last executing test programs: 8m29.381630082s ago: executing program 2 (id=2692): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000040)=r1, 0x4) 8m29.162123149s ago: executing program 2 (id=2694): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1e}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) 8m28.859790528s ago: executing program 2 (id=2696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd) 8m24.13646537s ago: executing program 2 (id=2715): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd]}, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) 8m23.004324426s ago: executing program 2 (id=2718): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0xd, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) r6 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000000, &(0x7f00000001c0)="3d707d6be91b2cc3fd0ffece9921730d15f099115e7072ca7ceef6dbf996af80c111a05592099d97dccc", 0x2a, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_int(r6, &(0x7f00000000c0)=0x1000, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8m21.217847853s ago: executing program 2 (id=2728): socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 8m6.073479928s ago: executing program 32 (id=2728): socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.154812335s ago: executing program 4 (id=6229): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x0, 0x0, 0x10000, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='1\r'], 0x31) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r8, 0x1, 0x12, &(0x7f0000000300), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 5.109285486s ago: executing program 1 (id=6240): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa003, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) sendmsg$kcm(r2, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000070000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.106861536s ago: executing program 0 (id=6233): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x0, 0xf8, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0xfffffffe, 0x0, 0x8004}, 0xffffffffffffffff, 0x0, r0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) socketpair(0x26, 0x5, 0x400, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r5 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2048) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) 4.418331748s ago: executing program 4 (id=6235): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000040000000000000000006cecaf9600"/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa1, &(0x7f0000000140)=""/161, 0x41000, 0x62, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xa475, 0x7fff, 0xbb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xef}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5, 0x0, 0x1}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x92, &(0x7f0000000340), &(0x7f0000000380)=""/146, 0xfffffff7, 0x0, 0x42, 0x91, &(0x7f0000000500)="2f236cf2c0d863964405c047fb56ed826a114a741b55ef6100ec65d065b669557db42b785ffc5fb0bf3998b4c5d804b6dfb7155cd7c2b5e23fa63a63d23a04ab540a", &(0x7f0000000580)="1df78487962ee49be55874fc1f01456ccb7980b36e7125bb9b3a9d0eafc6ffdab5ed3a1d3582488a9733cf15a780d8ceed302f3d0b87a7cee3384ecff67ad92959e62e525c725f415d7984048957244af179cd1d7c7995bff3b1add175ac736764a56bd3d1e672e10c138c0feecbaa23f265f71a5cc13eb3887230a7b5589fde8fe957164741a11135c8556214383250a5", 0x0, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r1}}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.684834492s ago: executing program 1 (id=6237): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg(r4, 0x0, 0x100) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000092ffebf93df034f8318836261e2f16d572017d6f73e20158403276f3b71254adc415c02767c841df62e176c5dec0ef2137"], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000001dc0)={0x5, 0x80, 0xb, 0x3, 0x5, 0x7, 0x0, 0x12, 0x10203, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000005c0), 0x2}, 0x1, 0x2, 0x8, 0x3, 0x7, 0xc, 0xff, 0x0, 0x968, 0x0, 0x7}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4010}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f40)={r5, 0xe0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680), &(0x7f0000001a00)=[0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000001a40)=[{}], 0x8, 0x0, 0x0, &(0x7f0000001ac0), 0x8, 0xe1, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000580)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001cc0)=[{0x0}, {0x0}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)="af18e36761b7472094a1c5a88fa4adb9b4d2295ebcac64e31c5635f2d22f2d2ba695a1bcf40b6c1eccfc07b6739e1c3b95c93b558dd5e0af08138f4ab40903c7479ab5a41bc3eb7674757540c591bf96eb8607", 0x53}, {&(0x7f0000001c00)="698cab64b7b68043a7c85013213a6bbe5658baf2d2f7e9d4d5c4221b19e0ec21fbc94fd8ae222076b6fa5ce8d1285bbda53b9b5e0ea5419f4b344104606b31cd163073ea9054f7d4219775bc96a9db0ab438808ff072a915b04dea", 0x5b}, {0x0}], 0x6, &(0x7f0000001d40)}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) 3.479337938s ago: executing program 3 (id=6239): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x29, 0x0, 0x28) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x891a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r6, 0x58, &(0x7f0000000540)}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x16) 3.475936149s ago: executing program 0 (id=6250): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cgroup.stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000040) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback, 0x22, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0]}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x6, 0x8b, &(0x7f0000000cc0)=""/139, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x200, 0x3}, 0x10, 0xdea4, r0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x4, 0xb, 0xa0fcbafd6dfd6bdc}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x4, 0x10, 0x1d}], 0x10, 0xa8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x3}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x2b) perf_event_open(&(0x7f0000000000)={0x671cc83410051db1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x1, 0x92, 0x81, 0x86, 0x40, 0x4, 0x0, 0x17ee, 0xc000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000780), 0x2}, 0x100400, 0x1, 0x7, 0x9, 0x9, 0x5, 0xf1, 0x0, 0xfffffffa, 0x0, 0xc}, r7, 0xa, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(r4) socketpair(0x0, 0x5, 0x9, 0x0) 3.299937954s ago: executing program 5 (id=6241): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1c4c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x7, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xa) socket$kcm(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f0000000900), &(0x7f0000000940)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r4], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x71, &(0x7f0000000000), 0x8) sendmsg$inet(r8, &(0x7f00000030c0)={&(0x7f00000005c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000000740)="8ea38789", 0x4}], 0x1}, 0x40480c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000060000850000001b000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r9, &(0x7f0000000240)}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[], 0x0, 0xd2, 0x0, 0x0, 0xd}, 0x28) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0xc804) 3.103836841s ago: executing program 4 (id=6242): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), 0x0}, 0x20) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r4, 0x0, 0x0}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000ac0)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4ab0eae0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6cd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x2, 0x3, 0x9, 0x77, 0x2}], 0x0, 0x3d, 0xba, &(0x7f0000000c40)=""/186, 0x0, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000d40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 2.986972545s ago: executing program 1 (id=6243): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x88}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x4, 0x68, 0x1, 0x3}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3bb}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x88}, 0x40800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000e000000000000", @ANYRES32, @ANYBLOB='\a\x00'/18, @ANYRES32=r4, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/212, 0xd4}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xf, 0x5, 0x31}, 0x10, r5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)=[r1, r1, r1], &(0x7f0000000580)=[{0x2, 0x4, 0xe, 0xb}, {0x5, 0x2, 0xf, 0x8}, {0x3, 0x4, 0x10, 0xc}, {0x2, 0x4, 0x8, 0x9}, {0x4, 0x5, 0xb, 0xb}, {0x3, 0x5, 0x6, 0x9}, {0x4, 0x2, 0x8, 0x9}, {0x5, 0x3, 0xe}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.692591374s ago: executing program 5 (id=6244): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002f80)={0x0, &(0x7f0000000800)=""/128, &(0x7f0000001f40)="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", 0x0, 0x6ae, r0, 0x4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010038000000000000000000000000000000060000009365cbfce1acfaefd6a7d6de"], 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffff9}]}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x44804) 2.691418034s ago: executing program 0 (id=6255): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cgroup.stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000040) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback, 0x22, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0]}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x6, 0x8b, &(0x7f0000000cc0)=""/139, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x200, 0x3}, 0x10, 0xdea4, r0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x4, 0xb, 0xa0fcbafd6dfd6bdc}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x4, 0x10, 0x1d}], 0x10, 0xa8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x3}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x2b) perf_event_open(&(0x7f0000000000)={0x671cc83410051db1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x1, 0x92, 0x81, 0x86, 0x40, 0x4, 0x0, 0x17ee, 0xc000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000780), 0x2}, 0x100400, 0x1, 0x7, 0x9, 0x9, 0x5, 0xf1, 0x0, 0xfffffffa, 0x0, 0xc}, r7, 0xa, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(r4) socketpair(0x0, 0x5, 0x9, 0x0) 2.418121082s ago: executing program 0 (id=6245): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20008810) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x48b, 0x0, 0x18) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) sendmsg(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700)=@ethernet={0x306, @broadcast}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)="cb51f0b1cf06bf1802226b68658d087bdce604de7fd2a06dd412d021da1e53da6514ef318ce86bfb9cdd1cdaa5b09b87eda491df64b10622d27cfc237656074e53e0ab83f2918b569b9a8f80f3db4ec28183d924f245c8c25d295628396ac8ff01112cb23eb36d8afbd604ab8ede16c4ac8398c86846c72176b59bd2b52b9696156db96bef413eadb994f367c635cc15e87d5895cc08008ec8fe4c507da178014591b30c73822c33f2ffb7c8edb86a", 0xaf}, {&(0x7f0000000840)="90dbc5c87b7edbec887aa7e7116e5eb9abc0c002abd9ad064530cd79351f6e536000ec952b875a721f9623e702d12824b5db26c054d4d542d0dc7aa90b31a3bccc667e78747c7be618007e50f8cac8dcac4d609e3a57", 0x56}, {&(0x7f0000000500)="281bbca71dd324822d4db64887c70c5974ac5642070a61acb6eda0e11724", 0x1e}, {&(0x7f00000008c0)="6bc7cf14b10a21785e5f1446f74f16ec3017561a096e743e7ab56943296adbbbe06e81b4a59687e3efbca5b04787b1e2021029b10328eed499c395c064c061c3044b65cff17fb7a42cd741bf354268b43f5e8c28fe1643f79ec73c857d255f71e381a7c983730d054b1a6fd019bd06c1c4990c30670db39a89f9a7fd58e36625ef57cb7a16104ab04d9e1083642fb6e76b779a81ca45533bd121173bd60df8a6fce771e91000435b855191d012837410d6f950db23f754e0d1164b2d658070e056fe5b71a8149f2b963d0df10270fb409624", 0xd2}], 0x4, &(0x7f0000000b80)=[{0x38, 0x29, 0x4, "72629f371704359aacb796d9370d81bbbedbe7cea6e6dd94c1223c0af331d08cf282af3d"}, {0xc0, 0x112, 0xffffffff, "5cac9902b7cdd9f59b00d5fbde2aac923103326693f80806e078fa5dc2d772d821a78c1d4c06964756e9afd5a7d2b2ef17700b8b069708066da73a316ad334e23ce25726cae3e1b1438d97d2dd9d521c0e64dae67acc8ff5a7a8a5ea0f017949d6c8ebcffaa92ff7ff96d6710a6ba93df99d125b8db34031a6df52bc0427ae0ca090b857cd8b42c28863bb280c5a68db45c5823b4604620ebc8198438df071dfadd1927d8756ca6c329dc3ff"}, {0x28, 0x104, 0xe3e8, "073cf946dd80574dc364655066afd98481"}, {0xe0, 0x19, 0x6, "a673993f7413755276c543ad1082fbfd2e6fa556677eb251d524f69bf3de4faaf17188c4950c31369cb32b279c6db212956744bff30e885155173c074d03b16cd7d504590fa2a1ddc92db33f4c25bbf5f0e840cd705c11e91379dc352a444aa075913012e6bc3b87b8911c8b4009c6c35fb5a215cb6a751320c4887210ebf587494c42e7ef60a47b5e4ec21c1ba352aa395d4859ad83be1ec0b350e3c32e785b01fb64cfb84d0c9418086ac7afd352d277460c15171a8fcffcf792d6c0454d4916b14d0b6fb1be46d42f"}, {0x48, 0x114, 0x3, "5194d3356cd577b3cb5d1f96130b7cad4033820ab262898389ed2a344e26ae96a27b29e4d631bdae35f6297a247ca909bc4b"}, {0xd8, 0x1, 0x0, "be0b1ef361fdf977eab510b0b91201640a520efd57ea5f57dfb577dbacf590cf054ae6d11724676c401eaa4baa12adcd0c32c475df6a9eabfd98b3e6066939b1cb9f5ae49e800775bfe4427e8c4eeef8ee21456abad3c18652fedcb76297a60cd987fb9591e25a6b8134fc4b95cc5a67bc0fbc069bdfe755a6c4546812c06a2afe867586328219b06ad080f689cc76c952ef01526ecd1f3afd26abaffe730531f263658ebe17ffc1456364c12ee086b778b3f569d693f6ab043266799d1ad45974d66e2bd9"}, {0x98, 0x3a, 0x4, "702fdf916475df84451519a60a3152b3ea0346a93fac8a9888f5eda82b92c245a6c16f0e803bb6a8dbb5c3b38caed6f9859b372a6c7abd3c134f0956c9c91100e2bfce4577f08a7128f3b60f84bf4fe3b15b6501706dde28b20a69ed88e2e9efd7ad86a133957b8ab8d3f0f72fcd1097fee0d9e11fcb858fbcdd5e9e6bb1acddd2f13fb3cf"}, {0xa8, 0x103, 0x5, "4f569ff7bb90f7b72245dd2c6254082fd06f942ccb2d9686931da1ae5e2b339f26b01d4557f0f6235cf4c806d4ea956e830d281763fcafccf0b7f63beb7ab4b796c24c123c8247fc70276bf64f74043643d820a11677a81c4d866d2b848d9628cd431d6b7df7587f1d141e5c00e6671741633613a638196259268fb9d0d537cfc9dc634f823693d428d9481f66334d17b9bb93"}], 0x460}, 0x1) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000890600001144ee163cd4b8bf4a31accbe1", 0x27}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0xc9e}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x13, 0xfffff001, 0x1, 0x4, 0x8, r7, 0x6, '\x00', r6, r8, 0x3, 0x0, 0x5}, 0x50) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x65}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x280000, 0x0) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000000280)) 2.417840322s ago: executing program 3 (id=6246): r0 = socket$kcm(0x10, 0x2, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000137, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xf, &(0x7f0000000340)=@ringbuf, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x3, 0x6, 0x8000, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r6, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r3, r1, 0x6, 0x2014, 0x0, @value=r6}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be00"/159, 0x9f}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b", 0x396}], 0x2}, 0x10049014) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="3bb2c8dd3da3f4282b", 0x9}], 0x1}, 0x0) 2.417527903s ago: executing program 4 (id=6247): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8}, 0x800, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @multicast}) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x2000000, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a500200053582c137153e37000c0180fc0b10000550", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x28, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @generic={0xa3, 0x5, 0xc, 0xfffb, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x10, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, r0], 0x0, 0x10, 0x3}, 0x94) r6 = socket$kcm(0x29, 0xd, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={r0}) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40002161) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000600)={r7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x3915c68a56f6e51a, 0x0, 0x79c, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r5, 0x18, 0x8, 0x0, @void, @value=r9, @void, @void, r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4080000000000006110ee61406a5069c1d0bfcef0370000000000000000950000001e000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x22) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r6, 0x4, 0x0, 0x80000001, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 2.337741515s ago: executing program 5 (id=6248): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r0], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={0xffffffffffffffff, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000010000008000000007cbfaa1883f09b1f50b244cce5e7d74587264611f451c5224b4132cbad56fc9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x40, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) recvmsg$unix(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000), 0x2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x387, 0xdf, 0x5, 0x880a}, {0x14, 0x8, 0x0, 0x80000000}, {0xf, 0x4, 0x8, 0xc1}, {0x9, 0x6, 0x1, 0x8}, {0xbd9, 0x9, 0x3, 0x8}, {0xd7, 0x3, 0xc, 0x180000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @local}) 2.247547148s ago: executing program 3 (id=6249): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cgroup.stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000040) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback, 0x22, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0]}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x6, 0x8b, &(0x7f0000000cc0)=""/139, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x200, 0x3}, 0x10, 0xdea4, r0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x4, 0xb, 0xa0fcbafd6dfd6bdc}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x4, 0x10, 0x1d}], 0x10, 0xa8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x3}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x2b) perf_event_open(&(0x7f0000000000)={0x671cc83410051db1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x1, 0x92, 0x81, 0x86, 0x40, 0x4, 0x0, 0x17ee, 0xc000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000780), 0x2}, 0x100400, 0x1, 0x7, 0x9, 0x9, 0x5, 0xf1, 0x0, 0xfffffffa, 0x0, 0xc}, r7, 0xa, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(r4) socketpair(0x0, 0x5, 0x9, 0x0) 2.042974835s ago: executing program 3 (id=6251): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa003, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) sendmsg$kcm(r2, 0x0, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000085000000070000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.974058577s ago: executing program 5 (id=6252): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa003, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x4800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x40) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.905551269s ago: executing program 0 (id=6253): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x9800, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x1}, 0xc001, 0x10040, 0xfd84, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000640)=""/2, 0x2}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/113, 0x71}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x22) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e1406feffff7f000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.905273789s ago: executing program 1 (id=6254): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x0, 0xf8, 0x0, 0x7, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xf}, 0x6303, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0xfffffffe, 0x0, 0x8004}, 0xffffffffffffffff, 0x0, r0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) socketpair(0x26, 0x5, 0x400, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r5 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2048) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) 1.475404422s ago: executing program 3 (id=6256): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1c4c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x7, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xa) socket$kcm(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f0000000900), &(0x7f0000000940)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r4], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x71, &(0x7f0000000000), 0x8) sendmsg$inet(r8, &(0x7f00000030c0)={&(0x7f00000005c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000000740)="8ea38789", 0x4}], 0x1}, 0x40480c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000060000850000001b000000b700000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r9, &(0x7f0000000240)}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[], 0x0, 0xd2, 0x0, 0x0, 0xd}, 0x28) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0xc804) 1.384783205s ago: executing program 4 (id=6257): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cgroup.stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000040) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback, 0x22, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0]}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0], &(0x7f0000000440)='GPL\x00', 0x6, 0x8b, &(0x7f0000000cc0)=""/139, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x200, 0x3}, 0x10, 0xdea4, r0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x4, 0xb, 0xa0fcbafd6dfd6bdc}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x4, 0x10, 0x1d}], 0x10, 0xa8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x3}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x2b) perf_event_open(&(0x7f0000000000)={0x671cc83410051db1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x1, 0x92, 0x81, 0x86, 0x40, 0x4, 0x0, 0x17ee, 0xc000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000780), 0x2}, 0x100400, 0x1, 0x7, 0x9, 0x9, 0x5, 0xf1, 0x0, 0xfffffffa, 0x0, 0xc}, r7, 0xa, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(r4) socketpair(0x0, 0x5, 0x9, 0x0) 591.673991ms ago: executing program 4 (id=6258): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x440, 0x3, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x29, 0x0, 0x28) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x891a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r6, 0x58, &(0x7f0000000540)}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x16) 590.780681ms ago: executing program 0 (id=6268): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x40004000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0xb02, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8906, 0x0) 590.009181ms ago: executing program 1 (id=6259): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90224fc60", 0x14}], 0x8}, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x22, 0x0, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) close(r3) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 586.013901ms ago: executing program 5 (id=6269): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cgroup.stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000040) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback, 0x22, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0]}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0], &(0x7f0000000440)='GPL\x00', 0x6, 0x8b, &(0x7f0000000cc0)=""/139, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x200, 0x3}, 0x10, 0xdea4, r0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x4, 0xb, 0xa0fcbafd6dfd6bdc}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x4, 0x10, 0x1d}], 0x10, 0xa8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x3}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x2b) perf_event_open(&(0x7f0000000000)={0x671cc83410051db1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x1, 0x92, 0x81, 0x86, 0x40, 0x4, 0x0, 0x17ee, 0xc000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000780), 0x2}, 0x100400, 0x1, 0x7, 0x9, 0x9, 0x5, 0xf1, 0x0, 0xfffffffa, 0x0, 0xc}, r7, 0xa, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(r4) socketpair(0x0, 0x5, 0x9, 0x0) 572.897052ms ago: executing program 3 (id=6260): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002f80)={0x0, &(0x7f0000000800)=""/128, &(0x7f0000001f40)="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", 0x0, 0x6ae, r0, 0x4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010038000000000000000000000000000000060000009365cbfce1acfaefd6a7d6de"], 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x16, 0x0, 0x0, 0xfffffff9}]}) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0x9) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x44804) 170.614944ms ago: executing program 5 (id=6261): r0 = socket$kcm(0x10, 0x2, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000137, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xf, &(0x7f0000000340)=@ringbuf, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x3, 0x6, 0x8000, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000100)=r6, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r3, r1, 0x6, 0x2014, 0x0, @value=r6}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be00"/159, 0x9f}, {&(0x7f0000000a40)="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", 0x396}], 0x2}, 0x10049014) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="3bb2c8dd3da3f4282b", 0x9}], 0x1}, 0x0) 0s ago: executing program 1 (id=6262): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='cgroup.stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000040) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback, 0x22, 0x0, 0x8, &(0x7f0000000880)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0]}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0], &(0x7f0000000440)='GPL\x00', 0x6, 0x8b, &(0x7f0000000cc0)=""/139, 0x41100, 0x28, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x200, 0x3}, 0x10, 0xdea4, r0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x4, 0xb, 0xa0fcbafd6dfd6bdc}, {0x1, 0x3, 0x1, 0x7}, {0x3, 0x4, 0x10, 0x1d}], 0x10, 0xa8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x3}, 0x10}, 0x90) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x2b) perf_event_open(&(0x7f0000000000)={0x671cc83410051db1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x1, 0x92, 0x81, 0x86, 0x40, 0x4, 0x0, 0x17ee, 0xc000, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000780), 0x2}, 0x100400, 0x1, 0x7, 0x9, 0x9, 0x5, 0xf1, 0x0, 0xfffffffa, 0x0, 0xc}, r7, 0xa, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) close(r4) socketpair(0x0, 0x5, 0x9, 0x0) kernel console output (not intermixed with test programs): y [ 1022.107864][T19238] netlink: 'syz.3.4210': attribute type 39 has an invalid length. [ 1022.667844][T19258] netlink: 'syz.4.4215': attribute type 10 has an invalid length. [ 1022.708793][T19258] team0: Device wg1 is of different type [ 1022.952837][T19253] delete_channel: no stack [ 1023.649165][T19274] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4220'. [ 1023.659957][T19274] device hsr_slave_0 left promiscuous mode [ 1024.226182][T19292] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1024.241758][T19284] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1024.267571][T19288] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1024.715486][T19289] netlink: 'syz.0.4225': attribute type 10 has an invalid length. [ 1024.790322][T19289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1024.820284][T19289] device team0 entered promiscuous mode [ 1024.974426][T19289] device team_slave_0 entered promiscuous mode [ 1025.002454][T19289] device team_slave_1 entered promiscuous mode [ 1025.049304][T19289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.096328][T19289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1025.262377][T19309] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1025.292009][T19303] netlink: 'syz.1.4228': attribute type 39 has an invalid length. [ 1025.634729][T19316] netlink: 'syz.4.4234': attribute type 10 has an invalid length. [ 1025.645827][T19316] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4234'. [ 1026.041848][T19328] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1026.348154][T19339] netlink: 'syz.3.4238': attribute type 10 has an invalid length. [ 1028.128386][T19373] delete_channel: no stack [ 1028.149393][T19372] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4244'. [ 1028.176268][T19371] netlink: 'syz.0.4246': attribute type 10 has an invalid length. [ 1028.576908][T19371] device wg1 entered promiscuous mode [ 1028.592285][T19371] team0: Device wg1 is of different type [ 1028.704822][T19365] delete_channel: no stack [ 1029.136733][T19393] device sit0 left promiscuous mode [ 1029.388505][T19398] mac80211_hwsim hwsim8 O3ãc¤±: renamed from wlan1 [ 1029.490243][T19397] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1029.514641][T19397] device hsr_slave_0 left promiscuous mode [ 1029.842234][T19408] netlink: 'syz.4.4257': attribute type 10 has an invalid length. [ 1030.424553][T19427] delete_channel: no stack [ 1030.543128][T19442] netlink: 'syz.1.4265': attribute type 10 has an invalid length. [ 1030.604233][T19439] netlink: 'syz.0.4267': attribute type 39 has an invalid length. [ 1031.145987][T19435] delete_channel: no stack [ 1031.427832][T19460] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4271'. [ 1031.539831][T19460] device hsr_slave_0 left promiscuous mode [ 1031.811245][T19460] device hsr_slave_1 left promiscuous mode [ 1032.828365][T19486] netlink: 147376 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1032.954468][T19486] openvswitch: netlink: IP tunnel dst address not specified [ 1032.993075][T19485] netlink: 'syz.1.4279': attribute type 10 has an invalid length. [ 1033.020220][T19485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1033.359868][T19495] netlink: 'syz.0.4282': attribute type 39 has an invalid length. [ 1033.380556][T19500] netlink: 'syz.1.4284': attribute type 3 has an invalid length. [ 1033.510346][T19500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4284'. [ 1033.799929][T19505] netlink: 'syz.0.4285': attribute type 10 has an invalid length. [ 1033.855940][T19506] netlink: 'syz.0.4285': attribute type 9 has an invalid length. [ 1033.966564][T19506] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1034.028010][T19505] device hsr_slave_0 entered promiscuous mode [ 1034.064780][T19505] team0: Port device hsr_slave_0 added [ 1034.300474][T19512] delete_channel: no stack [ 1034.309128][T19522] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1035.704138][T19540] netlink: 'syz.4.4296': attribute type 10 has an invalid length. [ 1035.794873][T19540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1035.903608][T19540] device team0 entered promiscuous mode [ 1036.007007][T19540] device team_slave_0 entered promiscuous mode [ 1036.091933][T19540] device team_slave_1 entered promiscuous mode [ 1036.127101][T19540] device wlan1 entered promiscuous mode [ 1036.159037][T19540] device geneve1 entered promiscuous mode [ 1036.288890][T19540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.319917][T19540] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1036.588573][T19558] delete_channel: no stack [ 1037.723206][T19600] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1039.218276][T19626] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4319'. [ 1039.721007][T19650] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4325'. [ 1040.178800][T19652] netlink: 40707 bytes leftover after parsing attributes in process `syz.3.4327'. [ 1040.922307][T19690] netlink: 'syz.4.4338': attribute type 29 has an invalid length. [ 1041.011263][T19695] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 1041.043229][T19690] netlink: 'syz.4.4338': attribute type 29 has an invalid length. [ 1041.071192][T19695] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.4338'. [ 1041.409331][T19710] netlink: 'syz.3.4341': attribute type 4 has an invalid length. [ 1041.522116][T19710] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4341'. [ 1041.598229][T19699] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1041.709052][T19714] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4345'. [ 1042.536795][T19739] netlink: 'syz.1.4350': attribute type 10 has an invalid length. [ 1042.701303][T19746] netlink: 'syz.1.4350': attribute type 9 has an invalid length. [ 1042.754149][T19746] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1044.061902][T19770] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4360'. [ 1044.675433][T19785] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1044.812617][T19785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1044.941097][T19794] netlink: 'syz.4.4369': attribute type 10 has an invalid length. [ 1045.039658][T19794] device hsr_slave_0 entered promiscuous mode [ 1045.054558][T19794] team0: Port device hsr_slave_0 added [ 1045.407837][T19803] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4371'. [ 1045.900430][T19811] tap0: tun_chr_ioctl cmd 35111 [ 1046.157178][T19809] delete_channel: no stack [ 1046.777829][T19832] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1047.365698][T19851] netlink: 'syz.3.4386': attribute type 10 has an invalid length. [ 1047.638895][T19854] netlink: 'syz.3.4386': attribute type 9 has an invalid length. [ 1047.725794][T19854] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1048.569420][T19889] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1048.891434][T19885] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4397'. [ 1049.309796][T19902] netlink: 'syz.0.4402': attribute type 29 has an invalid length. [ 1049.378071][T19902] netlink: 'syz.0.4402': attribute type 29 has an invalid length. [ 1049.678962][T19907] netlink: 'syz.0.4402': attribute type 1 has an invalid length. [ 1049.718115][T19907] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1049.735389][T19916] netlink: 144452 bytes leftover after parsing attributes in process `syz.4.4405'. [ 1049.795238][T19902] netlink: 'syz.0.4402': attribute type 29 has an invalid length. [ 1049.839306][T19904] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4403'. [ 1049.853553][T19916] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1050.073976][T19926] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1050.542103][T19939] netlink: 'syz.5.4410': attribute type 9 has an invalid length. [ 1050.731008][T19939] netlink: 184904 bytes leftover after parsing attributes in process `syz.5.4410'. [ 1051.126930][T19931] netlink: 'syz.5.4410': attribute type 10 has an invalid length. [ 1051.186582][T19931] team0: Port device hsr_slave_0 added [ 1051.631962][T19958] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1051.787974][T19946] netlink: 'syz.3.4413': attribute type 10 has an invalid length. [ 1051.829961][T19961] netlink: 'syz.5.4418': attribute type 29 has an invalid length. [ 1051.854707][T19955] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1051.966099][T19968] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.4418'. [ 1052.549878][T19981] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1052.551129][T19977] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4423'. [ 1052.582216][T19981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.353305][T20009] validate_nla: 2 callbacks suppressed [ 1053.353358][T20009] netlink: 'syz.1.4433': attribute type 29 has an invalid length. [ 1053.521119][T20009] netlink: 'syz.1.4433': attribute type 29 has an invalid length. [ 1053.533171][T20002] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4432'. [ 1053.663493][T20009] netlink: 'syz.1.4433': attribute type 1 has an invalid length. [ 1053.694124][T20009] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.4433'. [ 1053.715537][T20012] netlink: 'syz.1.4433': attribute type 29 has an invalid length. [ 1053.802831][T20016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1053.909318][T20016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.950452][T20022] device wlan0 entered promiscuous mode [ 1054.345124][T20032] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1054.550530][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.557161][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.045193][T20062] netlink: 'syz.3.4449': attribute type 29 has an invalid length. [ 1055.155127][T20060] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1055.253399][T20060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1055.304000][T20062] netlink: 'syz.3.4449': attribute type 29 has an invalid length. [ 1055.364762][T20059] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1056.110934][T20067] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1056.295283][T20067] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1056.323912][T20067] CPU: 0 PID: 20067 Comm: syz.0.4453 Not tainted syzkaller #0 [ 1056.332254][T20067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1056.343095][T20067] Call Trace: [ 1056.346530][T20067] [ 1056.349703][T20067] dump_stack_lvl+0x188/0x250 [ 1056.354785][T20067] ? show_regs_print_info+0x20/0x20 [ 1056.360550][T20067] ? load_image+0x400/0x400 [ 1056.365291][T20067] sysfs_warn_dup+0x8a/0xa0 [ 1056.369970][T20067] sysfs_do_create_link_sd+0xc0/0x110 [ 1056.375536][T20067] device_add+0x7ed/0xfb0 [ 1056.381054][T20067] wiphy_register+0x1e81/0x2c30 [ 1056.386134][T20067] ? cfg80211_event_work+0x40/0x40 [ 1056.391641][T20067] ? minstrel_ht_alloc+0x808/0x980 [ 1056.397089][T20067] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1056.404121][T20067] ieee80211_register_hw+0x2aa1/0x3af0 [ 1056.409641][T20067] ? ieee80211_tasklet_handler+0x20/0x20 [ 1056.416051][T20067] ? rcu_is_watching+0x11/0xa0 [ 1056.421676][T20067] ? memset+0x1e/0x40 [ 1056.426082][T20067] ? hrtimer_init+0x10c/0x220 [ 1056.431001][T20067] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1056.436969][T20067] hwsim_new_radio_nl+0xa6f/0xc40 [ 1056.442626][T20067] genl_rcv_msg+0xcea/0xf90 [ 1056.447978][T20067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.454256][T20067] ? genl_bind+0x380/0x380 [ 1056.458768][T20067] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1056.464802][T20067] ? lock_chain_count+0x20/0x20 [ 1056.471011][T20067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.477463][T20067] ? lockdep_hardirqs_on+0x94/0x140 [ 1056.483937][T20067] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1056.490657][T20067] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1056.498462][T20067] ? lock_acquire+0x208/0x400 [ 1056.503531][T20067] netlink_rcv_skb+0x1f5/0x440 [ 1056.508787][T20067] ? genl_bind+0x380/0x380 [ 1056.513256][T20067] ? netlink_ack+0xb50/0xb50 [ 1056.518151][T20067] ? __lock_acquire+0x7d10/0x7d10 [ 1056.523406][T20067] ? down_read+0x1aa/0x2e0 [ 1056.528044][T20067] genl_rcv+0x24/0x40 [ 1056.532492][T20067] netlink_unicast+0x774/0x920 [ 1056.537750][T20067] netlink_sendmsg+0x8ba/0xbe0 [ 1056.542560][T20067] ? netlink_getsockopt+0x570/0x570 [ 1056.548524][T20067] ? aa_sock_msg_perm+0x94/0x150 [ 1056.553631][T20067] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1056.559182][T20067] ? security_socket_sendmsg+0x7c/0xa0 [ 1056.564685][T20067] ? netlink_getsockopt+0x570/0x570 [ 1056.570032][T20067] ____sys_sendmsg+0x5b7/0x8f0 [ 1056.574967][T20067] ? __sys_sendmsg_sock+0x30/0x30 [ 1056.580121][T20067] ? import_iovec+0x6f/0xa0 [ 1056.584748][T20067] ___sys_sendmsg+0x236/0x2e0 [ 1056.589574][T20067] ? __sys_sendmsg+0x2a0/0x2a0 [ 1056.594386][T20067] ? ktime_get_real_ts64+0x440/0x440 [ 1056.600032][T20067] __se_sys_sendmsg+0x1af/0x290 [ 1056.604939][T20067] ? __x64_sys_sendmsg+0x80/0x80 [ 1056.610030][T20067] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1056.615980][T20067] do_syscall_64+0x4c/0xa0 [ 1056.620421][T20067] ? clear_bhb_loop+0x30/0x80 [ 1056.625207][T20067] ? clear_bhb_loop+0x30/0x80 [ 1056.629936][T20067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1056.635937][T20067] RIP: 0033:0x7f0030613e59 [ 1056.640382][T20067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.662867][T20067] RSP: 002b:00007f002e86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.672108][T20067] RAX: ffffffffffffffda RBX: 00007f003088cfa0 RCX: 00007f0030613e59 [ 1056.681108][T20067] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 1056.689563][T20067] RBP: 00007f00306a9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1056.697851][T20067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.706289][T20067] R13: 00007f003088d038 R14: 00007f003088cfa0 R15: 00007ffd376d6df8 [ 1056.714835][T20067] [ 1056.785041][T20080] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1057.178506][T20095] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4463'. [ 1057.460147][T20099] netlink: 144452 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1057.506910][T20105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4466'. [ 1057.609206][T20099] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1057.704645][T20099] CPU: 1 PID: 20099 Comm: syz.3.4465 Not tainted syzkaller #0 [ 1057.712291][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1057.722630][T20099] Call Trace: [ 1057.726133][T20099] [ 1057.729190][T20099] dump_stack_lvl+0x188/0x250 [ 1057.734185][T20099] ? show_regs_print_info+0x20/0x20 [ 1057.739648][T20099] ? load_image+0x400/0x400 [ 1057.744414][T20099] sysfs_warn_dup+0x8a/0xa0 [ 1057.749496][T20099] sysfs_do_create_link_sd+0xc0/0x110 [ 1057.755028][T20099] device_add+0x7ed/0xfb0 [ 1057.759615][T20099] wiphy_register+0x1e81/0x2c30 [ 1057.764896][T20099] ? cfg80211_event_work+0x40/0x40 [ 1057.770578][T20099] ? minstrel_ht_alloc+0x808/0x980 [ 1057.776046][T20099] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1057.782344][T20099] ieee80211_register_hw+0x2aa1/0x3af0 [ 1057.788406][T20099] ? ieee80211_tasklet_handler+0x20/0x20 [ 1057.794267][T20099] ? rcu_is_watching+0x11/0xa0 [ 1057.799064][T20099] ? memset+0x1e/0x40 [ 1057.803412][T20099] ? hrtimer_init+0x10c/0x220 [ 1057.808131][T20099] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1057.814347][T20099] hwsim_new_radio_nl+0xa6f/0xc40 [ 1057.819589][T20099] genl_rcv_msg+0xcea/0xf90 [ 1057.824121][T20099] ? genl_bind+0x380/0x380 [ 1057.828567][T20099] ? vmacache_find+0x238/0x590 [ 1057.833829][T20099] ? verify_lock_unused+0x140/0x140 [ 1057.839285][T20099] ? verify_lock_unused+0x140/0x140 [ 1057.844503][T20099] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1057.851182][T20099] ? lock_chain_count+0x20/0x20 [ 1057.856167][T20099] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1057.862722][T20099] netlink_rcv_skb+0x1f5/0x440 [ 1057.867802][T20099] ? genl_bind+0x380/0x380 [ 1057.872272][T20099] ? netlink_ack+0xb50/0xb50 [ 1057.876998][T20099] ? __lock_acquire+0x7d10/0x7d10 [ 1057.882487][T20099] ? down_read+0x1aa/0x2e0 [ 1057.886928][T20099] genl_rcv+0x24/0x40 [ 1057.891015][T20099] netlink_unicast+0x774/0x920 [ 1057.896348][T20099] netlink_sendmsg+0x8ba/0xbe0 [ 1057.901332][T20099] ? netlink_getsockopt+0x570/0x570 [ 1057.907009][T20099] ? aa_sock_msg_perm+0x94/0x150 [ 1057.912276][T20099] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1057.917691][T20099] ? security_socket_sendmsg+0x7c/0xa0 [ 1057.923306][T20099] ? netlink_getsockopt+0x570/0x570 [ 1057.928566][T20099] ____sys_sendmsg+0x5b7/0x8f0 [ 1057.934113][T20099] ? __sys_sendmsg_sock+0x30/0x30 [ 1057.939364][T20099] ? import_iovec+0x6f/0xa0 [ 1057.944339][T20099] ___sys_sendmsg+0x236/0x2e0 [ 1057.949286][T20099] ? __sys_sendmsg+0x2a0/0x2a0 [ 1057.954451][T20099] __se_sys_sendmsg+0x1af/0x290 [ 1057.959989][T20099] ? __x64_sys_sendmsg+0x80/0x80 [ 1057.965938][T20099] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1057.972195][T20099] ? lockdep_hardirqs_on+0x94/0x140 [ 1057.977707][T20099] do_syscall_64+0x4c/0xa0 [ 1057.983019][T20099] ? clear_bhb_loop+0x30/0x80 [ 1057.988088][T20099] ? clear_bhb_loop+0x30/0x80 [ 1057.993066][T20099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1057.999168][T20099] RIP: 0033:0x7f794c1d1e59 [ 1058.003865][T20099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.024222][T20099] RSP: 002b:00007f794a42b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.032947][T20099] RAX: ffffffffffffffda RBX: 00007f794c44afa0 RCX: 00007f794c1d1e59 [ 1058.041034][T20099] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1058.049276][T20099] RBP: 00007f794c267d6f R08: 0000000000000000 R09: 0000000000000000 [ 1058.057786][T20099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.066200][T20099] R13: 00007f794c44b038 R14: 00007f794c44afa0 R15: 00007fffc6e4f8d8 [ 1058.074433][T20099] [ 1058.149878][T20118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1058.239096][T20118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1058.552185][T20129] netlink: 'syz.4.4474': attribute type 10 has an invalid length. [ 1058.568931][T20129] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4474'. [ 1059.181390][T20146] device syzkaller0 entered promiscuous mode [ 1059.230036][T20142] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1060.176423][T20171] device wlan0 entered promiscuous mode [ 1060.289726][T20172] netlink: 144452 bytes leftover after parsing attributes in process `syz.0.4487'. [ 1060.357822][T20172] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1060.398564][T20172] CPU: 0 PID: 20172 Comm: syz.0.4487 Not tainted syzkaller #0 [ 1060.406495][T20172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.417406][T20172] Call Trace: [ 1060.420792][T20172] [ 1060.423744][T20172] dump_stack_lvl+0x188/0x250 [ 1060.428740][T20172] ? show_regs_print_info+0x20/0x20 [ 1060.434798][T20172] ? load_image+0x400/0x400 [ 1060.439901][T20172] sysfs_warn_dup+0x8a/0xa0 [ 1060.444873][T20172] sysfs_do_create_link_sd+0xc0/0x110 [ 1060.450634][T20172] device_add+0x7ed/0xfb0 [ 1060.454997][T20172] wiphy_register+0x1e81/0x2c30 [ 1060.460529][T20172] ? cfg80211_event_work+0x40/0x40 [ 1060.465757][T20172] ? minstrel_ht_alloc+0x808/0x980 [ 1060.471455][T20172] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1060.477669][T20172] ieee80211_register_hw+0x2aa1/0x3af0 [ 1060.483273][T20172] ? ieee80211_tasklet_handler+0x20/0x20 [ 1060.488919][T20172] ? rcu_is_watching+0x11/0xa0 [ 1060.493919][T20172] ? memset+0x1e/0x40 [ 1060.498116][T20172] ? hrtimer_init+0x10c/0x220 [ 1060.503075][T20172] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1060.509219][T20172] hwsim_new_radio_nl+0xa6f/0xc40 [ 1060.514268][T20172] genl_rcv_msg+0xcea/0xf90 [ 1060.518957][T20172] ? lock_chain_count+0x20/0x20 [ 1060.523994][T20172] ? genl_bind+0x380/0x380 [ 1060.528640][T20172] ? verify_lock_unused+0x140/0x140 [ 1060.533872][T20172] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 1060.541444][T20172] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1060.548273][T20172] netlink_rcv_skb+0x1f5/0x440 [ 1060.553295][T20172] ? genl_bind+0x380/0x380 [ 1060.557921][T20172] ? netlink_ack+0xb50/0xb50 [ 1060.562622][T20172] ? __lock_acquire+0x7d10/0x7d10 [ 1060.568289][T20172] ? down_read+0x1aa/0x2e0 [ 1060.573470][T20172] genl_rcv+0x24/0x40 [ 1060.577525][T20172] netlink_unicast+0x774/0x920 [ 1060.582520][T20172] netlink_sendmsg+0x8ba/0xbe0 [ 1060.587693][T20172] ? netlink_getsockopt+0x570/0x570 [ 1060.593178][T20172] ? aa_sock_msg_perm+0x94/0x150 [ 1060.598672][T20172] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1060.604081][T20172] ? security_socket_sendmsg+0x7c/0xa0 [ 1060.609707][T20172] ? netlink_getsockopt+0x570/0x570 [ 1060.615463][T20172] ____sys_sendmsg+0x5b7/0x8f0 [ 1060.620660][T20172] ? __sys_sendmsg_sock+0x30/0x30 [ 1060.626294][T20172] ? import_iovec+0x6f/0xa0 [ 1060.631123][T20172] ___sys_sendmsg+0x236/0x2e0 [ 1060.635912][T20172] ? __sys_sendmsg+0x2a0/0x2a0 [ 1060.641628][T20172] ? percpu_counter_add_batch+0x13b/0x160 [ 1060.648042][T20172] __se_sys_sendmsg+0x1af/0x290 [ 1060.653509][T20172] ? __x64_sys_sendmsg+0x80/0x80 [ 1060.659196][T20172] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1060.665978][T20172] ? lockdep_hardirqs_on+0x94/0x140 [ 1060.672133][T20172] do_syscall_64+0x4c/0xa0 [ 1060.677979][T20172] ? clear_bhb_loop+0x30/0x80 [ 1060.683306][T20172] ? clear_bhb_loop+0x30/0x80 [ 1060.688675][T20172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1060.696386][T20172] RIP: 0033:0x7f0030613e59 [ 1060.701557][T20172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.724073][T20172] RSP: 002b:00007f002e86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.733389][T20172] RAX: ffffffffffffffda RBX: 00007f003088cfa0 RCX: 00007f0030613e59 [ 1060.742124][T20172] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1060.750299][T20172] RBP: 00007f00306a9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1060.758637][T20172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.767137][T20172] R13: 00007f003088d038 R14: 00007f003088cfa0 R15: 00007ffd376d6df8 [ 1060.775701][T20172] [ 1060.966832][T20191] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1061.682023][T20212] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4497'. [ 1061.882476][T20208] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1061.896504][T20208] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1061.957557][T20208] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1062.287715][T20225] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1062.600088][T20234] netlink: 144452 bytes leftover after parsing attributes in process `syz.5.4504'. [ 1062.659040][T20234] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1064.755871][T20289] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4521'. [ 1064.821382][T20290] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4520'. [ 1064.980092][T20289] device team_slave_0 left promiscuous mode [ 1064.989633][T20289] team0: Port device team_slave_0 removed [ 1065.009202][T20290] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1065.029248][T20290] CPU: 0 PID: 20290 Comm: syz.1.4520 Not tainted syzkaller #0 [ 1065.037119][T20290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1065.047447][T20290] Call Trace: [ 1065.050762][T20290] [ 1065.053722][T20290] dump_stack_lvl+0x188/0x250 [ 1065.058617][T20290] ? show_regs_print_info+0x20/0x20 [ 1065.063929][T20290] ? load_image+0x400/0x400 [ 1065.068487][T20290] sysfs_warn_dup+0x8a/0xa0 [ 1065.073187][T20290] sysfs_do_create_link_sd+0xc0/0x110 [ 1065.078835][T20290] device_add+0x7ed/0xfb0 [ 1065.083286][T20290] wiphy_register+0x1e81/0x2c30 [ 1065.088170][T20290] ? cfg80211_event_work+0x40/0x40 [ 1065.093504][T20290] ? minstrel_ht_alloc+0x808/0x980 [ 1065.098672][T20290] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1065.104946][T20290] ieee80211_register_hw+0x2aa1/0x3af0 [ 1065.110530][T20290] ? ieee80211_tasklet_handler+0x20/0x20 [ 1065.116278][T20290] ? rcu_is_watching+0x11/0xa0 [ 1065.121224][T20290] ? memset+0x1e/0x40 [ 1065.125448][T20290] ? hrtimer_init+0x10c/0x220 [ 1065.130253][T20290] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1065.136052][T20290] hwsim_new_radio_nl+0xa6f/0xc40 [ 1065.141126][T20290] genl_rcv_msg+0xcea/0xf90 [ 1065.146299][T20290] ? genl_bind+0x380/0x380 [ 1065.150820][T20290] ? rcu_nmi_exit+0x6f/0xf0 [ 1065.155533][T20290] ? verify_lock_unused+0x140/0x140 [ 1065.161138][T20290] ? verify_lock_unused+0x140/0x140 [ 1065.166737][T20290] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1065.173123][T20290] ? lock_chain_count+0x20/0x20 [ 1065.178184][T20290] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1065.184897][T20290] netlink_rcv_skb+0x1f5/0x440 [ 1065.189855][T20290] ? genl_bind+0x380/0x380 [ 1065.194670][T20290] ? netlink_ack+0xb50/0xb50 [ 1065.199270][T20290] ? __lock_acquire+0x7d10/0x7d10 [ 1065.204431][T20290] ? down_read+0x1aa/0x2e0 [ 1065.209240][T20290] genl_rcv+0x24/0x40 [ 1065.213217][T20290] netlink_unicast+0x774/0x920 [ 1065.218078][T20290] netlink_sendmsg+0x8ba/0xbe0 [ 1065.222949][T20290] ? netlink_getsockopt+0x570/0x570 [ 1065.228176][T20290] ? aa_sock_msg_perm+0x94/0x150 [ 1065.233122][T20290] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1065.238624][T20290] ? security_socket_sendmsg+0x7c/0xa0 [ 1065.244583][T20290] ? netlink_getsockopt+0x570/0x570 [ 1065.249967][T20290] ____sys_sendmsg+0x5b7/0x8f0 [ 1065.255149][T20290] ? __sys_sendmsg_sock+0x30/0x30 [ 1065.260233][T20290] ? import_iovec+0x6f/0xa0 [ 1065.265257][T20290] ___sys_sendmsg+0x236/0x2e0 [ 1065.270252][T20290] ? __sys_sendmsg+0x2a0/0x2a0 [ 1065.275086][T20290] ? percpu_counter_add_batch+0x13b/0x160 [ 1065.281057][T20290] __se_sys_sendmsg+0x1af/0x290 [ 1065.286314][T20290] ? __x64_sys_sendmsg+0x80/0x80 [ 1065.291987][T20290] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1065.298804][T20290] ? lockdep_hardirqs_on+0x94/0x140 [ 1065.304050][T20290] do_syscall_64+0x4c/0xa0 [ 1065.308497][T20290] ? clear_bhb_loop+0x30/0x80 [ 1065.313243][T20290] ? clear_bhb_loop+0x30/0x80 [ 1065.318024][T20290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1065.324104][T20290] RIP: 0033:0x7f4ca3541e59 [ 1065.328728][T20290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.349005][T20290] RSP: 002b:00007f4ca1759028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.357773][T20290] RAX: ffffffffffffffda RBX: 00007f4ca37bb180 RCX: 00007f4ca3541e59 [ 1065.366267][T20290] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 1065.374488][T20290] RBP: 00007f4ca35d7d6f R08: 0000000000000000 R09: 0000000000000000 [ 1065.382554][T20290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.390699][T20290] R13: 00007f4ca37bb218 R14: 00007f4ca37bb180 R15: 00007ffdc66d28b8 [ 1065.399129][T20290] [ 1065.929999][T20307] netlink: 144452 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1066.011434][T20309] netlink: 'syz.5.4526': attribute type 39 has an invalid length. [ 1066.697330][T20306] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 1066.708653][T20307] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1066.718450][T20307] CPU: 0 PID: 20307 Comm: syz.1.4522 Not tainted syzkaller #0 [ 1066.725940][T20307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.736452][T20307] Call Trace: [ 1066.739756][T20307] [ 1066.742939][T20307] dump_stack_lvl+0x188/0x250 [ 1066.747634][T20307] ? show_regs_print_info+0x20/0x20 [ 1066.753853][T20307] ? load_image+0x400/0x400 [ 1066.758672][T20307] sysfs_warn_dup+0x8a/0xa0 [ 1066.763190][T20307] sysfs_do_create_link_sd+0xc0/0x110 [ 1066.768896][T20307] device_add+0x7ed/0xfb0 [ 1066.773524][T20307] wiphy_register+0x1e81/0x2c30 [ 1066.778429][T20307] ? cfg80211_event_work+0x40/0x40 [ 1066.783683][T20307] ? minstrel_ht_alloc+0x808/0x980 [ 1066.789201][T20307] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1066.795384][T20307] ieee80211_register_hw+0x2aa1/0x3af0 [ 1066.801395][T20307] ? ieee80211_tasklet_handler+0x20/0x20 [ 1066.807608][T20307] ? rcu_is_watching+0x11/0xa0 [ 1066.812503][T20307] ? memset+0x1e/0x40 [ 1066.816927][T20307] ? hrtimer_init+0x10c/0x220 [ 1066.821719][T20307] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1066.827469][T20307] hwsim_new_radio_nl+0xa6f/0xc40 [ 1066.832517][T20307] genl_rcv_msg+0xcea/0xf90 [ 1066.837044][T20307] ? genl_bind+0x380/0x380 [ 1066.841557][T20307] ? mark_lock+0x94/0x320 [ 1066.845883][T20307] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1066.852130][T20307] ? lock_chain_count+0x20/0x20 [ 1066.857023][T20307] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1066.863421][T20307] ? lockdep_hardirqs_on+0x94/0x140 [ 1066.868712][T20307] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1066.875500][T20307] netlink_rcv_skb+0x1f5/0x440 [ 1066.880284][T20307] ? genl_bind+0x380/0x380 [ 1066.885113][T20307] ? netlink_ack+0xb50/0xb50 [ 1066.889928][T20307] ? __lock_acquire+0x7d10/0x7d10 [ 1066.894978][T20307] ? down_read+0x1aa/0x2e0 [ 1066.899408][T20307] genl_rcv+0x24/0x40 [ 1066.903723][T20307] netlink_unicast+0x774/0x920 [ 1066.908963][T20307] netlink_sendmsg+0x8ba/0xbe0 [ 1066.914566][T20307] ? lockdep_hardirqs_on+0x94/0x140 [ 1066.920528][T20307] ? netlink_getsockopt+0x570/0x570 [ 1066.925920][T20307] ? bpf_lsm_socket_accept+0x10/0x10 [ 1066.931423][T20307] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1066.936829][T20307] ? security_socket_sendmsg+0x7c/0xa0 [ 1066.942404][T20307] ? netlink_getsockopt+0x570/0x570 [ 1066.948346][T20307] ____sys_sendmsg+0x5b7/0x8f0 [ 1066.953397][T20307] ? __sys_sendmsg_sock+0x30/0x30 [ 1066.958542][T20307] ? import_iovec+0x6f/0xa0 [ 1066.963093][T20307] ___sys_sendmsg+0x236/0x2e0 [ 1066.967792][T20307] ? __sys_sendmsg+0x2a0/0x2a0 [ 1066.972926][T20307] ? ktime_get_real_ts64+0x440/0x440 [ 1066.978351][T20307] __se_sys_sendmsg+0x1af/0x290 [ 1066.983476][T20307] ? __x64_sys_sendmsg+0x80/0x80 [ 1066.988702][T20307] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1066.994967][T20307] ? lockdep_hardirqs_on+0x94/0x140 [ 1067.000597][T20307] do_syscall_64+0x4c/0xa0 [ 1067.005051][T20307] ? clear_bhb_loop+0x30/0x80 [ 1067.010049][T20307] ? clear_bhb_loop+0x30/0x80 [ 1067.015112][T20307] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1067.021204][T20307] RIP: 0033:0x7f4ca3541e59 [ 1067.027341][T20307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.048396][T20307] RSP: 002b:00007f4ca177a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.057170][T20307] RAX: ffffffffffffffda RBX: 00007f4ca37bb090 RCX: 00007f4ca3541e59 [ 1067.065866][T20307] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1067.074286][T20307] RBP: 00007f4ca35d7d6f R08: 0000000000000000 R09: 0000000000000000 [ 1067.082278][T20307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.090349][T20307] R13: 00007f4ca37bb128 R14: 00007f4ca37bb090 R15: 00007ffdc66d28b8 [ 1067.098562][T20307] [ 1067.588380][T20330] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4534'. [ 1067.696375][T20332] netlink: 'syz.4.4535': attribute type 4 has an invalid length. [ 1067.726427][T20332] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1067.840342][T20339] mac80211_hwsim hwsim24 O3ãc¤±: renamed from wlan1 [ 1067.899322][T20344] netlink: 'syz.4.4537': attribute type 21 has an invalid length. [ 1067.961536][T20344] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4537'. [ 1068.032803][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.056264][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.133884][T20350] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.148605][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.165411][T20350] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.191886][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.226751][T20350] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1068.629989][T20354] device syzkaller0 entered promiscuous mode [ 1068.641573][T20340] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1068.652233][T20340] CPU: 0 PID: 20340 Comm: syz.5.4536 Not tainted syzkaller #0 [ 1068.660377][T20340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.671046][T20340] Call Trace: [ 1068.674345][T20340] [ 1068.677294][T20340] dump_stack_lvl+0x188/0x250 [ 1068.682054][T20340] ? show_regs_print_info+0x20/0x20 [ 1068.687623][T20340] ? load_image+0x400/0x400 [ 1068.692354][T20340] sysfs_warn_dup+0x8a/0xa0 [ 1068.697067][T20340] sysfs_do_create_link_sd+0xc0/0x110 [ 1068.702846][T20340] device_add+0x7ed/0xfb0 [ 1068.707333][T20340] wiphy_register+0x1e81/0x2c30 [ 1068.712240][T20340] ? cfg80211_event_work+0x40/0x40 [ 1068.717471][T20340] ? minstrel_ht_alloc+0x808/0x980 [ 1068.723136][T20340] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1068.729948][T20340] ieee80211_register_hw+0x2aa1/0x3af0 [ 1068.735965][T20340] ? ieee80211_tasklet_handler+0x20/0x20 [ 1068.741872][T20340] ? rcu_is_watching+0x11/0xa0 [ 1068.747058][T20340] ? memset+0x1e/0x40 [ 1068.751276][T20340] ? hrtimer_init+0x10c/0x220 [ 1068.756345][T20340] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1068.762413][T20340] hwsim_new_radio_nl+0xa6f/0xc40 [ 1068.768566][T20340] genl_rcv_msg+0xcea/0xf90 [ 1068.774069][T20340] ? genl_bind+0x380/0x380 [ 1068.779007][T20340] ? lock_chain_count+0x20/0x20 [ 1068.784351][T20340] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1068.790497][T20340] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 1068.797002][T20340] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1068.804845][T20340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1068.810982][T20340] netlink_rcv_skb+0x1f5/0x440 [ 1068.815988][T20340] ? genl_bind+0x380/0x380 [ 1068.821489][T20340] ? netlink_ack+0xb50/0xb50 [ 1068.826332][T20340] ? genl_bind+0x380/0x380 [ 1068.831376][T20340] ? netlink_rcv_skb+0x1/0x440 [ 1068.836592][T20340] genl_rcv+0x24/0x40 [ 1068.840918][T20340] netlink_unicast+0x774/0x920 [ 1068.845852][T20340] netlink_sendmsg+0x8ba/0xbe0 [ 1068.850889][T20340] ? netlink_getsockopt+0x570/0x570 [ 1068.856577][T20340] ? netlink_getsockopt+0x570/0x570 [ 1068.862376][T20340] ____sys_sendmsg+0x5b7/0x8f0 [ 1068.867358][T20340] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1068.874485][T20340] ? __sys_sendmsg_sock+0x30/0x30 [ 1068.879526][T20340] ? import_iovec+0x6f/0xa0 [ 1068.885128][T20340] ? import_iovec+0x6f/0xa0 [ 1068.889969][T20340] ___sys_sendmsg+0x236/0x2e0 [ 1068.895175][T20340] ? __sys_sendmsg+0x2a0/0x2a0 [ 1068.900197][T20340] ? rcu_is_watching+0x11/0xa0 [ 1068.905675][T20340] ? __se_sys_sendmsg+0xc9/0x290 [ 1068.910736][T20340] __se_sys_sendmsg+0x1af/0x290 [ 1068.916233][T20340] ? __x64_sys_sendmsg+0x80/0x80 [ 1068.921585][T20340] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1068.927724][T20340] do_syscall_64+0x4c/0xa0 [ 1068.933211][T20340] ? clear_bhb_loop+0x30/0x80 [ 1068.939292][T20340] ? clear_bhb_loop+0x30/0x80 [ 1068.944708][T20340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1068.950889][T20340] RIP: 0033:0x7f7eb088fe59 [ 1068.955540][T20340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.977662][T20340] RSP: 002b:00007f7eaeac8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.986768][T20340] RAX: ffffffffffffffda RBX: 00007f7eb0b09090 RCX: 00007f7eb088fe59 [ 1068.996868][T20340] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 1069.005245][T20340] RBP: 00007f7eb0925d6f R08: 0000000000000000 R09: 0000000000000000 [ 1069.013623][T20340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.022294][T20340] R13: 00007f7eb0b09128 R14: 00007f7eb0b09090 R15: 00007ffc12059e88 [ 1069.031623][T20340] [ 1069.092807][T20370] device syzkaller0 entered promiscuous mode [ 1070.221888][T20396] device wlan0 left promiscuous mode [ 1070.349693][T20402] netlink: 'syz.3.4553': attribute type 17 has an invalid length. [ 1070.378618][T20402] netlink: 'syz.3.4553': attribute type 16 has an invalid length. [ 1070.418241][T20397] device wlan0 entered promiscuous mode [ 1070.669223][T20412] delete_channel: no stack [ 1070.684563][T20412] delete_channel: no stack [ 1070.803366][T20412] netlink: 'syz.0.4554': attribute type 3 has an invalid length. [ 1071.180893][T20421] mac80211_hwsim hwsim9 O3ãc¤±: renamed from wlan1 [ 1071.976363][T20418] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1072.001683][T20418] CPU: 1 PID: 20418 Comm: syz.4.4557 Not tainted syzkaller #0 [ 1072.010191][T20418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1072.021687][T20418] Call Trace: [ 1072.026306][T20418] [ 1072.029947][T20418] dump_stack_lvl+0x188/0x250 [ 1072.036033][T20418] ? show_regs_print_info+0x20/0x20 [ 1072.043730][T20418] ? load_image+0x400/0x400 [ 1072.048868][T20418] sysfs_warn_dup+0x8a/0xa0 [ 1072.055377][T20418] sysfs_do_create_link_sd+0xc0/0x110 [ 1072.061269][T20418] device_add+0x7ed/0xfb0 [ 1072.067252][T20418] wiphy_register+0x1e81/0x2c30 [ 1072.073270][T20418] ? lock_chain_count+0x20/0x20 [ 1072.078721][T20418] ? cfg80211_event_work+0x40/0x40 [ 1072.084389][T20418] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1072.090784][T20418] ieee80211_register_hw+0x2aa1/0x3af0 [ 1072.096617][T20418] ? ieee80211_tasklet_handler+0x20/0x20 [ 1072.102560][T20418] ? rcu_is_watching+0x11/0xa0 [ 1072.107447][T20418] ? memset+0x1e/0x40 [ 1072.111724][T20418] ? hrtimer_init+0x10c/0x220 [ 1072.116897][T20418] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1072.123292][T20418] hwsim_new_radio_nl+0xa6f/0xc40 [ 1072.128619][T20418] genl_rcv_msg+0xcea/0xf90 [ 1072.133582][T20418] ? genl_bind+0x380/0x380 [ 1072.138329][T20418] ? rcu_nmi_exit+0x6f/0xf0 [ 1072.143039][T20418] ? verify_lock_unused+0x140/0x140 [ 1072.148931][T20418] ? verify_lock_unused+0x140/0x140 [ 1072.154316][T20418] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 1072.160848][T20418] ? irqentry_enter+0x33/0x50 [ 1072.166160][T20418] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1072.172551][T20418] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1072.180103][T20418] netlink_rcv_skb+0x1f5/0x440 [ 1072.184978][T20418] ? genl_bind+0x380/0x380 [ 1072.189613][T20418] ? netlink_ack+0xb50/0xb50 [ 1072.194686][T20418] ? __lock_acquire+0x7d10/0x7d10 [ 1072.199732][T20418] ? down_read+0x1aa/0x2e0 [ 1072.204263][T20418] genl_rcv+0x24/0x40 [ 1072.208339][T20418] netlink_unicast+0x774/0x920 [ 1072.213252][T20418] netlink_sendmsg+0x8ba/0xbe0 [ 1072.218216][T20418] ? netlink_getsockopt+0x570/0x570 [ 1072.223935][T20418] ? aa_sock_msg_perm+0x94/0x150 [ 1072.229160][T20418] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1072.234987][T20418] ? security_socket_sendmsg+0x7c/0xa0 [ 1072.240464][T20418] ? netlink_getsockopt+0x570/0x570 [ 1072.246197][T20418] ____sys_sendmsg+0x5b7/0x8f0 [ 1072.251261][T20418] ? __sys_sendmsg_sock+0x30/0x30 [ 1072.256571][T20418] ? import_iovec+0x6f/0xa0 [ 1072.261273][T20418] ___sys_sendmsg+0x236/0x2e0 [ 1072.266283][T20418] ? __sys_sendmsg+0x2a0/0x2a0 [ 1072.271783][T20418] __se_sys_sendmsg+0x1af/0x290 [ 1072.276927][T20418] ? __x64_sys_sendmsg+0x80/0x80 [ 1072.282068][T20418] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1072.288177][T20418] ? lockdep_hardirqs_on+0x94/0x140 [ 1072.293585][T20418] do_syscall_64+0x4c/0xa0 [ 1072.298285][T20418] ? clear_bhb_loop+0x30/0x80 [ 1072.303080][T20418] ? clear_bhb_loop+0x30/0x80 [ 1072.307792][T20418] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1072.313835][T20418] RIP: 0033:0x7f449be83e59 [ 1072.318469][T20418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.338428][T20418] RSP: 002b:00007f449a0dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.347020][T20418] RAX: ffffffffffffffda RBX: 00007f449c0fcfa0 RCX: 00007f449be83e59 [ 1072.355117][T20418] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000010 [ 1072.363499][T20418] RBP: 00007f449bf19d6f R08: 0000000000000000 R09: 0000000000000000 [ 1072.371968][T20418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.379948][T20418] R13: 00007f449c0fd038 R14: 00007f449c0fcfa0 R15: 00007fff29fae5c8 [ 1072.388116][T20418] [ 1072.920555][T20451] __nla_validate_parse: 7 callbacks suppressed [ 1072.920578][T20451] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4578'. [ 1073.095173][T20447] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1073.464873][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.516292][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.530379][T20467] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.560458][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.618538][T20467] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.630336][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.641098][T20467] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1073.665050][T20458] netlink: 'syz.1.4569': attribute type 39 has an invalid length. [ 1073.825220][T20473] IPv6: Can't replace route, no match found [ 1074.196020][T20477] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1074.669922][T20491] netlink: 'syz.4.4579': attribute type 1 has an invalid length. [ 1076.462251][T20533] netlink: 'syz.4.4592': attribute type 2 has an invalid length. [ 1076.609950][T20546] netlink: 'syz.5.4595': attribute type 17 has an invalid length. [ 1076.629875][T20532] netlink: 'syz.4.4592': attribute type 3 has an invalid length. [ 1076.637314][T20546] netlink: 'syz.5.4595': attribute type 16 has an invalid length. [ 1077.026075][T20555] netlink: 'syz.1.4597': attribute type 1 has an invalid length. [ 1077.826323][T20570] device wlan0 entered promiscuous mode [ 1077.875523][T20578] netlink: 'syz.3.4604': attribute type 9 has an invalid length. [ 1078.107130][T20577] __nla_validate_parse: 20 callbacks suppressed [ 1078.107159][T20577] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4606'. [ 1078.503484][T20587] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1078.750093][T20582] delete_channel: no stack [ 1078.767958][T20588] netlink: 'syz.0.4609': attribute type 10 has an invalid length. [ 1078.798377][T20588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1078.811308][T20588] device bond0 entered promiscuous mode [ 1078.826761][T20588] device bond_slave_1 entered promiscuous mode [ 1078.845537][T20588] device bridge_slave_1 entered promiscuous mode [ 1079.019071][T20589] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1079.609030][T20609] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4624'. [ 1079.631191][T20615] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1079.742768][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4615'. [ 1079.835466][T20622] netlink: 'syz.5.4615': attribute type 10 has an invalid length. [ 1079.849795][T20622] device veth0_vlan left promiscuous mode [ 1079.857814][T20622] device veth0_vlan entered promiscuous mode [ 1079.867235][T20622] team0: Device veth0_vlan failed to register rx_handler [ 1080.092914][T20630] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4621'. [ 1080.277564][T20638] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4625'. [ 1080.547003][T20643] netlink: 'syz.5.4626': attribute type 10 has an invalid length. [ 1080.579718][T20643] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1080.599533][T20643] device bond0 entered promiscuous mode [ 1080.636300][T20643] device bond_slave_1 entered promiscuous mode [ 1080.866233][T20643] team0: Port device bond0 removed [ 1080.891206][T20647] delete_channel: no stack [ 1081.337290][T20663] netlink: 'syz.0.4633': attribute type 17 has an invalid length. [ 1081.364127][T20663] netlink: 'syz.0.4633': attribute type 16 has an invalid length. [ 1081.402396][T20661] netlink: 'syz.5.4631': attribute type 1 has an invalid length. [ 1081.928439][T20679] netlink: 'syz.4.4638': attribute type 10 has an invalid length. [ 1081.951093][T20685] delete_channel: no stack [ 1081.982795][T20681] delete_channel: no stack [ 1082.040800][T20684] device wlan0 left promiscuous mode [ 1082.109241][T20693] device wlan0 entered promiscuous mode [ 1082.184947][T20692] netlink: 'syz.1.4643': attribute type 10 has an invalid length. [ 1082.249821][T20692] device bond0 entered promiscuous mode [ 1082.282039][T20684] netlink: 'syz.5.4640': attribute type 9 has an invalid length. [ 1082.292770][T20692] device bond_slave_0 entered promiscuous mode [ 1082.323186][T20692] device bond_slave_1 entered promiscuous mode [ 1082.344489][T20692] device bridge_slave_1 entered promiscuous mode [ 1082.572856][T20692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.496834][T20716] __nla_validate_parse: 10 callbacks suppressed [ 1083.496855][T20716] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4649'. [ 1083.557072][T20719] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4651'. [ 1083.584214][T20716] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1083.592183][T20716] CPU: 1 PID: 20716 Comm: syz.5.4649 Not tainted syzkaller #0 [ 1083.599843][T20716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1083.610026][T20716] Call Trace: [ 1083.613342][T20716] [ 1083.616301][T20716] dump_stack_lvl+0x188/0x250 [ 1083.621020][T20716] ? show_regs_print_info+0x20/0x20 [ 1083.626347][T20716] ? load_image+0x400/0x400 [ 1083.630935][T20716] sysfs_warn_dup+0x8a/0xa0 [ 1083.635484][T20716] sysfs_do_create_link_sd+0xc0/0x110 [ 1083.640937][T20716] device_add+0x7ed/0xfb0 [ 1083.645514][T20716] wiphy_register+0x1e81/0x2c30 [ 1083.650547][T20716] ? cfg80211_event_work+0x40/0x40 [ 1083.655705][T20716] ? minstrel_ht_alloc+0x808/0x980 [ 1083.660960][T20716] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1083.667048][T20716] ieee80211_register_hw+0x2aa1/0x3af0 [ 1083.672551][T20716] ? ieee80211_tasklet_handler+0x20/0x20 [ 1083.678718][T20716] ? rcu_is_watching+0x11/0xa0 [ 1083.683535][T20716] ? memset+0x1e/0x40 [ 1083.687646][T20716] ? hrtimer_init+0x10c/0x220 [ 1083.692817][T20716] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1083.699046][T20716] hwsim_new_radio_nl+0xa6f/0xc40 [ 1083.704137][T20716] genl_rcv_msg+0xcea/0xf90 [ 1083.708671][T20716] ? genl_bind+0x380/0x380 [ 1083.713206][T20716] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1083.719023][T20716] ? verify_lock_unused+0x140/0x140 [ 1083.724910][T20716] ? perf_trace_lock_acquire+0x340/0x3e0 [ 1083.730925][T20716] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1083.737701][T20716] ? perf_trace_lock+0xe4/0x390 [ 1083.742618][T20716] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1083.749474][T20716] netlink_rcv_skb+0x1f5/0x440 [ 1083.754295][T20716] ? genl_bind+0x380/0x380 [ 1083.759028][T20716] ? netlink_ack+0xb50/0xb50 [ 1083.763742][T20716] ? __lock_acquire+0x7d10/0x7d10 [ 1083.768804][T20716] ? down_read+0x1aa/0x2e0 [ 1083.773258][T20716] genl_rcv+0x24/0x40 [ 1083.777265][T20716] netlink_unicast+0x774/0x920 [ 1083.782072][T20716] netlink_sendmsg+0x8ba/0xbe0 [ 1083.786971][T20716] ? netlink_getsockopt+0x570/0x570 [ 1083.792198][T20716] ? aa_sock_msg_perm+0x94/0x150 [ 1083.797157][T20716] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1083.802826][T20716] ? security_socket_sendmsg+0x7c/0xa0 [ 1083.808761][T20716] ? netlink_getsockopt+0x570/0x570 [ 1083.813984][T20716] ____sys_sendmsg+0x5b7/0x8f0 [ 1083.818897][T20716] ? __sys_sendmsg_sock+0x30/0x30 [ 1083.824051][T20716] ? import_iovec+0x6f/0xa0 [ 1083.828581][T20716] ___sys_sendmsg+0x236/0x2e0 [ 1083.833557][T20716] ? __sys_sendmsg+0x2a0/0x2a0 [ 1083.838465][T20716] ? trace_event_raw_event_lock+0x270/0x270 [ 1083.844524][T20716] __se_sys_sendmsg+0x1af/0x290 [ 1083.849479][T20716] ? __x64_sys_sendmsg+0x80/0x80 [ 1083.854616][T20716] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1083.860820][T20716] ? lockdep_hardirqs_on+0x94/0x140 [ 1083.866332][T20716] do_syscall_64+0x4c/0xa0 [ 1083.870763][T20716] ? clear_bhb_loop+0x30/0x80 [ 1083.875457][T20716] ? clear_bhb_loop+0x30/0x80 [ 1083.880233][T20716] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1083.886139][T20716] RIP: 0033:0x7f7eb088fe59 [ 1083.890586][T20716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.911164][T20716] RSP: 002b:00007f7eaeac8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.919857][T20716] RAX: ffffffffffffffda RBX: 00007f7eb0b09090 RCX: 00007f7eb088fe59 [ 1083.928021][T20716] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1083.936088][T20716] RBP: 00007f7eb0925d6f R08: 0000000000000000 R09: 0000000000000000 [ 1083.944074][T20716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.952057][T20716] R13: 00007f7eb0b09128 R14: 00007f7eb0b09090 R15: 00007ffc12059e88 [ 1083.960068][T20716] [ 1084.190584][T20724] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4653'. [ 1084.205757][T20726] delete_channel: no stack [ 1084.434508][T20743] netlink: 'syz.1.4655': attribute type 17 has an invalid length. [ 1084.486515][T20743] netlink: 'syz.1.4655': attribute type 16 has an invalid length. [ 1084.506928][T20743] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4655'. [ 1084.837569][T20753] netlink: 'syz.4.4659': attribute type 10 has an invalid length. [ 1084.851379][T20753] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1084.894024][T20755] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1084.947043][T20751] delete_channel: no stack [ 1085.981167][T20774] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1086.154608][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'. [ 1086.351666][T20779] netlink: 'syz.4.4666': attribute type 39 has an invalid length. [ 1086.924674][T20781] netlink: 'syz.0.4664': attribute type 10 has an invalid length. [ 1086.946065][T20781] device veth0_vlan left promiscuous mode [ 1086.959263][T20781] device veth0_vlan entered promiscuous mode [ 1086.967565][T20781] team0: Device veth0_vlan failed to register rx_handler [ 1087.159565][T20791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4680'. [ 1087.238685][T20797] netlink: 'syz.0.4668': attribute type 10 has an invalid length. [ 1087.333789][T20797] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1087.522923][T20791] netlink: 'syz.1.4680': attribute type 10 has an invalid length. [ 1087.600714][T20795] device team_slave_0 left promiscuous mode [ 1087.928119][T20795] team0: Port device team_slave_0 removed [ 1088.006334][T20794] delete_channel: no stack [ 1088.969810][T20841] delete_channel: no stack [ 1089.526900][T20849] __nla_validate_parse: 1 callbacks suppressed [ 1089.526937][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1089.713990][T20855] netlink: 'syz.4.4689': attribute type 10 has an invalid length. [ 1089.926278][T20855] device veth0_vlan left promiscuous mode [ 1089.978088][T20855] device veth0_vlan entered promiscuous mode [ 1090.019220][T20855] team0: Device veth0_vlan failed to register rx_handler [ 1090.152591][T20851] delete_channel: no stack [ 1090.250959][T20872] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4696'. [ 1090.268252][T20871] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4695'. [ 1090.449435][T20881] sctp: [Deprecated]: syz.5.4697 (pid 20881) Use of int in max_burst socket option deprecated. [ 1090.449435][T20881] Use struct sctp_assoc_value instead [ 1090.564626][T20879] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.4698'. [ 1090.596157][T20873] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1090.622618][T20879] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.4698'. [ 1090.804695][T20888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4701'. [ 1091.066837][T20894] netlink: 'syz.0.4702': attribute type 15 has an invalid length. [ 1091.206121][T20893] netlink: 'syz.4.4701': attribute type 10 has an invalid length. [ 1091.252248][T20899] netlink: 15730 bytes leftover after parsing attributes in process `syz.3.4703'. [ 1091.298619][T20893] device veth0_vlan left promiscuous mode [ 1091.385864][T20893] device veth0_vlan entered promiscuous mode [ 1091.479494][T20893] team0: Device veth0_vlan failed to register rx_handler [ 1091.719268][T20894] netlink: 'syz.0.4702': attribute type 10 has an invalid length. [ 1092.273521][T20902] delete_channel: no stack [ 1092.994762][T20920] delete_channel: no stack [ 1093.316964][T20931] netlink: 'syz.1.4711': attribute type 10 has an invalid length. [ 1093.331931][T20926] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4710'. [ 1093.359987][T20931] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4711'. [ 1094.387152][T20926] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1094.396018][T20926] CPU: 1 PID: 20926 Comm: syz.3.4710 Not tainted syzkaller #0 [ 1094.403521][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1094.413786][T20926] Call Trace: [ 1094.417113][T20926] [ 1094.420075][T20926] dump_stack_lvl+0x188/0x250 [ 1094.424967][T20926] ? show_regs_print_info+0x20/0x20 [ 1094.430368][T20926] ? load_image+0x400/0x400 [ 1094.435000][T20926] sysfs_warn_dup+0x8a/0xa0 [ 1094.439528][T20926] sysfs_do_create_link_sd+0xc0/0x110 [ 1094.444928][T20926] device_add+0x7ed/0xfb0 [ 1094.449301][T20926] wiphy_register+0x1e81/0x2c30 [ 1094.454486][T20926] ? cfg80211_event_work+0x40/0x40 [ 1094.459724][T20926] ? minstrel_ht_alloc+0x808/0x980 [ 1094.464883][T20926] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1094.471102][T20926] ieee80211_register_hw+0x2aa1/0x3af0 [ 1094.476657][T20926] ? ieee80211_tasklet_handler+0x20/0x20 [ 1094.482408][T20926] ? rcu_is_watching+0x11/0xa0 [ 1094.487198][T20926] ? memset+0x1e/0x40 [ 1094.491294][T20926] ? hrtimer_init+0x10c/0x220 [ 1094.496172][T20926] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1094.502026][T20926] hwsim_new_radio_nl+0xa6f/0xc40 [ 1094.507181][T20926] genl_rcv_msg+0xcea/0xf90 [ 1094.511737][T20926] ? genl_bind+0x380/0x380 [ 1094.516196][T20926] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1094.522220][T20926] ? verify_lock_unused+0x140/0x140 [ 1094.527456][T20926] ? perf_trace_lock_acquire+0xed/0x3e0 [ 1094.533051][T20926] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1094.539751][T20926] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 1094.546660][T20926] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 1094.552988][T20926] ? irqentry_enter+0x33/0x50 [ 1094.557751][T20926] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1094.564444][T20926] netlink_rcv_skb+0x1f5/0x440 [ 1094.569309][T20926] ? genl_bind+0x380/0x380 [ 1094.573830][T20926] ? netlink_ack+0xb50/0xb50 [ 1094.578455][T20926] ? __lock_acquire+0x7d10/0x7d10 [ 1094.583576][T20926] ? down_read+0x1aa/0x2e0 [ 1094.588037][T20926] genl_rcv+0x24/0x40 [ 1094.592103][T20926] netlink_unicast+0x774/0x920 [ 1094.596870][T20926] netlink_sendmsg+0x8ba/0xbe0 [ 1094.601764][T20926] ? netlink_getsockopt+0x570/0x570 [ 1094.606987][T20926] ? aa_sock_msg_perm+0x94/0x150 [ 1094.611925][T20926] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1094.617236][T20926] ? security_socket_sendmsg+0x7c/0xa0 [ 1094.622738][T20926] ? netlink_getsockopt+0x570/0x570 [ 1094.627937][T20926] ____sys_sendmsg+0x5b7/0x8f0 [ 1094.632733][T20926] ? __sys_sendmsg_sock+0x30/0x30 [ 1094.637788][T20926] ? import_iovec+0x6f/0xa0 [ 1094.642419][T20926] ___sys_sendmsg+0x236/0x2e0 [ 1094.647290][T20926] ? __sys_sendmsg+0x2a0/0x2a0 [ 1094.652337][T20926] __se_sys_sendmsg+0x1af/0x290 [ 1094.658342][T20926] ? __x64_sys_sendmsg+0x80/0x80 [ 1094.663745][T20926] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1094.669748][T20926] ? lockdep_hardirqs_on+0x94/0x140 [ 1094.675054][T20926] do_syscall_64+0x4c/0xa0 [ 1094.679559][T20926] ? clear_bhb_loop+0x30/0x80 [ 1094.684371][T20926] ? clear_bhb_loop+0x30/0x80 [ 1094.689084][T20926] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1094.695116][T20926] RIP: 0033:0x7f794c1d1e59 [ 1094.699543][T20926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.719753][T20926] RSP: 002b:00007f794a42b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.728410][T20926] RAX: ffffffffffffffda RBX: 00007f794c44afa0 RCX: 00007f794c1d1e59 [ 1094.736390][T20926] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1094.744464][T20926] RBP: 00007f794c267d6f R08: 0000000000000000 R09: 0000000000000000 [ 1094.752608][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.760873][T20926] R13: 00007f794c44b038 R14: 00007f794c44afa0 R15: 00007fffc6e4f8d8 [ 1094.768859][T20926] [ 1095.176779][T20968] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.4717'. [ 1095.282458][T20956] delete_channel: no stack [ 1095.549092][T20977] delete_channel: no stack [ 1095.617039][T20976] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1095.627235][T20976] netlink: 21192 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1096.965070][T21010] sctp: [Deprecated]: syz.3.4730 (pid 21010) Use of int in max_burst socket option deprecated. [ 1096.965070][T21010] Use struct sctp_assoc_value instead [ 1097.220993][T21011] netlink: 'syz.4.4732': attribute type 10 has an invalid length. [ 1097.253374][T21011] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1097.507116][T21017] netlink: 15730 bytes leftover after parsing attributes in process `syz.0.4733'. [ 1097.793178][T21000] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1097.829235][T21021] netlink: 'syz.5.4734': attribute type 15 has an invalid length. [ 1097.886526][T21021] netlink: 'syz.5.4734': attribute type 10 has an invalid length. [ 1098.541407][T21035] netlink: 'syz.4.4740': attribute type 27 has an invalid length. [ 1098.553881][T21035] netlink: 'syz.4.4740': attribute type 4 has an invalid length. [ 1098.565742][T21035] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4740'. [ 1098.613514][T21028] delete_channel: no stack [ 1098.720095][T21043] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4741'. [ 1098.846934][T21048] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1099.079009][T21056] tun0: tun_chr_ioctl cmd 1074025677 [ 1099.104183][T21056] tun0: linktype set to 768 [ 1099.571977][T21071] sctp: [Deprecated]: syz.0.4749 (pid 21071) Use of int in max_burst socket option deprecated. [ 1099.571977][T21071] Use struct sctp_assoc_value instead [ 1099.863576][T21070] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4750'. [ 1100.184789][T21075] netlink: 15730 bytes leftover after parsing attributes in process `syz.4.4751'. [ 1100.441153][T21083] netlink: 'syz.0.4754': attribute type 27 has an invalid length. [ 1100.486265][T21083] netlink: 'syz.0.4754': attribute type 4 has an invalid length. [ 1100.603899][T21083] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4754'. [ 1100.714003][T21093] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4757'. [ 1101.079988][T21091] netlink: 'syz.4.4755': attribute type 15 has an invalid length. [ 1101.101293][T21101] netlink: 'syz.4.4755': attribute type 10 has an invalid length. [ 1102.037365][T21123] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4762'. [ 1102.395870][T21125] netlink: 'syz.0.4765': attribute type 1 has an invalid length. [ 1102.429755][T21125] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4765'. [ 1102.549373][T21141] netlink: 15730 bytes leftover after parsing attributes in process `syz.1.4767'. [ 1103.234255][T21157] netlink: 'syz.1.4772': attribute type 27 has an invalid length. [ 1103.495241][T21157] netlink: 'syz.1.4772': attribute type 4 has an invalid length. [ 1103.673810][T21157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1103.717403][T21155] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4768'. [ 1104.709302][T21188] netlink: 'syz.3.4781': attribute type 1 has an invalid length. [ 1104.823966][T21188] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4781'. [ 1104.847993][T21192] sctp: [Deprecated]: syz.1.4782 (pid 21192) Use of int in max_burst socket option deprecated. [ 1104.847993][T21192] Use struct sctp_assoc_value instead [ 1105.018813][T21198] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4783'. [ 1106.563934][T21234] netlink: 'syz.3.4789': attribute type 27 has an invalid length. [ 1106.607971][T21234] netlink: 'syz.3.4789': attribute type 4 has an invalid length. [ 1106.686753][T21234] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4789'. [ 1106.876767][T21244] netlink: 'syz.4.4796': attribute type 3 has an invalid length. [ 1106.940874][T21244] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1106.986808][T21246] netlink: 15730 bytes leftover after parsing attributes in process `syz.5.4795'. [ 1107.588410][T21265] sctp: [Deprecated]: syz.4.4797 (pid 21265) Use of int in max_burst socket option deprecated. [ 1107.588410][T21265] Use struct sctp_assoc_value instead [ 1108.297865][T21290] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.4807'. [ 1108.429442][T21291] netlink: 'syz.4.4818': attribute type 1 has an invalid length. [ 1108.455733][T21291] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1109.482410][T21313] netlink: 'syz.3.4813': attribute type 4 has an invalid length. [ 1109.539655][T21313] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4813'. [ 1109.704887][T21317] netlink: 'syz.5.4809': attribute type 27 has an invalid length. [ 1109.712912][T21317] netlink: 'syz.5.4809': attribute type 4 has an invalid length. [ 1109.755437][T21308] netlink: 'syz.0.4811': attribute type 3 has an invalid length. [ 1109.771189][T21308] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1109.783349][T21317] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4809'. [ 1110.731963][T21339] netlink: 'syz.1.4815': attribute type 16 has an invalid length. [ 1110.873678][T21339] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1110.883036][T21339] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1111.048599][T21343] netlink: 'syz.5.4822': attribute type 1 has an invalid length. [ 1111.105155][T21343] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.4822'. [ 1111.292136][T21351] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1111.801006][T21351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.130100][T21369] netlink: 'syz.0.4829': attribute type 4 has an invalid length. [ 1112.140618][T21369] __nla_validate_parse: 1 callbacks suppressed [ 1112.140662][T21369] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1112.298299][T21369] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1112.661043][T21384] netlink: 'syz.5.4831': attribute type 13 has an invalid length. [ 1112.713004][T21384] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4831'. [ 1112.744295][T21384] erspan0: refused to change device tx_queue_len [ 1112.758249][T21384] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1113.309060][T21402] netlink: 'syz.0.4836': attribute type 16 has an invalid length. [ 1113.346015][T21402] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4836'. [ 1113.513983][T21402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1113.546323][T21407] netlink: 'syz.1.4838': attribute type 1 has an invalid length. [ 1113.666049][T21407] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1114.080511][T21424] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1115.511519][T21447] netlink: 'syz.4.4850': attribute type 13 has an invalid length. [ 1115.608153][T21447] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4850'. [ 1115.866562][T21447] erspan0: refused to change device tx_queue_len [ 1115.872989][T21447] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1115.977330][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.984336][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.997996][T21467] netlink: 'syz.5.4858': attribute type 1 has an invalid length. [ 1116.009318][T21467] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1117.431405][T21480] netlink: 'syz.5.4859': attribute type 16 has an invalid length. [ 1117.441310][T21480] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4859'. [ 1117.451089][T21480] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1117.631176][T21501] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1117.768653][T21503] netlink: 'syz.3.4867': attribute type 3 has an invalid length. [ 1117.831970][T21503] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1119.007882][T21524] netlink: 'syz.1.4873': attribute type 13 has an invalid length. [ 1119.077608][T21524] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1119.216205][T21524] erspan0: refused to change device tx_queue_len [ 1119.304691][T21524] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1120.240304][T21540] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1120.319248][T21560] netlink: 'syz.0.4884': attribute type 10 has an invalid length. [ 1120.328211][T21540] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1120.353919][T21540] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 1120.383720][T21560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4884'. [ 1120.466989][T21560] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1120.838636][T21568] netlink: 'syz.1.4888': attribute type 3 has an invalid length. [ 1120.857493][T21568] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1120.909639][T21573] netlink: 'syz.3.4890': attribute type 10 has an invalid length. [ 1121.803386][T21584] netlink: 'syz.3.4891': attribute type 13 has an invalid length. [ 1121.833696][T21584] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4891'. [ 1121.859308][T21584] erspan0: refused to change device tx_queue_len [ 1121.898879][T21584] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1121.965149][T21590] netlink: 'syz.4.4895': attribute type 6 has an invalid length. [ 1122.627129][T21602] netlink: 'syz.1.4900': attribute type 10 has an invalid length. [ 1124.586338][T21643] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1124.646906][T21643] bridge_slave_1: default FDB implementation only supports local addresses [ 1125.468795][T21675] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4927'. [ 1125.498559][T21675] bridge_slave_1: default FDB implementation only supports local addresses [ 1125.694558][T21672] netlink: 'syz.0.4924': attribute type 13 has an invalid length. [ 1125.706478][T21672] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4924'. [ 1126.098520][T21672] erspan0: refused to change device tx_queue_len [ 1126.122168][T21672] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1126.340328][T21693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1126.484638][T21693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.504773][T21690] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.4932'. [ 1126.532207][T21700] netlink: 'syz.4.4936': attribute type 10 has an invalid length. [ 1126.844926][T21715] netlink: 'syz.5.4941': attribute type 10 has an invalid length. [ 1126.914337][T21715] team0: Port device macvlan1 added [ 1127.046988][T21726] netlink: 'syz.5.4945': attribute type 10 has an invalid length. [ 1127.110007][T21726] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4945'. [ 1127.134780][T21726] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1127.442276][T21736] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1127.467427][T21739] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.4950'. [ 1128.157820][T21736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1128.826055][T21789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1129.403900][T21794] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4971'. [ 1129.496324][T21807] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1129.548784][T21807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.714634][T21811] netlink: 'syz.5.4976': attribute type 10 has an invalid length. [ 1129.742249][T21813] netlink: 'syz.3.4977': attribute type 10 has an invalid length. [ 1130.367368][T21836] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4987'. [ 1130.425064][T21834] netlink: 'syz.1.4986': attribute type 13 has an invalid length. [ 1130.461539][T21834] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4986'. [ 1130.624782][T21834] erspan0: refused to change device tx_queue_len [ 1130.708330][T21834] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1130.734921][T21845] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4990'. [ 1130.764172][T21845] openvswitch: netlink: Flow actions attr not present in new flow. [ 1131.257618][T21867] netlink: 'syz.1.4995': attribute type 10 has an invalid length. [ 1131.305432][T21870] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4996'. [ 1131.374324][T21872] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1131.638873][T21885] netlink: 'syz.5.5002': attribute type 7 has an invalid length. [ 1132.241260][T21907] netlink: 'syz.4.5011': attribute type 10 has an invalid length. [ 1133.271826][T21949] netlink: 'syz.0.5028': attribute type 10 has an invalid length. [ 1134.144298][T21971] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5034'. [ 1135.208852][T21998] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5048'. [ 1136.607536][T22046] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5068'. [ 1137.239065][T22073] netlink: 'syz.3.5080': attribute type 11 has an invalid length. [ 1137.685596][T22102] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5091'. [ 1138.479512][T22130] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5104'. [ 1139.237091][T22150] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1139.378793][T22157] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5114'. [ 1139.388372][T22157] bridge_slave_1: default FDB implementation only supports local addresses [ 1139.520959][T22160] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5117'. [ 1139.534042][T22164] netlink: 'syz.4.5115': attribute type 11 has an invalid length. [ 1139.854237][T22179] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5124'. [ 1139.967117][T22187] netlink: 'syz.5.5128': attribute type 1 has an invalid length. [ 1140.001722][T22187] netlink: 191376 bytes leftover after parsing attributes in process `syz.5.5128'. [ 1140.047809][T22189] netlink: 'syz.3.5129': attribute type 2 has an invalid length. [ 1140.134836][T22189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1140.183991][T22194] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5131'. [ 1140.924679][T22227] syz.3.5144[22227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1140.924820][T22227] syz.3.5144[22227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.856429][T22262] __nla_validate_parse: 1 callbacks suppressed [ 1141.856474][T22262] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5155'. [ 1141.974162][T22276] netlink: 'syz.4.5157': attribute type 10 has an invalid length. [ 1142.013224][T22276] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5157'. [ 1142.087293][T22280] netlink: 'syz.3.5162': attribute type 1 has an invalid length. [ 1142.098883][T22280] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1142.316694][T22293] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1142.877689][T22314] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1142.982420][T22311] netlink: 'syz.1.5174': attribute type 3 has an invalid length. [ 1143.003426][T22311] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5174'. [ 1143.406304][T22328] netlink: 'syz.4.5177': attribute type 1 has an invalid length. [ 1143.548116][T22328] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.5177'. [ 1143.619859][T22331] netlink: 'syz.0.5189': attribute type 10 has an invalid length. [ 1143.636727][T22329] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1143.696761][T22331] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5189'. [ 1143.894999][T22347] netlink: 'syz.5.5185': attribute type 29 has an invalid length. [ 1143.907843][T22347] netlink: 'syz.5.5185': attribute type 29 has an invalid length. [ 1144.595782][T22342] netlink: 'syz.5.5185': attribute type 29 has an invalid length. [ 1144.606665][T22350] netlink: 'syz.5.5185': attribute type 29 has an invalid length. [ 1144.774623][T22366] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.5194'. [ 1144.857685][T22366] netlink: del zone limit has 8 unknown bytes [ 1145.174457][T22379] netlink: 'syz.5.5200': attribute type 10 has an invalid length. [ 1145.600373][T22379] team0: Device nlmon0 is of different type [ 1145.781521][T22380] netlink: 'syz.3.5198': attribute type 10 has an invalid length. [ 1146.610496][T22409] netlink: del zone limit has 8 unknown bytes [ 1146.956863][T22417] __nla_validate_parse: 5 callbacks suppressed [ 1146.956883][T22417] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.5213'. [ 1147.034084][T22417] openvswitch: netlink: Duplicate key (type 0). [ 1147.328959][T22436] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1147.533803][T22446] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.5225'. [ 1147.568318][T22446] netlink: del zone limit has 8 unknown bytes [ 1147.717474][T22448] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5226'. [ 1147.790689][T22454] netlink: 'syz.3.5229': attribute type 10 has an invalid length. [ 1148.172535][T22475] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1148.719617][T22485] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5245'. [ 1148.786444][T22496] validate_nla: 1 callbacks suppressed [ 1148.786484][T22496] netlink: 'syz.4.5248': attribute type 10 has an invalid length. [ 1148.870644][T22496] device nlmon0 entered promiscuous mode [ 1148.895041][T22496] team0: Device nlmon0 is of different type [ 1149.250689][T22520] netlink: 'syz.5.5257': attribute type 3 has an invalid length. [ 1149.353149][T22520] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5257'. [ 1151.650532][T22557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5271'. [ 1151.970262][T22568] netlink: 'syz.0.5274': attribute type 10 has an invalid length. [ 1152.121781][T22568] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5274'. [ 1152.903175][T22588] netlink: 'syz.1.5286': attribute type 1 has an invalid length. [ 1152.912509][T22588] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.5286'. [ 1153.186183][T22598] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.5289'. [ 1153.665812][T22609] netlink: 'syz.1.5292': attribute type 10 has an invalid length. [ 1153.744092][T22609] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5292'. [ 1155.122997][T22648] netlink: 'syz.1.5308': attribute type 10 has an invalid length. [ 1155.203970][T22648] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1156.745572][T22698] netlink: 'syz.3.5323': attribute type 10 has an invalid length. [ 1156.836714][T22698] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5323'. [ 1157.421427][T22708] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5330'. [ 1158.503912][T22731] netlink: 'syz.5.5338': attribute type 10 has an invalid length. [ 1158.529925][T22731] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5338'. [ 1158.549117][T22731] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1158.980534][T22752] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5344'. [ 1159.841170][T22768] netlink: 'syz.0.5352': attribute type 10 has an invalid length. [ 1159.870260][T22768] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5352'. [ 1161.371110][T22821] netlink: 'syz.0.5373': attribute type 4 has an invalid length. [ 1161.412445][T22821] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5373'. [ 1161.844336][T22831] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5377'. [ 1163.592598][T22863] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5389'. [ 1163.743452][T22872] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5393'. [ 1165.616016][T22951] netlink: 'syz.1.5424': attribute type 10 has an invalid length. [ 1165.625125][T22957] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5423'. [ 1165.651274][T22951] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5424'. [ 1166.370017][T22992] netlink: 'syz.1.5437': attribute type 3 has an invalid length. [ 1166.430990][T22992] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1166.484912][T22992] netlink: 'syz.1.5437': attribute type 3 has an invalid length. [ 1166.498863][T22992] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1166.686818][T23000] netlink: 'syz.4.5438': attribute type 10 has an invalid length. [ 1166.695896][T23003] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5439'. [ 1166.740837][T23000] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5438'. [ 1167.258264][T23031] netlink: 'syz.3.5451': attribute type 3 has an invalid length. [ 1167.269360][T23031] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1167.336390][T23031] netlink: 'syz.3.5451': attribute type 3 has an invalid length. [ 1167.355768][T23031] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5451'. [ 1168.023714][T23047] netlink: 'syz.3.5455': attribute type 10 has an invalid length. [ 1168.347376][T23066] netlink: zone id is out of range [ 1168.363445][T23068] netlink: 'syz.1.5464': attribute type 3 has an invalid length. [ 1168.377688][T23066] netlink: zone id is out of range [ 1168.382862][T23066] netlink: zone id is out of range [ 1168.388977][T23068] netlink: 'syz.1.5464': attribute type 1 has an invalid length. [ 1168.399778][T23066] netlink: zone id is out of range [ 1168.426921][T23066] netlink: zone id is out of range [ 1168.432362][T23066] netlink: zone id is out of range [ 1168.473298][T23066] netlink: zone id is out of range [ 1168.484621][T23066] netlink: zone id is out of range [ 1168.489794][T23066] netlink: zone id is out of range [ 1168.532525][T23066] netlink: zone id is out of range [ 1168.798036][T23079] netlink: 'syz.4.5469': attribute type 3 has an invalid length. [ 1168.843610][T23074] __nla_validate_parse: 4 callbacks suppressed [ 1168.847619][T23079] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5469'. [ 1168.863823][T23074] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5467'. [ 1169.312828][T23096] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.5474'. [ 1169.362976][T23100] netlink: 'syz.1.5475': attribute type 10 has an invalid length. [ 1169.382847][T23100] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5475'. [ 1170.064826][T23119] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5481'. [ 1170.820292][T23136] netlink: 'syz.3.5487': attribute type 10 has an invalid length. [ 1170.846829][T23136] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5487'. [ 1170.999228][T23154] device syzkaller0 entered promiscuous mode [ 1171.153039][T23166] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5499'. [ 1172.253405][T23187] validate_nla: 1 callbacks suppressed [ 1172.253438][T23187] netlink: 'syz.5.5507': attribute type 10 has an invalid length. [ 1172.278564][T23187] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5507'. [ 1172.501959][T23201] netlink: 'syz.0.5513': attribute type 1 has an invalid length. [ 1172.564793][T23201] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1173.107042][T23187] team0: Port device macvlan0 removed [ 1173.130880][T23187] team0: Port device macvlan1 removed [ 1173.706895][T23237] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5526'. [ 1173.870189][T23246] netlink: 'syz.4.5530': attribute type 1 has an invalid length. [ 1173.880712][T23246] netlink: 'syz.4.5530': attribute type 4 has an invalid length. [ 1173.888850][T23246] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5530'. [ 1174.042803][T23252] netlink: 'syz.4.5533': attribute type 1 has an invalid length. [ 1174.067011][T23252] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5533'. [ 1174.158451][T23258] netlink: 'syz.1.5532': attribute type 10 has an invalid length. [ 1174.194568][T23258] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1174.382439][T23265] netlink: 'syz.0.5538': attribute type 10 has an invalid length. [ 1174.477254][T23265] device nlmon0 entered promiscuous mode [ 1174.563118][T23274] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5536'. [ 1174.585260][T23265] team0: Device nlmon0 is of different type [ 1174.681569][T23272] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5541'. [ 1174.787317][T23278] device syzkaller0 entered promiscuous mode [ 1175.076180][T23288] netlink: 'syz.1.5546': attribute type 10 has an invalid length. [ 1175.377449][T23299] netlink: 'syz.0.5549': attribute type 10 has an invalid length. [ 1175.401217][T23299] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5549'. [ 1175.675224][T23317] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.5553'. [ 1175.737480][T23316] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5555'. [ 1176.050792][T23331] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1176.465103][T23348] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1176.492477][T23348] net_ratelimit: 163 callbacks suppressed [ 1176.492498][T23348] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1176.800823][T23355] netlink: 'syz.0.5569': attribute type 10 has an invalid length. [ 1177.416616][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.423183][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.994185][T23432] __nla_validate_parse: 3 callbacks suppressed [ 1178.994203][T23432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5597'. [ 1179.067899][T23432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.303194][T23432] device bond_slave_0 left promiscuous mode [ 1179.495037][T23432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.520499][T23432] device bond_slave_1 left promiscuous mode [ 1181.497978][T23432] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1181.523038][T23432] device bridge_slave_1 left promiscuous mode [ 1181.593061][T23432] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1181.612962][T23432] bond0 (unregistering): Released all slaves [ 1181.623667][T23445] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1181.633326][T23445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1181.642898][T23445] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1181.982719][T23462] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5606'. [ 1182.012931][T23462] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1182.174672][T23465] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5609'. [ 1182.439668][T23469] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1183.156677][T23498] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5624'. [ 1183.359655][T23504] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1184.267094][T23535] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5638'. [ 1184.552489][T23549] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5642'. [ 1185.027122][T23565] netlink: 'syz.5.5649': attribute type 1 has an invalid length. [ 1185.053869][T23565] netlink: 'syz.5.5649': attribute type 4 has an invalid length. [ 1185.074958][T23565] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5649'. [ 1185.541272][T23587] netlink: 'syz.0.5657': attribute type 2 has an invalid length. [ 1185.568305][T23587] netlink: 'syz.0.5657': attribute type 1 has an invalid length. [ 1185.791189][T23599] netlink: 'syz.4.5661': attribute type 10 has an invalid length. [ 1185.837069][T23601] netlink: 'syz.3.5662': attribute type 8 has an invalid length. [ 1185.863938][T23601] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.5662'. [ 1186.009171][T23606] netlink: 'syz.0.5664': attribute type 1 has an invalid length. [ 1186.027449][T23606] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1186.416012][T23629] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1186.918717][T23644] sock: sock_set_timeout: `syz.1.5680' (pid 23644) tries to set negative timeout [ 1187.711278][T23660] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5687'. [ 1188.610534][T23705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.861105][T23717] netlink: 'syz.5.5706': attribute type 1 has an invalid length. [ 1188.873715][T23717] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.5706'. [ 1190.468092][T23763] netlink: 'syz.3.5722': attribute type 1 has an invalid length. [ 1190.515691][T23763] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1190.639088][T23777] netlink: 'syz.1.5728': attribute type 2 has an invalid length. [ 1190.670926][T23777] netlink: 'syz.1.5728': attribute type 1 has an invalid length. [ 1190.858021][T23786] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5731'. [ 1190.946739][T23790] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.5733'. [ 1190.986858][T23790] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1191.010669][T23796] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1191.324155][T23813] netlink: 'syz.0.5740': attribute type 10 has an invalid length. [ 1191.405410][T23813] device O3ãc¤± entered promiscuous mode [ 1191.473944][T23813] team0: Port device O3ãc¤± added [ 1191.601928][T23820] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.5743'. [ 1191.874119][T23832] netlink: 'syz.5.5747': attribute type 2 has an invalid length. [ 1191.894438][T23832] netlink: 'syz.5.5747': attribute type 1 has an invalid length. [ 1192.013435][T23831] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5746'. [ 1192.041191][T23838] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5748'. [ 1193.913904][T23876] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5761'. [ 1194.262280][T23887] device syzkaller0 entered promiscuous mode [ 1194.415800][T23903] sock: sock_set_timeout: `syz.4.5768' (pid 23903) tries to set negative timeout [ 1194.516339][T23906] netlink: 'syz.3.5770': attribute type 10 has an invalid length. [ 1194.649535][T23916] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5775'. [ 1195.114881][T23931] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5779'. [ 1195.693947][T23958] netlink: 'syz.1.5787': attribute type 10 has an invalid length. [ 1195.722020][T23961] sock: sock_set_timeout: `syz.5.5788' (pid 23961) tries to set negative timeout [ 1196.067807][T23965] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5789'. [ 1197.041208][T23997] device syzkaller0 entered promiscuous mode [ 1197.281574][T24007] netlink: 'syz.5.5802': attribute type 10 has an invalid length. [ 1197.374313][T24007] team0: Port device O3ãc¤± added [ 1197.657511][T24010] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5803'. [ 1198.644079][T24039] netlink: 'syz.0.5812': attribute type 3 has an invalid length. [ 1198.652629][T24039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5812'. [ 1198.948916][T24046] netlink: 'syz.4.5816': attribute type 3 has an invalid length. [ 1198.984314][T24046] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5816'. [ 1199.005804][T24050] netlink: 'syz.4.5816': attribute type 3 has an invalid length. [ 1199.119799][T24050] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5816'. [ 1199.135130][T24053] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5819'. [ 1199.663070][T24059] device syzkaller0 entered promiscuous mode [ 1200.050473][T24072] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5832'. [ 1200.732244][T24077] device syzkaller0 entered promiscuous mode [ 1200.767569][T24092] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1201.138203][T24100] netlink: 'syz.3.5830': attribute type 3 has an invalid length. [ 1201.173374][T24100] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1201.197941][T24100] netlink: 'syz.3.5830': attribute type 3 has an invalid length. [ 1201.206039][T24100] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1201.235918][T24098] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5842'. [ 1201.441197][T24109] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1201.787057][T24121] device syzkaller0 entered promiscuous mode [ 1202.540566][T24144] netlink: 'syz.5.5845': attribute type 3 has an invalid length. [ 1202.573680][T24144] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5845'. [ 1202.593109][T24148] netlink: 'syz.5.5845': attribute type 3 has an invalid length. [ 1202.651508][T24148] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5845'. [ 1202.993603][T24147] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.5846'. [ 1203.263721][T24165] netlink: 'syz.3.5849': attribute type 10 has an invalid length. [ 1204.932189][T24202] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5865'. [ 1205.566703][T24224] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1206.043717][T24235] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5885'. [ 1206.610564][T24250] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5878'. [ 1206.905434][T24264] syzkaller0: create flow: hash 1568822472 index 1 [ 1207.026777][T12978] syzkaller0: tun_net_xmit 76 [ 1207.031818][T12978] syzkaller0: tun_net_xmit 48 [ 1207.077810][T12985] syzkaller0: tun_net_xmit 76 [ 1207.112831][T24268] syzkaller0: delete flow: hash 1568822472 index 1 [ 1207.377210][T24277] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1207.683344][T24279] device syzkaller0 entered promiscuous mode [ 1208.464901][T24297] netlink: 'syz.4.5894': attribute type 10 has an invalid length. [ 1208.959931][T24312] device syzkaller0 entered promiscuous mode [ 1209.103329][T24311] device syzkaller0 entered promiscuous mode [ 1209.824623][T24327] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5901'. [ 1210.118926][T24334] device syzkaller0 entered promiscuous mode [ 1210.582873][T24347] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.5909'. [ 1211.486095][T24377] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5916'. [ 1211.922082][T24381] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5917'. [ 1211.967037][T24383] netlink: zone id is out of range [ 1212.009516][T24383] netlink: set zone limit has 8 unknown bytes [ 1212.523393][T24401] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.5924'. [ 1214.016530][T24433] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.5936'. [ 1214.087374][T24428] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5932'. [ 1214.193149][T24433] netlink: zone id is out of range [ 1214.244532][T24433] netlink: zone id is out of range [ 1214.270628][T24433] netlink: zone id is out of range [ 1214.304251][T24433] netlink: zone id is out of range [ 1214.309772][T24433] netlink: zone id is out of range [ 1214.337398][T24433] netlink: zone id is out of range [ 1214.347914][T24433] netlink: zone id is out of range [ 1214.354823][T24433] netlink: zone id is out of range [ 1214.630546][T24452] syzkaller0: create flow: hash 1568822472 index 1 [ 1216.608557][T12985] syzkaller0: tun_net_xmit 76 [ 1216.614998][T12985] syzkaller0: tun_net_xmit 48 [ 1216.620468][T24451] syzkaller0: delete flow: hash 1568822472 index 1 [ 1217.022021][T24463] device syzkaller0 entered promiscuous mode [ 1219.784345][T24470] device syzkaller0 entered promiscuous mode [ 1220.299780][T24493] device syzkaller0 entered promiscuous mode [ 1220.627674][T24497] device syzkaller0 entered promiscuous mode [ 1221.072090][T24513] netlink: 'syz.3.5957': attribute type 3 has an invalid length. [ 1221.077020][T24509] device syzkaller0 entered promiscuous mode [ 1221.080362][T24513] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5957'. [ 1221.207500][T24514] syzkaller0: create flow: hash 1568822472 index 1 [ 1221.266987][T12985] syzkaller0: tun_net_xmit 76 [ 1221.271952][T12985] syzkaller0: tun_net_xmit 48 [ 1221.293929][T13045] syzkaller0: tun_net_xmit 76 [ 1221.445016][T24519] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.5960'. [ 1221.475927][T24514] syzkaller0: delete flow: hash 1568822472 index 1 [ 1221.650340][T24530] netlink: 'syz.1.5964': attribute type 10 has an invalid length. [ 1222.317527][T24554] netlink: 'syz.1.5973': attribute type 3 has an invalid length. [ 1222.358435][T24554] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5973'. [ 1222.655407][T24561] device syzkaller0 entered promiscuous mode [ 1222.730282][T24565] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5975'. [ 1222.840230][T24570] device syzkaller0 entered promiscuous mode [ 1223.347000][T24584] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1223.951277][T24608] netlink: 'syz.0.5987': attribute type 3 has an invalid length. [ 1223.999740][T24608] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1225.523495][T24635] device syzkaller0 entered promiscuous mode [ 1226.806951][T24669] netlink: 'syz.5.6002': attribute type 3 has an invalid length. [ 1226.890115][T24669] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1227.365545][T24678] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6007'. [ 1227.715003][T24682] device syzkaller0 entered promiscuous mode [ 1227.745095][T24680] device syzkaller0 entered promiscuous mode [ 1228.722590][T24704] device syzkaller0 entered promiscuous mode [ 1229.616136][T24730] device syzkaller0 entered promiscuous mode [ 1229.635351][T24736] netlink: 'syz.4.6023': attribute type 3 has an invalid length. [ 1229.658969][T24736] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1232.188158][T24759] netlink: 'syz.3.6042': attribute type 10 has an invalid length. [ 1232.198895][T24759] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6042'. [ 1232.289322][T24764] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.6042'. [ 1232.410723][T24759] netlink: 'syz.3.6042': attribute type 10 has an invalid length. [ 1233.479543][T24786] IPv6: pim6reg1: Disabled Multicast RS [ 1234.849580][T24820] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1237.039063][T24882] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1237.341215][T24895] netlink: 'syz.0.6071': attribute type 153 has an invalid length. [ 1237.349514][T24895] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.6071'. [ 1237.834118][T24899] netlink: 'syz.3.6072': attribute type 3 has an invalid length. [ 1237.957934][T24899] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1238.905592][T24929] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6081'. [ 1239.052449][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.058905][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.089175][T24930] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1239.741954][T24951] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6088'. [ 1240.918344][T24976] netlink: 'syz.0.6097': attribute type 3 has an invalid length. [ 1240.975381][T24976] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6097'. [ 1241.285948][T24978] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6098'. [ 1241.712975][T24984] IPv6: pim6reg1: Disabled Multicast RS [ 1242.201221][T25006] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6103'. [ 1242.795332][T25024] netlink: 'syz.4.6110': attribute type 3 has an invalid length. [ 1242.850313][T25024] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6110'. [ 1243.001417][T25023] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6112'. [ 1243.413183][T25030] netlink: 'syz.5.6113': attribute type 10 has an invalid length. [ 1243.494003][T25030] device bond0 left promiscuous mode [ 1243.530856][T25030] device bond_slave_1 left promiscuous mode [ 1245.388764][T25036] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.6124'. [ 1245.504086][T25034] netlink: 'syz.4.6114': attribute type 3 has an invalid length. [ 1245.535347][T25034] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.6114'. [ 1245.610858][T25043] netlink: 'syz.5.6116': attribute type 10 has an invalid length. [ 1245.653727][T25043] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6116'. [ 1245.852218][T25053] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1246.025776][T25048] IPv6: pim6reg1: Disabled Multicast RS [ 1246.841955][T25073] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1247.046526][T25081] netlink: 'syz.0.6127': attribute type 10 has an invalid length. [ 1247.056013][T25081] device bond0 left promiscuous mode [ 1247.061441][T25081] device bond_slave_1 left promiscuous mode [ 1247.068169][T25081] device bridge_slave_1 left promiscuous mode [ 1247.351224][T25087] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.6130'. [ 1247.819789][T25102] netlink: 'syz.0.6133': attribute type 10 has an invalid length. [ 1247.886886][T25098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.917271][T25102] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6133'. [ 1248.346433][T25117] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6138'. [ 1248.608067][T25123] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6152'. [ 1248.875653][T25133] netlink: 'syz.1.6144': attribute type 10 has an invalid length. [ 1249.126866][T25140] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1249.639819][T25150] device wlan0 left promiscuous mode [ 1249.745264][T25153] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 [ 1250.295223][T25158] netlink: 'syz.0.6151': attribute type 10 has an invalid length. [ 1250.323447][T25158] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1250.347269][T25165] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6154'. [ 1250.722859][T25179] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6158'. [ 1251.197038][T25189] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1251.449784][T25204] netlink: 'syz.4.6167': attribute type 10 has an invalid length. [ 1251.491826][T25207] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6169'. [ 1251.493738][T25204] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1251.954207][T25222] netlink: 'syz.4.6173': attribute type 9 has an invalid length. [ 1252.792642][T25236] netlink: 'syz.4.6178': attribute type 16 has an invalid length. [ 1252.802091][T25237] netlink: 'syz.4.6178': attribute type 10 has an invalid length. [ 1253.146077][T25243] __nla_validate_parse: 5 callbacks suppressed [ 1253.146100][T25243] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.6180'. [ 1253.203206][T25251] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1253.457918][T25255] netlink: 'syz.3.6183': attribute type 10 has an invalid length. [ 1253.483640][T25255] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6183'. [ 1253.594650][T25262] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 1253.842354][T25267] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.6188'. [ 1254.082642][T25267] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1254.104006][T25267] CPU: 1 PID: 25267 Comm: syz.5.6188 Not tainted syzkaller #0 [ 1254.111653][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1254.121846][T25267] Call Trace: [ 1254.125150][T25267] [ 1254.128102][T25267] dump_stack_lvl+0x188/0x250 [ 1254.132800][T25267] ? show_regs_print_info+0x20/0x20 [ 1254.138015][T25267] ? load_image+0x400/0x400 [ 1254.142552][T25267] sysfs_warn_dup+0x8a/0xa0 [ 1254.147074][T25267] sysfs_do_create_link_sd+0xc0/0x110 [ 1254.152473][T25267] device_add+0x7ed/0xfb0 [ 1254.157275][T25267] wiphy_register+0x1e81/0x2c30 [ 1254.162527][T25267] ? cfg80211_event_work+0x40/0x40 [ 1254.167684][T25267] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1254.173880][T25267] ? ieee80211_register_hw+0x28ca/0x3af0 [ 1254.179808][T25267] ieee80211_register_hw+0x2aa1/0x3af0 [ 1254.185663][T25267] ? ieee80211_tasklet_handler+0x20/0x20 [ 1254.191324][T25267] ? lockdep_hardirqs_on+0x94/0x140 [ 1254.196718][T25267] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1254.202917][T25267] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1254.209065][T25267] hwsim_new_radio_nl+0xa6f/0xc40 [ 1254.214231][T25267] genl_rcv_msg+0xcea/0xf90 [ 1254.218861][T25267] ? genl_bind+0x380/0x380 [ 1254.223335][T25267] ? mark_lock+0x94/0x320 [ 1254.227686][T25267] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1254.233785][T25267] ? lock_chain_count+0x20/0x20 [ 1254.238659][T25267] ? rcu_is_watching+0x11/0xa0 [ 1254.243442][T25267] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1254.249617][T25267] ? lockdep_hardirqs_on+0x94/0x140 [ 1254.254838][T25267] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1254.261459][T25267] ? netlink_rcv_skb+0x81/0x440 [ 1254.266357][T25267] netlink_rcv_skb+0x1f5/0x440 [ 1254.271138][T25267] ? genl_bind+0x380/0x380 [ 1254.275664][T25267] ? netlink_ack+0xb50/0xb50 [ 1254.280276][T25267] ? __lock_acquire+0x7d10/0x7d10 [ 1254.285336][T25267] ? down_read+0x1aa/0x2e0 [ 1254.289777][T25267] genl_rcv+0x24/0x40 [ 1254.293785][T25267] netlink_unicast+0x774/0x920 [ 1254.298585][T25267] netlink_sendmsg+0x8ba/0xbe0 [ 1254.303644][T25267] ? lockdep_hardirqs_on+0x94/0x140 [ 1254.309002][T25267] ? netlink_getsockopt+0x570/0x570 [ 1254.314223][T25267] ? security_socket_sendmsg+0x56/0xa0 [ 1254.319696][T25267] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1254.325268][T25267] ? security_socket_sendmsg+0x7c/0xa0 [ 1254.330747][T25267] ? netlink_getsockopt+0x570/0x570 [ 1254.335995][T25267] ____sys_sendmsg+0x5b7/0x8f0 [ 1254.340879][T25267] ? __sys_sendmsg_sock+0x30/0x30 [ 1254.346082][T25267] ? import_iovec+0x6f/0xa0 [ 1254.350703][T25267] ___sys_sendmsg+0x236/0x2e0 [ 1254.356202][T25267] ? __sys_sendmsg+0x2a0/0x2a0 [ 1254.361690][T25267] ? rcu_lock_acquire+0xe/0x30 [ 1254.366590][T25267] __se_sys_sendmsg+0x1af/0x290 [ 1254.371558][T25267] ? __x64_sys_sendmsg+0x80/0x80 [ 1254.376601][T25267] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1254.382702][T25267] ? lockdep_hardirqs_on+0x94/0x140 [ 1254.387976][T25267] do_syscall_64+0x4c/0xa0 [ 1254.392497][T25267] ? clear_bhb_loop+0x30/0x80 [ 1254.397196][T25267] ? clear_bhb_loop+0x30/0x80 [ 1254.402150][T25267] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1254.408150][T25267] RIP: 0033:0x7f7eb088fe59 [ 1254.412584][T25267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.432205][T25267] RSP: 002b:00007f7eaeae9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1254.441075][T25267] RAX: ffffffffffffffda RBX: 00007f7eb0b08fa0 RCX: 00007f7eb088fe59 [ 1254.449327][T25267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1254.457402][T25267] RBP: 00007f7eb0925d6f R08: 0000000000000000 R09: 0000000000000000 [ 1254.465493][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.473473][T25267] R13: 00007f7eb0b09038 R14: 00007f7eb0b08fa0 R15: 00007ffc12059e88 [ 1254.481754][T25267] [ 1255.455823][T25308] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6197'. [ 1255.765301][T25318] netlink: 'syz.3.6199': attribute type 10 has an invalid length. [ 1255.793776][T25318] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1255.870010][T25320] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 [ 1256.192399][T25326] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6204'. [ 1256.305487][T25326] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1256.331348][T25326] CPU: 1 PID: 25326 Comm: syz.3.6204 Not tainted syzkaller #0 [ 1256.338966][T25326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1256.349236][T25326] Call Trace: [ 1256.352634][T25326] [ 1256.355587][T25326] dump_stack_lvl+0x188/0x250 [ 1256.360392][T25326] ? show_regs_print_info+0x20/0x20 [ 1256.365724][T25326] ? load_image+0x400/0x400 [ 1256.370559][T25326] sysfs_warn_dup+0x8a/0xa0 [ 1256.375271][T25326] sysfs_do_create_link_sd+0xc0/0x110 [ 1256.380873][T25326] device_add+0x7ed/0xfb0 [ 1256.385243][T25326] wiphy_register+0x1e81/0x2c30 [ 1256.390243][T25326] ? cfg80211_event_work+0x40/0x40 [ 1256.395499][T25326] ? minstrel_ht_alloc+0x808/0x980 [ 1256.400665][T25326] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1256.406873][T25326] ieee80211_register_hw+0x2aa1/0x3af0 [ 1256.412477][T25326] ? ieee80211_tasklet_handler+0x20/0x20 [ 1256.418165][T25326] ? rcu_is_watching+0x11/0xa0 [ 1256.423066][T25326] ? memset+0x1e/0x40 [ 1256.427130][T25326] ? hrtimer_init+0x10c/0x220 [ 1256.431948][T25326] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1256.437842][T25326] hwsim_new_radio_nl+0xa6f/0xc40 [ 1256.443039][T25326] genl_rcv_msg+0xcea/0xf90 [ 1256.447687][T25326] ? genl_bind+0x380/0x380 [ 1256.452244][T25326] ? perf_trace_lock+0xe4/0x390 [ 1256.457145][T25326] ? verify_lock_unused+0x140/0x140 [ 1256.462584][T25326] ? verify_lock_unused+0x140/0x140 [ 1256.467836][T25326] ? perf_trace_lock+0xe4/0x390 [ 1256.472727][T25326] ? perf_trace_lock+0xe4/0x390 [ 1256.477620][T25326] ? perf_trace_lock+0xe4/0x390 [ 1256.482498][T25326] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1256.489200][T25326] netlink_rcv_skb+0x1f5/0x440 [ 1256.494006][T25326] ? genl_bind+0x380/0x380 [ 1256.498467][T25326] ? netlink_ack+0xb50/0xb50 [ 1256.503110][T25326] ? __lock_acquire+0x7d10/0x7d10 [ 1256.508286][T25326] ? down_read+0x1aa/0x2e0 [ 1256.513315][T25326] genl_rcv+0x24/0x40 [ 1256.517368][T25326] netlink_unicast+0x774/0x920 [ 1256.522202][T25326] netlink_sendmsg+0x8ba/0xbe0 [ 1256.527019][T25326] ? netlink_getsockopt+0x570/0x570 [ 1256.532295][T25326] ? aa_sock_msg_perm+0x94/0x150 [ 1256.537265][T25326] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1256.542587][T25326] ? security_socket_sendmsg+0x7c/0xa0 [ 1256.548095][T25326] ? netlink_getsockopt+0x570/0x570 [ 1256.553327][T25326] ____sys_sendmsg+0x5b7/0x8f0 [ 1256.558138][T25326] ? __sys_sendmsg_sock+0x30/0x30 [ 1256.563223][T25326] ? import_iovec+0x6f/0xa0 [ 1256.567782][T25326] ___sys_sendmsg+0x236/0x2e0 [ 1256.572504][T25326] ? __sys_sendmsg+0x2a0/0x2a0 [ 1256.577366][T25326] __se_sys_sendmsg+0x1af/0x290 [ 1256.582253][T25326] ? __x64_sys_sendmsg+0x80/0x80 [ 1256.587574][T25326] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1256.593952][T25326] ? lockdep_hardirqs_on+0x94/0x140 [ 1256.599281][T25326] do_syscall_64+0x4c/0xa0 [ 1256.603789][T25326] ? clear_bhb_loop+0x30/0x80 [ 1256.608575][T25326] ? clear_bhb_loop+0x30/0x80 [ 1256.613277][T25326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1256.619401][T25326] RIP: 0033:0x7f794c1d1e59 [ 1256.624047][T25326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1256.643899][T25326] RSP: 002b:00007f794a40a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1256.652632][T25326] RAX: ffffffffffffffda RBX: 00007f794c44b090 RCX: 00007f794c1d1e59 [ 1256.660816][T25326] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1256.669013][T25326] RBP: 00007f794c267d6f R08: 0000000000000000 R09: 0000000000000000 [ 1256.677392][T25326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.685694][T25326] R13: 00007f794c44b128 R14: 00007f794c44b090 R15: 00007fffc6e4f8d8 [ 1256.693917][T25326] [ 1256.827841][T25325] device wlan0 left promiscuous mode [ 1256.907083][T25329] netlink: 'syz.5.6201': attribute type 9 has an invalid length. [ 1256.929055][T25329] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.6201'. [ 1256.958412][T25345] netlink: 'syz.4.6209': attribute type 3 has an invalid length. [ 1256.970122][T25345] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1257.192815][T25351] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1257.701872][T25362] netlink: 'syz.0.6215': attribute type 10 has an invalid length. [ 1257.792246][T25371] device wlan0 left promiscuous mode [ 1257.869918][T25374] netlink: 'syz.1.6219': attribute type 2 has an invalid length. [ 1257.878549][T25374] netlink: 'syz.1.6219': attribute type 1 has an invalid length. [ 1258.626038][T25368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.657379][T25371] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 1259.239096][T25391] __nla_validate_parse: 3 callbacks suppressed [ 1259.240468][T25391] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1259.740428][T25411] netlink: 'syz.4.6226': attribute type 2 has an invalid length. [ 1259.768962][T25411] netlink: 'syz.4.6226': attribute type 8 has an invalid length. [ 1259.812991][T25411] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6226'. [ 1259.865486][T25415] netlink: 'syz.4.6226': attribute type 2 has an invalid length. [ 1259.886491][T25415] netlink: 'syz.4.6226': attribute type 8 has an invalid length. [ 1259.897810][T25415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6226'. [ 1260.107779][T25424] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1260.625234][T25429] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6233'. [ 1260.642900][T25427] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6231'. [ 1260.726587][T25429] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1260.736543][T25429] CPU: 1 PID: 25429 Comm: syz.0.6233 Not tainted syzkaller #0 [ 1260.744047][T25429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1260.754134][T25429] Call Trace: [ 1260.757443][T25429] [ 1260.760401][T25429] dump_stack_lvl+0x188/0x250 [ 1260.765120][T25429] ? show_regs_print_info+0x20/0x20 [ 1260.770439][T25429] ? load_image+0x400/0x400 [ 1260.774986][T25429] sysfs_warn_dup+0x8a/0xa0 [ 1260.779527][T25429] sysfs_do_create_link_sd+0xc0/0x110 [ 1260.785018][T25429] device_add+0x7ed/0xfb0 [ 1260.789412][T25429] wiphy_register+0x1e81/0x2c30 [ 1260.794404][T25429] ? cfg80211_event_work+0x40/0x40 [ 1260.799546][T25429] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1260.805845][T25429] ? rtnl_unlock+0x5/0x10 [ 1260.810299][T25429] ieee80211_register_hw+0x2aa1/0x3af0 [ 1260.815814][T25429] ? ieee80211_tasklet_handler+0x20/0x20 [ 1260.821500][T25429] ? rcu_is_watching+0x11/0xa0 [ 1260.826380][T25429] ? memset+0x1e/0x40 [ 1260.830386][T25429] ? hrtimer_init+0x10c/0x220 [ 1260.835102][T25429] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1260.840876][T25429] hwsim_new_radio_nl+0xa6f/0xc40 [ 1260.846210][T25429] genl_rcv_msg+0xcea/0xf90 [ 1260.850747][T25429] ? genl_bind+0x380/0x380 [ 1260.855208][T25429] ? verify_lock_unused+0x140/0x140 [ 1260.860540][T25429] ? verify_lock_unused+0x140/0x140 [ 1260.866120][T25429] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1260.872400][T25429] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1260.879122][T25429] netlink_rcv_skb+0x1f5/0x440 [ 1260.884105][T25429] ? genl_bind+0x380/0x380 [ 1260.888580][T25429] ? netlink_ack+0xb50/0xb50 [ 1260.893192][T25429] ? __lock_acquire+0x7d10/0x7d10 [ 1260.898335][T25429] ? down_read+0x1aa/0x2e0 [ 1260.902773][T25429] genl_rcv+0x24/0x40 [ 1260.906861][T25429] netlink_unicast+0x774/0x920 [ 1260.911646][T25429] netlink_sendmsg+0x8ba/0xbe0 [ 1260.916420][T25429] ? netlink_getsockopt+0x570/0x570 [ 1260.921633][T25429] ? aa_sock_msg_perm+0x94/0x150 [ 1260.926627][T25429] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1260.931967][T25429] ? security_socket_sendmsg+0x7c/0xa0 [ 1260.937444][T25429] ? netlink_getsockopt+0x570/0x570 [ 1260.942671][T25429] ____sys_sendmsg+0x5b7/0x8f0 [ 1260.947572][T25429] ? __sys_sendmsg_sock+0x30/0x30 [ 1260.952624][T25429] ? import_iovec+0x6f/0xa0 [ 1260.957151][T25429] ___sys_sendmsg+0x236/0x2e0 [ 1260.962021][T25429] ? __sys_sendmsg+0x2a0/0x2a0 [ 1260.966810][T25429] ? ktime_get_real_ts64+0x440/0x440 [ 1260.972209][T25429] __se_sys_sendmsg+0x1af/0x290 [ 1260.977074][T25429] ? __x64_sys_sendmsg+0x80/0x80 [ 1260.982283][T25429] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1260.988421][T25429] ? lockdep_hardirqs_on+0x94/0x140 [ 1260.993638][T25429] do_syscall_64+0x4c/0xa0 [ 1260.998065][T25429] ? clear_bhb_loop+0x30/0x80 [ 1261.002746][T25429] ? clear_bhb_loop+0x30/0x80 [ 1261.007426][T25429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1261.013324][T25429] RIP: 0033:0x7f0030613e59 [ 1261.017839][T25429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.037465][T25429] RSP: 002b:00007f002e86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.045939][T25429] RAX: ffffffffffffffda RBX: 00007f003088cfa0 RCX: 00007f0030613e59 [ 1261.054008][T25429] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1261.062116][T25429] RBP: 00007f00306a9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1261.070180][T25429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1261.078153][T25429] R13: 00007f003088d038 R14: 00007f003088cfa0 R15: 00007ffd376d6df8 [ 1261.086250][T25429] [ 1261.346386][T25444] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6236'. [ 1261.500334][T25445] netlink: 'syz.4.6235': attribute type 2 has an invalid length. [ 1261.573864][T25445] netlink: 'syz.4.6235': attribute type 8 has an invalid length. [ 1261.612246][T25445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1261.674538][T25442] netlink: 'syz.4.6235': attribute type 2 has an invalid length. [ 1261.714331][T25442] netlink: 'syz.4.6235': attribute type 8 has an invalid length. [ 1261.795797][T25442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1261.897074][T25458] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1262.261329][T25461] netlink: 'syz.5.6241': attribute type 10 has an invalid length. [ 1262.703204][T25471] netlink: 'syz.1.6243': attribute type 9 has an invalid length. [ 1263.700069][T25502] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1263.788196][T25502] CPU: 0 PID: 25502 Comm: syz.1.6254 Not tainted syzkaller #0 [ 1263.795747][T25502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.806243][T25502] Call Trace: [ 1263.809558][T25502] [ 1263.812514][T25502] dump_stack_lvl+0x188/0x250 [ 1263.817223][T25502] ? show_regs_print_info+0x20/0x20 [ 1263.822442][T25502] ? load_image+0x400/0x400 [ 1263.827245][T25502] sysfs_warn_dup+0x8a/0xa0 [ 1263.831770][T25502] sysfs_do_create_link_sd+0xc0/0x110 [ 1263.837273][T25502] device_add+0x7ed/0xfb0 [ 1263.841646][T25502] wiphy_register+0x1e81/0x2c30 [ 1263.846545][T25502] ? cfg80211_event_work+0x40/0x40 [ 1263.851678][T25502] ? minstrel_ht_alloc+0x808/0x980 [ 1263.856837][T25502] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1263.863023][T25502] ieee80211_register_hw+0x2aa1/0x3af0 [ 1263.868575][T25502] ? ieee80211_tasklet_handler+0x20/0x20 [ 1263.874512][T25502] ? rcu_is_watching+0x11/0xa0 [ 1263.879558][T25502] ? memset+0x1e/0x40 [ 1263.883671][T25502] ? hrtimer_init+0x10c/0x220 [ 1263.888463][T25502] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 1263.894403][T25502] hwsim_new_radio_nl+0xa6f/0xc40 [ 1263.899553][T25502] genl_rcv_msg+0xcea/0xf90 [ 1263.904092][T25502] ? genl_bind+0x380/0x380 [ 1263.908550][T25502] ? perf_trace_lock+0xe4/0x390 [ 1263.913505][T25502] ? verify_lock_unused+0x140/0x140 [ 1263.918901][T25502] ? verify_lock_unused+0x140/0x140 [ 1263.924126][T25502] ? perf_trace_lock+0xe4/0x390 [ 1263.929082][T25502] ? perf_trace_lock+0xe4/0x390 [ 1263.934125][T25502] ? perf_trace_lock+0xe4/0x390 [ 1263.939003][T25502] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 1263.945545][T25502] netlink_rcv_skb+0x1f5/0x440 [ 1263.950334][T25502] ? genl_bind+0x380/0x380 [ 1263.954776][T25502] ? netlink_ack+0xb50/0xb50 [ 1263.959388][T25502] ? __lock_acquire+0x7d10/0x7d10 [ 1263.964438][T25502] ? down_read+0x1aa/0x2e0 [ 1263.968930][T25502] genl_rcv+0x24/0x40 [ 1263.972952][T25502] netlink_unicast+0x774/0x920 [ 1263.977919][T25502] netlink_sendmsg+0x8ba/0xbe0 [ 1263.982716][T25502] ? netlink_getsockopt+0x570/0x570 [ 1263.987944][T25502] ? aa_sock_msg_perm+0x94/0x150 [ 1263.992915][T25502] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1263.998399][T25502] ? security_socket_sendmsg+0x7c/0xa0 [ 1264.003884][T25502] ? netlink_getsockopt+0x570/0x570 [ 1264.009102][T25502] ____sys_sendmsg+0x5b7/0x8f0 [ 1264.013940][T25502] ? __sys_sendmsg_sock+0x30/0x30 [ 1264.019257][T25502] ? import_iovec+0x6f/0xa0 [ 1264.023885][T25502] ___sys_sendmsg+0x236/0x2e0 [ 1264.028630][T25502] ? __sys_sendmsg+0x2a0/0x2a0 [ 1264.033429][T25502] ? trace_event_raw_event_lock+0x270/0x270 [ 1264.039373][T25502] __se_sys_sendmsg+0x1af/0x290 [ 1264.044613][T25502] ? __x64_sys_sendmsg+0x80/0x80 [ 1264.049662][T25502] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1264.055766][T25502] ? lockdep_hardirqs_on+0x94/0x140 [ 1264.061008][T25502] do_syscall_64+0x4c/0xa0 [ 1264.065462][T25502] ? clear_bhb_loop+0x30/0x80 [ 1264.070155][T25502] ? clear_bhb_loop+0x30/0x80 [ 1264.075044][T25502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1264.081356][T25502] RIP: 0033:0x7f4ca3541e59 [ 1264.085954][T25502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.106034][T25502] RSP: 002b:00007f4ca177a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.114484][T25502] RAX: ffffffffffffffda RBX: 00007f4ca37bb090 RCX: 00007f4ca3541e59 [ 1264.122577][T25502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1264.130562][T25502] RBP: 00007f4ca35d7d6f R08: 0000000000000000 R09: 0000000000000000 [ 1264.138635][T25502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.146843][T25502] R13: 00007f4ca37bb128 R14: 00007f4ca37bb090 R15: 00007ffdc66d28b8 [ 1264.155052][T25502] [ 1264.479820][T25508] __nla_validate_parse: 9 callbacks suppressed [ 1264.479854][T25508] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6257'. [ 1264.503357][T25505] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6256'. [ 1264.818907][T25514] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.6269'. [ 1265.174492][T25524] ------------[ cut here ]------------ [ 1265.180134][T25524] WARNING: CPU: 1 PID: 25524 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 1265.190037][T25524] Modules linked in: [ 1265.194009][T25524] CPU: 1 PID: 25524 Comm: syz.0.6268 Not tainted syzkaller #0 [ 1265.201495][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1265.212183][T25524] RIP: 0010:perf_pending_task+0x358/0x470 [ 1265.218007][T25524] Code: ff 84 db 75 14 e8 48 48 de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 48 de ff e8 57 8f 65 ff eb e5 e8 28 48 de ff <0f> 0b e9 f3 fe ff ff e8 1c 48 de ff 48 c7 c7 20 4c 3a 8c 4c 89 f6 [ 1265.238305][T25524] RSP: 0018:ffffc9000302f9d8 EFLAGS: 00010293 [ 1265.244623][T25524] RAX: ffffffff819aede8 RBX: ffff88807e3b1040 RCX: ffff88801bfa3b80 [ 1265.252725][T25524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1265.260785][T25524] RBP: 0000000000000001 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 1265.268824][T25524] R10: dffffc0000000000 R11: ffffed1017227662 R12: ffff88801bfa3b80 [ 1265.277136][T25524] R13: ffff888025171158 R14: ffff88807e3b0e10 R15: 1ffff1100fc761c2 [ 1265.285206][T25524] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1265.294229][T25524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1265.301357][T25524] CR2: 00007f002e40a000 CR3: 00000000848c5000 CR4: 00000000003506e0 [ 1265.309501][T25524] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1265.317719][T25524] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 1265.326058][T25524] Call Trace: [ 1265.329378][T25524] [ 1265.332487][T25524] task_work_run+0x125/0x1a0 [ 1265.337164][T25524] do_exit+0x626/0x20c0 [ 1265.341359][T25524] ? preempt_schedule+0xbc/0xd0 [ 1265.346301][T25524] ? put_task_struct+0x80/0x80 [ 1265.351132][T25524] ? preempt_schedule_common+0xa5/0xd0 [ 1265.356667][T25524] ? preempt_schedule+0xbc/0xd0 [ 1265.361559][T25524] ? schedule_preempt_disabled+0x20/0x20 [ 1265.367269][T25524] ? lock_chain_count+0x20/0x20 [ 1265.372164][T25524] do_group_exit+0x12e/0x300 [ 1265.376825][T25524] get_signal+0x6d6/0x12d0 [ 1265.381306][T25524] arch_do_signal_or_restart+0xe7/0x12c0 [ 1265.387195][T25524] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1265.392963][T25524] ? get_sigframe_size+0x10/0x10 [ 1265.397992][T25524] ? rcu_nmi_exit+0x6f/0xf0 [ 1265.402560][T25524] ? exit_to_user_mode_loop+0x3b/0x130 [ 1265.408158][T25524] exit_to_user_mode_loop+0x9e/0x130 [ 1265.413589][T25524] exit_to_user_mode_prepare+0xee/0x180 [ 1265.419168][T25524] syscall_exit_to_user_mode+0x16/0x40 [ 1265.424711][T25524] do_syscall_64+0x58/0xa0 [ 1265.429177][T25524] ? clear_bhb_loop+0x30/0x80 [ 1265.433953][T25524] ? clear_bhb_loop+0x30/0x80 [ 1265.438687][T25524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1265.444675][T25524] RIP: 0033:0x7f0030613e59 [ 1265.449130][T25524] Code: Unable to access opcode bytes at RIP 0x7f0030613e2f. [ 1265.456544][T25524] RSP: 002b:00007f002e84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.465297][T25524] RAX: 0000000000000012 RBX: 00007f003088d090 RCX: 00007f0030613e59 [ 1265.473400][T25524] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000c [ 1265.481490][T25524] RBP: 00007f00306a9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1265.489639][T25524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.497797][T25524] R13: 00007f003088d128 R14: 00007f003088d090 R15: 00007ffd376d6df8 [ 1265.506349][T25524] [ 1265.509409][T25524] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1265.516939][T25524] CPU: 1 PID: 25524 Comm: syz.0.6268 Not tainted syzkaller #0 [ 1265.524537][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1265.534633][T25524] Call Trace: [ 1265.537941][T25524] [ 1265.540889][T25524] dump_stack_lvl+0x188/0x250 [ 1265.545639][T25524] ? show_regs_print_info+0x20/0x20 [ 1265.550897][T25524] ? load_image+0x400/0x400 [ 1265.555455][T25524] panic+0x2e5/0x810 [ 1265.559578][T25524] ? bpf_jit_dump+0xd0/0xd0 [ 1265.564156][T25524] ? perf_pending_task+0x358/0x470 [ 1265.569487][T25524] __warn+0x248/0x2b0 [ 1265.573504][T25524] ? perf_pending_task+0x358/0x470 [ 1265.579184][T25524] report_bug+0x1b7/0x2e0 [ 1265.583651][T25524] handle_bug+0x3a/0x70 [ 1265.587836][T25524] exc_invalid_op+0x16/0x40 [ 1265.592366][T25524] asm_exc_invalid_op+0x16/0x20 [ 1265.597240][T25524] RIP: 0010:perf_pending_task+0x358/0x470 [ 1265.602991][T25524] Code: ff 84 db 75 14 e8 48 48 de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 48 de ff e8 57 8f 65 ff eb e5 e8 28 48 de ff <0f> 0b e9 f3 fe ff ff e8 1c 48 de ff 48 c7 c7 20 4c 3a 8c 4c 89 f6 [ 1265.622626][T25524] RSP: 0018:ffffc9000302f9d8 EFLAGS: 00010293 [ 1265.628739][T25524] RAX: ffffffff819aede8 RBX: ffff88807e3b1040 RCX: ffff88801bfa3b80 [ 1265.636747][T25524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1265.644766][T25524] RBP: 0000000000000001 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 1265.653301][T25524] R10: dffffc0000000000 R11: ffffed1017227662 R12: ffff88801bfa3b80 [ 1265.661659][T25524] R13: ffff888025171158 R14: ffff88807e3b0e10 R15: 1ffff1100fc761c2 [ 1265.669872][T25524] ? perf_pending_task+0x358/0x470 [ 1265.675042][T25524] ? perf_pending_task+0x358/0x470 [ 1265.680192][T25524] task_work_run+0x125/0x1a0 [ 1265.684823][T25524] do_exit+0x626/0x20c0 [ 1265.689100][T25524] ? preempt_schedule+0xbc/0xd0 [ 1265.694022][T25524] ? put_task_struct+0x80/0x80 [ 1265.698817][T25524] ? preempt_schedule_common+0xa5/0xd0 [ 1265.704493][T25524] ? preempt_schedule+0xbc/0xd0 [ 1265.709481][T25524] ? schedule_preempt_disabled+0x20/0x20 [ 1265.715142][T25524] ? lock_chain_count+0x20/0x20 [ 1265.720039][T25524] do_group_exit+0x12e/0x300 [ 1265.724660][T25524] get_signal+0x6d6/0x12d0 [ 1265.729838][T25524] arch_do_signal_or_restart+0xe7/0x12c0 [ 1265.735600][T25524] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1265.741458][T25524] ? get_sigframe_size+0x10/0x10 [ 1265.746744][T25524] ? rcu_nmi_exit+0x6f/0xf0 [ 1265.751499][T25524] ? exit_to_user_mode_loop+0x3b/0x130 [ 1265.757180][T25524] exit_to_user_mode_loop+0x9e/0x130 [ 1265.762504][T25524] exit_to_user_mode_prepare+0xee/0x180 [ 1265.768085][T25524] syscall_exit_to_user_mode+0x16/0x40 [ 1265.774464][T25524] do_syscall_64+0x58/0xa0 [ 1265.778934][T25524] ? clear_bhb_loop+0x30/0x80 [ 1265.783663][T25524] ? clear_bhb_loop+0x30/0x80 [ 1265.788382][T25524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1265.794330][T25524] RIP: 0033:0x7f0030613e59 [ 1265.798964][T25524] Code: Unable to access opcode bytes at RIP 0x7f0030613e2f. [ 1265.806527][T25524] RSP: 002b:00007f002e84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1265.814997][T25524] RAX: 0000000000000012 RBX: 00007f003088d090 RCX: 00007f0030613e59 [ 1265.823010][T25524] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000c [ 1265.831017][T25524] RBP: 00007f00306a9d6f R08: 0000000000000000 R09: 0000000000000000 [ 1265.839203][T25524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.847292][T25524] R13: 00007f003088d128 R14: 00007f003088d090 R15: 00007ffd376d6df8 [ 1265.855435][T25524] [ 1265.858873][T25524] Kernel Offset: disabled [ 1265.863449][T25524] Rebooting in 86400 seconds..