last executing test programs: 1.9773763s ago: executing program 3 (id=53833): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0xfffffffe}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.704021003s ago: executing program 1 (id=53837): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcac, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000800000000000000060000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, r3, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000400)="b9ff0300607692", 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000202064250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000008000000b70300000000000085000000050000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e00000019a4000000000000f79d425500000000", @ANYRES32=0x1, @ANYBLOB="ff0f00"/20, @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="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"], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.703270583s ago: executing program 3 (id=53839): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, &(0x7f00000007c0), 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f00000000c0), 0xb9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x0, 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000000a4036a39e5d8f0b8c11531"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90724fc60", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000280)="8e7e", 0x2}], 0x1}, 0x20000040) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000001000000002dfff0000000063f20b0063", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x8004, 0x43a1bd76, 0x7, 0xa, 0x7ff, 0x82, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180800000000000085f804c4ae22eb705900000000000000000600000000005f006100"], 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e35", 0x17}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) 1.703067273s ago: executing program 4 (id=53840): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x48, 0xb, 0xfb, 0x0, 0x3a, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x19e2, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x4000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000240)="2a1394", &(0x7f0000000280)=""/190, &(0x7f0000000340)="4de2987bdbcbcf525a8a9941130974d642f86fc151953df0827b5f6ebf1b5e8e61ea2c3e9f8067a622712136eb15fc89c324936affcc0235c9481e5bc440cead4dc95a670d912cffb7778cd72268c17889d43a5edc9ed0", &(0x7f0000000500)="60ccc7dc861293fe764d2d8e494ad0cf5f95115732be7d74f0501c3bbe3f5392eef1ec20fe51cec6a8c4fba4790993fd208a8e99e057ae20f19611990e1923a788fca840770d7991fca88658904a46bc9c907a71910e0b4e01b2b90f6e8f166bcd40ea94bbbfcdbe87a4bc199a63bac5d01ab3cffb556c15d2fef68a3e83b98cc1b7ab499303", 0x4}, 0x38) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x8}, 0x40012100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 1.481887173s ago: executing program 3 (id=53842): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x3}, 0x10208c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x10010c, 0x0, 0x0, 0x9, 0x2, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) r2 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x7b003c2c13f5bc42, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x23, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r5, r6}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000200)="23d0e041ad0df860b5322a14baa3c3a1a24aece14118b99491a8b3667fb76f6417de55b977cf447ea9abab19eed01dbfb7", &(0x7f0000000500)=""/204}, 0x20) close(r1) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0x4) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) 1.478040493s ago: executing program 4 (id=53843): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdir(0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x300, 0x32, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @fwd={0xa}]}, {0x0, [0x61]}}, &(0x7f0000000740)=""/147, 0x33, 0x93, 0x1, 0x80000001}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000008a02008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="13030000540091"], 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 1.351588969s ago: executing program 1 (id=53845): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = perf_event_open(0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.33654849s ago: executing program 4 (id=53846): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0xfffffffe}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 1.32295814s ago: executing program 3 (id=53848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32c}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYBLOB='E'], 0x31) 1.144680618s ago: executing program 4 (id=53850): perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x3}, 0xc, 0x80000001, 0x2, 0x3, 0x10001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000650104000000000095000000000000008e74365d84f39d8730d0a93e59316de38245293459f68934e0bf09011f214d9ab126c8d4a5e866d8cbc49cc1aa22b2aa0a1fdf1f07b537074f94a0094a969a50523a7703aba7768e7e289f9df7e5f24c3001f0fd2b919e1a1089dfdad0fd32dedc917af68b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x10, r3, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000700)}], 0x2}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0x19, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, [@generic={0x1, 0x2, 0xe, 0x2, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcdb0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x3, 0x8, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_fd={0x18, 0x5}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x61, &(0x7f0000000c80)=""/97, 0x40f00, 0x40, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0xe, 0xfffffffe, 0x8}, 0x10, r3, 0xffffffffffffffff, 0x6, &(0x7f0000000d80)=[0xffffffffffffffff], &(0x7f0000000dc0)=[{0x402, 0x5, 0xb, 0x2}, {0x4, 0x2, 0xe, 0x9}, {0x2, 0x0, 0x9, 0x8}, {0x5, 0x5, 0xd, 0x7}, {0x1, 0x4, 0xa, 0xa}, {0x1, 0x2, 0x3, 0x4}], 0x10, 0x7}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000f00)=r6) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x25000000, 0x61, 0x11, 0x9c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e00000005000000080000000000000002a00000", @ANYRES32, @ANYBLOB="030c00"/20, @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="0200000001000000020000000900000000000000282b9a92a92de69f6f7d2bcfdd946229d777def7ff7ccf4f4555a19397a88ade042ba74e31021798738733b8974feaab937ba1", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8983, &(0x7f0000000080)) recvmsg$kcm(r10, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x100) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f0000000600)=""/66, 0x42}], 0x3, &(0x7f00000006c0)=""/162, 0xa2}, 0x2020) r11 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffc0, 0x2}, 0x90020, 0x1, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r3, 0x4) 1.143807458s ago: executing program 3 (id=53861): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000020000000000000000008500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff1703000008000000b70400000000000085"], 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000001000000900000004058823809aefb66141f009d5e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) 1.068505952s ago: executing program 0 (id=53851): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x7b4e000391a1b158) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208001800", 0x2c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344", 0xe}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r4, 0xb702, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2e7b, '\x00', r6, r0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x40) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000340)=r7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 863.137221ms ago: executing program 0 (id=53852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000020000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000002d7300007470527ccc606787680000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x25) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x40, 0x6f, 0x2, 0x0, 0x4, 0x1000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x50c4, 0x1, @perf_config_ext={0x0, 0x7}, 0x14000, 0x8000000000000000, 0x8001, 0xbd31418b5ac51ab0, 0x3, 0xf3, 0xfff, 0x0, 0x40, 0x0, 0x7fb}, r2, 0x9, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={&(0x7f0000000a80)=@hci={0x1f, 0x300, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000013c0)="62031400d70000000010122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}, {&(0x7f0000002380)="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", 0xf4d}], 0x2}, 0x4041) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240), 0x4) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="65f19977ac", 0x5}], 0x1}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 685.384439ms ago: executing program 2 (id=53857): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYBLOB='E'], 0x31) 621.848572ms ago: executing program 2 (id=53858): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdir(0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x300, 0x32, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @fwd={0xa}]}, {0x0, [0x61]}}, &(0x7f0000000740)=""/147, 0x33, 0x93, 0x1, 0x80000001}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000008a02008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085000000860000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="13030000540091"], 0xfe33) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 574.867234ms ago: executing program 2 (id=53859): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640a", 0x3}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000f000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) setsockopt$sock_attach_bpf(r1, 0x6, 0x11, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000730000000000"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 401.257082ms ago: executing program 1 (id=53860): socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x7, 0x2, 0x7}, {0x5, 0x4, 0x3}]}]}, {0x0, [0x30, 0x61, 0x0, 0x61, 0x5f, 0x2e, 0x5f, 0x61, 0x5f]}}, &(0x7f0000001fc0)=""/142, 0x47, 0x8e, 0x1}, 0x28) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r2 = socket$kcm(0x10, 0xd, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000240)="2a1394", &(0x7f0000000280)=""/190, &(0x7f0000000340)="4de2987bdbcbcf525a8a9941130974d642f86fc151953df0827b5f6ebf1b5e8e61ea2c3e9f8067a622712136eb15fc89c324936affcc0235c9481e5bc440cead4dc95a670d912cffb7778cd72268c17889d43a5edc9ed03964e92cbd919fdb9d353738", &(0x7f0000000500)="60ccc7dc861293fe764d2d8e494ad0cf5f95115732be7d74f0501c3bbe3f5392eef1ec20fe51cec6a8c4fba4790993fd208a8e99e057ae20f19611990e1923a788fca840770d7991fca88658904a46bc9c907a71910e0b4e01b2b90f6e8f166bcd40ea94bbbfcdbe87a4bc199a63bac5d01ab3cffb556c15d2fef68a3e83b98cc1b7ab499303", 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000a08500000043"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, 0x0, 0x40012100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x4, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000440), 0x2, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r3, @ANYRES64=r0, @ANYRES8=r7, @ANYRESOCT=0x0], 0x31) r8 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 356.768264ms ago: executing program 2 (id=53862): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x101000, 0x6, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0xfffffffe}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 355.879004ms ago: executing program 0 (id=53863): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x48, 0xb, 0xfb, 0x0, 0x3a, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x19e2, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x4000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000240)="2a1394", &(0x7f0000000280)=""/190, &(0x7f0000000340)="4de2987bdbcbcf525a8a9941130974d642f86fc151953df0827b5f6ebf1b5e8e61ea2c3e9f8067a622712136eb15fc89c324936affcc0235c9481e5bc440cead4dc95a670d912cffb7778cd72268c17889d43a5edc9ed0", &(0x7f0000000500)="60ccc7dc861293fe764d2d8e494ad0cf5f95115732be7d74f0501c3bbe3f5392eef1ec20fe51cec6a8c4fba4790993fd208a8e99e057ae20f19611990e1923a788fca840770d7991fca88658904a46bc9c907a71910e0b4e01b2b90f6e8f166bcd40ea94bbbfcdbe87a4bc199a63bac5d01ab3cffb556c15d2fef68a3e83b98cc1b7ab499303", 0x4}, 0x38) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x8}, 0x40012100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 298.209317ms ago: executing program 1 (id=53864): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32c}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYBLOB='E'], 0x31) 261.100028ms ago: executing program 0 (id=53865): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32c}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYBLOB='E'], 0x31) 220.49808ms ago: executing program 4 (id=53866): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x3b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000d0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x48, 0xb, 0xfb, 0x0, 0x3a, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x19e2, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x4000, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000240)="2a1394", &(0x7f0000000280)=""/190, &(0x7f0000000340)="4de2987bdbcbcf525a8a9941130974d642f86fc151953df0827b5f6ebf1b5e8e61ea2c3e9f8067a622712136eb15fc89c324936affcc0235c9481e5bc440cead4dc95a670d912cffb7778cd72268c17889d43a5edc9ed0", &(0x7f0000000500)="60ccc7dc861293fe764d2d8e494ad0cf5f95115732be7d74f0501c3bbe3f5392eef1ec20fe51cec6a8c4fba4790993fd208a8e99e057ae20f19611990e1923a788fca840770d7991fca88658904a46bc9c907a71910e0b4e01b2b90f6e8f166bcd40ea94bbbfcdbe87a4bc199a63bac5d01ab3cffb556c15d2fef68a3e83b98cc1b7ab499303", 0x4}, 0x38) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x8}, 0x40012100) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='./\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) 210.654121ms ago: executing program 3 (id=53867): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) r0 = syz_clone(0x10004000, &(0x7f00000001c0)="7c773644ac78e147996242c6084035ffaca184d99b01b256db8ff0a920", 0x1d, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000"], 0xfdef) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f00000000c0)='./file0\x00', r6}, 0x18) r7 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x5, 0x0, 0x7602, 0x2, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7f}, r7, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x8001, @private2, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="270300ff8dcfdc268a", 0x9}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) 195.187131ms ago: executing program 1 (id=53868): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, &(0x7f00000007c0), 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r2, 0x29, 0x15, &(0x7f00000000c0), 0xb9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x0, 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000000a4036a39e5d8f0b8c11531"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90724fc60", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000280)="8e7e", 0x2}], 0x1}, 0x20000040) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000001000000002dfff0000000063f20b0063", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x8004, 0x43a1bd76, 0x7, 0xa, 0x7ff, 0x82, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180800000000000085f804c4ae22eb705900000000000000000600000000005f006100"], 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000003600f7ffffff80698c6394090124fc602f6e35", 0x17}], 0x1, 0x0, 0x0, 0x39c}, 0x40000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) 130.876914ms ago: executing program 0 (id=53869): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c46, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x30, 0x61, 0x5f]}}, 0x0, 0x1d, 0x0, 0x0, 0xa}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000800)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xb, 0x1f, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae7b, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @tail_call, @alu={0x4, 0x1, 0x4, 0x2, 0x0, 0x20, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d80)='syzkaller\x00', 0x5, 0xa5, &(0x7f0000000dc0)=""/165, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x4, 0x6, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001040)=[0xffffffffffffffff, r6], 0x0, 0x10, 0x10001}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x13, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4c5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000240)='syzkaller\x00', 0xfffffff1, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0xa, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[r3, r4, r1, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x1, 0x1, 0xc, 0xc}, {0x1, 0x3, 0xb}, {0x4, 0x1, 0x1}, {0x3, 0x2, 0xa, 0x5}, {0x0, 0x2, 0xd, 0x9}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x1b, 0xe, &(0x7f0000000700)=ANY=[], &(0x7f0000001340)='syzkaller\x00'}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f0000000280)=""/209, 0xd1}], 0x5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000380fc0b09000300", 0x33fe0}], 0x1}, 0x0) 129.816304ms ago: executing program 2 (id=53870): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32c}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYBLOB='E'], 0x31) 91.082526ms ago: executing program 4 (id=53871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = perf_event_open(0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 26.826919ms ago: executing program 1 (id=53872): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32c}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_freezer_state(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7538e475dd6317cebb03c23c00fe80000000000000875a65969ff57b0000040000000000000004"], 0xfe1b) openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:', @ANYBLOB='E'], 0x31) 22.962479ms ago: executing program 0 (id=53873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40002161) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) r3 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"}) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000053500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad3580613c364ecb035c7ad4453d90bad0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909b5adb82615224c3cbcb78243d5c3842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083bef6fe849f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d0500262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc100000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000200)=r8, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) 0s ago: executing program 2 (id=53874): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = perf_event_open(0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): [ 2693.737982][T20701] ieee80211_register_hw+0x2aa1/0x3af0 [ 2693.743495][T20701] ? ieee80211_tasklet_handler+0x20/0x20 [ 2693.749171][T20701] ? rcu_is_watching+0x11/0xa0 [ 2693.753963][T20701] ? memset+0x1e/0x40 [ 2693.757978][T20701] ? hrtimer_init+0x10c/0x220 [ 2693.762717][T20701] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2693.768496][T20701] hwsim_new_radio_nl+0xa6f/0xc40 [ 2693.773564][T20701] genl_rcv_msg+0xcea/0xf90 [ 2693.778112][T20701] ? genl_bind+0x380/0x380 [ 2693.782569][T20701] ? verify_lock_unused+0x140/0x140 [ 2693.787811][T20701] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2693.793410][T20701] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2693.800069][T20701] ? perf_trace_lock_acquire+0x11/0x3e0 [ 2693.805761][T20701] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2693.812318][T20701] netlink_rcv_skb+0x1f5/0x440 [ 2693.817122][T20701] ? genl_bind+0x380/0x380 [ 2693.821583][T20701] ? netlink_ack+0xb50/0xb50 [ 2693.826224][T20701] ? __lock_acquire+0x7d10/0x7d10 [ 2693.831290][T20701] ? down_read+0x1aa/0x2e0 [ 2693.835749][T20701] genl_rcv+0x24/0x40 [ 2693.839752][T20701] netlink_unicast+0x774/0x920 [ 2693.844549][T20701] netlink_sendmsg+0x8ba/0xbe0 [ 2693.849395][T20701] ? netlink_getsockopt+0x570/0x570 [ 2693.854620][T20701] ? aa_sock_msg_perm+0x94/0x150 [ 2693.859587][T20701] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2693.864909][T20701] ? security_socket_sendmsg+0x7c/0xa0 [ 2693.870396][T20701] ? netlink_getsockopt+0x570/0x570 [ 2693.875625][T20701] ____sys_sendmsg+0x5b7/0x8f0 [ 2693.880431][T20701] ? __sys_sendmsg_sock+0x30/0x30 [ 2693.885496][T20701] ? import_iovec+0x6f/0xa0 [ 2693.890053][T20701] ___sys_sendmsg+0x236/0x2e0 [ 2693.894804][T20701] ? __sys_sendmsg+0x2a0/0x2a0 [ 2693.899655][T20701] __se_sys_sendmsg+0x1af/0x290 [ 2693.904638][T20701] ? __x64_sys_sendmsg+0x80/0x80 [ 2693.909629][T20701] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2693.915571][T20701] do_syscall_64+0x4c/0xa0 [ 2693.920219][T20701] ? clear_bhb_loop+0x30/0x80 [ 2693.924927][T20701] ? clear_bhb_loop+0x30/0x80 [ 2693.929741][T20701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2693.935673][T20701] RIP: 0033:0x7f73dc61ee59 [ 2693.940112][T20701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2693.959740][T20701] RSP: 002b:00007f73da878028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2693.968358][T20701] RAX: ffffffffffffffda RBX: 00007f73dc897fa0 RCX: 00007f73dc61ee59 [ 2693.976372][T20701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2693.984379][T20701] RBP: 00007f73dc6b4d6f R08: 0000000000000000 R09: 0000000000000000 [ 2693.992372][T20701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2694.000377][T20701] R13: 00007f73dc898038 R14: 00007f73dc897fa0 R15: 00007fffee5602b8 [ 2694.008430][T20701] [ 2694.162395][T20714] device sit0 entered promiscuous mode [ 2694.359862][T20722] netlink: 'syz.2.51184': attribute type 2 has an invalid length. [ 2694.383322][T20721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51186'. [ 2694.418019][T20724] netlink: 'syz.1.51188': attribute type 20 has an invalid length. [ 2694.630192][T20734] netlink: 'syz.4.51191': attribute type 12 has an invalid length. [ 2694.678623][T20734] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.51191'. [ 2694.724787][T20731] netlink: 'syz.2.51190': attribute type 1 has an invalid length. [ 2694.739708][T20731] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.51190'. [ 2695.096066][T20740] netlink: 'syz.1.51194': attribute type 4 has an invalid length. [ 2695.230729][T20740] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.51194'. [ 2695.359945][T20746] netlink: 'syz.4.51193': attribute type 9 has an invalid length. [ 2695.463292][T20753] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2695.507753][T20753] CPU: 0 PID: 20753 Comm: syz.3.51197 Not tainted syzkaller #0 [ 2695.515355][T20753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2695.525435][T20753] Call Trace: [ 2695.528745][T20753] [ 2695.531699][T20753] dump_stack_lvl+0x188/0x250 [ 2695.536494][T20753] ? show_regs_print_info+0x20/0x20 [ 2695.541730][T20753] ? load_image+0x400/0x400 [ 2695.546284][T20753] sysfs_warn_dup+0x8a/0xa0 [ 2695.550917][T20753] sysfs_do_create_link_sd+0xc0/0x110 [ 2695.556352][T20753] device_add+0x7f6/0x1000 [ 2695.560820][T20753] wiphy_register+0x1e81/0x2c30 [ 2695.565730][T20753] ? cfg80211_event_work+0x40/0x40 [ 2695.570870][T20753] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2695.577121][T20753] ieee80211_register_hw+0x2aa1/0x3af0 [ 2695.582631][T20753] ? ieee80211_tasklet_handler+0x20/0x20 [ 2695.588304][T20753] ? rcu_is_watching+0x11/0xa0 [ 2695.593096][T20753] ? memset+0x1e/0x40 [ 2695.597131][T20753] ? hrtimer_init+0x10c/0x220 [ 2695.601860][T20753] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2695.607645][T20753] hwsim_new_radio_nl+0xa6f/0xc40 [ 2695.612723][T20753] genl_rcv_msg+0xcea/0xf90 [ 2695.617265][T20753] ? genl_bind+0x380/0x380 [ 2695.621724][T20753] ? perf_trace_lock+0xe4/0x390 [ 2695.626611][T20753] ? verify_lock_unused+0x140/0x140 [ 2695.631956][T20753] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2695.637645][T20753] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2695.644264][T20753] ? perf_trace_lock+0xe4/0x390 [ 2695.649149][T20753] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2695.655694][T20753] netlink_rcv_skb+0x1f5/0x440 [ 2695.660484][T20753] ? genl_bind+0x380/0x380 [ 2695.664927][T20753] ? netlink_ack+0xb50/0xb50 [ 2695.669554][T20753] ? __lock_acquire+0x7d10/0x7d10 [ 2695.674619][T20753] ? down_read+0x1aa/0x2e0 [ 2695.679065][T20753] genl_rcv+0x24/0x40 [ 2695.683073][T20753] netlink_unicast+0x774/0x920 [ 2695.687870][T20753] netlink_sendmsg+0x8ba/0xbe0 [ 2695.692665][T20753] ? netlink_getsockopt+0x570/0x570 [ 2695.697887][T20753] ? aa_sock_msg_perm+0x94/0x150 [ 2695.702878][T20753] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2695.708189][T20753] ? security_socket_sendmsg+0x7c/0xa0 [ 2695.713678][T20753] ? netlink_getsockopt+0x570/0x570 [ 2695.718920][T20753] ____sys_sendmsg+0x5b7/0x8f0 [ 2695.723728][T20753] ? __sys_sendmsg_sock+0x30/0x30 [ 2695.728797][T20753] ? import_iovec+0x6f/0xa0 [ 2695.733333][T20753] ___sys_sendmsg+0x236/0x2e0 [ 2695.738075][T20753] ? __sys_sendmsg+0x2a0/0x2a0 [ 2695.742903][T20753] ? trace_event_raw_event_lock+0x270/0x270 [ 2695.748864][T20753] __se_sys_sendmsg+0x1af/0x290 [ 2695.753753][T20753] ? __x64_sys_sendmsg+0x80/0x80 [ 2695.758718][T20753] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2695.764738][T20753] ? lockdep_hardirqs_on+0x94/0x140 [ 2695.769963][T20753] do_syscall_64+0x4c/0xa0 [ 2695.774404][T20753] ? clear_bhb_loop+0x30/0x80 [ 2695.779109][T20753] ? clear_bhb_loop+0x30/0x80 [ 2695.783818][T20753] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2695.789736][T20753] RIP: 0033:0x7f7613b35e59 [ 2695.794181][T20753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2695.813817][T20753] RSP: 002b:00007f7611d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2695.822259][T20753] RAX: ffffffffffffffda RBX: 00007f7613daefa0 RCX: 00007f7613b35e59 [ 2695.830252][T20753] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2695.838357][T20753] RBP: 00007f7613bcbd6f R08: 0000000000000000 R09: 0000000000000000 [ 2695.846441][T20753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2695.854433][T20753] R13: 00007f7613daf038 R14: 00007f7613daefa0 R15: 00007ffc43fa9fe8 [ 2695.862453][T20753] [ 2696.284641][T20773] netlink: 'syz.0.51204': attribute type 2 has an invalid length. [ 2696.321162][T20773] netlink: 'syz.0.51204': attribute type 1 has an invalid length. [ 2697.851632][T20826] __nla_validate_parse: 5 callbacks suppressed [ 2697.851669][T20826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51223'. [ 2698.322550][T20837] validate_nla: 4 callbacks suppressed [ 2698.322618][T20837] netlink: 'syz.4.51226': attribute type 4 has an invalid length. [ 2698.569829][T20837] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.51226'. [ 2698.831148][T20846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51239'. [ 2699.432847][T20866] netlink: 'syz.1.51236': attribute type 21 has an invalid length. [ 2699.462694][T20866] netlink: 120 bytes leftover after parsing attributes in process `syz.1.51236'. [ 2699.501515][T20866] netlink: 9 bytes leftover after parsing attributes in process `syz.1.51236'. [ 2700.466835][T20886] netlink: 'syz.1.51243': attribute type 4 has an invalid length. [ 2700.474828][T20886] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.51243'. [ 2700.584975][T20892] netlink: set zone limit has 8 unknown bytes [ 2700.663555][T20898] netlink: 'syz.3.51247': attribute type 21 has an invalid length. [ 2700.717379][T20898] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.51247'. [ 2700.746445][T20900] netlink: 'syz.3.51247': attribute type 2 has an invalid length. [ 2700.778413][T20900] netlink: 'syz.3.51247': attribute type 8 has an invalid length. [ 2700.795580][T20900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51247'. [ 2700.840732][T20905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51252'. [ 2700.866911][T20898] netlink: 'syz.3.51247': attribute type 2 has an invalid length. [ 2700.875376][T20898] netlink: 'syz.3.51247': attribute type 8 has an invalid length. [ 2700.908129][T20898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51247'. [ 2701.859378][T20931] netlink: set zone limit has 8 unknown bytes [ 2702.835125][T20956] netlink: 'syz.4.51268': attribute type 21 has an invalid length. [ 2702.936699][T20956] __nla_validate_parse: 2 callbacks suppressed [ 2702.936733][T20956] netlink: 120 bytes leftover after parsing attributes in process `syz.4.51268'. [ 2703.050370][T20956] netlink: 9 bytes leftover after parsing attributes in process `syz.4.51268'. [ 2703.300960][T20964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51270'. [ 2703.588204][T20976] netlink: set zone limit has 8 unknown bytes [ 2703.701318][T20978] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2704.000174][T20989] device sit0 entered promiscuous mode [ 2704.283410][T20998] netlink: 'syz.2.51285': attribute type 21 has an invalid length. [ 2704.301100][T21001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.51286'. [ 2704.317950][T20998] netlink: 120 bytes leftover after parsing attributes in process `syz.2.51285'. [ 2704.335218][T20998] netlink: 9 bytes leftover after parsing attributes in process `syz.2.51285'. [ 2704.422998][T21009] netlink: set zone limit has 8 unknown bytes [ 2704.445518][T21007] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.51289'. [ 2704.682913][T21023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51295'. [ 2704.744068][T21026] netlink: 14 bytes leftover after parsing attributes in process `syz.0.51296'. [ 2705.142169][T21033] netlink: 'syz.3.51298': attribute type 20 has an invalid length. [ 2705.429280][T21049] netlink: 'syz.3.51302': attribute type 10 has an invalid length. [ 2705.517379][T21051] netlink: 'syz.0.51303': attribute type 21 has an invalid length. [ 2705.556299][T21051] netlink: 120 bytes leftover after parsing attributes in process `syz.0.51303'. [ 2705.795270][T21060] netlink: 'syz.4.51305': attribute type 3 has an invalid length. [ 2705.904325][T21059] netlink: set zone limit has 8 unknown bytes [ 2707.002747][T21090] netlink: 'syz.4.51314': attribute type 20 has an invalid length. [ 2707.303187][T21105] netlink: 'syz.2.51318': attribute type 7 has an invalid length. [ 2707.329486][T21108] netlink: set zone limit has 8 unknown bytes [ 2707.346287][T21106] netlink: 'syz.3.51319': attribute type 21 has an invalid length. [ 2707.432762][T21115] device sit0 entered promiscuous mode [ 2707.697210][T21117] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2707.839338][T21126] netlink: 'syz.2.51335': attribute type 21 has an invalid length. [ 2708.644195][T21151] __nla_validate_parse: 5 callbacks suppressed [ 2708.644214][T21151] netlink: 14 bytes leftover after parsing attributes in process `syz.2.51331'. [ 2708.671675][T21156] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.51330'. [ 2709.296309][T21169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51334'. [ 2710.180615][T21185] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2710.949591][T21208] netlink: 14 bytes leftover after parsing attributes in process `syz.1.51349'. [ 2711.600590][T21221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51352'. [ 2711.687048][T21222] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51355'. [ 2713.071424][T21246] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2713.099563][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.105969][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.587280][T21258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.51364'. [ 2713.824482][T21267] netlink: 'syz.2.51367': attribute type 39 has an invalid length. [ 2714.050979][T21273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51369'. [ 2715.255374][T21306] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.51379'. [ 2716.260272][T21313] netlink: 14 bytes leftover after parsing attributes in process `syz.4.51381'. [ 2716.627388][T21318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51384'. [ 2717.600104][T21346] netlink: 'syz.4.51392': attribute type 39 has an invalid length. [ 2718.155160][T21350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51393'. [ 2718.361258][T21363] netlink: 'syz.2.51398': attribute type 21 has an invalid length. [ 2718.389279][T21363] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.51398'. [ 2718.716175][T21376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51400'. [ 2719.006117][T21385] netlink: 'syz.0.51403': attribute type 7 has an invalid length. [ 2719.075760][T21385] device sit0 entered promiscuous mode [ 2720.025931][T21406] netlink: 'syz.1.51411': attribute type 10 has an invalid length. [ 2720.199676][T21414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51414'. [ 2720.448664][T21420] netlink: 'syz.2.51417': attribute type 3 has an invalid length. [ 2720.477817][T21420] netlink: 7874 bytes leftover after parsing attributes in process `syz.2.51417'. [ 2720.538952][T21424] netlink: 'syz.4.51419': attribute type 10 has an invalid length. [ 2720.558557][T21424] netlink: 55 bytes leftover after parsing attributes in process `syz.4.51419'. [ 2720.828117][T21433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51422'. [ 2721.620457][T21446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51427'. [ 2721.985426][T21459] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51440'. [ 2722.513331][T21471] device aaaaaaaaaaaaaaa entered promiscuous mode [ 2722.610188][T21463] netlink: 'syz.0.51430': attribute type 39 has an invalid length. [ 2722.776378][T21482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51434'. [ 2723.856037][T21518] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51444'. [ 2724.064124][T21527] netlink: 'syz.3.51448': attribute type 29 has an invalid length. [ 2724.113433][T21527] netlink: 'syz.3.51448': attribute type 29 has an invalid length. [ 2724.158552][T21529] netlink: 'syz.3.51448': attribute type 29 has an invalid length. [ 2724.219589][T21527] netlink: 182 bytes leftover after parsing attributes in process `syz.3.51448'. [ 2724.482826][T21536] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.51460'. [ 2725.734663][T21564] __nla_validate_parse: 1 callbacks suppressed [ 2725.734714][T21564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51457'. [ 2726.283934][T21572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51472'. [ 2726.336353][T21575] netlink: 'syz.4.51461': attribute type 29 has an invalid length. [ 2726.459261][T21575] netlink: 'syz.4.51461': attribute type 29 has an invalid length. [ 2726.588091][T21583] netlink: 'syz.0.51462': attribute type 21 has an invalid length. [ 2726.624676][T21583] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.51462'. [ 2726.710317][T21578] netlink: 'syz.4.51461': attribute type 29 has an invalid length. [ 2726.758961][T21585] mac80211_hwsim hwsim270 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2726.914080][T21596] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.51467'. [ 2727.172347][T21602] netlink: 'syz.0.51468': attribute type 10 has an invalid length. [ 2727.187030][T21602] netlink: 55 bytes leftover after parsing attributes in process `syz.0.51468'. [ 2727.216817][T21604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51470'. [ 2727.538594][T21616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51475'. [ 2727.644939][T21619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51486'. [ 2728.325262][T21636] netlink: 'syz.1.51481': attribute type 29 has an invalid length. [ 2728.392696][T21636] netlink: 'syz.1.51481': attribute type 29 has an invalid length. [ 2728.453880][T21636] netlink: 182 bytes leftover after parsing attributes in process `syz.1.51481'. [ 2728.664858][T21643] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.51482'. [ 2729.265112][T21655] validate_nla: 1 callbacks suppressed [ 2729.265144][T21655] netlink: 'syz.3.51484': attribute type 10 has an invalid length. [ 2729.434571][T21659] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2729.864689][T21678] netlink: set zone limit has 8 unknown bytes [ 2729.891338][T21684] netlink: 'syz.3.51495': attribute type 10 has an invalid length. [ 2729.942458][T21684] netlink: 'syz.3.51495': attribute type 10 has an invalid length. [ 2730.065581][T21690] netlink: 'syz.1.51498': attribute type 10 has an invalid length. [ 2730.096272][T21691] delete_channel: no stack [ 2730.128576][T21691] delete_channel: no stack [ 2730.297908][T21696] netlink: 'syz.3.51500': attribute type 21 has an invalid length. [ 2730.373805][T21699] netlink: 'syz.1.51502': attribute type 10 has an invalid length. [ 2730.757298][T21714] __nla_validate_parse: 7 callbacks suppressed [ 2730.757334][T21714] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51505'. [ 2731.080046][T21720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51506'. [ 2731.493080][T21732] mac80211_hwsim hwsim260 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2731.782241][T21740] delete_channel: no stack [ 2731.805445][T21740] delete_channel: no stack [ 2731.928355][T21745] netlink: 'syz.2.51515': attribute type 10 has an invalid length. [ 2732.289362][T21754] netlink: 15730 bytes leftover after parsing attributes in process `syz.3.51526'. [ 2733.140221][T21764] netlink: 144 bytes leftover after parsing attributes in process `syz.2.51528'. [ 2733.187006][T21763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51518'. [ 2733.560823][T21777] netlink: 'syz.0.51520': attribute type 29 has an invalid length. [ 2733.588401][T21777] netlink: 'syz.0.51520': attribute type 29 has an invalid length. [ 2733.612320][T21783] netlink: 'syz.0.51520': attribute type 29 has an invalid length. [ 2733.701125][T21784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51522'. [ 2733.754329][T21784] device team0 entered promiscuous mode [ 2733.803954][T21784] device team_slave_1 entered promiscuous mode [ 2733.818466][T21784] device virt_wifi0 entered promiscuous mode [ 2733.849324][T21784] device hsr_slave_0 entered promiscuous mode [ 2733.908862][T21784] device geneve1 entered promiscuous mode [ 2733.936471][T21784] device veth1_to_bond entered promiscuous mode [ 2733.971397][T21784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2734.088501][T21783] netlink: 182 bytes leftover after parsing attributes in process `syz.0.51520'. [ 2734.260420][T21789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51524'. [ 2734.536692][T21793] delete_channel: no stack [ 2734.559308][T21793] delete_channel: no stack [ 2734.759160][T21799] validate_nla: 1 callbacks suppressed [ 2734.759205][T21799] netlink: 'syz.1.51530': attribute type 10 has an invalid length. [ 2734.857483][T21799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.51530'. [ 2734.928147][T21799] netlink: 'syz.1.51530': attribute type 10 has an invalid length. [ 2734.961610][T21799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.51530'. [ 2735.326496][T21814] netlink: 'syz.2.51535': attribute type 11 has an invalid length. [ 2735.927035][T21835] netlink: 'syz.0.51541': attribute type 10 has an invalid length. [ 2735.940642][T21835] __nla_validate_parse: 4 callbacks suppressed [ 2735.940655][T21835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51541'. [ 2735.978920][T21837] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51544'. [ 2736.080532][T21844] netlink: 'syz.1.51545': attribute type 1 has an invalid length. [ 2736.110436][T21846] netlink: 'syz.2.51546': attribute type 10 has an invalid length. [ 2736.123142][T21844] netlink: 'syz.1.51545': attribute type 3 has an invalid length. [ 2736.139092][T21846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51546'. [ 2736.154716][T21844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51545'. [ 2736.170607][T21846] netlink: 'syz.2.51546': attribute type 10 has an invalid length. [ 2736.206067][T21846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51546'. [ 2736.404878][T21852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51548'. [ 2736.542358][T21851] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51547'. [ 2736.646156][T21856] netlink: 'syz.3.51549': attribute type 21 has an invalid length. [ 2736.657650][T21856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.51549'. [ 2736.803854][T21867] netlink: 'syz.2.51563': attribute type 27 has an invalid length. [ 2736.827057][T21867] netlink: 164 bytes leftover after parsing attributes in process `syz.2.51563'. [ 2736.904043][T21871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51555'. [ 2740.274875][T21936] validate_nla: 2 callbacks suppressed [ 2740.274891][T21936] netlink: 'syz.2.51575': attribute type 21 has an invalid length. [ 2741.225034][T21972] __nla_validate_parse: 10 callbacks suppressed [ 2741.225068][T21972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51585'. [ 2741.305809][T21976] delete_channel: no stack [ 2741.317473][T21976] delete_channel: no stack [ 2741.681628][T21991] netlink: 'syz.2.51588': attribute type 10 has an invalid length. [ 2741.725603][T21991] netlink: 2 bytes leftover after parsing attributes in process `syz.2.51588'. [ 2741.781608][T21990] netlink: 'syz.4.51593': attribute type 21 has an invalid length. [ 2741.799058][T21990] netlink: 152 bytes leftover after parsing attributes in process `syz.4.51593'. [ 2742.083930][T21995] sctp: [Deprecated]: syz.1.51595 (pid 21995) Use of int in max_burst socket option deprecated. [ 2742.083930][T21995] Use struct sctp_assoc_value instead [ 2742.125016][T22001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51604'. [ 2742.149782][T21998] netlink: 'syz.2.51596': attribute type 4 has an invalid length. [ 2742.220224][T21998] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.51596'. [ 2742.572860][T22017] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51597'. [ 2743.388177][T22023] netlink: 'syz.3.51602': attribute type 11 has an invalid length. [ 2743.400204][T22027] netlink: 'syz.4.51603': attribute type 1 has an invalid length. [ 2743.414667][T22023] netlink: 168 bytes leftover after parsing attributes in process `syz.3.51602'. [ 2743.425910][T22027] netlink: 'syz.4.51603': attribute type 3 has an invalid length. [ 2743.496810][T22027] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51603'. [ 2743.658996][T22029] device syzkaller0 entered promiscuous mode [ 2744.073022][T22046] netlink: 'syz.3.51608': attribute type 7 has an invalid length. [ 2744.338348][T22046] device sit0 left promiscuous mode [ 2744.438254][T22053] device sit0 entered promiscuous mode [ 2744.594630][T22058] sctp: [Deprecated]: syz.4.51612 (pid 22058) Use of int in max_burst socket option deprecated. [ 2744.594630][T22058] Use struct sctp_assoc_value instead [ 2744.706741][T22064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51615'. [ 2744.737766][T22066] netlink: 'syz.1.51613': attribute type 10 has an invalid length. [ 2744.747608][T22066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.51613'. [ 2744.807291][T22066] device team0 entered promiscuous mode [ 2744.812917][T22066] device team_slave_1 entered promiscuous mode [ 2744.833090][T22066] device geneve1 entered promiscuous mode [ 2744.901958][T22066] device hsr_slave_0 entered promiscuous mode [ 2744.965349][T22066] device veth1_to_bond entered promiscuous mode [ 2745.009673][T22066] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2745.061872][T22076] netlink: 'syz.3.51617': attribute type 27 has an invalid length. [ 2745.207267][T22079] netlink: 'syz.0.51618': attribute type 11 has an invalid length. [ 2745.769078][T22096] delete_channel: no stack [ 2745.775017][T22096] delete_channel: no stack [ 2746.147100][T22111] netlink: 'syz.0.51638': attribute type 10 has an invalid length. [ 2746.679945][T22120] netlink: 'syz.0.51631': attribute type 27 has an invalid length. [ 2746.689577][T22118] __nla_validate_parse: 5 callbacks suppressed [ 2746.689610][T22118] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.51632'. [ 2746.713658][T22120] netlink: 164 bytes leftover after parsing attributes in process `syz.0.51631'. [ 2746.955637][T22128] netlink: 'syz.3.51636': attribute type 4 has an invalid length. [ 2747.004548][T22128] netlink: 152 bytes leftover after parsing attributes in process `syz.3.51636'. [ 2747.063890][T22134] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51633'. [ 2747.398140][T22129] device syzkaller0 entered promiscuous mode [ 2747.443000][T22140] delete_channel: no stack [ 2747.452507][T22132] tap1: tun_chr_ioctl cmd 35111 [ 2747.467593][T22140] delete_channel: no stack [ 2748.152677][T22159] netlink: 'syz.1.51645': attribute type 27 has an invalid length. [ 2748.239042][T22158] netlink: 'syz.3.51647': attribute type 10 has an invalid length. [ 2748.261861][T22158] netlink: 2 bytes leftover after parsing attributes in process `syz.3.51647'. [ 2748.287072][T22159] netlink: 164 bytes leftover after parsing attributes in process `syz.1.51645'. [ 2748.375252][T22161] netlink: 'syz.2.51649': attribute type 1 has an invalid length. [ 2748.446055][T22161] netlink: 'syz.2.51649': attribute type 3 has an invalid length. [ 2748.467687][T22163] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.51648'. [ 2748.479096][T22161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51649'. [ 2748.607269][T22169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51651'. [ 2748.635833][T22172] delete_channel: no stack [ 2748.654483][T22172] delete_channel: no stack [ 2748.980617][T22182] netlink: 'syz.0.51655': attribute type 21 has an invalid length. [ 2749.043521][T22182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.51655'. [ 2749.744439][T22197] netlink: 'syz.4.51659': attribute type 10 has an invalid length. [ 2750.120099][T22208] netlink: 'syz.4.51661': attribute type 27 has an invalid length. [ 2750.544587][T22224] delete_channel: no stack [ 2750.549773][T22224] delete_channel: no stack [ 2750.673226][T22232] sctp: [Deprecated]: syz.0.51671 (pid 22232) Use of int in max_burst socket option deprecated. [ 2750.673226][T22232] Use struct sctp_assoc_value instead [ 2750.999240][T22241] netlink: 'syz.3.51678': attribute type 11 has an invalid length. [ 2753.663439][T22251] __nla_validate_parse: 9 callbacks suppressed [ 2753.663463][T22251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51681'. [ 2753.718197][T22253] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.51680'. [ 2754.083293][T22270] validate_nla: 3 callbacks suppressed [ 2754.083326][T22270] netlink: 'syz.4.51693': attribute type 10 has an invalid length. [ 2754.114524][T22270] netlink: 168 bytes leftover after parsing attributes in process `syz.4.51693'. [ 2754.156741][T22270] netlink: 'syz.4.51693': attribute type 10 has an invalid length. [ 2754.228074][T22276] netlink: 'syz.4.51695': attribute type 10 has an invalid length. [ 2754.283856][T22278] device syzkaller0 entered promiscuous mode [ 2754.291350][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2754.307956][T22280] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51696'. [ 2754.331294][T22282] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51698'. [ 2754.375235][T22285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51709'. [ 2754.640249][T22298] netlink: 'syz.3.51702': attribute type 21 has an invalid length. [ 2754.881140][T22307] netlink: 'syz.3.51706': attribute type 9 has an invalid length. [ 2754.890033][T22307] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.51706'. [ 2755.213621][T22322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51711'. [ 2755.322734][T22326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51723'. [ 2755.388505][T22330] netlink: 'syz.4.51714': attribute type 7 has an invalid length. [ 2755.406609][T22330] device sit0 left promiscuous mode [ 2755.483228][T22333] device sit0 entered promiscuous mode [ 2755.741868][T22337] IPv6: pim6reg1: Disabled Multicast RS [ 2756.158120][T22354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51722'. [ 2756.891876][T22372] netlink: 'syz.0.51727': attribute type 7 has an invalid length. [ 2756.919595][T22372] device sit0 left promiscuous mode [ 2757.040508][T22373] device sit0 entered promiscuous mode [ 2757.584857][T22394] netlink: 'syz.2.51735': attribute type 10 has an invalid length. [ 2757.619606][T22395] netlink: 'syz.1.51736': attribute type 21 has an invalid length. [ 2757.725395][T22394] netlink: 'syz.2.51735': attribute type 10 has an invalid length. [ 2757.751844][T22390] tap0: tun_chr_ioctl cmd 35111 [ 2757.768185][T22398] device bridge_slave_0 left promiscuous mode [ 2757.817077][T22398] : renamed from bridge_slave_0 [ 2758.186718][T22418] device sit0 left promiscuous mode [ 2758.353030][T22420] device sit0 entered promiscuous mode [ 2758.748709][T22427] __nla_validate_parse: 8 callbacks suppressed [ 2758.748744][T22427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51755'. [ 2758.866181][T22430] delete_channel: no stack [ 2758.902296][T22430] delete_channel: no stack [ 2759.182230][T22441] validate_nla: 2 callbacks suppressed [ 2759.182269][T22441] netlink: 'syz.1.51751': attribute type 10 has an invalid length. [ 2759.234111][T22441] netlink: 168 bytes leftover after parsing attributes in process `syz.1.51751'. [ 2759.305749][T22441] netlink: 'syz.1.51751': attribute type 10 has an invalid length. [ 2759.332887][T22447] netlink: 'syz.2.51752': attribute type 21 has an invalid length. [ 2759.532438][T22452] netlink: 'syz.1.51756': attribute type 7 has an invalid length. [ 2759.563043][T22452] device sit0 entered promiscuous mode [ 2759.874907][T22455] device sit0 left promiscuous mode [ 2760.070498][T22457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51767'. [ 2760.088574][T22461] tap1: tun_chr_ioctl cmd 35111 [ 2760.450623][T22470] device bridge_slave_0 left promiscuous mode [ 2760.582311][T22470] : renamed from bridge_slave_0 [ 2761.702653][T22496] netlink: 'syz.2.51769': attribute type 7 has an invalid length. [ 2761.763143][T22496] device sit0 entered promiscuous mode [ 2761.994592][T22502] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.51770'. [ 2761.999949][T22498] netlink: 'syz.3.51766': attribute type 10 has an invalid length. [ 2762.110027][T22498] netlink: 168 bytes leftover after parsing attributes in process `syz.3.51766'. [ 2762.222345][T22504] netlink: 'syz.3.51766': attribute type 10 has an invalid length. [ 2762.832445][T22518] netlink: 'syz.1.51772': attribute type 10 has an invalid length. [ 2762.861654][T22518] netlink: 2 bytes leftover after parsing attributes in process `syz.1.51772'. [ 2762.937557][T22520] netlink: 'syz.3.51774': attribute type 5 has an invalid length. [ 2762.986226][T22520] netlink: 168 bytes leftover after parsing attributes in process `syz.3.51774'. [ 2763.079899][T22513] tap1: tun_chr_ioctl cmd 35111 [ 2763.085057][T22527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51776'. [ 2763.630044][T22538] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.51781'. [ 2763.680383][T22535] delete_channel: no stack [ 2764.021296][T22549] netlink: 'syz.2.51786': attribute type 7 has an invalid length. [ 2764.060987][T22549] device sit0 left promiscuous mode [ 2764.240369][T22552] device sit0 entered promiscuous mode [ 2764.450422][T22558] netlink: 'syz.0.51787': attribute type 10 has an invalid length. [ 2764.518270][T22558] netlink: 168 bytes leftover after parsing attributes in process `syz.0.51787'. [ 2764.793664][T22566] netlink: 'syz.2.51789': attribute type 10 has an invalid length. [ 2764.815757][T22566] netlink: 2 bytes leftover after parsing attributes in process `syz.2.51789'. [ 2764.956490][T22573] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.51790'. [ 2765.088249][T22572] tap1: tun_chr_ioctl cmd 35111 [ 2765.184264][T22580] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.51795'. [ 2765.318063][T22583] device wlan1 entered promiscuous mode [ 2765.366421][T22588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51796'. [ 2765.525614][T22591] netlink: 'syz.4.51798': attribute type 41 has an invalid length. [ 2765.547242][T22591] netlink: 'syz.4.51798': attribute type 4 has an invalid length. [ 2765.567312][T22591] netlink: 152 bytes leftover after parsing attributes in process `syz.4.51798'. [ 2765.622427][T22595] netlink: 'syz.2.51797': attribute type 9 has an invalid length. [ 2765.641229][T22595] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.51797'. [ 2766.298560][T22606] netlink: 'syz.3.51802': attribute type 10 has an invalid length. [ 2766.333030][T22606] netlink: 2 bytes leftover after parsing attributes in process `syz.3.51802'. [ 2766.928770][T22618] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.51806'. [ 2767.244687][T22625] device sit0 left promiscuous mode [ 2767.720521][T22644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51813'. [ 2768.649788][T22664] netlink: 'syz.2.51820': attribute type 5 has an invalid length. [ 2769.047920][T22673] netlink: 'syz.1.51822': attribute type 7 has an invalid length. [ 2769.083475][T22673] device sit0 left promiscuous mode [ 2769.277361][T22674] device sit0 entered promiscuous mode [ 2770.436851][T22708] tap1: tun_chr_ioctl cmd 35111 [ 2770.723092][T22722] netlink: 'syz.4.51837': attribute type 5 has an invalid length. [ 2770.787167][T22722] __nla_validate_parse: 2 callbacks suppressed [ 2770.787200][T22722] netlink: 168 bytes leftover after parsing attributes in process `syz.4.51837'. [ 2771.568546][T22746] netlink: 'syz.2.51845': attribute type 39 has an invalid length. [ 2771.625113][T22748] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.51846'. [ 2772.403533][T22770] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.51849'. [ 2773.544505][T22783] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.51851'. [ 2773.603218][T22780] sctp: [Deprecated]: syz.4.51853 (pid 22780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2773.603218][T22780] Use struct sctp_sack_info instead [ 2773.641555][T22787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51854'. [ 2774.549958][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.556304][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.068507][T22812] netlink: 'syz.1.51861': attribute type 9 has an invalid length. [ 2775.167498][T22812] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.51861'. [ 2775.391361][T22815] delete_channel: no stack [ 2775.869783][T22830] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.51865'. [ 2776.446750][T22842] netlink: 'syz.4.51868': attribute type 29 has an invalid length. [ 2776.478826][T22842] netlink: 'syz.4.51868': attribute type 29 has an invalid length. [ 2776.537969][T22842] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.51868'. [ 2776.571088][T22842] netlink: 'syz.4.51868': attribute type 29 has an invalid length. [ 2776.710017][T22847] netlink: 'syz.2.51869': attribute type 10 has an invalid length. [ 2776.796774][T22853] netlink: 'syz.2.51869': attribute type 9 has an invalid length. [ 2776.825576][T22853] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.51869'. [ 2776.891541][T22855] device wlan1 entered promiscuous mode [ 2777.117919][T22849] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.51870'. [ 2777.153266][T22859] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.51874'. [ 2777.240386][T22863] IPv6: : Disabled Multicast RS [ 2777.434135][T22873] netlink: 'syz.4.51881': attribute type 2 has an invalid length. [ 2777.469665][T22873] netlink: 'syz.4.51881': attribute type 8 has an invalid length. [ 2777.497156][T22873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51881'. [ 2777.546666][T22870] delete_channel: no stack [ 2777.866126][T22888] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.51885'. [ 2777.884504][T22894] netlink: 132 bytes leftover after parsing attributes in process `syz.4.51890'. [ 2778.021274][T22896] netlink: 'syz.1.51888': attribute type 29 has an invalid length. [ 2778.057304][T22898] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.51888'. [ 2778.367616][T22896] netlink: 'syz.1.51888': attribute type 29 has an invalid length. [ 2778.470280][T22899] netlink: 'syz.1.51888': attribute type 29 has an invalid length. [ 2778.744988][T22907] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.51891'. [ 2778.797949][T22910] device wlan1 entered promiscuous mode [ 2778.928057][T21355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2779.312732][T22912] delete_channel: no stack [ 2780.961546][T22972] delete_channel: no stack [ 2781.116657][T22982] device sit0 entered promiscuous mode [ 2781.368565][T22990] __nla_validate_parse: 9 callbacks suppressed [ 2781.368603][T22990] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.51918'. [ 2781.420040][T22988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51919'. [ 2781.970061][T23002] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.51921'. [ 2782.137432][T23010] validate_nla: 18 callbacks suppressed [ 2782.137484][T23010] netlink: 'syz.3.51927': attribute type 10 has an invalid length. [ 2782.181892][T23010] netlink: 'syz.3.51927': attribute type 9 has an invalid length. [ 2782.190777][T23010] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.51927'. [ 2783.024654][T23019] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.51940'. [ 2783.051484][T23021] netlink: 'syz.0.51939': attribute type 10 has an invalid length. [ 2783.068092][T23021] device wlan1 left promiscuous mode [ 2783.095164][T23019] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.51940'. [ 2783.104825][T23019] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2783.115603][T23019] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2783.214265][T23029] netlink: 'syz.4.51944': attribute type 11 has an invalid length. [ 2783.239897][T23030] delete_channel: no stack [ 2784.272395][T23062] netlink: 'syz.0.51938': attribute type 2 has an invalid length. [ 2784.280798][T23062] netlink: 'syz.0.51938': attribute type 8 has an invalid length. [ 2784.292277][T23060] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.51954'. [ 2784.303486][T23062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.51938'. [ 2784.317874][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51942'. [ 2784.618754][T23064] netlink: 'syz.1.51943': attribute type 10 has an invalid length. [ 2784.670276][T23069] netlink: 'syz.2.51945': attribute type 10 has an invalid length. [ 2784.678544][T23071] netlink: 'syz.1.51943': attribute type 9 has an invalid length. [ 2784.688619][T23069] device O3c entered promiscuous mode [ 2784.694636][T23069] team0: Device O3c is of different type [ 2784.697622][T23071] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.51943'. [ 2784.873348][T23074] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2784.887410][T23074] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2785.083862][T23084] netlink: 'syz.0.51951': attribute type 29 has an invalid length. [ 2786.171601][T23107] device O3c entered promiscuous mode [ 2786.191285][T23107] team0: Device O3c is of different type [ 2786.278547][T23111] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2786.307006][T23111] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2786.679972][T23131] device sit0 left promiscuous mode [ 2786.763045][T23134] device sit0 entered promiscuous mode [ 2787.414625][T23151] IPv6: : Disabled Multicast RS [ 2787.503873][T23155] __nla_validate_parse: 10 callbacks suppressed [ 2787.503907][T23155] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.51989'. [ 2787.540343][T23157] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.51980'. [ 2787.591460][T23157] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.51980'. [ 2787.630902][T23157] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2787.664360][T23157] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2787.870888][T23167] validate_nla: 7 callbacks suppressed [ 2787.870924][T23167] netlink: 'syz.2.51983': attribute type 29 has an invalid length. [ 2787.895402][T23167] netlink: 'syz.2.51983': attribute type 29 has an invalid length. [ 2788.078533][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51984'. [ 2788.497144][T23189] netlink: 'syz.2.51986': attribute type 2 has an invalid length. [ 2788.505549][T23189] netlink: 'syz.2.51986': attribute type 8 has an invalid length. [ 2788.515177][T23189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.51986'. [ 2788.909449][T23196] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.51988'. [ 2789.106047][T23208] netlink: 'syz.0.51996': attribute type 29 has an invalid length. [ 2789.126307][T23208] netlink: 'syz.0.51996': attribute type 29 has an invalid length. [ 2789.145765][T23204] netlink: 'syz.2.51993': attribute type 11 has an invalid length. [ 2789.254152][T23211] device sit0 left promiscuous mode [ 2789.280126][T23213] netlink: 'syz.4.52000': attribute type 29 has an invalid length. [ 2789.328511][T23223] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52000'. [ 2789.350138][T23220] device sit0 entered promiscuous mode [ 2789.410697][T23213] netlink: 'syz.4.52000': attribute type 29 has an invalid length. [ 2789.428890][T23223] netlink: 'syz.4.52000': attribute type 29 has an invalid length. [ 2789.693012][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52004'. [ 2790.314619][T23254] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.52014'. [ 2790.466488][T23265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.52013'. [ 2793.523924][T23369] __nla_validate_parse: 9 callbacks suppressed [ 2793.523965][T23369] netlink: 14610 bytes leftover after parsing attributes in process `syz.2.52050'. [ 2793.590443][T23374] validate_nla: 21 callbacks suppressed [ 2793.590485][T23374] netlink: 'syz.4.52054': attribute type 29 has an invalid length. [ 2793.626594][T23374] netlink: 'syz.4.52054': attribute type 29 has an invalid length. [ 2793.646296][T23377] netlink: 'syz.3.52053': attribute type 29 has an invalid length. [ 2793.677493][T23377] netlink: 'syz.3.52053': attribute type 29 has an invalid length. [ 2793.700346][T23377] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.52053'. [ 2793.713299][T23374] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52054'. [ 2793.734020][T23374] netlink: 'syz.4.52054': attribute type 29 has an invalid length. [ 2793.754175][T23380] netlink: 'syz.3.52053': attribute type 29 has an invalid length. [ 2793.924341][T23385] device syzkaller0 left promiscuous mode [ 2793.958307][T23385] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2793.976423][T23383] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52056'. [ 2793.999869][T23387] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.52057'. [ 2794.036213][T23387] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.52057'. [ 2794.128028][T23391] netlink: 'syz.2.52059': attribute type 10 has an invalid length. [ 2794.481179][T23404] netlink: 'syz.1.52063': attribute type 2 has an invalid length. [ 2794.510363][T23404] netlink: 'syz.1.52063': attribute type 8 has an invalid length. [ 2794.546843][T23404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52063'. [ 2794.595626][T23411] netlink: 'syz.3.52065': attribute type 10 has an invalid length. [ 2794.621749][T23411] netlink: 2 bytes leftover after parsing attributes in process `syz.3.52065'. [ 2794.793568][T23418] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52067'. [ 2794.839483][T23420] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52068'. [ 2796.438721][T23475] device sit0 left promiscuous mode [ 2796.597177][T23483] device sit0 entered promiscuous mode [ 2797.576362][T23512] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2797.686533][T23512] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2797.880391][T23523] device sit0 left promiscuous mode [ 2797.960886][T23523] device sit0 entered promiscuous mode [ 2798.212324][T23530] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2798.276264][T23530] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2798.315983][T23528] device sit0 left promiscuous mode [ 2798.408704][T23535] device sit0 entered promiscuous mode [ 2798.682030][T23550] __nla_validate_parse: 19 callbacks suppressed [ 2798.682069][T23550] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52113'. [ 2798.699923][T23552] validate_nla: 25 callbacks suppressed [ 2798.699966][T23552] netlink: 'syz.3.52112': attribute type 29 has an invalid length. [ 2798.723378][T23552] netlink: 'syz.3.52112': attribute type 29 has an invalid length. [ 2798.741265][T23552] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.52112'. [ 2798.752381][T23552] netlink: 'syz.3.52112': attribute type 29 has an invalid length. [ 2798.845695][T23559] netlink: 'syz.1.52115': attribute type 13 has an invalid length. [ 2798.877177][T23559] netlink: 172 bytes leftover after parsing attributes in process `syz.1.52115'. [ 2798.913632][T23559] erspan0: refused to change device tx_queue_len [ 2799.165616][T23577] netlink: 'syz.2.52136': attribute type 29 has an invalid length. [ 2799.179343][T23577] netlink: 'syz.2.52136': attribute type 29 has an invalid length. [ 2799.188596][T23575] netlink: 'syz.0.52135': attribute type 10 has an invalid length. [ 2799.199672][T23577] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.52136'. [ 2799.210962][T23577] netlink: 'syz.2.52136': attribute type 29 has an invalid length. [ 2799.960510][T23581] netlink: 763 bytes leftover after parsing attributes in process `syz.3.52128'. [ 2799.993423][T23586] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.52127'. [ 2800.060782][T23588] netlink: 'syz.1.52126': attribute type 6 has an invalid length. [ 2800.150154][T23594] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.52129'. [ 2800.212071][T23596] netlink: 'syz.2.52131': attribute type 29 has an invalid length. [ 2800.256218][T23599] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.52131'. [ 2800.595502][T23620] netlink: 763 bytes leftover after parsing attributes in process `syz.1.52144'. [ 2800.801929][T23627] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52148'. [ 2802.472062][T23665] team0: Device O3c is of different type [ 2802.926354][T23688] erspan0: refused to change device tx_queue_len [ 2803.809158][T23709] __nla_validate_parse: 10 callbacks suppressed [ 2803.809196][T23709] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.52195'. [ 2803.840771][T23715] netlink: 763 bytes leftover after parsing attributes in process `syz.0.52183'. [ 2803.996095][T23723] validate_nla: 22 callbacks suppressed [ 2803.996130][T23723] netlink: 'syz.0.52187': attribute type 10 has an invalid length. [ 2804.025737][T23723] netlink: 2 bytes leftover after parsing attributes in process `syz.0.52187'. [ 2804.379917][T23732] netlink: 'syz.1.52191': attribute type 10 has an invalid length. [ 2804.394980][T23732] team0: Device O3c is of different type [ 2804.493733][T23740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52198'. [ 2804.766660][T23748] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.52203'. [ 2804.780894][T23750] netlink: 763 bytes leftover after parsing attributes in process `syz.3.52201'. [ 2804.806232][T23748] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2804.830029][T23748] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2804.894399][T23752] device syzkaller0 entered promiscuous mode [ 2805.008835][T23756] netlink: 'syz.3.52205': attribute type 13 has an invalid length. [ 2805.022401][T23756] netlink: 172 bytes leftover after parsing attributes in process `syz.3.52205'. [ 2805.081149][T23756] erspan0: refused to change device tx_queue_len [ 2805.245999][T23764] netlink: 132 bytes leftover after parsing attributes in process `syz.1.52217'. [ 2805.397118][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52210'. [ 2805.471100][T23781] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.52212'. [ 2805.579463][T23788] netlink: 'syz.4.52215': attribute type 29 has an invalid length. [ 2805.602192][T23788] netlink: 'syz.4.52215': attribute type 29 has an invalid length. [ 2805.613226][T23788] netlink: 'syz.4.52215': attribute type 29 has an invalid length. [ 2805.671967][T23791] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2805.681218][T23791] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2805.776231][T23797] netlink: 'syz.0.52220': attribute type 29 has an invalid length. [ 2805.788702][T23797] netlink: 'syz.0.52220': attribute type 29 has an invalid length. [ 2805.803099][T23797] netlink: 'syz.0.52220': attribute type 29 has an invalid length. [ 2805.888731][T23802] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2805.897832][T23802] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2806.083638][T23808] netlink: 'syz.0.52228': attribute type 13 has an invalid length. [ 2806.131896][T23808] erspan0: refused to change device tx_queue_len [ 2806.212990][T23818] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2806.232032][T23818] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2806.406641][T23828] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2806.427061][T23828] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2806.567900][T23844] erspan0: refused to change device tx_queue_len [ 2807.944874][T23935] device syzkaller0 entered promiscuous mode [ 2807.961643][T23935] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2808.896723][T23984] __nla_validate_parse: 32 callbacks suppressed [ 2808.896767][T23984] netlink: 8435 bytes leftover after parsing attributes in process `syz.1.52311'. [ 2808.949236][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52314'. [ 2809.102431][T23999] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52318'. [ 2809.136081][T24003] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.52320'. [ 2809.159393][T24007] netlink: 8435 bytes leftover after parsing attributes in process `syz.3.52322'. [ 2809.170556][T24006] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52321'. [ 2809.805796][T24019] validate_nla: 48 callbacks suppressed [ 2809.805838][T24019] netlink: 'syz.2.52326': attribute type 10 has an invalid length. [ 2809.820260][T24019] netlink: 2 bytes leftover after parsing attributes in process `syz.2.52326'. [ 2810.234141][T24033] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.52334'. [ 2810.268081][T24033] net_ratelimit: 12 callbacks suppressed [ 2810.268126][T24033] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2810.326000][T24033] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2810.434748][T24043] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52338'. [ 2810.493223][T24047] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52340'. [ 2812.138366][T24072] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2812.198670][T24072] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2812.650194][T24099] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2812.669792][T24099] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2812.922364][T24109] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2812.953684][T24109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2813.079123][T24123] device wlan1 entered promiscuous mode [ 2813.192267][T24126] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2813.211851][T24126] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2813.528668][T24147] netlink: 'syz.3.52382': attribute type 13 has an invalid length. [ 2813.538299][T24147] erspan0: refused to change device tx_queue_len [ 2813.906504][T24177] __nla_validate_parse: 18 callbacks suppressed [ 2813.906551][T24177] netlink: 8435 bytes leftover after parsing attributes in process `syz.2.52394'. [ 2814.036041][T24183] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52397'. [ 2814.173881][T24189] netlink: 'syz.3.52400': attribute type 13 has an invalid length. [ 2814.183970][T24189] netlink: 172 bytes leftover after parsing attributes in process `syz.3.52400'. [ 2814.198118][T24189] erspan0: refused to change device tx_queue_len [ 2814.226573][T24196] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.52403'. [ 2814.352593][T24204] netlink: 8435 bytes leftover after parsing attributes in process `syz.2.52407'. [ 2814.600285][T24215] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.52412'. [ 2814.830269][T24231] netlink: 'syz.0.52419': attribute type 29 has an invalid length. [ 2814.844491][T24231] netlink: 'syz.0.52419': attribute type 29 has an invalid length. [ 2814.856619][T24231] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.52419'. [ 2814.867840][T24231] netlink: 'syz.0.52419': attribute type 29 has an invalid length. [ 2815.214930][T24247] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.52426'. [ 2815.350898][T24254] netlink: 'syz.4.52430': attribute type 29 has an invalid length. [ 2815.370527][T24254] netlink: 'syz.4.52430': attribute type 29 has an invalid length. [ 2815.391142][T24254] netlink: 8435 bytes leftover after parsing attributes in process `syz.4.52430'. [ 2815.402667][T24254] netlink: 'syz.4.52430': attribute type 29 has an invalid length. [ 2815.555534][T24265] netlink: 'syz.1.52444': attribute type 29 has an invalid length. [ 2815.574270][T24265] netlink: 'syz.1.52444': attribute type 29 has an invalid length. [ 2815.599348][T24265] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52444'. [ 2815.609891][T24265] netlink: 'syz.1.52444': attribute type 29 has an invalid length. [ 2815.782642][T24280] net_ratelimit: 10 callbacks suppressed [ 2815.782687][T24280] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2815.837298][T24280] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2815.963230][T24291] netlink: 'syz.2.52443': attribute type 29 has an invalid length. [ 2817.086236][T24326] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2817.106811][T24326] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2817.583109][T24348] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2817.598851][T24348] CPU: 1 PID: 24348 Comm: syz.3.52473 Not tainted syzkaller #0 [ 2817.606438][T24348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2817.616513][T24348] Call Trace: [ 2817.619828][T24348] [ 2817.622778][T24348] dump_stack_lvl+0x188/0x250 [ 2817.627487][T24348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2817.633672][T24348] ? show_regs_print_info+0x20/0x20 [ 2817.638898][T24348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2817.645098][T24348] sysfs_warn_dup+0x8a/0xa0 [ 2817.649662][T24348] sysfs_do_create_link_sd+0xc0/0x110 [ 2817.655062][T24348] device_add+0x7f6/0x1000 [ 2817.659517][T24348] wiphy_register+0x1e81/0x2c30 [ 2817.664414][T24348] ? cfg80211_event_work+0x40/0x40 [ 2817.669557][T24348] ? minstrel_ht_alloc+0x808/0x980 [ 2817.674703][T24348] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2817.680941][T24348] ieee80211_register_hw+0x2aa1/0x3af0 [ 2817.686569][T24348] ? ieee80211_tasklet_handler+0x20/0x20 [ 2817.692528][T24348] ? rcu_is_watching+0x11/0xa0 [ 2817.697323][T24348] ? memset+0x1e/0x40 [ 2817.701331][T24348] ? hrtimer_init+0x10c/0x220 [ 2817.706055][T24348] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2817.711836][T24348] hwsim_new_radio_nl+0xa6f/0xc40 [ 2817.716906][T24348] genl_rcv_msg+0xcea/0xf90 [ 2817.721448][T24348] ? genl_bind+0x380/0x380 [ 2817.725906][T24348] ? rcu_nmi_exit+0x6f/0xf0 [ 2817.730443][T24348] ? verify_lock_unused+0x140/0x140 [ 2817.735686][T24348] ? verify_lock_unused+0x140/0x140 [ 2817.740904][T24348] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2817.746913][T24348] ? lock_chain_count+0x20/0x20 [ 2817.751811][T24348] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2817.758376][T24348] netlink_rcv_skb+0x1f5/0x440 [ 2817.763166][T24348] ? genl_bind+0x380/0x380 [ 2817.767606][T24348] ? netlink_ack+0xb50/0xb50 [ 2817.772244][T24348] ? __lock_acquire+0x7d10/0x7d10 [ 2817.777315][T24348] ? down_read+0x1aa/0x2e0 [ 2817.781762][T24348] genl_rcv+0x24/0x40 [ 2817.785785][T24348] netlink_unicast+0x774/0x920 [ 2817.790569][T24348] netlink_sendmsg+0x8ba/0xbe0 [ 2817.795342][T24348] ? netlink_getsockopt+0x570/0x570 [ 2817.800540][T24348] ? aa_sock_msg_perm+0x94/0x150 [ 2817.805502][T24348] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2817.810817][T24348] ? security_socket_sendmsg+0x7c/0xa0 [ 2817.816298][T24348] ? netlink_getsockopt+0x570/0x570 [ 2817.821505][T24348] ____sys_sendmsg+0x5b7/0x8f0 [ 2817.826301][T24348] ? __sys_sendmsg_sock+0x30/0x30 [ 2817.831341][T24348] ? import_iovec+0x6f/0xa0 [ 2817.835873][T24348] ___sys_sendmsg+0x236/0x2e0 [ 2817.840580][T24348] ? __sys_sendmsg+0x2a0/0x2a0 [ 2817.845348][T24348] ? rcu_nmi_exit+0x6f/0xf0 [ 2817.849905][T24348] __se_sys_sendmsg+0x1af/0x290 [ 2817.854793][T24348] ? __x64_sys_sendmsg+0x80/0x80 [ 2817.859788][T24348] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2817.865733][T24348] do_syscall_64+0x4c/0xa0 [ 2817.870173][T24348] ? clear_bhb_loop+0x30/0x80 [ 2817.874866][T24348] ? clear_bhb_loop+0x30/0x80 [ 2817.879578][T24348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2817.885487][T24348] RIP: 0033:0x7f7613b35e59 [ 2817.889928][T24348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2817.909532][T24348] RSP: 002b:00007f7611d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2817.917976][T24348] RAX: ffffffffffffffda RBX: 00007f7613daefa0 RCX: 00007f7613b35e59 [ 2817.925968][T24348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2817.933975][T24348] RBP: 00007f7613bcbd6f R08: 0000000000000000 R09: 0000000000000000 [ 2817.941975][T24348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2817.949977][T24348] R13: 00007f7613daf038 R14: 00007f7613daefa0 R15: 00007ffc43fa9fe8 [ 2817.957982][T24348] [ 2818.186564][T24367] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2818.207455][T24367] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2818.445164][T24371] erspan0: refused to change device tx_queue_len [ 2818.714170][T24397] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2818.749311][T24397] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2818.998596][T24406] __nla_validate_parse: 18 callbacks suppressed [ 2818.998642][T24406] netlink: 8435 bytes leftover after parsing attributes in process `syz.3.52499'. [ 2819.083577][T24414] netlink: 763 bytes leftover after parsing attributes in process `syz.0.52501'. [ 2819.119035][T24415] netlink: 172 bytes leftover after parsing attributes in process `syz.2.52502'. [ 2819.144667][T24415] erspan0: refused to change device tx_queue_len [ 2819.166349][T24418] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52503'. [ 2819.246396][T24421] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.52505'. [ 2819.265968][T24421] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2819.274843][T24421] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2819.515509][T24439] netlink: 8435 bytes leftover after parsing attributes in process `syz.4.52514'. [ 2819.610298][T24446] netlink: 763 bytes leftover after parsing attributes in process `syz.2.52517'. [ 2819.634487][T24444] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52516'. [ 2819.751090][T24449] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.52518'. [ 2819.780366][T24451] netlink: 172 bytes leftover after parsing attributes in process `syz.1.52519'. [ 2819.807979][T24451] erspan0: refused to change device tx_queue_len [ 2820.017896][T24465] validate_nla: 41 callbacks suppressed [ 2820.017926][T24465] netlink: 'syz.1.52526': attribute type 29 has an invalid length. [ 2820.036047][T24469] netlink: 'syz.0.52528': attribute type 29 has an invalid length. [ 2820.059048][T24465] netlink: 'syz.1.52526': attribute type 29 has an invalid length. [ 2820.073722][T24469] netlink: 'syz.0.52528': attribute type 29 has an invalid length. [ 2820.086250][T24470] netlink: 'syz.1.52526': attribute type 29 has an invalid length. [ 2820.104866][T24469] netlink: 'syz.0.52528': attribute type 29 has an invalid length. [ 2820.391703][T24491] netlink: 'syz.4.52536': attribute type 13 has an invalid length. [ 2820.424888][T24491] erspan0: refused to change device tx_queue_len [ 2820.470628][T24495] netlink: 'syz.3.52539': attribute type 29 has an invalid length. [ 2820.489522][T24495] netlink: 'syz.3.52539': attribute type 29 has an invalid length. [ 2820.514588][T24495] netlink: 'syz.3.52539': attribute type 29 has an invalid length. [ 2820.963312][T24514] net_ratelimit: 4 callbacks suppressed [ 2820.963346][T24514] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2820.978105][T24514] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2824.125499][T24544] __nla_validate_parse: 16 callbacks suppressed [ 2824.125585][T24544] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.52562'. [ 2824.303599][T24552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.52564'. [ 2824.316460][T24544] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.52562'. [ 2824.329158][T24544] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2824.373716][T24544] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2824.698360][T24559] netlink: 8435 bytes leftover after parsing attributes in process `syz.1.52568'. [ 2824.710760][T24560] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.52567'. [ 2824.825889][T24564] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52569'. [ 2824.891364][T24572] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.52574'. [ 2824.986304][T24577] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.52577'. [ 2825.025588][T24577] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.52577'. [ 2825.073305][T24584] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.52580'. [ 2825.083667][T24577] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2825.106681][T24577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2825.143401][T24587] validate_nla: 28 callbacks suppressed [ 2825.143448][T24587] netlink: 'syz.4.52579': attribute type 29 has an invalid length. [ 2825.195752][T24587] netlink: 'syz.4.52579': attribute type 29 has an invalid length. [ 2825.205662][T24590] netlink: 'syz.4.52579': attribute type 29 has an invalid length. [ 2825.226190][T24589] netlink: 'syz.1.52582': attribute type 29 has an invalid length. [ 2825.247686][T24589] netlink: 'syz.1.52582': attribute type 29 has an invalid length. [ 2825.264518][T24593] netlink: 'syz.3.52583': attribute type 29 has an invalid length. [ 2825.279758][T24593] netlink: 'syz.3.52583': attribute type 29 has an invalid length. [ 2825.292634][T24589] netlink: 'syz.1.52582': attribute type 29 has an invalid length. [ 2825.306141][T24593] netlink: 'syz.3.52583': attribute type 29 has an invalid length. [ 2825.369550][T24597] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2825.378225][T24597] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2825.461774][T24601] netlink: 'syz.3.52587': attribute type 29 has an invalid length. [ 2825.659030][T24613] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2825.669630][T24613] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2826.053636][T24639] net_ratelimit: 2 callbacks suppressed [ 2826.053674][T24639] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2826.084453][T24639] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2826.234921][T24652] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2826.257085][T24652] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2826.715895][T24675] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2826.745835][T24675] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2826.881692][T24685] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2826.902363][T24685] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2827.276561][T24708] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2827.303869][T24708] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2827.649197][T24726] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2827.678626][T24726] CPU: 0 PID: 24726 Comm: syz.4.52647 Not tainted syzkaller #0 [ 2827.686222][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2827.696295][T24726] Call Trace: [ 2827.699675][T24726] [ 2827.702617][T24726] dump_stack_lvl+0x188/0x250 [ 2827.707311][T24726] ? show_regs_print_info+0x20/0x20 [ 2827.712527][T24726] ? load_image+0x400/0x400 [ 2827.717065][T24726] sysfs_warn_dup+0x8a/0xa0 [ 2827.721585][T24726] sysfs_do_create_link_sd+0xc0/0x110 [ 2827.726980][T24726] device_add+0x7f6/0x1000 [ 2827.731443][T24726] wiphy_register+0x1e81/0x2c30 [ 2827.736342][T24726] ? cfg80211_event_work+0x40/0x40 [ 2827.741477][T24726] ? minstrel_ht_alloc+0x808/0x980 [ 2827.746635][T24726] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2827.752729][T24726] ieee80211_register_hw+0x2aa1/0x3af0 [ 2827.758237][T24726] ? ieee80211_tasklet_handler+0x20/0x20 [ 2827.763898][T24726] ? rcu_is_watching+0x11/0xa0 [ 2827.768688][T24726] ? memset+0x1e/0x40 [ 2827.772680][T24726] ? hrtimer_init+0x10c/0x220 [ 2827.777367][T24726] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2827.783122][T24726] hwsim_new_radio_nl+0xa6f/0xc40 [ 2827.788177][T24726] genl_rcv_msg+0xcea/0xf90 [ 2827.792711][T24726] ? genl_bind+0x380/0x380 [ 2827.797155][T24726] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2827.803157][T24726] ? lock_chain_count+0x20/0x20 [ 2827.808029][T24726] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2827.814215][T24726] ? lockdep_hardirqs_on+0x94/0x140 [ 2827.819440][T24726] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2827.825630][T24726] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2827.832180][T24726] ? lock_acquire+0x208/0x400 [ 2827.836900][T24726] netlink_rcv_skb+0x1f5/0x440 [ 2827.841697][T24726] ? genl_bind+0x380/0x380 [ 2827.846149][T24726] ? netlink_ack+0xb50/0xb50 [ 2827.850767][T24726] ? __lock_acquire+0x7d10/0x7d10 [ 2827.855820][T24726] ? rcu_is_watching+0x63/0xa0 [ 2827.860605][T24726] ? down_read+0x1aa/0x2e0 [ 2827.865044][T24726] genl_rcv+0x24/0x40 [ 2827.869048][T24726] netlink_unicast+0x774/0x920 [ 2827.873836][T24726] netlink_sendmsg+0x8ba/0xbe0 [ 2827.878737][T24726] ? netlink_getsockopt+0x570/0x570 [ 2827.883963][T24726] ? aa_sock_msg_perm+0x94/0x150 [ 2827.888934][T24726] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2827.894231][T24726] ? security_socket_sendmsg+0x7c/0xa0 [ 2827.899703][T24726] ? netlink_getsockopt+0x570/0x570 [ 2827.904923][T24726] ____sys_sendmsg+0x5b7/0x8f0 [ 2827.909734][T24726] ? __sys_sendmsg_sock+0x30/0x30 [ 2827.914792][T24726] ? import_iovec+0x6f/0xa0 [ 2827.919446][T24726] ___sys_sendmsg+0x236/0x2e0 [ 2827.924174][T24726] ? __sys_sendmsg+0x2a0/0x2a0 [ 2827.928991][T24726] __se_sys_sendmsg+0x1af/0x290 [ 2827.933863][T24726] ? __x64_sys_sendmsg+0x80/0x80 [ 2827.938818][T24726] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2827.944838][T24726] ? lockdep_hardirqs_on+0x94/0x140 [ 2827.950068][T24726] do_syscall_64+0x4c/0xa0 [ 2827.954592][T24726] ? clear_bhb_loop+0x30/0x80 [ 2827.959299][T24726] ? clear_bhb_loop+0x30/0x80 [ 2827.964000][T24726] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2827.969923][T24726] RIP: 0033:0x7f4a94c84e59 [ 2827.974354][T24726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2827.993997][T24726] RSP: 002b:00007f4a92ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2828.002542][T24726] RAX: ffffffffffffffda RBX: 00007f4a94efdfa0 RCX: 00007f4a94c84e59 [ 2828.010529][T24726] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2828.018511][T24726] RBP: 00007f4a94d1ad6f R08: 0000000000000000 R09: 0000000000000000 [ 2828.026493][T24726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2828.034477][T24726] R13: 00007f4a94efe038 R14: 00007f4a94efdfa0 R15: 00007fffbd377218 [ 2828.042496][T24726] [ 2829.141839][T24810] __nla_validate_parse: 56 callbacks suppressed [ 2829.141876][T24810] netlink: 763 bytes leftover after parsing attributes in process `syz.2.52685'. [ 2829.162528][T24812] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.52684'. [ 2829.227778][T24814] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.52686'. [ 2829.305020][T24820] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52689'. [ 2829.359911][T24822] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.52690'. [ 2829.532963][T24831] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52694'. [ 2829.598082][T24837] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.52698'. [ 2829.631367][T24839] netlink: 763 bytes leftover after parsing attributes in process `syz.0.52697'. [ 2829.655797][T24841] netlink: 8435 bytes leftover after parsing attributes in process `syz.3.52699'. [ 2829.748298][T24847] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.52704'. [ 2830.227954][T24877] validate_nla: 116 callbacks suppressed [ 2830.228001][T24877] netlink: 'syz.3.52716': attribute type 29 has an invalid length. [ 2830.255189][T24881] netlink: 'syz.4.52718': attribute type 29 has an invalid length. [ 2830.266291][T24877] netlink: 'syz.3.52716': attribute type 29 has an invalid length. [ 2830.279576][T24881] netlink: 'syz.4.52718': attribute type 29 has an invalid length. [ 2830.290437][T24877] netlink: 'syz.3.52716': attribute type 29 has an invalid length. [ 2830.302581][T24881] netlink: 'syz.4.52718': attribute type 29 has an invalid length. [ 2830.321350][T24879] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2830.330493][T24879] CPU: 0 PID: 24879 Comm: syz.2.52717 Not tainted syzkaller #0 [ 2830.338077][T24879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2830.348154][T24879] Call Trace: [ 2830.351451][T24879] [ 2830.354401][T24879] dump_stack_lvl+0x188/0x250 [ 2830.359110][T24879] ? show_regs_print_info+0x20/0x20 [ 2830.364343][T24879] ? load_image+0x400/0x400 [ 2830.368891][T24879] sysfs_warn_dup+0x8a/0xa0 [ 2830.373424][T24879] sysfs_do_create_link_sd+0xc0/0x110 [ 2830.378832][T24879] device_add+0x7f6/0x1000 [ 2830.383280][T24879] wiphy_register+0x1e81/0x2c30 [ 2830.388252][T24879] ? cfg80211_event_work+0x40/0x40 [ 2830.393396][T24879] ? minstrel_ht_alloc+0x808/0x980 [ 2830.398537][T24879] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2830.404617][T24879] ieee80211_register_hw+0x2aa1/0x3af0 [ 2830.410086][T24879] ? ieee80211_tasklet_handler+0x20/0x20 [ 2830.415718][T24879] ? rcu_is_watching+0x11/0xa0 [ 2830.420495][T24879] ? memset+0x1e/0x40 [ 2830.424507][T24879] ? hrtimer_init+0x10c/0x220 [ 2830.429238][T24879] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2830.435016][T24879] hwsim_new_radio_nl+0xa6f/0xc40 [ 2830.440093][T24879] genl_rcv_msg+0xcea/0xf90 [ 2830.444643][T24879] ? genl_bind+0x380/0x380 [ 2830.449185][T24879] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2830.454771][T24879] ? verify_lock_unused+0x140/0x140 [ 2830.459995][T24879] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2830.465576][T24879] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2830.472218][T24879] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2830.478842][T24879] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2830.485402][T24879] netlink_rcv_skb+0x1f5/0x440 [ 2830.490201][T24879] ? genl_bind+0x380/0x380 [ 2830.494646][T24879] ? netlink_ack+0xb50/0xb50 [ 2830.499270][T24879] ? __lock_acquire+0x7d10/0x7d10 [ 2830.504336][T24879] ? down_read+0x1aa/0x2e0 [ 2830.508789][T24879] genl_rcv+0x24/0x40 [ 2830.512794][T24879] netlink_unicast+0x774/0x920 [ 2830.517590][T24879] netlink_sendmsg+0x8ba/0xbe0 [ 2830.522385][T24879] ? netlink_getsockopt+0x570/0x570 [ 2830.527607][T24879] ? aa_sock_msg_perm+0x94/0x150 [ 2830.532577][T24879] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2830.537878][T24879] ? security_socket_sendmsg+0x7c/0xa0 [ 2830.543398][T24879] ? netlink_getsockopt+0x570/0x570 [ 2830.548642][T24879] ____sys_sendmsg+0x5b7/0x8f0 [ 2830.553447][T24879] ? __sys_sendmsg_sock+0x30/0x30 [ 2830.558509][T24879] ? import_iovec+0x6f/0xa0 [ 2830.563056][T24879] ___sys_sendmsg+0x236/0x2e0 [ 2830.567768][T24879] ? __sys_sendmsg+0x2a0/0x2a0 [ 2830.572603][T24879] __se_sys_sendmsg+0x1af/0x290 [ 2830.577484][T24879] ? __x64_sys_sendmsg+0x80/0x80 [ 2830.582445][T24879] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2830.588470][T24879] ? lockdep_hardirqs_on+0x94/0x140 [ 2830.593721][T24879] do_syscall_64+0x4c/0xa0 [ 2830.598166][T24879] ? clear_bhb_loop+0x30/0x80 [ 2830.602870][T24879] ? clear_bhb_loop+0x30/0x80 [ 2830.607571][T24879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2830.613499][T24879] RIP: 0033:0x7f73dc61ee59 [ 2830.617946][T24879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2830.637665][T24879] RSP: 002b:00007f73da878028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2830.646103][T24879] RAX: ffffffffffffffda RBX: 00007f73dc897fa0 RCX: 00007f73dc61ee59 [ 2830.654100][T24879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2830.662104][T24879] RBP: 00007f73dc6b4d6f R08: 0000000000000000 R09: 0000000000000000 [ 2830.670108][T24879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2830.678102][T24879] R13: 00007f73dc898038 R14: 00007f73dc897fa0 R15: 00007fffee5602b8 [ 2830.686117][T24879] [ 2830.774538][T24895] netlink: 'syz.0.52723': attribute type 29 has an invalid length. [ 2830.798223][T24895] netlink: 'syz.0.52723': attribute type 29 has an invalid length. [ 2830.817509][T24895] netlink: 'syz.0.52723': attribute type 29 has an invalid length. [ 2830.859999][T24898] netlink: 'syz.4.52725': attribute type 29 has an invalid length. [ 2831.389133][T24938] net_ratelimit: 18 callbacks suppressed [ 2831.389148][T24938] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2831.403629][T24938] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2831.685508][T24951] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2831.694403][T24951] CPU: 0 PID: 24951 Comm: syz.1.52748 Not tainted syzkaller #0 [ 2831.701959][T24951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2831.712047][T24951] Call Trace: [ 2831.715343][T24951] [ 2831.718281][T24951] dump_stack_lvl+0x188/0x250 [ 2831.722985][T24951] ? show_regs_print_info+0x20/0x20 [ 2831.728237][T24951] ? load_image+0x400/0x400 [ 2831.732775][T24951] sysfs_warn_dup+0x8a/0xa0 [ 2831.737432][T24951] sysfs_do_create_link_sd+0xc0/0x110 [ 2831.742825][T24951] device_add+0x7f6/0x1000 [ 2831.747273][T24951] wiphy_register+0x1e81/0x2c30 [ 2831.752178][T24951] ? cfg80211_event_work+0x40/0x40 [ 2831.757308][T24951] ? minstrel_ht_alloc+0x808/0x980 [ 2831.762451][T24951] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2831.768536][T24951] ieee80211_register_hw+0x2aa1/0x3af0 [ 2831.774008][T24951] ? lockdep_hardirqs_on+0x94/0x140 [ 2831.779243][T24951] ? ieee80211_tasklet_handler+0x20/0x20 [ 2831.784891][T24951] ? rcu_is_watching+0x11/0xa0 [ 2831.789655][T24951] ? memset+0x1e/0x40 [ 2831.793666][T24951] ? hrtimer_init+0x10c/0x220 [ 2831.798380][T24951] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2831.804157][T24951] hwsim_new_radio_nl+0xa6f/0xc40 [ 2831.809222][T24951] genl_rcv_msg+0xcea/0xf90 [ 2831.813739][T24951] ? genl_bind+0x380/0x380 [ 2831.818191][T24951] ? lock_chain_count+0x20/0x20 [ 2831.823063][T24951] ? verify_lock_unused+0x140/0x140 [ 2831.828280][T24951] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2831.834451][T24951] ? lockdep_hardirqs_on+0x94/0x140 [ 2831.839662][T24951] ? mark_lock+0x94/0x320 [ 2831.843993][T24951] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2831.849986][T24951] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2831.856528][T24951] ? lock_chain_count+0x20/0x20 [ 2831.861418][T24951] netlink_rcv_skb+0x1f5/0x440 [ 2831.866209][T24951] ? genl_bind+0x380/0x380 [ 2831.870629][T24951] ? netlink_ack+0xb50/0xb50 [ 2831.875254][T24951] ? kasan_check_range+0x84/0x290 [ 2831.880310][T24951] ? down_read+0x1aa/0x2e0 [ 2831.884758][T24951] genl_rcv+0x24/0x40 [ 2831.888758][T24951] netlink_unicast+0x774/0x920 [ 2831.893562][T24951] netlink_sendmsg+0x8ba/0xbe0 [ 2831.898379][T24951] ? netlink_getsockopt+0x570/0x570 [ 2831.903623][T24951] ? aa_sock_msg_perm+0x94/0x150 [ 2831.908606][T24951] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2831.913923][T24951] ? security_socket_sendmsg+0x7c/0xa0 [ 2831.919405][T24951] ? netlink_getsockopt+0x570/0x570 [ 2831.924619][T24951] ____sys_sendmsg+0x5b7/0x8f0 [ 2831.929420][T24951] ? __sys_sendmsg_sock+0x30/0x30 [ 2831.934479][T24951] ? import_iovec+0x6f/0xa0 [ 2831.939007][T24951] ___sys_sendmsg+0x236/0x2e0 [ 2831.943725][T24951] ? __sys_sendmsg+0x2a0/0x2a0 [ 2831.948544][T24951] ? percpu_counter_add_batch+0x13b/0x160 [ 2831.954315][T24951] __se_sys_sendmsg+0x1af/0x290 [ 2831.959201][T24951] ? __x64_sys_sendmsg+0x80/0x80 [ 2831.964171][T24951] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2831.970216][T24951] ? lockdep_hardirqs_on+0x94/0x140 [ 2831.975484][T24951] do_syscall_64+0x4c/0xa0 [ 2831.979925][T24951] ? clear_bhb_loop+0x30/0x80 [ 2831.984629][T24951] ? clear_bhb_loop+0x30/0x80 [ 2831.989338][T24951] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2831.995251][T24951] RIP: 0033:0x7f5c8b3cde59 [ 2831.999695][T24951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2832.019321][T24951] RSP: 002b:00007f5c89627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2832.027749][T24951] RAX: ffffffffffffffda RBX: 00007f5c8b646fa0 RCX: 00007f5c8b3cde59 [ 2832.035743][T24951] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2832.043730][T24951] RBP: 00007f5c8b463d6f R08: 0000000000000000 R09: 0000000000000000 [ 2832.051716][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2832.059696][T24951] R13: 00007f5c8b647038 R14: 00007f5c8b646fa0 R15: 00007fff503a8b28 [ 2832.067776][T24951] [ 2832.207753][T24965] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2832.222108][T24965] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2832.440963][T24976] netlink: set zone limit has 8 unknown bytes [ 2832.757710][T25000] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2832.766090][T25000] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2833.089551][T25017] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2833.098015][T25017] CPU: 1 PID: 25017 Comm: syz.0.52773 Not tainted syzkaller #0 [ 2833.105559][T25017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2833.115613][T25017] Call Trace: [ 2833.118910][T25017] [ 2833.121881][T25017] dump_stack_lvl+0x188/0x250 [ 2833.126577][T25017] ? show_regs_print_info+0x20/0x20 [ 2833.131793][T25017] ? load_image+0x400/0x400 [ 2833.136311][T25017] sysfs_warn_dup+0x8a/0xa0 [ 2833.140807][T25017] sysfs_do_create_link_sd+0xc0/0x110 [ 2833.146204][T25017] device_add+0x7f6/0x1000 [ 2833.150631][T25017] wiphy_register+0x1e81/0x2c30 [ 2833.155490][T25017] ? cfg80211_event_work+0x40/0x40 [ 2833.160599][T25017] ? minstrel_ht_alloc+0x808/0x980 [ 2833.165741][T25017] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2833.171834][T25017] ieee80211_register_hw+0x2aa1/0x3af0 [ 2833.177311][T25017] ? lockdep_hardirqs_on+0x94/0x140 [ 2833.182537][T25017] ? ieee80211_tasklet_handler+0x20/0x20 [ 2833.188193][T25017] ? rcu_is_watching+0x11/0xa0 [ 2833.192954][T25017] ? memset+0x1e/0x40 [ 2833.196933][T25017] ? hrtimer_init+0x10c/0x220 [ 2833.201638][T25017] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2833.207412][T25017] hwsim_new_radio_nl+0xa6f/0xc40 [ 2833.212475][T25017] genl_rcv_msg+0xcea/0xf90 [ 2833.217010][T25017] ? genl_bind+0x380/0x380 [ 2833.221456][T25017] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2833.227034][T25017] ? verify_lock_unused+0x140/0x140 [ 2833.232253][T25017] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2833.237823][T25017] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2833.244408][T25017] ? rcu_nmi_exit+0x6f/0xf0 [ 2833.249021][T25017] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2833.255544][T25017] netlink_rcv_skb+0x1f5/0x440 [ 2833.260322][T25017] ? genl_bind+0x380/0x380 [ 2833.264751][T25017] ? netlink_ack+0xb50/0xb50 [ 2833.269336][T25017] ? __lock_acquire+0x7d10/0x7d10 [ 2833.274368][T25017] ? down_read+0x1aa/0x2e0 [ 2833.278790][T25017] genl_rcv+0x24/0x40 [ 2833.282762][T25017] netlink_unicast+0x774/0x920 [ 2833.287545][T25017] netlink_sendmsg+0x8ba/0xbe0 [ 2833.292321][T25017] ? netlink_getsockopt+0x570/0x570 [ 2833.297541][T25017] ? aa_sock_msg_perm+0x94/0x150 [ 2833.302481][T25017] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2833.307768][T25017] ? security_socket_sendmsg+0x7c/0xa0 [ 2833.313248][T25017] ? netlink_getsockopt+0x570/0x570 [ 2833.318451][T25017] ____sys_sendmsg+0x5b7/0x8f0 [ 2833.323257][T25017] ? __sys_sendmsg_sock+0x30/0x30 [ 2833.328333][T25017] ? import_iovec+0x6f/0xa0 [ 2833.332859][T25017] ___sys_sendmsg+0x236/0x2e0 [ 2833.337542][T25017] ? __sys_sendmsg+0x2a0/0x2a0 [ 2833.342349][T25017] __se_sys_sendmsg+0x1af/0x290 [ 2833.347197][T25017] ? __x64_sys_sendmsg+0x80/0x80 [ 2833.352147][T25017] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2833.358143][T25017] ? lockdep_hardirqs_on+0x94/0x140 [ 2833.363352][T25017] do_syscall_64+0x4c/0xa0 [ 2833.367794][T25017] ? clear_bhb_loop+0x30/0x80 [ 2833.372467][T25017] ? clear_bhb_loop+0x30/0x80 [ 2833.377157][T25017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2833.383072][T25017] RIP: 0033:0x7fc823a8ae59 [ 2833.387505][T25017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2833.407118][T25017] RSP: 002b:00007fc821ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2833.415562][T25017] RAX: ffffffffffffffda RBX: 00007fc823d03fa0 RCX: 00007fc823a8ae59 [ 2833.423553][T25017] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2833.431527][T25017] RBP: 00007fc823b20d6f R08: 0000000000000000 R09: 0000000000000000 [ 2833.439494][T25017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2833.447463][T25017] R13: 00007fc823d04038 R14: 00007fc823d03fa0 R15: 00007ffc976fb3a8 [ 2833.455472][T25017] [ 2833.628919][T25030] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2833.657065][T25030] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2834.053667][T25041] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 2834.309243][T25066] __nla_validate_parse: 41 callbacks suppressed [ 2834.309279][T25066] netlink: 8435 bytes leftover after parsing attributes in process `syz.4.52793'. [ 2834.330026][T25068] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52795'. [ 2834.380748][T25073] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.52796'. [ 2834.488090][T25075] netlink: 144452 bytes leftover after parsing attributes in process `syz.1.52799'. [ 2834.497909][T25078] netlink: 763 bytes leftover after parsing attributes in process `syz.4.52798'. [ 2834.546739][T25075] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2834.557449][T25075] CPU: 0 PID: 25075 Comm: syz.1.52799 Not tainted syzkaller #0 [ 2834.565029][T25075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2834.575129][T25075] Call Trace: [ 2834.578444][T25075] [ 2834.581411][T25075] dump_stack_lvl+0x188/0x250 [ 2834.586126][T25075] ? show_regs_print_info+0x20/0x20 [ 2834.591381][T25075] ? load_image+0x400/0x400 [ 2834.595961][T25075] sysfs_warn_dup+0x8a/0xa0 [ 2834.600499][T25075] sysfs_do_create_link_sd+0xc0/0x110 [ 2834.605900][T25075] device_add+0x7f6/0x1000 [ 2834.610366][T25075] wiphy_register+0x1e81/0x2c30 [ 2834.615284][T25075] ? cfg80211_event_work+0x40/0x40 [ 2834.620429][T25075] ? minstrel_ht_alloc+0x808/0x980 [ 2834.625586][T25075] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2834.631697][T25075] ieee80211_register_hw+0x2aa1/0x3af0 [ 2834.637213][T25075] ? ieee80211_tasklet_handler+0x20/0x20 [ 2834.642868][T25075] ? lockdep_hardirqs_on+0x94/0x140 [ 2834.648152][T25075] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2834.654355][T25075] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2834.660135][T25075] hwsim_new_radio_nl+0xa6f/0xc40 [ 2834.665214][T25075] genl_rcv_msg+0xcea/0xf90 [ 2834.669769][T25075] ? genl_bind+0x380/0x380 [ 2834.674213][T25075] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2834.679793][T25075] ? verify_lock_unused+0x140/0x140 [ 2834.685014][T25075] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2834.690593][T25075] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2834.697211][T25075] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2834.703838][T25075] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2834.710408][T25075] netlink_rcv_skb+0x1f5/0x440 [ 2834.715222][T25075] ? genl_bind+0x380/0x380 [ 2834.719668][T25075] ? netlink_ack+0xb50/0xb50 [ 2834.724276][T25075] ? __lock_acquire+0x7d10/0x7d10 [ 2834.729315][T25075] ? down_read+0x1aa/0x2e0 [ 2834.733774][T25075] genl_rcv+0x24/0x40 [ 2834.737788][T25075] netlink_unicast+0x774/0x920 [ 2834.742596][T25075] netlink_sendmsg+0x8ba/0xbe0 [ 2834.747402][T25075] ? netlink_getsockopt+0x570/0x570 [ 2834.752638][T25075] ? aa_sock_msg_perm+0x94/0x150 [ 2834.757622][T25075] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2834.762945][T25075] ? security_socket_sendmsg+0x7c/0xa0 [ 2834.768444][T25075] ? netlink_getsockopt+0x570/0x570 [ 2834.773673][T25075] ____sys_sendmsg+0x5b7/0x8f0 [ 2834.778482][T25075] ? __sys_sendmsg_sock+0x30/0x30 [ 2834.783550][T25075] ? import_iovec+0x6f/0xa0 [ 2834.788090][T25075] ___sys_sendmsg+0x236/0x2e0 [ 2834.792803][T25075] ? __sys_sendmsg+0x2a0/0x2a0 [ 2834.797601][T25075] ? trace_event_raw_event_lock+0x270/0x270 [ 2834.803563][T25075] __se_sys_sendmsg+0x1af/0x290 [ 2834.808447][T25075] ? __x64_sys_sendmsg+0x80/0x80 [ 2834.813399][T25075] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2834.819427][T25075] ? lockdep_hardirqs_on+0x94/0x140 [ 2834.824648][T25075] do_syscall_64+0x4c/0xa0 [ 2834.829081][T25075] ? clear_bhb_loop+0x30/0x80 [ 2834.833782][T25075] ? clear_bhb_loop+0x30/0x80 [ 2834.838475][T25075] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2834.844395][T25075] RIP: 0033:0x7f5c8b3cde59 [ 2834.848817][T25075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2834.868445][T25075] RSP: 002b:00007f5c89627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2834.876869][T25075] RAX: ffffffffffffffda RBX: 00007f5c8b646fa0 RCX: 00007f5c8b3cde59 [ 2834.884848][T25075] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2834.892837][T25075] RBP: 00007f5c8b463d6f R08: 0000000000000000 R09: 0000000000000000 [ 2834.900831][T25075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2834.908832][T25075] R13: 00007f5c8b647038 R14: 00007f5c8b646fa0 R15: 00007fff503a8b28 [ 2834.916847][T25075] [ 2835.091931][T25090] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.52803'. [ 2835.183911][T25097] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.52807'. [ 2835.237345][T25101] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.52808'. [ 2835.245436][T25103] validate_nla: 61 callbacks suppressed [ 2835.245613][T25103] netlink: 'syz.3.52809': attribute type 29 has an invalid length. [ 2835.260968][T25101] netlink: 'syz.2.52808': attribute type 29 has an invalid length. [ 2835.280193][T25103] netlink: 'syz.3.52809': attribute type 29 has an invalid length. [ 2835.292782][T25103] netlink: 8435 bytes leftover after parsing attributes in process `syz.3.52809'. [ 2835.317595][T25108] netlink: 763 bytes leftover after parsing attributes in process `syz.0.52811'. [ 2835.346054][T25107] netlink: 'syz.3.52809': attribute type 29 has an invalid length. [ 2835.435670][T25112] netlink: 'syz.1.52814': attribute type 21 has an invalid length. [ 2835.528971][T25122] netlink: 'syz.3.52813': attribute type 29 has an invalid length. [ 2835.539241][T25122] netlink: 'syz.3.52813': attribute type 29 has an invalid length. [ 2835.552710][T25122] netlink: 'syz.3.52813': attribute type 29 has an invalid length. [ 2835.988465][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.994920][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.210593][T25138] netlink: 'syz.4.52824': attribute type 29 has an invalid length. [ 2836.221635][T25138] netlink: 'syz.4.52824': attribute type 29 has an invalid length. [ 2836.604893][T25154] net_ratelimit: 6 callbacks suppressed [ 2836.604928][T25154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2836.920048][T25181] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2836.929082][T25181] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2837.528830][T25207] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2837.538252][T25207] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2837.913432][T25231] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2837.922572][T25231] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2838.618473][T25259] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2838.626994][T25259] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2838.759110][T25265] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2839.307544][T25301] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2839.315527][T25301] syzkaller1: linktype set to 825 [ 2839.340170][T25302] __nla_validate_parse: 32 callbacks suppressed [ 2839.340215][T25302] netlink: 763 bytes leftover after parsing attributes in process `syz.3.52894'. [ 2839.514714][T25314] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.52897'. [ 2839.678690][T25327] netlink: 15730 bytes leftover after parsing attributes in process `syz.3.52901'. [ 2839.807154][T25334] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.52903'. [ 2839.870891][T25337] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.52904'. [ 2839.930617][T25339] netlink: 763 bytes leftover after parsing attributes in process `syz.0.52905'. [ 2840.059714][T25344] netlink: 763 bytes leftover after parsing attributes in process `syz.0.52907'. [ 2840.252324][T25351] validate_nla: 46 callbacks suppressed [ 2840.252367][T25351] netlink: 'syz.0.52910': attribute type 29 has an invalid length. [ 2840.274030][T25351] netlink: 'syz.0.52910': attribute type 29 has an invalid length. [ 2840.289054][T25351] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52910'. [ 2840.299582][T25351] netlink: 'syz.0.52910': attribute type 29 has an invalid length. [ 2840.396842][T25357] netlink: 15730 bytes leftover after parsing attributes in process `syz.2.52913'. [ 2840.416655][T25359] netlink: 'syz.3.52914': attribute type 29 has an invalid length. [ 2840.443069][T25361] netlink: 'syz.0.52923': attribute type 29 has an invalid length. [ 2840.472190][T25361] netlink: 'syz.0.52923': attribute type 29 has an invalid length. [ 2840.488302][T25365] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.52915'. [ 2840.501242][T25359] netlink: 'syz.3.52914': attribute type 29 has an invalid length. [ 2840.521279][T25366] netlink: 'syz.3.52914': attribute type 29 has an invalid length. [ 2840.530240][T25361] netlink: 'syz.0.52923': attribute type 29 has an invalid length. [ 2841.705149][T25394] netlink: 'syz.4.52929': attribute type 29 has an invalid length. [ 2841.895600][T25398] net_ratelimit: 9 callbacks suppressed [ 2841.895640][T25398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2842.284609][T25430] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2842.301208][T25430] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2842.316999][T25430] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2842.326582][T25430] device geneve0 entered promiscuous mode [ 2842.403486][T25426] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2842.418127][T25426] syzkaller1: linktype set to 825 [ 2842.577549][T25441] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2842.605760][T25441] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2842.672731][T25449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2842.698902][T25451] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2843.124558][T25478] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2843.153785][T25478] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2843.330226][T25497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2843.640285][T25507] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2843.646505][T25507] syzkaller1: linktype set to 825 [ 2843.754077][T25520] delete_channel: no stack [ 2843.890410][T25531] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2843.905472][T25531] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2844.317174][T25557] device team_slave_1 left promiscuous mode [ 2844.380906][T25557] team0 (unregistering): Port device team_slave_1 removed [ 2844.391629][T25557] device virt_wifi0 left promiscuous mode [ 2844.426254][T25572] __nla_validate_parse: 32 callbacks suppressed [ 2844.426288][T25572] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.52993'. [ 2844.482404][T25557] team0 (unregistering): Port device virt_wifi0 removed [ 2844.493934][T25557] device hsr_slave_0 left promiscuous mode [ 2844.509151][T25557] team0 (unregistering): Port device hsr_slave_0 removed [ 2844.519442][T25557] device geneve1 left promiscuous mode [ 2844.532829][T25557] team0 (unregistering): Port device geneve1 removed [ 2844.540776][T25557] device veth1_to_bond left promiscuous mode [ 2844.556349][T25557] team0 (unregistering): Port device veth1_to_bond removed [ 2844.685006][T25580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.52996'. [ 2844.712699][T25582] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.52998'. [ 2844.767387][T25586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53000'. [ 2844.814322][T25591] netlink: 8435 bytes leftover after parsing attributes in process `syz.2.53002'. [ 2844.818653][T25595] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.53004'. [ 2844.915130][T25601] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.53016'. [ 2844.953878][T25602] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.53008'. [ 2844.999510][T25602] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.53008'. [ 2845.160155][T25616] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2845.170074][T25616] syzkaller1: linktype set to 825 [ 2845.178427][T25618] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53011'. [ 2845.516560][T25641] validate_nla: 56 callbacks suppressed [ 2845.516601][T25641] netlink: 'syz.2.53021': attribute type 11 has an invalid length. [ 2845.633422][T25654] netlink: 'syz.2.53024': attribute type 29 has an invalid length. [ 2845.643846][T25654] netlink: 'syz.2.53024': attribute type 29 has an invalid length. [ 2845.672062][T25654] netlink: 'syz.2.53024': attribute type 29 has an invalid length. [ 2845.760210][T25660] netlink: 'syz.2.53027': attribute type 29 has an invalid length. [ 2845.776512][T25660] netlink: 'syz.2.53027': attribute type 29 has an invalid length. [ 2845.810814][T25660] netlink: 'syz.2.53027': attribute type 29 has an invalid length. [ 2845.895938][T25658] netlink: 'syz.4.53026': attribute type 3 has an invalid length. [ 2845.909696][T25658] netlink: 'syz.4.53026': attribute type 2 has an invalid length. [ 2846.196027][T25686] netlink: 'syz.4.53035': attribute type 11 has an invalid length. [ 2846.770224][T25717] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2846.786423][T25717] syzkaller1: Linktype set failed because interface is up [ 2847.299394][T25753] net_ratelimit: 18 callbacks suppressed [ 2847.299414][T25753] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2847.323478][T25753] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2847.922915][T25791] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 2847.942389][T25787] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2847.953107][T25794] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2847.961549][T25787] syzkaller1: Linktype set failed because interface is up [ 2847.968914][T25794] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2848.208707][T25809] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2848.223140][T25809] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2848.391919][T25819] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2848.409244][T25819] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2848.554582][T25834] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2848.573939][T25834] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2849.434787][T25885] __nla_validate_parse: 48 callbacks suppressed [ 2849.434829][T25885] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.53113'. [ 2849.471592][T25880] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.53112'. [ 2849.518376][T25891] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.53114'. [ 2849.658398][T25897] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.53117'. [ 2849.683223][T25899] netlink: 763 bytes leftover after parsing attributes in process `syz.2.53118'. [ 2849.778515][T25902] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.53119'. [ 2849.828150][T25905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.53120'. [ 2849.973436][T25914] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.53124'. [ 2850.009769][T25920] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.53127'. [ 2850.071247][T25926] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.53130'. [ 2850.231931][T25930] device team_slave_1 left promiscuous mode [ 2850.259305][T25930] team0 (unregistering): Port device team_slave_1 removed [ 2850.275397][T25930] device geneve1 left promiscuous mode [ 2850.283247][T25930] team0 (unregistering): Port device geneve1 removed [ 2850.291966][T25930] device hsr_slave_0 left promiscuous mode [ 2850.302458][T25930] team0 (unregistering): Port device hsr_slave_0 removed [ 2850.310023][T25930] device veth1_to_bond left promiscuous mode [ 2850.317963][T25930] team0 (unregistering): Port device veth1_to_bond removed [ 2850.518556][T25946] validate_nla: 57 callbacks suppressed [ 2850.518600][T25946] netlink: 'syz.2.53138': attribute type 29 has an invalid length. [ 2850.548790][T25946] netlink: 'syz.2.53138': attribute type 29 has an invalid length. [ 2850.558971][T25950] netlink: 'syz.1.53139': attribute type 29 has an invalid length. [ 2850.569617][T25950] netlink: 'syz.1.53139': attribute type 29 has an invalid length. [ 2850.578112][T25946] netlink: 'syz.2.53138': attribute type 29 has an invalid length. [ 2850.588579][T25950] netlink: 'syz.1.53139': attribute type 29 has an invalid length. [ 2850.730280][T25962] netlink: 'syz.4.53145': attribute type 29 has an invalid length. [ 2850.751780][T25962] netlink: 'syz.4.53145': attribute type 29 has an invalid length. [ 2850.765211][T25962] netlink: 'syz.4.53145': attribute type 29 has an invalid length. [ 2851.189570][T25984] netlink: 'syz.0.53152': attribute type 29 has an invalid length. [ 2852.580507][T26069] net_ratelimit: 18 callbacks suppressed [ 2852.580556][T26069] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2852.663124][T26069] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2853.060281][T26099] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2853.069457][T26099] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2853.542087][T26122] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2853.550770][T26122] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2853.948346][T26151] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2853.959050][T26151] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2854.380005][T26176] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2854.390324][T26176] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2854.436038][T26177] device wlan0 entered promiscuous mode [ 2854.479497][T26177] __nla_validate_parse: 49 callbacks suppressed [ 2854.479530][T26177] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.53237'. [ 2854.664962][T26188] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.53241'. [ 2854.752606][T26190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53243'. [ 2854.910000][T26192] netlink: 8435 bytes leftover after parsing attributes in process `syz.4.53244'. [ 2854.939521][T26195] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.53245'. [ 2855.078760][T26207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.53251'. [ 2855.208026][T26209] netlink: 144 bytes leftover after parsing attributes in process `syz.1.53252'. [ 2855.314101][T26209] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.53252'. [ 2855.391527][T26223] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.53258'. [ 2855.405879][T26224] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.53257'. [ 2855.650135][T26230] validate_nla: 70 callbacks suppressed [ 2855.650167][T26230] netlink: 'syz.2.53261': attribute type 29 has an invalid length. [ 2855.667923][T26230] netlink: 'syz.2.53261': attribute type 29 has an invalid length. [ 2855.684176][T26230] netlink: 'syz.2.53261': attribute type 29 has an invalid length. [ 2856.215218][T26254] netlink: 'syz.2.53272': attribute type 29 has an invalid length. [ 2856.232996][T26254] netlink: 'syz.2.53272': attribute type 29 has an invalid length. [ 2856.266259][T26257] netlink: 'syz.1.53273': attribute type 29 has an invalid length. [ 2856.287644][T26257] netlink: 'syz.1.53273': attribute type 29 has an invalid length. [ 2856.306743][T26257] netlink: 'syz.1.53273': attribute type 29 has an invalid length. [ 2856.317863][T26254] netlink: 'syz.2.53272': attribute type 29 has an invalid length. [ 2856.352567][T26250] netlink: 'syz.0.53268': attribute type 10 has an invalid length. [ 2856.445384][T26265] device wlan0 entered promiscuous mode [ 2857.899019][T26342] delete_channel: no stack [ 2858.742365][T26392] device wlan0 entered promiscuous mode [ 2859.406552][T26426] net_ratelimit: 2 callbacks suppressed [ 2859.406588][T26426] netlink: set zone limit has 8 unknown bytes [ 2859.526423][T26433] __nla_validate_parse: 34 callbacks suppressed [ 2859.526463][T26433] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.53355'. [ 2859.592904][T26437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.53357'. [ 2859.627767][T26439] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.53358'. [ 2859.659175][T26442] netlink: 763 bytes leftover after parsing attributes in process `syz.0.53359'. [ 2859.673784][T26439] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.53358'. [ 2859.689122][T26439] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2859.718357][T26439] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2859.979076][T26460] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.53368'. [ 2860.049513][T26464] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.53370'. [ 2860.138901][T26469] netlink: 763 bytes leftover after parsing attributes in process `syz.3.53372'. [ 2860.156593][T26470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53371'. [ 2860.294433][T26474] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.53375'. [ 2860.331037][T26474] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2860.340029][T26474] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2860.658500][T26489] delete_channel: no stack [ 2860.829878][T26499] validate_nla: 53 callbacks suppressed [ 2860.830278][T26499] netlink: 'syz.3.53386': attribute type 1 has an invalid length. [ 2860.849983][T26499] netlink: 'syz.3.53386': attribute type 4 has an invalid length. [ 2860.891060][T26503] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2860.907012][T26508] netlink: 'syz.2.53390': attribute type 29 has an invalid length. [ 2860.917009][T26503] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2860.926735][T26508] netlink: 'syz.2.53390': attribute type 29 has an invalid length. [ 2860.946262][T26508] netlink: 'syz.2.53390': attribute type 29 has an invalid length. [ 2861.026526][T26514] netlink: 'syz.2.53393': attribute type 29 has an invalid length. [ 2861.062590][T26514] netlink: 'syz.2.53393': attribute type 29 has an invalid length. [ 2861.083028][T26514] netlink: 'syz.2.53393': attribute type 29 has an invalid length. [ 2861.355699][T26533] netlink: 'syz.2.53402': attribute type 29 has an invalid length. [ 2861.369238][T26533] netlink: 'syz.2.53402': attribute type 29 has an invalid length. [ 2861.499229][T26544] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2861.508041][T26544] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2862.084605][T26577] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2864.654143][T26723] __nla_validate_parse: 55 callbacks suppressed [ 2864.654182][T26723] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.53488'. [ 2864.832216][T26729] netlink: 8435 bytes leftover after parsing attributes in process `syz.2.53491'. [ 2864.923505][T26730] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.53490'. [ 2864.947329][T26730] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2864.969441][T26730] CPU: 1 PID: 26730 Comm: syz.1.53490 Not tainted syzkaller #0 [ 2864.977023][T26730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2864.987098][T26730] Call Trace: [ 2864.990390][T26730] [ 2864.993341][T26730] dump_stack_lvl+0x188/0x250 [ 2864.998052][T26730] ? show_regs_print_info+0x20/0x20 [ 2865.003274][T26730] ? load_image+0x400/0x400 [ 2865.007821][T26730] sysfs_warn_dup+0x8a/0xa0 [ 2865.012348][T26730] sysfs_do_create_link_sd+0xc0/0x110 [ 2865.017750][T26730] device_add+0x7f6/0x1000 [ 2865.022212][T26730] wiphy_register+0x1e81/0x2c30 [ 2865.027202][T26730] ? cfg80211_event_work+0x40/0x40 [ 2865.032353][T26730] ? minstrel_ht_alloc+0x808/0x980 [ 2865.037510][T26730] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2865.043649][T26730] ieee80211_register_hw+0x2aa1/0x3af0 [ 2865.049166][T26730] ? lockdep_hardirqs_on+0x94/0x140 [ 2865.054431][T26730] ? ieee80211_tasklet_handler+0x20/0x20 [ 2865.060098][T26730] ? rcu_is_watching+0x11/0xa0 [ 2865.064931][T26730] ? memset+0x1e/0x40 [ 2865.068947][T26730] ? hrtimer_init+0x10c/0x220 [ 2865.073653][T26730] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2865.079422][T26730] hwsim_new_radio_nl+0xa6f/0xc40 [ 2865.084507][T26730] genl_rcv_msg+0xcea/0xf90 [ 2865.089174][T26730] ? genl_bind+0x380/0x380 [ 2865.093630][T26730] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2865.099215][T26730] ? verify_lock_unused+0x140/0x140 [ 2865.104557][T26730] ? perf_trace_lock_acquire+0xed/0x3e0 [ 2865.110123][T26730] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2865.116725][T26730] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2865.123329][T26730] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2865.129868][T26730] netlink_rcv_skb+0x1f5/0x440 [ 2865.134657][T26730] ? genl_bind+0x380/0x380 [ 2865.139083][T26730] ? netlink_ack+0xb50/0xb50 [ 2865.143684][T26730] ? __lock_acquire+0x7d10/0x7d10 [ 2865.148739][T26730] ? down_read+0x1aa/0x2e0 [ 2865.153177][T26730] genl_rcv+0x24/0x40 [ 2865.157164][T26730] netlink_unicast+0x774/0x920 [ 2865.161974][T26730] netlink_sendmsg+0x8ba/0xbe0 [ 2865.166786][T26730] ? netlink_getsockopt+0x570/0x570 [ 2865.172014][T26730] ? aa_sock_msg_perm+0x94/0x150 [ 2865.176972][T26730] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2865.182277][T26730] ? security_socket_sendmsg+0x7c/0xa0 [ 2865.187745][T26730] ? netlink_getsockopt+0x570/0x570 [ 2865.192957][T26730] ____sys_sendmsg+0x5b7/0x8f0 [ 2865.197749][T26730] ? __sys_sendmsg_sock+0x30/0x30 [ 2865.202803][T26730] ? import_iovec+0x6f/0xa0 [ 2865.207332][T26730] ___sys_sendmsg+0x236/0x2e0 [ 2865.212033][T26730] ? __sys_sendmsg+0x2a0/0x2a0 [ 2865.216824][T26730] ? percpu_counter_add_batch+0x13b/0x160 [ 2865.222583][T26730] __se_sys_sendmsg+0x1af/0x290 [ 2865.227449][T26730] ? __x64_sys_sendmsg+0x80/0x80 [ 2865.232408][T26730] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2865.238410][T26730] ? lockdep_hardirqs_on+0x94/0x140 [ 2865.243628][T26730] do_syscall_64+0x4c/0xa0 [ 2865.248047][T26730] ? clear_bhb_loop+0x30/0x80 [ 2865.252729][T26730] ? clear_bhb_loop+0x30/0x80 [ 2865.257411][T26730] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2865.263312][T26730] RIP: 0033:0x7f5c8b3cde59 [ 2865.267744][T26730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2865.287364][T26730] RSP: 002b:00007f5c89606028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2865.295789][T26730] RAX: ffffffffffffffda RBX: 00007f5c8b647090 RCX: 00007f5c8b3cde59 [ 2865.303764][T26730] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2865.311740][T26730] RBP: 00007f5c8b463d6f R08: 0000000000000000 R09: 0000000000000000 [ 2865.319717][T26730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2865.327709][T26730] R13: 00007f5c8b647128 R14: 00007f5c8b647090 R15: 00007fff503a8b28 [ 2865.335702][T26730] [ 2865.367419][T26736] netlink: 763 bytes leftover after parsing attributes in process `syz.3.53494'. [ 2865.480788][T26743] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.53496'. [ 2865.652009][T26753] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.53500'. [ 2865.772984][T26760] netlink: 8435 bytes leftover after parsing attributes in process `syz.1.53503'. [ 2865.942748][T26769] netlink: 763 bytes leftover after parsing attributes in process `syz.1.53507'. [ 2866.075669][T26777] validate_nla: 74 callbacks suppressed [ 2866.075703][T26777] netlink: 'syz.1.53511': attribute type 29 has an invalid length. [ 2866.096026][T26777] netlink: 'syz.1.53511': attribute type 29 has an invalid length. [ 2866.113137][T26777] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.53511'. [ 2866.123782][T26778] netlink: 'syz.3.53510': attribute type 29 has an invalid length. [ 2866.126397][T26777] netlink: 'syz.1.53511': attribute type 29 has an invalid length. [ 2866.158908][T26778] netlink: 'syz.3.53510': attribute type 29 has an invalid length. [ 2866.176298][T26774] device wlan0 entered promiscuous mode [ 2866.182950][T26778] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53510'. [ 2866.206423][T26778] netlink: 'syz.3.53510': attribute type 29 has an invalid length. [ 2866.229143][T26774] netlink: 'syz.0.53508': attribute type 9 has an invalid length. [ 2866.418868][T26786] device wlan0 entered promiscuous mode [ 2866.468216][T26786] netlink: 'syz.3.53514': attribute type 9 has an invalid length. [ 2866.510406][T26790] netlink: 'syz.1.53515': attribute type 29 has an invalid length. [ 2866.542103][T26792] netlink: 'syz.2.53517': attribute type 29 has an invalid length. [ 2867.543399][T26834] device wlan0 left promiscuous mode [ 2867.574751][T26834] device wlan0 entered promiscuous mode [ 2869.858049][T26944] __nla_validate_parse: 28 callbacks suppressed [ 2869.858086][T26944] netlink: 763 bytes leftover after parsing attributes in process `syz.1.53576'. [ 2870.568794][T26960] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.53580'. [ 2870.640364][T26964] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.53584'. [ 2870.679243][T26967] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53582'. [ 2870.690408][T26969] netlink: 763 bytes leftover after parsing attributes in process `syz.2.53585'. [ 2870.794502][T26975] netlink: 763 bytes leftover after parsing attributes in process `syz.3.53589'. [ 2870.856599][T26973] device wlan0 left promiscuous mode [ 2870.903826][T26980] device wlan0 entered promiscuous mode [ 2870.990397][T26973] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.53587'. [ 2871.262805][T26986] device wlan0 left promiscuous mode [ 2871.345096][T26990] device wlan0 entered promiscuous mode [ 2871.489787][T26998] validate_nla: 54 callbacks suppressed [ 2871.489822][T26998] netlink: 'syz.3.53596': attribute type 29 has an invalid length. [ 2871.535805][T27002] netlink: 'syz.1.53598': attribute type 29 has an invalid length. [ 2871.547102][T26998] netlink: 'syz.3.53596': attribute type 29 has an invalid length. [ 2871.560765][T27005] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53596'. [ 2871.571782][T27002] netlink: 'syz.1.53598': attribute type 29 has an invalid length. [ 2871.585231][T26998] netlink: 'syz.3.53596': attribute type 29 has an invalid length. [ 2871.595280][T27002] netlink: 8435 bytes leftover after parsing attributes in process `syz.1.53598'. [ 2871.616609][T27002] netlink: 'syz.1.53598': attribute type 29 has an invalid length. [ 2871.628821][T27004] netlink: 'syz.2.53599': attribute type 29 has an invalid length. [ 2871.664027][T27004] netlink: 'syz.2.53599': attribute type 29 has an invalid length. [ 2871.683881][T27007] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.53599'. [ 2871.703771][T27004] netlink: 'syz.2.53599': attribute type 29 has an invalid length. [ 2871.808967][T27013] netlink: 'syz.1.53611': attribute type 29 has an invalid length. [ 2872.669979][T27032] device wlan0 left promiscuous mode [ 2872.693586][T27032] device wlan0 entered promiscuous mode [ 2873.969899][T27101] device wlan0 left promiscuous mode [ 2874.014906][T27108] device wlan0 entered promiscuous mode [ 2874.978305][T27155] __nla_validate_parse: 22 callbacks suppressed [ 2874.978332][T27155] netlink: 763 bytes leftover after parsing attributes in process `syz.4.53658'. [ 2875.188022][T27164] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.53662'. [ 2875.289042][T27168] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.53663'. [ 2875.360539][T27170] netlink: 8435 bytes leftover after parsing attributes in process `syz.3.53665'. [ 2875.523910][T27179] netlink: 8435 bytes leftover after parsing attributes in process `syz.3.53680'. [ 2875.566456][T27182] device wlan0 left promiscuous mode [ 2875.585876][T27182] device wlan0 entered promiscuous mode [ 2875.600907][T27182] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.53670'. [ 2875.713767][T27187] netlink: 763 bytes leftover after parsing attributes in process `syz.1.53672'. [ 2875.724446][T27191] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53673'. [ 2875.873172][T27197] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.53676'. [ 2875.935632][T27199] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.53677'. [ 2875.966574][T27199] net_ratelimit: 12 callbacks suppressed [ 2875.966620][T27199] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2876.009924][T27199] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2876.618356][T27238] validate_nla: 69 callbacks suppressed [ 2876.618394][T27238] netlink: 'syz.4.53697': attribute type 29 has an invalid length. [ 2876.659394][T27238] netlink: 'syz.4.53697': attribute type 29 has an invalid length. [ 2876.659442][T27239] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2876.673191][T27242] netlink: 'syz.4.53697': attribute type 29 has an invalid length. [ 2876.716627][T27239] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2876.913242][T27252] netlink: 'syz.0.53700': attribute type 29 has an invalid length. [ 2876.928360][T27251] netlink: 'syz.3.53701': attribute type 29 has an invalid length. [ 2876.949520][T27252] netlink: 'syz.0.53700': attribute type 29 has an invalid length. [ 2876.965245][T27253] netlink: 'syz.0.53700': attribute type 29 has an invalid length. [ 2876.974356][T27251] netlink: 'syz.3.53701': attribute type 29 has an invalid length. [ 2876.994246][T27256] netlink: 'syz.3.53701': attribute type 29 has an invalid length. [ 2877.395009][T27266] netlink: 'syz.0.53708': attribute type 39 has an invalid length. [ 2878.747549][T27326] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2878.758084][T27326] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2880.038308][T27370] __nla_validate_parse: 25 callbacks suppressed [ 2880.038344][T27370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.53751'. [ 2880.182460][T27377] device wlan0 left promiscuous mode [ 2880.212650][T27377] device wlan0 entered promiscuous mode [ 2880.237490][T27377] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.53753'. [ 2881.136260][T27417] device wlan0 left promiscuous mode [ 2881.190988][T27417] device wlan0 entered promiscuous mode [ 2881.225068][T27417] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.53770'. [ 2881.537539][T27430] netlink: 763 bytes leftover after parsing attributes in process `syz.1.53775'. [ 2881.649086][T27437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.53777'. [ 2881.777248][T27444] validate_nla: 38 callbacks suppressed [ 2881.777290][T27444] netlink: 'syz.0.53780': attribute type 17 has an invalid length. [ 2881.797629][T27444] netlink: 'syz.0.53780': attribute type 16 has an invalid length. [ 2881.805882][T27444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.53780'. [ 2882.089684][T27460] netlink: 'syz.3.53787': attribute type 29 has an invalid length. [ 2882.102270][T27460] netlink: 'syz.3.53787': attribute type 29 has an invalid length. [ 2882.115938][T27460] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53787'. [ 2882.127406][T27460] netlink: 'syz.3.53787': attribute type 29 has an invalid length. [ 2882.389579][T27473] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.53793'. [ 2882.413441][T27473] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.53793'. [ 2882.425513][T27473] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2882.434595][T27473] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2882.828452][T27484] netlink: 'syz.0.53796': attribute type 10 has an invalid length. [ 2882.926603][T27496] netlink: 'syz.3.53801': attribute type 29 has an invalid length. [ 2882.953076][T27496] netlink: 'syz.3.53801': attribute type 29 has an invalid length. [ 2882.965990][T27496] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.53801'. [ 2882.978567][T27496] netlink: 'syz.3.53801': attribute type 29 has an invalid length. [ 2883.082544][T27504] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2883.091344][T27504] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2883.199005][T27513] netlink: 'syz.0.53817': attribute type 29 has an invalid length. [ 2883.732598][T27540] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2883.754954][T27540] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2883.831987][T27542] device wlan0 left promiscuous mode [ 2883.860067][T27542] device wlan0 entered promiscuous mode [ 2885.065169][T27581] __nla_validate_parse: 18 callbacks suppressed [ 2885.065206][T27581] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.53847'. [ 2885.111341][T27583] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.53840'. [ 2885.122750][T27585] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.53838'. [ 2885.142643][T27581] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.53847'. [ 2885.174274][T27581] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2885.244722][T27581] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2885.283826][T27595] netlink: 763 bytes leftover after parsing attributes in process `syz.4.53843'. [ 2885.303812][T27593] netlink: 8435 bytes leftover after parsing attributes in process `syz.2.53841'. [ 2885.412191][T27598] netlink: 8435 bytes leftover after parsing attributes in process `syz.0.53855'. [ 2885.654517][T27614] netlink: 152 bytes leftover after parsing attributes in process `syz.4.53850'. [ 2885.670708][T27615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.53861'. [ 2885.833029][T27621] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.53853'. [ 2885.984454][T27627] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2885.993250][T27627] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2886.740909][ T155] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 2886.766391][ T155] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2886.793406][T10582] ------------[ cut here ]------------ [ 2886.809097][T10582] WARNING: CPU: 0 PID: 10582 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2886.893444][T10582] Modules linked in: [ 2886.897562][T10582] CPU: 1 PID: 10582 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2886.905324][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2886.915874][T10582] Workqueue: cfg80211 cfg80211_event_work [ 2886.928091][T10582] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2886.934594][T10582] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b1 f3 42 f8 0f 0b eb bb e8 a8 f3 42 f8 <0f> 0b eb b2 e8 9f f3 42 f8 0f 0b e9 77 fd ff ff e8 93 f3 42 f8 0f [ 2886.954978][T10582] RSP: 0018:ffffc900031ffaa0 EFLAGS: 00010293 [ 2886.961288][T10582] RAX: ffffffff89365548 RBX: dffffc0000000000 RCX: ffff88802c785940 [ 2886.969341][T10582] RDX: 0000000000000000 RSI: ffffffff8a2b3180 RDI: ffffffff8a7a09c0 [ 2886.978573][T10582] RBP: ffffc900031ffb70 R08: ffffffff901d812f R09: 1ffffffff203b025 [ 2886.986586][T10582] R10: dffffc0000000000 R11: fffffbfff203b026 R12: ffff88801defb5f0 [ 2886.994627][T10582] R13: 1ffff9200063ff5c R14: 000000000000001f R15: ffff88805f0fcc90 [ 2887.002661][T10582] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 2887.011651][T10582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2887.018374][T10582] CR2: 00007f73da856ff8 CR3: 0000000078f9e000 CR4: 00000000003506e0 [ 2887.026396][T10582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2887.034435][T10582] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2887.042465][T10582] Call Trace: [ 2887.045744][T10582] [ 2887.048720][T10582] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2887.054315][T10582] ? cfg80211_event_work+0x23/0x40 [ 2887.059517][T10582] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 2887.065521][T10582] cfg80211_process_rdev_events+0x9d/0x110 [ 2887.071426][T10582] cfg80211_event_work+0x2b/0x40 [ 2887.076398][T10582] process_one_work+0x85f/0x1010 [ 2887.081447][T10582] ? worker_detach_from_pool+0x240/0x240 [ 2887.088168][T10582] ? lockdep_hardirqs_off+0x70/0x100 [ 2887.093502][T10582] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2887.098614][T10582] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2887.104191][T10582] ? wq_worker_running+0x97/0x170 [ 2887.109283][T10582] worker_thread+0xaa6/0x1290 [ 2887.113994][T10582] ? lockdep_hardirqs_on+0x94/0x140 [ 2887.119270][T10582] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2887.125214][T10582] kthread+0x436/0x520 [ 2887.129343][T10582] ? rcu_lock_release+0x20/0x20 [ 2887.134204][T10582] ? kthread_blkcg+0xd0/0xd0 [ 2887.138903][T10582] ret_from_fork+0x1f/0x30 [ 2887.143379][T10582] [ 2887.146403][T10582] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2887.153681][T10582] CPU: 1 PID: 10582 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2887.161332][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2887.171426][T10582] Workqueue: cfg80211 cfg80211_event_work [ 2887.177184][T10582] Call Trace: [ 2887.180481][T10582] [ 2887.183406][T10582] dump_stack_lvl+0x188/0x250 [ 2887.188079][T10582] ? show_regs_print_info+0x20/0x20 [ 2887.193280][T10582] ? load_image+0x400/0x400 [ 2887.197812][T10582] panic+0x2e5/0x810 [ 2887.201757][T10582] ? bpf_jit_dump+0xd0/0xd0 [ 2887.206293][T10582] ? ret_from_fork+0x1f/0x30 [ 2887.210888][T10582] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2887.216439][T10582] __warn+0x248/0x2b0 [ 2887.220435][T10582] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2887.225999][T10582] report_bug+0x1b7/0x2e0 [ 2887.230385][T10582] handle_bug+0x3a/0x70 [ 2887.234545][T10582] exc_invalid_op+0x16/0x40 [ 2887.239073][T10582] asm_exc_invalid_op+0x16/0x20 [ 2887.243950][T10582] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2887.250114][T10582] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b1 f3 42 f8 0f 0b eb bb e8 a8 f3 42 f8 <0f> 0b eb b2 e8 9f f3 42 f8 0f 0b e9 77 fd ff ff e8 93 f3 42 f8 0f [ 2887.269736][T10582] RSP: 0018:ffffc900031ffaa0 EFLAGS: 00010293 [ 2887.275819][T10582] RAX: ffffffff89365548 RBX: dffffc0000000000 RCX: ffff88802c785940 [ 2887.283816][T10582] RDX: 0000000000000000 RSI: ffffffff8a2b3180 RDI: ffffffff8a7a09c0 [ 2887.291830][T10582] RBP: ffffc900031ffb70 R08: ffffffff901d812f R09: 1ffffffff203b025 [ 2887.299824][T10582] R10: dffffc0000000000 R11: fffffbfff203b026 R12: ffff88801defb5f0 [ 2887.307818][T10582] R13: 1ffff9200063ff5c R14: 000000000000001f R15: ffff88805f0fcc90 [ 2887.315831][T10582] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2887.321418][T10582] ? trace_rdev_return_void+0x1c0/0x1c0 [ 2887.326992][T10582] ? cfg80211_event_work+0x23/0x40 [ 2887.332133][T10582] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 2887.338100][T10582] cfg80211_process_rdev_events+0x9d/0x110 [ 2887.343930][T10582] cfg80211_event_work+0x2b/0x40 [ 2887.348872][T10582] process_one_work+0x85f/0x1010 [ 2887.353826][T10582] ? worker_detach_from_pool+0x240/0x240 [ 2887.359492][T10582] ? lockdep_hardirqs_off+0x70/0x100 [ 2887.364795][T10582] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2887.369821][T10582] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2887.375381][T10582] ? wq_worker_running+0x97/0x170 [ 2887.380409][T10582] worker_thread+0xaa6/0x1290 [ 2887.385118][T10582] ? lockdep_hardirqs_on+0x94/0x140 [ 2887.390321][T10582] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2887.396214][T10582] kthread+0x436/0x520 [ 2887.400286][T10582] ? rcu_lock_release+0x20/0x20 [ 2887.405148][T10582] ? kthread_blkcg+0xd0/0xd0 [ 2887.409730][T10582] ret_from_fork+0x1f/0x30 [ 2887.414166][T10582] [ 2887.417487][T10582] Kernel Offset: disabled [ 2887.422170][T10582] Rebooting in 86400 seconds..