T27] dump_stack_lvl+0x188/0x250 [ 1634.874075][ T27] ? show_regs_print_info+0x20/0x20 [ 1634.879277][ T27] ? load_image+0x400/0x400 [ 1634.883815][ T27] panic+0x2e5/0x810 [ 1634.887732][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1634.893453][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1634.897965][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1634.904392][ T27] watchdog+0xe4e/0xe50 [ 1634.908569][ T27] kthread+0x436/0x520 [ 1634.912669][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1634.917802][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1634.922410][ T27] ret_from_fork+0x1f/0x30 [ 1634.926841][ T27] [ 1634.930178][ T27] Kernel Offset: disabled [ 1634.934503][ T27] Rebooting in 86400 seconds..